wipelock | 7ed2ab29ba9df89c964c2d36c66d4b51ff1d50ca0ee1320d22edd33b86420724 | Triage

Sharing

General

Target

240822-v5kpqa1hlj_pw_infected.zip
Size

527KB
Sample

240822-v69ega1hrk
MD5

572d43d300c2b7abd318eec08f853e80
SHA1

691dda9065880afd9173b2d75640aa8b7f7165b2
SHA256

7ed2ab29ba9df89c964c2d36c66d4b51ff1d50ca0ee1320d22edd33b86420724
SHA512

014f61b19d169e28c5290da9e91a3facfac2cea0022c838285e3f190c10a7cb9e2a9618324b0c92d1af3526bc0ff0bd11321b79f716a7d4eb46517cbfd937d18
SSDEEP

12288:6eLvZvsQUvhQ4vKmAGvYetnu8nnMOvjfKBKvB8PLgFhcL:6eLvZvQhQDmZsonMOzG0ir

Score

10^/10

wipelock android collection evasion impact privilege_escalation stealth trojan

Malware Config

Targets

- Target
  
  WipeLock.apk
- Size
  
  533KB
- MD5
  
  9f01767647e2e72f446d374bbcb20c53
- SHA1
  
  f6b1adcd7723b525418a05bcede5c671366d7ab3
- SHA256
  
  fcee982b3d0e1601b40078d98df03503668aec7542721f921ae8248bc3cec3a1
- SHA512
  
  4b9dc2dc08f015ed96a3ce30978994314d3edca84348eb62e7cb65d4d5477f179c44c80cc0a67863bc119555d0217f57681d047ce98ec405bd5eeaf2da8280ed
- SSDEEP
  
  12288:kjRH6+O//n3tKpSsM+1HA+x283ecVS3EVqPlR6i0Ci3jM34D9Z:kN6+ONjstg38OOS3EW6i0C+M3SZ
Score

8^/10

collection evasion impact privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Reads the contacts stored on the device.
  collection
- Tries to add a device administrator.
  privilege_escalation impact
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Tasks

static1

behavioral1

collectionevasionimpactprivilege_escalationstealthtrojan