WannaLocker.apk
- SHA256 200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d
-
SLocker payload
com.android.tencent.zdevs.bah
General
- Target WannaLocker.apk
- Size 1.8MB
- Sample240513-b94tlscc55
- SHA256 200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d
- MD5 ba03c39ba851c2cb3ac5851b5f029b9c
- SHA1 d72ca5ca1e7dc6431c041bfc6d7e3f9bfa39959c
- SHA512 b4f6dfe04bbae931905438e6c23c653e0255a7af8c01cdb8d2c1f81c5ace987153550b9cf922bcb29e07ac3477ae7c859d538510c8770a13b5abe0911128d5d8
- SSDEEP 49152:x7bFcxrjUIWXUZGlilIy0ywxepey0yDR5y0yzUjtP:xbFcVwXU/lOxeFDIQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- SLocker payload 1 IoCs
resource yara_rule sample family_slocker_2 - Slocker family
- Requests dangerous framework permissions 3 IoCs
description ioc Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE
File Explorer
-
WannaLocker.apk.apk 1.8MB
Android Permissions
WannaLocker.apk
Permissions
android.permission.SET_WALLPAPER
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
com.android.launcher.permission.READ_SETTINGS
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.MODIFY_AUDIO_SETTINGS