slocker | tiktok[.]apk

Resubmissions

14/01/2025, 09:12

250114-k6fr2stnfs10

26/09/2024, 17:16

29/08/2024, 23:23

29/08/2024, 23:03

28/08/2024, 07:14

Sharing

Copy URL Twitter E-mail

General

Target
tiktok.apk
Size 2.7MB
Sample240926-vtbbxayfjp
SHA256 3ad6a04700902fdc4dcf1fcdaa39490335319860c6777b9efa32a58cda8dcc77
MD5 7cc805be68b2392cbc8d9b643b6f1a35
SHA1 d808a8aee11a2335e09ceb2744b60a00544f0b71
SHA512 3f6c825a2f3aa40d1d8caef0220b2fe40166efd864a26a63df5573f489fc073aa7d1dcf50b4c41a53e31f3c7397fb171f46603168e261558601df28e8503b81c
SSDEEP 49152:0PctdtUtD62JjM2M7xZkpPctdtUtD6bJjM2M7xZk1JPctdtUtD6/JjM2M7xZkRP/:0P04D6sjkxwP04D6NjkxqJP04D6xjkxg
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

slocker

Malware Config

Signatures

SLocker payload 1 IoCs

resource	yara_rule
sample	family_slocker_1

Slocker family
slocker

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

tiktok.apk

.apk 2.7MB

tiktok.apk

SHA256 3ad6a04700902fdc4dcf1fcdaa39490335319860c6777b9efa32a58cda8dcc77
MD5 7cc805be68b2392cbc8d9b643b6f1a35
SHA1 d808a8aee11a2335e09ceb2744b60a00544f0b71
SHA512 3f6c825a2f3aa40d1d8caef0220b2fe40166efd864a26a63df5573f489fc073aa7d1dcf50b4c41a53e31f3c7397fb171f46603168e261558601df28e8503b81c
SSDEEP 49152:0PctdtUtD62JjM2M7xZkpPctdtUtD6bJjM2M7xZk1JPctdtUtD6/JjM2M7xZkRP/:0P04D6sjkxwP04D6NjkxqJP04D6xjkxg
MD5 SHA1 SHA512 SSDEEP

android

SLocker payload

com.termuxhackers.id

Android Permissions

tiktok.apk

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SET_WALLPAPER

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGE

android.permission.CAMERA

tiktok.apk

com.termuxhackers.id.MainActivity

com.termuxhackers.id.MyService

com.termuxhackers.id.BootReceiver