wipelock | 2abdc3af3507643f07db8965eaf0864d172a763f93030ffe05c75681bfd2155f | Triage

Sharing

General

Target

null.apk
Size

541KB
Sample

240821-s7nhaazhnk
MD5

60f699e12855d9939fe588bfa46d80dd
SHA1

53d3fe7489d340bb3ea3afc1eb2a8414ece14ec5
SHA256

2abdc3af3507643f07db8965eaf0864d172a763f93030ffe05c75681bfd2155f
SHA512

c529cf4d914af2f24c45d57fdaf63749e9a3e20928c8b4a8b6ff002f77eca8455148d256bd5b9c32f80ba7b92d6c9a3f56b3d84651d4fccc6ceb9bfe822d9575
SSDEEP

12288:1cVS3EVqPlR6i0Ci3jM34D9fedjRH6+O//n3tKpSsM+1HA+TPq:1OS3EW6i0C+M3SfqN6+ONjstgwq

Score

10^/10

wipelock android collection evasion impact privilege_escalation stealth trojan

Malware Config

Targets

- Target
  
  null.apk
- Size
  
  541KB
- MD5
  
  60f699e12855d9939fe588bfa46d80dd
- SHA1
  
  53d3fe7489d340bb3ea3afc1eb2a8414ece14ec5
- SHA256
  
  2abdc3af3507643f07db8965eaf0864d172a763f93030ffe05c75681bfd2155f
- SHA512
  
  c529cf4d914af2f24c45d57fdaf63749e9a3e20928c8b4a8b6ff002f77eca8455148d256bd5b9c32f80ba7b92d6c9a3f56b3d84651d4fccc6ceb9bfe822d9575
- SSDEEP
  
  12288:1cVS3EVqPlR6i0Ci3jM34D9fedjRH6+O//n3tKpSsM+1HA+TPq:1OS3EW6i0C+M3SfqN6+ONjstgwq
Score

8^/10

collection evasion impact privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Reads the contacts stored on the device.
  collection
- Tries to add a device administrator.
  privilege_escalation impact
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Tasks

static1

behavioral1

collectionevasionimpactprivilege_escalationstealthtrojan