slocker | gen_signed[.]apk

General

Target

gen_signed.apk
Size

2.5MB
MD5

01653ea6ba109f7661c169689cecf395
SHA1

f56e1a8e004807c95293df6bd7c22d25dc0d0c66
SHA256

5211d36df5483da6770370cea9b5f73bcae27398c31cb957664a41d2f8f4d8b6
SHA512

c6173f12eb47eaa4134c81a04d24b85ed7d96eed834f0bde3572ea6a2f0081cb9580c5387b14cb9ee9c83bdb79af89eb4df8f8f3fc56c9d3b5c4f14ab3848fac
SSDEEP

49152:qekEReLrVF8ekEReLyVF9mekEReLCVFBYUekEReLZVFV:qN8k9mgBh/V

Score

10^/10

slocker

SLocker payload 1 IoCs

Processes:

resource yara_rule

sample family_slocker_1
Slocker family
slocker

resource	yara_rule
sample	family_slocker_1

Requests dangerous framework permissions 7 IoCs

Processes:

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGE

android.permission.CAMERA