slocker | 22cbee44e1d7667905b840dd012b2946d6be52ef1f422df997d8ef93a94b9094[.]zip

Resubmissions

04-02-2024 23:20

04-02-2024 23:19

Target

22cbee44e1d7667905b840dd012b2946d6be52ef1f422df997d8ef93a94b9094.zip
Size

56KB
MD5

a2ffed1948fed5bd94ca50109d9d9ff0
SHA1

077f3d90491daa4fa6e29b571eb3c58228e447e8
SHA256

e31dd07d713f48d8c03bf7fc3e4aee638b032e74bc3921d2170eca949f9e4035
SHA512

0121305f2e508fab511910eb9e974db4713b9a06b8898ba7f13c818bcde1f2170633d504bcff306986614f3ed7aacb8ccea4ffe33e2a26a9bd17ac5c7cb14ef8
SSDEEP

1536:Kx/nD2jx37XsHeApqYxyrmHVoDBrW2Itu/Q7Q1pD:Kx/nqj9nApjCmGDxQuo7Q3D

Score

10^/10

slocker

SLocker payload 1 IoCs

Processes:

resource	yara_rule
static1/unpack001/22cbee44e1d7667905b840dd012b2946d6be52ef1f422df997d8ef93a94b9094.apk	family_slocker_1

Requests dangerous framework permissions 1 IoCs

Processes:

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

22cbee44e1d7667905b840dd012b2946d6be52ef1f422df997d8ef93a94b9094.zip
.zip

Password: infected
22cbee44e1d7667905b840dd012b2946d6be52ef1f422df997d8ef93a94b9094.apk
.apk android

Password: infected

com.lololo

com.lololo.MainActivity

Activities

com.lololo.MainActivity

android.intent.action.MAIN

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SET_WALLPAPER

Receivers

com.lololo.BootReceiver

android.intent.action.BOOT_COMPLETED

Services