wipelock | d6c670c7a27105f082108d89c6d6b983bdeba6cef36d357b2c4c2bfbc4189aab | Triage

Sharing

General

Target

fnaf2_aptoide.apk
Size

549KB
Sample

240910-pf3lcatenj
MD5

dc98efd71997adb619bfc6e09b3df258
SHA1

50d0d722d4af4a863a19749dd7ef680c67662aa2
SHA256

d6c670c7a27105f082108d89c6d6b983bdeba6cef36d357b2c4c2bfbc4189aab
SHA512

1903987f5cd074bb672cf335442178a0820bce6e02dc5a04bbbd894c2048bcb068c85e6cefd3663bd0505a20c0651dcfcbb60760f2c5744e344af6f7a627ade7
SSDEEP

12288:pVH6+G//njU81lWGiZrqCx5cVS3EVqPlR6i0Ci3jM34D9I:pd6+GQ81lseCPOS3EW6i0C+M3SI

Score

10^/10

wipelock android collection evasion impact privilege_escalation stealth trojan

Malware Config

Targets

- Target
  
  fnaf2_aptoide.apk
- Size
  
  549KB
- MD5
  
  dc98efd71997adb619bfc6e09b3df258
- SHA1
  
  50d0d722d4af4a863a19749dd7ef680c67662aa2
- SHA256
  
  d6c670c7a27105f082108d89c6d6b983bdeba6cef36d357b2c4c2bfbc4189aab
- SHA512
  
  1903987f5cd074bb672cf335442178a0820bce6e02dc5a04bbbd894c2048bcb068c85e6cefd3663bd0505a20c0651dcfcbb60760f2c5744e344af6f7a627ade7
- SSDEEP
  
  12288:pVH6+G//njU81lWGiZrqCx5cVS3EVqPlR6i0Ci3jM34D9I:pd6+GQ81lseCPOS3EW6i0C+M3SI
Score

8^/10

collection evasion impact privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Reads the contacts stored on the device.
  collection
- Tries to add a device administrator.
  privilege_escalation impact
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Tasks

static1

behavioral1

collectionevasionimpactprivilege_escalationstealthtrojan