wipelock | d22179ea03e3def991f203790defff6527a92a377a1734bd114af6a71878a60a | Triage

Sharing

General

Target

fnaf3stingray.apk
Size

557KB
Sample

240404-y7s1nahe2t
MD5

30a398b39c9b159e81c7ffc1be41329d
SHA1

ad578bda21170dd102eac600cbbbe496c284dca1
SHA256

d22179ea03e3def991f203790defff6527a92a377a1734bd114af6a71878a60a
SHA512

2bab4c870eab096904f4db7682e5d9e8708aeb7d2112e2ea44752abcd359e14f6e2e16cc8f0c3ff56573b7d7d568248822bd0ab351abefa08f05e19372cf1d05
SSDEEP

12288:VuvjRH6+O//n3tKpSsM+1HA+kcMBfCb6vgdQPIwdgCir9k6amAs8U2b7m7+Xw:V8N6+ONjstgRl4bJLpCiBDRCUVx

Score

10^/10

wipelock android collection evasion privilege_escalation stealth trojan

Malware Config

Targets

- Target
  
  fnaf3stingray.apk
- Size
  
  557KB
- MD5
  
  30a398b39c9b159e81c7ffc1be41329d
- SHA1
  
  ad578bda21170dd102eac600cbbbe496c284dca1
- SHA256
  
  d22179ea03e3def991f203790defff6527a92a377a1734bd114af6a71878a60a
- SHA512
  
  2bab4c870eab096904f4db7682e5d9e8708aeb7d2112e2ea44752abcd359e14f6e2e16cc8f0c3ff56573b7d7d568248822bd0ab351abefa08f05e19372cf1d05
- SSDEEP
  
  12288:VuvjRH6+O//n3tKpSsM+1HA+kcMBfCb6vgdQPIwdgCir9k6amAs8U2b7m7+Xw:V8N6+ONjstgRl4bJLpCiBDRCUVx
Score

8^/10

collection evasion privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Reads the contacts stored on the device.
  collection
- Tries to add a device administrator.
  privilege_escalation
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectionevasionprivilege_escalationstealthtrojan

behavioral2

collectionevasionstealthtrojan

behavioral3

collectionevasionprivilege_escalationstealthtrojan