wipelock | 8675b8bc5960da9a346476366fc9265de3fa9f9dda7bdcd293898af394996f05 | Triage

Sharing

General

Target

Vpn For Brawl.apk
Size

548KB
Sample

240508-s5sdfseb45
MD5

373ffe6af0fdd084b1eb262be4e0ba44
SHA1

32348b21a46f32812665fbd2bd9d1789129afde8
SHA256

8675b8bc5960da9a346476366fc9265de3fa9f9dda7bdcd293898af394996f05
SHA512

63893eb79e043ca4fbf0b242357dfbf5142a17f3767428d10a053e9e0ee847314e1481a2db07010bb85deaa0f061b6491a071ed3f088520c8074578d26bc5e07
SSDEEP

12288:9cVS3EVqPlR6i0Ci3jM34D9PwUwFFHi+UV/nBumiVxDTm+1hAovIR1s:9OS3EW6i0C+M3SPCFNi+UbumirDrqQIA

Score

10^/10

wipelock android collection evasion impact privilege_escalation stealth trojan

Malware Config

Targets

- Target
  
  Vpn For Brawl.apk
- Size
  
  548KB
- MD5
  
  373ffe6af0fdd084b1eb262be4e0ba44
- SHA1
  
  32348b21a46f32812665fbd2bd9d1789129afde8
- SHA256
  
  8675b8bc5960da9a346476366fc9265de3fa9f9dda7bdcd293898af394996f05
- SHA512
  
  63893eb79e043ca4fbf0b242357dfbf5142a17f3767428d10a053e9e0ee847314e1481a2db07010bb85deaa0f061b6491a071ed3f088520c8074578d26bc5e07
- SSDEEP
  
  12288:9cVS3EVqPlR6i0Ci3jM34D9PwUwFFHi+UV/nBumiVxDTm+1hAovIR1s:9OS3EW6i0C+M3SPCFNi+UbumirDrqQIA
Score

8^/10

collection evasion impact privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Reads the contacts stored on the device.
  collection
- Tries to add a device administrator.
  privilege_escalation impact
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Tasks

static1

behavioral1

collectionevasionimpactprivilege_escalationstealthtrojan

behavioral2

collectionevasionstealthtrojan

behavioral3

collectionevasionimpactprivilege_escalationstealthtrojan