slocker | 200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d[.]zip

General

Target
200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d.zip
Size 1.6MB
Sample240528-js422sch33
SHA256 bf19dcc553e2f6d414e60c688cde1a211ba2cbff1681a28c1a29c693e4eaf7c3
MD5 49c246f364821e07b2d99570bd15f78e
SHA1 5a78c6b912731c0a6ff258c0e2241be9ed03fabd
SHA512 abcefca40c9144e42e714d3a0ecc00285019a7763c43755e74a116d10d225c887553b9ca7d30605520265d475b12a0507e92f76e3c7e3d98bd8c9b52ed7341bf
SSDEEP 24576:GqCSdzbaqpPXxBAkbLXx4Kj7v/nlsKlgLgdfGmnqs3rCIoZZGxxS1qYY:wSZEseKnfllmLgdj53rCm/zz
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

slocker

SLocker payload 1 IoCs

resource	yara_rule
static1/unpack001/200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d.apk	family_slocker_2

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d.zip

.zip 1.6MB
200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d.apk

.apk 1.8MB

SHA256 bf19dcc553e2f6d414e60c688cde1a211ba2cbff1681a28c1a29c693e4eaf7c3
MD5 49c246f364821e07b2d99570bd15f78e
SHA1 5a78c6b912731c0a6ff258c0e2241be9ed03fabd
SHA512 abcefca40c9144e42e714d3a0ecc00285019a7763c43755e74a116d10d225c887553b9ca7d30605520265d475b12a0507e92f76e3c7e3d98bd8c9b52ed7341bf
SSDEEP 24576:GqCSdzbaqpPXxBAkbLXx4Kj7v/nlsKlgLgdfGmnqs3rCIoZZGxxS1qYY:wSZEseKnfllmLgdj53rCm/zz
MD5 SHA1 SHA512 SSDEEP

Password

infected

SHA256 200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d
MD5 ba03c39ba851c2cb3ac5851b5f029b9c
SHA1 d72ca5ca1e7dc6431c041bfc6d7e3f9bfa39959c
SHA512 b4f6dfe04bbae931905438e6c23c653e0255a7af8c01cdb8d2c1f81c5ace987153550b9cf922bcb29e07ac3477ae7c859d538510c8770a13b5abe0911128d5d8
SSDEEP 49152:x7bFcxrjUIWXUZGlilIy0ywxepey0yDR5y0yzUjtP:xbFcVwXU/lOxeFDIQ
MD5 SHA1 SHA512 SSDEEP

android

Password

infected

com.android.tencent.zdevs.bah