slocker | 9beddcef794e9de911a3a7db1b61e308

General

Target
9beddcef794e9de911a3a7db1b61e308
Size 2.7MB
Sample240214-rw8teaec37
SHA256 ec44fefc8b1827cd00e80c171a3ae683610c3ee62e4bb0d0a9085aa12033db23
MD5 9beddcef794e9de911a3a7db1b61e308
SHA1 b8b3b05113d368837447447008af9b021d5d8571
SHA512 f9e2fc955ba5ab50bcdb071852f69db8855b9a365d72bef310d44acd85e7edb08cc0bf8969790e0d7de34a9b2b377406c450b6e44c926fd95f7951564a9564b0
SSDEEP 49152:LPctdtUtD6OJjM2M7xZkxPctdtUtD6GJjM2M7xZkjPctdtUtD6mJjM2M7xZk/PcA:LP04D6Ujkx0P04D68jkxeP04D6cjkxCl
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

slocker

Malware Config

Signatures

SLocker payload 1 IoCs

resource	yara_rule
sample	family_slocker_1

Slocker family
slocker

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

9beddcef794e9de911a3a7db1b61e308

.apk 2.7MB

9beddcef794e9de911a3a7db1b61e308

SHA256 ec44fefc8b1827cd00e80c171a3ae683610c3ee62e4bb0d0a9085aa12033db23
MD5 9beddcef794e9de911a3a7db1b61e308
SHA1 b8b3b05113d368837447447008af9b021d5d8571
SHA512 f9e2fc955ba5ab50bcdb071852f69db8855b9a365d72bef310d44acd85e7edb08cc0bf8969790e0d7de34a9b2b377406c450b6e44c926fd95f7951564a9564b0
SSDEEP 49152:LPctdtUtD6OJjM2M7xZkxPctdtUtD6GJjM2M7xZkjPctdtUtD6mJjM2M7xZk/PcA:LP04D6Ujkx0P04D68jkxeP04D6cjkxCl
MD5 SHA1 SHA512 SSDEEP

android

SLocker payload

com.termuxhackers.id

Android Permissions

9beddcef794e9de911a3a7db1b61e308

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGE

android.permission.CAMERA

9beddcef794e9de911a3a7db1b61e308

com.termuxhackers.id.MainActivity

com.termuxhackers.id.MyService

com.termuxhackers.id.BootReceiver

Sharing

General

Malware Config

Signatures

File Explorer

9beddcef794e9de911a3a7db1b61e308

com.termuxhackers.id.MainActivity

com.termuxhackers.id.MyService

com.termuxhackers.id.BootReceiver

Android Permissions

9beddcef794e9de911a3a7db1b61e308