Extracted

• • Target
    Xbooster Standoff Cracked.apk
  • Size 4.4MB
  • SHA256 d7e99cac183a6103e0d88f72bc689cedb1af2e678820135892e243057eccedce
  • MD5 a2147e6849054c5e661c80f5bd5afe12
  • SHA1 172c601a2a06d06a36d3e814ca936b7887341852
  • SHA512 9955d6b48f2cab87b1965c6f2429db18486e0b6416d7bbe076286ffdebbd448e6ab721e8a3161ae0aeb8d862345ee0dd98e48e9867c2c1fe9f11d9ad4dd17c74
  • SSDEEP 98304:IPoj98PGFoVDO2tCIU4lVy9vN4A22mzbzB9TR0t0HUju:IA3qKxAVy91iBznucN
  • TLSH
    T17926F103FB49C69BC8BA83F56F230DA92A031F54C602A6E70555366E3D7B5D10EC6B8D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryexecutionspynoteinfostealerpersistencerattrojan

  • Family: Spynote

    Spynote is a Remote Access Trojan first seen in 2017.

    bankertrojaninfostealerratspynote

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  behavioral1behavioral2behavioral3