slocker | Telegram Sirlari[.]apk | Triage

Sharing

General

Target

Telegram Sirlari.apk
Size

310KB
MD5

d62fe6a51cd012f5872687ae3b17108f
SHA1

6de386e2a9fe5d75a0854d71ba67678c34f195aa
SHA256

7d878638b3460f064148c74f94e79f4b224c25f68e19736d77505cf9e11ab304
SHA512

9936e8232a89d0f4e127717b6b1c815097fc6feb66055bd51b15c13e738ad281319c589cd63af27ed5f83a251420cfa0c85fe9b9ab5ba9fee8ab271b2a8738ee
SSDEEP

6144:iWqa4Beu2KbvguZymBGL3bJB+bJBHbJB7bJBx:itXeuBbvgu/gjbT+bTHbT7bTx

Score

10^/10

slocker

Malware Config

Signatures

SLocker payload 1 IoCs

Processes:

resource yara_rule

sample family_slocker_1
Slocker family
slocker

Requests dangerous framework permissions 1 IoCs

Processes:

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

Telegram Sirlari.apk
.apk android

com.lololo

.MainActivity

Activities

.MainActivity

android.intent.action.MAIN

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SET_WALLPAPER

Receivers

.BootReceiver

android.intent.action.BOOT_COMPLETED

Services

Telegram Sirlari.apk

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER