slocker | Pokemon[.]apk

General

Target
Pokemon.apk
Size 2.5MB
Sample240120-3daz7sagh7
SHA256 99a06c552f54becfc8e48679b263828c859094c08375731f8ca15ceccd5f077c
MD5 3ea0b23ccec9b2015401c335afc11bad
SHA1 aa003afdc5b6eff86e497c8f375d7c913f839b47
SHA512 a3f78177f1c294972788b93fdba4ad674adf360cc76a0d251850c04feb33ef0878ee398d2a0829914ce048277c58f4c20e4e00612579a7ee37a72da626e8e0e5
SSDEEP 49152:rm4EPhweZWLMm4EPhweiWLYIm4EPhweOWLZYm4EPhwevWLz:fEPhwe4LsEPhweRLrEPhwetLKEPhweef
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

slocker

Malware Config

Signatures

SLocker payload 1 IoCs

resource	yara_rule
sample	family_slocker_1

Slocker family
slocker

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

Pokemon.apk

.apk 2.5MB

Pokemon.apk

SHA256 99a06c552f54becfc8e48679b263828c859094c08375731f8ca15ceccd5f077c
MD5 3ea0b23ccec9b2015401c335afc11bad
SHA1 aa003afdc5b6eff86e497c8f375d7c913f839b47
SHA512 a3f78177f1c294972788b93fdba4ad674adf360cc76a0d251850c04feb33ef0878ee398d2a0829914ce048277c58f4c20e4e00612579a7ee37a72da626e8e0e5
SSDEEP 49152:rm4EPhweZWLMm4EPhweiWLYIm4EPhweOWLZYm4EPhwevWLz:fEPhwe4LsEPhweRLrEPhwetLKEPhweef
MD5 SHA1 SHA512 SSDEEP

android

SLocker payload

com.termuxhackers.id

Android Permissions

Pokemon.apk

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGE

android.permission.CAMERA

Pokemon.apk

com.termuxhackers.id.MainActivity

com.termuxhackers.id.MyService

com.termuxhackers.id.BootReceiver

Sharing

General

Malware Config

Signatures

File Explorer

Pokemon.apk

com.termuxhackers.id.MainActivity

com.termuxhackers.id.MyService

com.termuxhackers.id.BootReceiver

Android Permissions

Pokemon.apk