slocker | ransomware[.]apk

General

Target

ransomware.apk
Size

2.5MB
MD5

0d563744ff8b1958bb2f7294116864c1
SHA1

1f6d4ea0286523802efb5063fd97c4ed6d0ab657
SHA256

df091031ed5073de09158b3afcf1fb956d1f337a66e552e9d3458ed5f5f6edb1
SHA512

3077c30ac645ba3d3c8a123e84d6104d0dee6ad31a4fc6880254816e59595090a39b6db326670ccd46701beef5f1d580c7c9034ed6e8aeb9fa936ce218780af7
SSDEEP

49152:VimRYlXpw0vkWLhmRYlXpw0v7WL3mRYlXpw0vRWLEmRYlXpw0vSWL+:VHYlXp/vzLeYlXp/v6LYYlXp/vwLFYlm

Score

10^/10

slocker

SLocker payload 1 IoCs

Processes:

resource yara_rule

sample family_slocker_1
Slocker family
slocker

resource	yara_rule
sample	family_slocker_1

Requests dangerous framework permissions 7 IoCs

Processes:

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGE

android.permission.CAMERA