slocker | Termux_sign[.]apk

General

Target
Termux_sign.apk
Size 2.7MB
Sample240412-1rav9aaa5v
SHA256 af6e903705c35becd325e020dcb94431a6888e255fd59e66b589736fc1142cf7
MD5 14c3d07d332e2d232af293f703f32ae9
SHA1 846993acd93c8baeae05162a73ceb44abde38ac0
SHA512 bb9e21c8916a3c682434eb90cc9ee6b3768b2caaff6ca748d31ec341cd9da8a0c4d0fcb07597af7e39b5b6a493b55aa5629f60cec9ee4a5429c3e39b09a11fb7
SSDEEP 49152:4PctdtUtD6zJjM2M7xZkIPctdtUtD62JjM2M7xZkZPctdtUtD6bJjM2M7xZknPcF:4P04D6VjkxpP04D6sjkxMP04D6Njkxee
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

slocker

Malware Config

Signatures

SLocker payload 1 IoCs

resource	yara_rule
sample	family_slocker_1

Slocker family
slocker

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

Termux_sign.apk

.apk 2.7MB

Termux_sign.apk

SHA256 af6e903705c35becd325e020dcb94431a6888e255fd59e66b589736fc1142cf7
MD5 14c3d07d332e2d232af293f703f32ae9
SHA1 846993acd93c8baeae05162a73ceb44abde38ac0
SHA512 bb9e21c8916a3c682434eb90cc9ee6b3768b2caaff6ca748d31ec341cd9da8a0c4d0fcb07597af7e39b5b6a493b55aa5629f60cec9ee4a5429c3e39b09a11fb7
SSDEEP 49152:4PctdtUtD6zJjM2M7xZkIPctdtUtD62JjM2M7xZkZPctdtUtD6bJjM2M7xZknPcF:4P04D6VjkxpP04D6sjkxMP04D6Njkxee
MD5 SHA1 SHA512 SSDEEP

android

SLocker payload

com.termuxhackers.id

Android Permissions

Termux_sign.apk

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGE

android.permission.CAMERA

Termux_sign.apk

com.termuxhackers.id.MainActivity

com.termuxhackers.id.MyService

com.termuxhackers.id.BootReceiver

Sharing

General

Malware Config

Signatures

File Explorer

Termux_sign.apk

com.termuxhackers.id.MainActivity

com.termuxhackers.id.MyService

com.termuxhackers.id.BootReceiver

Android Permissions

Termux_sign.apk