Extracted

• • Target
    jaffacakes118_61f2738d1f37de84204a1f914c92a7d0f70acc8138146cd9f614cd8845791248.bin
  • Size 15.7MB
  • SHA256 61f2738d1f37de84204a1f914c92a7d0f70acc8138146cd9f614cd8845791248
  • MD5 8cd06a6a8a43086f3619fab880aaf0ba
  • SHA1 3e9b2f27380e43b410c95e4d682bc52cdd38ea7a
  • SHA512 27f0c159608405575004071fc3929cb25e7856546ea1ec58e2da933a2888bc8aeab050e3bfa11e6828d631a86a298cffaefafaa505f005261182542643f263e1
  • SSDEEP 12288:PsZOBkzs/HtNzfN/E3p9/s4Noltpk9ktoipOxp0UOv3VcPtSTLYC:/Nzq/s4ulfk9kex0U6KC
  • TLSH
    T1DDF6BF03F34A9CBBD8F252318D61BB29671A8CA9DB6741C38C9D3B7C5CB60C14675AE1
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  collectioncredential_accessdefense_evasionevasionexecutionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Acquires the wake lock

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion
  behavioral1behavioral2behavioral3