slocker | xphantom[.]apk

General

Target

xphantom.apk
Size

2.7MB
MD5

67e817e403301c5ee8cc08b77ed7f0da
SHA1

357e1eedebbe0b81091ff1c90dc9ad0ac0132c6c
SHA256

b54cf4f49f58516b2e11ebbba9ff82385717620a8d1b3f5c318f87dc0c17a11f
SHA512

0240c552cd95674c9b0694a5af472d0ac87d0fc70476b2e8cd7f1232881ba64fab667a98f9d17f6d38b61e7aa81c88ebe08559d960faea409f8b6f3f199866f2
SSDEEP

49152:AsPctdtUtD63JjM2M7xZkBPctdtUtD6eJjM2M7xZkDPctdtUtD60JjM2M7xZkcP5:AsP04D6ZjkxQP04D6kjkx+P04D6SjkxD

Score

10^/10

slocker

SLocker payload 1 IoCs

Processes:

resource yara_rule

sample family_slocker_1
Slocker family
slocker

resource	yara_rule
sample	family_slocker_1

Requests dangerous framework permissions 7 IoCs

Processes:

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGE

android.permission.CAMERA