slocker | 200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d[.]zip

General

Target

200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d.zip
Size

1.6MB
MD5

5107d5ae344ebb3d10879d354f5d8416
SHA1

b0007d988acb5364aa1e9f06d968c8707a0e4a0c
SHA256

acf93ffdd4b892622a534ee83f76c973e2953df52588739c701bb182749e774e
SHA512

01859782e95437acc1d36b911d709f09b0577386669ade38e6d51a9fd72c3a16d0e48db2fcf796aaa67c7f456c7ba2c5f8f48792182e5bb6e42b5add36abbe00
SSDEEP

24576:vjSgcHT0sg+tPybNPUfJvKGVBjVbzyGfrPVNCyp6c3csSvwh1qIZXXm5PK6OiEf9:dcze4yBotK0qsrtVUc3cnwhzZn36nRJa

Score

10^/10

slocker

SLocker payload 1 IoCs

Processes:

resource	yara_rule
static1/unpack001/200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d.apk	family_slocker_2

Requests dangerous framework permissions 3 IoCs

Processes:

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d.zip
.zip

Password: infected
200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d.apk
.apk android

com.android.tencent.zdevs.bah

com.android.tencent.zdevs.bah.MainActivity

Activities

com.android.tencent.zdevs.bah.MainActivity

android.intent.action.MAIN

Permissions

android.permission.SET_WALLPAPER
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
com.android.launcher.permission.READ_SETTINGS
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.MODIFY_AUDIO_SETTINGS