slocker | 22cbee44e1d7667905b840dd012b2946d6be52ef1f422df997d8ef93a94b9094[.]zip

General

Target
22cbee44e1d7667905b840dd012b2946d6be52ef1f422df997d8ef93a94b9094.zip
Size 56KB
Sample240204-3bxfesdcb7
SHA256 e31dd07d713f48d8c03bf7fc3e4aee638b032e74bc3921d2170eca949f9e4035
MD5 a2ffed1948fed5bd94ca50109d9d9ff0
SHA1 077f3d90491daa4fa6e29b571eb3c58228e447e8
SHA512 0121305f2e508fab511910eb9e974db4713b9a06b8898ba7f13c818bcde1f2170633d504bcff306986614f3ed7aacb8ccea4ffe33e2a26a9bd17ac5c7cb14ef8
SSDEEP 1536:Kx/nD2jx37XsHeApqYxyrmHVoDBrW2Itu/Q7Q1pD:Kx/nqj9nApjCmGDxQuo7Q3D
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

slocker

SLocker payload 1 IoCs

resource	yara_rule
static1/unpack001/22cbee44e1d7667905b840dd012b2946d6be52ef1f422df997d8ef93a94b9094.apk	family_slocker_1

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

SHA256 e31dd07d713f48d8c03bf7fc3e4aee638b032e74bc3921d2170eca949f9e4035
MD5 a2ffed1948fed5bd94ca50109d9d9ff0
SHA1 077f3d90491daa4fa6e29b571eb3c58228e447e8
SHA512 0121305f2e508fab511910eb9e974db4713b9a06b8898ba7f13c818bcde1f2170633d504bcff306986614f3ed7aacb8ccea4ffe33e2a26a9bd17ac5c7cb14ef8
SSDEEP 1536:Kx/nD2jx37XsHeApqYxyrmHVoDBrW2Itu/Q7Q1pD:Kx/nqj9nApjCmGDxQuo7Q3D
MD5 SHA1 SHA512 SSDEEP

Password

infected

SHA256 22cbee44e1d7667905b840dd012b2946d6be52ef1f422df997d8ef93a94b9094
MD5 6904c283c8e4a7a200e6d5c1dc349b0c
SHA1 cf9a571dd8d9123f8280d9d96557f2eeb62d1e21
SHA512 f66f439a6831101c1d8cb107844be998c021efb19e1a7e39c6deb92cf04602ef8b00737f52c3c78624bcf05b8b43f9179c6fee3db372d55b52b58ff84f37c64d
SSDEEP 1536:NvffMkGMktMkbMkeUIqJvqHZ+KKowzbp+eqmdJr5gT:1SJvRowzVJZH1gT
MD5 SHA1 SHA512 SSDEEP

android

Password

infected

com.lololo