slocker | Kawendra Zpax[.]apk

General

Target
Kawendra Zpax.apk
Size 2.1MB
Sample240829-3cb6waybjp
SHA256 b5ab87692109c072cc277246e957ab32cfce6973f9f06c609ba51b53114cce51
MD5 c3c1c61c9af16e0de74f966c6a60bafa
SHA1 bfd0f3b616a0d84ec4a9bb71131b6a6fc8d8d0f6
SHA512 6874a33092eacdde97de35b4328768e308a606f76a267efdf367b6ecdd533f0465b8dd4904b3fe8c6b2e6845bdd7000b6f71d6dee7cde88206bbad0f850c8f2c
SSDEEP 49152:nPnoAmRzSvK/deqo8N6IpPh+WgBfn5q4XNCjZnxxum04m0Wm0Dm0g:PozciV9hN6Ixq5n0j5umnmxmQm1
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

slocker

SLocker payload 1 IoCs

resource	yara_rule
sample	family_slocker_1

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

SHA256 b5ab87692109c072cc277246e957ab32cfce6973f9f06c609ba51b53114cce51
MD5 c3c1c61c9af16e0de74f966c6a60bafa
SHA1 bfd0f3b616a0d84ec4a9bb71131b6a6fc8d8d0f6
SHA512 6874a33092eacdde97de35b4328768e308a606f76a267efdf367b6ecdd533f0465b8dd4904b3fe8c6b2e6845bdd7000b6f71d6dee7cde88206bbad0f850c8f2c
SSDEEP 49152:nPnoAmRzSvK/deqo8N6IpPh+WgBfn5q4XNCjZnxxum04m0Wm0Dm0g:PozciV9hN6Ixq5n0j5umnmxmQm1
MD5 SHA1 SHA512 SSDEEP

android

com.kawendrazpax

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER