slocker | 698aa564ba543d8b0bb247471554672b | Triage

Sharing

General

Target

698aa564ba543d8b0bb247471554672b
Size

65KB
MD5

698aa564ba543d8b0bb247471554672b
SHA1

cb1eac882cd9b34f197fbee2faa8948f67891fd6
SHA256

3cf9bcbd77f332f52f541737ec847dad023cd13bea0f2c8fd5fccaa75ef80d1c
SHA512

521e5368a9bf991548612976c5e72f0d6f88eace6910e9457407d909ddb6e15590f50ca6d35b49f108e8a7fb8e364620702f5d3476d93772960e025bb24ad795
SSDEEP

1536:UFvfABuqdZY0WUVk1c7Tkl0MzD2zEvE26ltxOuPg+8ysEM:iSi0WKkND2Mkqsgw4

Score

10^/10

slocker

Malware Config

Signatures

SLocker payload 1 IoCs

Processes:

resource yara_rule

sample family_slocker_1
Slocker family
slocker

Requests dangerous framework permissions 1 IoCs

Processes:

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

698aa564ba543d8b0bb247471554672b
.apk android

com.lololo

com.lololo.MainActivity

Activities

com.lololo.MainActivity

android.intent.action.MAIN

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SET_WALLPAPER

Receivers

com.lololo.BootReceiver

android.intent.action.BOOT_COMPLETED

Services

698aa564ba543d8b0bb247471554672b

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER