Extracted

• • Target
    jaffacakes118_e7ab3501a4d3775e609654b75d17a2f95e6ff359b13fdec3940dde4da7f16fab.bin
  • Size 15.7MB
  • SHA256 e7ab3501a4d3775e609654b75d17a2f95e6ff359b13fdec3940dde4da7f16fab
  • MD5 b62c8565d6455aef9076d707b07d25ca
  • SHA1 dba8e1499f6a19d936b15d82446ff26b50a4962a
  • SHA512 5879e883763d227ce70f621a0ac26b1b5bdd0f4af912e93bc575dcc89bc134769dd29eec7479a46ccf120fc4186faa4b8aec391bcb5986ccf5114c865c9db5db
  • SSDEEP 12288:eHTNsX0Ua7mlzjKI18gIDyW8oRcOCofI07bmFwb/Lt4ZN9Y+9Y0gy:oTw0UfzjKIygIDSoR31/7Sx9Y+a0gy
  • TLSH
    T138F6CF83F7A599EAD8B24B76422073A237279E68D343A1C7485D326C9CB71D48F76CD0
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  collectioncredential_accessdefense_evasionevasionexecutionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Acquires the wake lock

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion
  behavioral1behavioral2behavioral3