wipelock | fnaf2 aptoide[.]apk

General

Target
fnaf2 aptoide.apk
Size 549KB
Sample240607-dtk3nsgh21
SHA256 d6c670c7a27105f082108d89c6d6b983bdeba6cef36d357b2c4c2bfbc4189aab
MD5 dc98efd71997adb619bfc6e09b3df258
SHA1 50d0d722d4af4a863a19749dd7ef680c67662aa2
SHA512 1903987f5cd074bb672cf335442178a0820bce6e02dc5a04bbbd894c2048bcb068c85e6cefd3663bd0505a20c0651dcfcbb60760f2c5744e344af6f7a627ade7
SSDEEP 12288:pVH6+G//njU81lWGiZrqCx5cVS3EVqPlR6i0Ci3jM34D9I:pd6+GQ81lseCPOS3EW6i0C+M3SI
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

wipelock

Malware Config

Signatures

Wipelock Android payload 1 IoCs

resource	yara_rule
sample	family_wipelock

Wipelock family
wipelock

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

fnaf2 aptoide.apk

.apk 549KB

fnaf2 aptoide.apk

SHA256 d6c670c7a27105f082108d89c6d6b983bdeba6cef36d357b2c4c2bfbc4189aab
MD5 dc98efd71997adb619bfc6e09b3df258
SHA1 50d0d722d4af4a863a19749dd7ef680c67662aa2
SHA512 1903987f5cd074bb672cf335442178a0820bce6e02dc5a04bbbd894c2048bcb068c85e6cefd3663bd0505a20c0651dcfcbb60760f2c5744e344af6f7a627ade7
SSDEEP 12288:pVH6+G//njU81lWGiZrqCx5cVS3EVqPlR6i0Ci3jM34D9I:pd6+GQ81lseCPOS3EW6i0C+M3SI
MD5 SHA1 SHA512 SSDEEP

android

Wipelock Android payload

com.scott.fnaf2

Android Permissions

fnaf2 aptoide.apk

Permissions

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

fnaf2 aptoide.apk

com.elite.MainActivity

com.elite.LockScreen

com.elite.UninstallAdminDevice

com.elite.IntentServiceClass

com.elite.AdminReciever

com.elite.SMSReceiver

com.elite.BootReceiver

com.elite.AlarmReceiver

Sharing

General

Malware Config

Signatures

File Explorer

fnaf2 aptoide.apk

com.elite.MainActivity

com.elite.LockScreen

com.elite.UninstallAdminDevice

com.elite.IntentServiceClass

com.elite.AdminReciever

com.elite.SMSReceiver

com.elite.BootReceiver

com.elite.AlarmReceiver

Android Permissions

fnaf2 aptoide.apk