Extracted

• • Target
    jaffacakes118_e11c9b00e42558b5638f9f9e3871f4b220a2e349355b5758574d778bfaa369cb.bin
  • Size 15.7MB
  • SHA256 e11c9b00e42558b5638f9f9e3871f4b220a2e349355b5758574d778bfaa369cb
  • MD5 7091f6fcc171eff89263cf9da73d4df8
  • SHA1 1b14a56e0410602856b0c900b8695b50f126454d
  • SHA512 7adb7760e45018d7aa7536c436b9179742063c32e4d5d6050424f3c46f40e452187540389e6ab76b25ecbd004a09939e1e06b20dd1e2ed10ec7615f63669ac27
  • SSDEEP 24576:IxMIw6W7X+NDL/yyKMNDiqLv8R3gHEE4W:vIaIDb1FiR3KEe
  • TLSH
    T146F6BEA7B3168DE5F4F3C6368630A37857278C64EB4349D3184879B95EBB0C01E6B6E1
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  collectioncredential_accessdefense_evasionevasionexecutionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Acquires the wake lock

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion
  behavioral1behavioral2behavioral3