slocker | 6e3d57271a1c0e8e79c88d15f3897bab | Triage

Sharing

General

Target

6e3d57271a1c0e8e79c88d15f3897bab
Size

31KB
MD5

6e3d57271a1c0e8e79c88d15f3897bab
SHA1

ce19e85e158c70231460fac34528885a958c5260
SHA256

6af2b15d3b7d3fe5c1f14282480ec0624664700d66346a3e99ac69f061b30ed7
SHA512

99c6f9d579d208b5af6a92b961ce504de7c34dfb266588df3ab95e5551b9c48492889883f9e637e773042fb11fb8f3c064338e2ca0e4223365034bbae9a759e3
SSDEEP

768:8w8pgKr9Ir9Pr9nr9H8bUF8YQpRik6NboNxUIZQ12p:pkgRjLQpYNbonz1

Score

10^/10

slocker

Malware Config

Signatures

SLocker payload 1 IoCs

Processes:

resource yara_rule

sample family_slocker_1
Slocker family
slocker

Requests dangerous framework permissions 1 IoCs

Processes:

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

6e3d57271a1c0e8e79c88d15f3897bab
.apk android

com.lololo

.MainActivity

Activities

.MainActivity

android.intent.action.MAIN

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SET_WALLPAPER

Receivers

.BootReceiver

android.intent.action.BOOT_COMPLETED

Services

6e3d57271a1c0e8e79c88d15f3897bab

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER