slocker | Pokemon[.]apk

General

Target

Pokemon.apk
Size

2.5MB
MD5

3ea0b23ccec9b2015401c335afc11bad
SHA1

aa003afdc5b6eff86e497c8f375d7c913f839b47
SHA256

99a06c552f54becfc8e48679b263828c859094c08375731f8ca15ceccd5f077c
SHA512

a3f78177f1c294972788b93fdba4ad674adf360cc76a0d251850c04feb33ef0878ee398d2a0829914ce048277c58f4c20e4e00612579a7ee37a72da626e8e0e5
SSDEEP

49152:rm4EPhweZWLMm4EPhweiWLYIm4EPhweOWLZYm4EPhwevWLz:fEPhwe4LsEPhweRLrEPhwetLKEPhweef

Score

10^/10

slocker

SLocker payload 1 IoCs

Processes:

resource yara_rule

sample family_slocker_1
Slocker family
slocker

resource	yara_rule
sample	family_slocker_1

Requests dangerous framework permissions 7 IoCs

Processes:

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGE

android.permission.CAMERA