Resubmissions

04-08-2024 12:30

240804-ppf4psvfkq 10

General

  • Target

    virusX.zip

  • Size

    32.5MB

  • MD5

    a58b72237a14d709c6eea04b73049210

  • SHA1

    786a2d070ea75d7fd858ebd93869063fedd6d705

  • SHA256

    51baf4bc48db631e887ded88c0beb05b7a2f6f26ad2d122ee7c6cca6678752f5

  • SHA512

    978b868d4ce591570f722d167e14f2b6533d3b341bdaac1048fb3d1196ad26b2009269514d29b5aeb12aa75697ae556ebd3c88af1ed4ea00f8c83289fff7a9b9

  • SSDEEP

    786432:xDWCPFc6LHxrdAxglUJMtJg9GzAl8g5lf/F9M6GvHzn9:sUzjxrdAxxJM+l8g5lDM6Gj9

Score
10/10

Malware Config

Signatures

  • SLocker payload 1 IoCs
  • Slocker family
  • Wipelock Android payload 1 IoCs
  • Wipelock family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 16 IoCs

Files

  • virusX.zip
    .zip
  • 1777a2ba85f831e41c6a60418f84205c9de9c66402f9b7e5be13d29c543a42b0.apk
    .apk android arch:arm arch:arm64

    com.crbpphsj.wjphxfzk

    com.crbpphsj.wjphxfzk.dnmWQJIOot


  • 5251a356421340a45c8dc6d431ef8a8cbca4078a0305a87f4fbd552e9fc0793e.apk
    .apk android

    com.XPhantom.id

    com.XPhantom.id.MainActivity


  • 7c44519e51cc203cdd23f27cefe7cf99de34abddf947ba55951721725f15aa57.apk
    .apk android arch:arm arch:arm64

    com.foqrpral.oxudfpdy

    com.foqrpral.oxudfpdy.TwPZjMsqPD


  • FE_Invisible_Troll_Script.apk
    .apk android

    com.herocraft.game.freemium.catchthecandy

    erkq.bl.vIyQA


  • HellBoy.apk
    .apk android

    com.hellboy

    com.hellboy.MainActivity


  • Roblox Keyless Bloxfruits Script HoHo Hub V3.apk
    .apk android

    com.herocraft.game.treasuresofthedeep

    kandc.tdehj.X


  • Stick War_ Legacy.apk
    .apk android

    com.herocraft.game.treasuresofthedeep

    dwly.bdikn.rcsVR


  • Undead_Defense_Tycoon_Script.apk
    .apk android

    com.herocraft.game.birdsonwire.freemium

    zjlx.bdys.NgE


  • antivirus.apk
    .apk android

    com.elite

    com.elite.MainActivity


  • b3f23bdd3dea208f05de7a5b9ea928758187b3f2b0f4f5733c8bdb3298818ec0.apk
    .apk android arch:arm arch:arm64

    com.ygvezckt.rwqaztkw

    com.mhyzzjvy.pizvbaoa.CUhBzurQSa


  • e8947bc9fb2bd597daba3064d5fab275d8df2beac92f301063f22fe276dcbc10.apk
    .apk android arch:arm64 arch:arm

    com.herocraft.game.birdsonwire.freemium

    fn.xhrbc.E


  • insta_followers.apk
    .apk android

    com.test.accessibility

    com.test.accessibility.SplashActivity


  • xxx.apk
    .apk android arch:arm

    yige.liwu

    com.androlua.Welcome