wipelock | fcee982b3d0e1601b40078d98df03503668aec7542721f921ae8248bc3cec3a1 | Triage

Sharing

General

Target

Elite.apk
Size

533KB
Sample

240617-r28etsycmn
MD5

9f01767647e2e72f446d374bbcb20c53
SHA1

f6b1adcd7723b525418a05bcede5c671366d7ab3
SHA256

fcee982b3d0e1601b40078d98df03503668aec7542721f921ae8248bc3cec3a1
SHA512

4b9dc2dc08f015ed96a3ce30978994314d3edca84348eb62e7cb65d4d5477f179c44c80cc0a67863bc119555d0217f57681d047ce98ec405bd5eeaf2da8280ed
SSDEEP

12288:kjRH6+O//n3tKpSsM+1HA+x283ecVS3EVqPlR6i0Ci3jM34D9Z:kN6+ONjstg38OOS3EW6i0C+M3SZ

Score

10^/10

wipelock android collection evasion impact privilege_escalation stealth trojan

Malware Config

Targets

- Target
  
  Elite.apk
- Size
  
  533KB
- MD5
  
  9f01767647e2e72f446d374bbcb20c53
- SHA1
  
  f6b1adcd7723b525418a05bcede5c671366d7ab3
- SHA256
  
  fcee982b3d0e1601b40078d98df03503668aec7542721f921ae8248bc3cec3a1
- SHA512
  
  4b9dc2dc08f015ed96a3ce30978994314d3edca84348eb62e7cb65d4d5477f179c44c80cc0a67863bc119555d0217f57681d047ce98ec405bd5eeaf2da8280ed
- SSDEEP
  
  12288:kjRH6+O//n3tKpSsM+1HA+x283ecVS3EVqPlR6i0Ci3jM34D9Z:kN6+ONjstg38OOS3EW6i0C+M3SZ
Score

8^/10

collection evasion stealth trojan impact privilege_escalation
- Removes its main activity from the application launcher
  stealth trojan evasion
- Reads the contacts stored on the device.
  collection
- Tries to add a device administrator.
  privilege_escalation impact
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Tasks

static1

behavioral1

collectionevasionstealthtrojan

behavioral2

collectionevasionimpactprivilege_escalationstealthtrojan

behavioral3

collectionimpactprivilege_escalation

behavioral4

collectionevasionimpactprivilege_escalationstealthtrojan