General

  • Target

    HXP Ducky.apk

  • Size

    138.5MB

  • MD5

    365d2f8374fdf59ed0fb4cc010f942ed

  • SHA1

    d7022419f922b21c183846ff1319c44cb2788962

  • SHA256

    38683e499d1c20eff399709c87c46018a18dc92f16ad734ac4ac01452f20bea7

  • SHA512

    5ac570514e43779e52fc0f4eebe6a2366fc3feb3ec68d1767bcd02aa8a38d088bc55c56ccdace15382c18d09c37d0201630cc49576b58b7dd88e6e23f9fa3134

  • SSDEEP

    3145728:gZ35PCH5oqMyhAK5swruVuuIWiEP4OWWddqPt2aaJUA:hM45cVXEeWWct2pWA

Score
10/10

Malware Config

Signatures

  • Wipelock Android payload 1 IoCs
  • Wipelock family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • HXP Ducky.apk
    .apk android

    com.elite

    com.elite.MainActivity


Android Permissions

HXP Ducky.apk

Permissions

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK