Extracted

• • Target
    jaffacakes118_c000b2a80159786e198c3f7e805744dbe33c706a5c9ca5775158cfd12a995574.bin
  • Size 15.7MB
  • SHA256 c000b2a80159786e198c3f7e805744dbe33c706a5c9ca5775158cfd12a995574
  • MD5 62c0a2565cf21a92e518c1bd1a9ac39c
  • SHA1 8d513fc7a1ad9dbd6b370b1a79d35c06f7b7c978
  • SHA512 e2b110c3669d1b1c1868da7afd0ccac4cfb97fa0f52244b4bf0c43eee8928cf36891a0d3c7aadc5a91083102842e952f91dc977049bdd9a94f2859f7d11d1baa
  • SSDEEP 12288:1LswqxD58SSSSSPloJAIY26teL8yWh26IRcO2kiv3Mky8V3Rt9I6+p+z2/oYae:0xdloWIY0YT26IR3vXkN8Y+ae
  • TLSH
    T1B9F6C017B326DE90D4FACEF84125B3A257264C64C397C1E748D6BA6C2CBB2CC1E659D0
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  collectioncredential_accessdefense_evasionevasionexecutionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Acquires the wake lock

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion
  behavioral1behavioral2behavioral3