Extracted

• • Target
    jaffacakes118_b971ee96196a0bad683a2fb7f476283ef2dbf366bc4609d34fbc0946351b5616.bin
  • Size 15.6MB
  • SHA256 b971ee96196a0bad683a2fb7f476283ef2dbf366bc4609d34fbc0946351b5616
  • MD5 b979f24bee6e5f6a6a5bdd3d6a562b2d
  • SHA1 1e2c00890f1f156b9bfeebb549c837993e1a45ab
  • SHA512 01000563fceddb56a9ecf05ac91088dc5ce02827931090e082d6d15404ec1d4102fc42a143c08d3e91fee70dc617abcc865510ece66828b5a09aa6e287a85090
  • SSDEEP 12288:gMcM/Zs5/VBTTfZCyMZ+9vMeBUfRkIT8i59c2xm+A1AVZav2hijZXzLYq:nC9urZuvMeBWRdT71xASkesuq
  • TLSH
    T11DF6CEA3F7129EB2C7F242367624B35567E74D28C3A343E72984312C1C7B9D18AA5CE5
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  collectioncredential_accessdefense_evasionevasionexecutionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Acquires the wake lock

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion
  behavioral1behavioral2behavioral3