Malware Analysis Report

2024-10-18 22:10

Sample ID 231111-bglsbsdf38
Target xxx_unsigned.apk
SHA256 88b86662dd1653845985544299fd8cc732f49c72d63c86ea3ffb7bb3b3249138
Tags
slocker
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

88b86662dd1653845985544299fd8cc732f49c72d63c86ea3ffb7bb3b3249138

Threat Level: Known bad

The file xxx_unsigned.apk was found to be: Known bad.

Malicious Activity Summary

slocker

SLocker payload

Slocker family

Requests dangerous framework permissions

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-11-11 01:07

Signatures

SLocker payload

Description Indicator Process Target
N/A N/A N/A N/A

Slocker family

slocker

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-11-11 01:06

Reported

2023-11-11 01:21

Platform

android-x86-arm-20231023-en

Max time network

4s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A