slocker | 6904c283c8e4a7a200e6d5c1dc349b0c | Triage

Sharing

General

Target

6904c283c8e4a7a200e6d5c1dc349b0c
Size

71KB
MD5

6904c283c8e4a7a200e6d5c1dc349b0c
SHA1

cf9a571dd8d9123f8280d9d96557f2eeb62d1e21
SHA256

22cbee44e1d7667905b840dd012b2946d6be52ef1f422df997d8ef93a94b9094
SHA512

f66f439a6831101c1d8cb107844be998c021efb19e1a7e39c6deb92cf04602ef8b00737f52c3c78624bcf05b8b43f9179c6fee3db372d55b52b58ff84f37c64d
SSDEEP

1536:NvffMkGMktMkbMkeUIqJvqHZ+KKowzbp+eqmdJr5gT:1SJvRowzVJZH1gT

Score

10^/10

slocker

Malware Config

Signatures

SLocker payload 1 IoCs

Processes:

resource yara_rule

sample family_slocker_1
Slocker family
slocker

Requests dangerous framework permissions 1 IoCs

Processes:

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

6904c283c8e4a7a200e6d5c1dc349b0c
.apk android

com.lololo

com.lololo.MainActivity

Activities

com.lololo.MainActivity

android.intent.action.MAIN

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SET_WALLPAPER

Receivers

com.lololo.BootReceiver

android.intent.action.BOOT_COMPLETED

Services

6904c283c8e4a7a200e6d5c1dc349b0c

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER