wipelock | 7d59e24f4bdf28a846d21e2608796f7e91389c4778bec75369d7b05e3f8449a5 | Triage

Sharing

General

Target

mobelejen.apk
Size

549KB
Sample

240413-wlqbjaad3y
MD5

45be5a7857a4fa1c5eadd519e9402e8a
SHA1

36feb0809c1853f9a1f6d587302691abd7ce90e9
SHA256

7d59e24f4bdf28a846d21e2608796f7e91389c4778bec75369d7b05e3f8449a5
SHA512

46c869051e0c97b68f4388b87caecd82bf7362110a34ebb28ddc5fcd6c8a0e339eeaafbfce54d22593e245457fae7ec4c36b49a8556d3327ba7f90a40dd96a73
SSDEEP

12288:9cVS3EVqPlR6i0Ci3jM34D9zSxjRH6+O//n3tKpSsM+1HA+3De7:9OS3EW6i0C+M3SziN6+ONjstgYDe7

Score

10^/10

wipelock android collection evasion privilege_escalation stealth trojan

Malware Config

Targets

- Target
  
  mobelejen.apk
- Size
  
  549KB
- MD5
  
  45be5a7857a4fa1c5eadd519e9402e8a
- SHA1
  
  36feb0809c1853f9a1f6d587302691abd7ce90e9
- SHA256
  
  7d59e24f4bdf28a846d21e2608796f7e91389c4778bec75369d7b05e3f8449a5
- SHA512
  
  46c869051e0c97b68f4388b87caecd82bf7362110a34ebb28ddc5fcd6c8a0e339eeaafbfce54d22593e245457fae7ec4c36b49a8556d3327ba7f90a40dd96a73
- SSDEEP
  
  12288:9cVS3EVqPlR6i0Ci3jM34D9zSxjRH6+O//n3tKpSsM+1HA+3De7:9OS3EW6i0C+M3SziN6+ONjstgYDe7
Score

8^/10

collection evasion privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Reads the contacts stored on the device.
  collection
- Tries to add a device administrator.
  privilege_escalation
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectionevasionprivilege_escalationstealthtrojan

behavioral2

collectionevasionstealthtrojan

behavioral3

collectionevasionprivilege_escalationstealthtrojan