slocker | 9beddcef794e9de911a3a7db1b61e308

General

Target

9beddcef794e9de911a3a7db1b61e308
Size

2.7MB
MD5

9beddcef794e9de911a3a7db1b61e308
SHA1

b8b3b05113d368837447447008af9b021d5d8571
SHA256

ec44fefc8b1827cd00e80c171a3ae683610c3ee62e4bb0d0a9085aa12033db23
SHA512

f9e2fc955ba5ab50bcdb071852f69db8855b9a365d72bef310d44acd85e7edb08cc0bf8969790e0d7de34a9b2b377406c450b6e44c926fd95f7951564a9564b0
SSDEEP

49152:LPctdtUtD6OJjM2M7xZkxPctdtUtD6GJjM2M7xZkjPctdtUtD6mJjM2M7xZk/PcA:LP04D6Ujkx0P04D68jkxeP04D6cjkxCl

Score

10^/10

slocker

SLocker payload 1 IoCs

Processes:

resource yara_rule

sample family_slocker_1
Slocker family
slocker

resource	yara_rule
sample	family_slocker_1

Requests dangerous framework permissions 7 IoCs

Processes:

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGE

android.permission.CAMERA