virusX.zip
- SHA256 51baf4bc48db631e887ded88c0beb05b7a2f6f26ad2d122ee7c6cca6678752f5
27/02/2025, 17:35
250227-v6hlravmy71014/01/2025, 09:09
250114-k4szlatnbz14/01/2025, 05:44
250114-gfjt8szrbn1014/01/2025, 05:43
250114-ge4g9aykgt1014/01/2025, 05:39
250114-gctj9szqep1014/01/2025, 05:35
250114-f993vazqak1014/01/2025, 05:34
250114-f9l11szpgq1014/01/2025, 05:31
250114-f76yeayjcw1014/01/2025, 05:30
250114-f68evayjas1014/01/2025, 05:29
250114-f6m4xazpcq10Behavioral task
behavioral1
Sample
1777a2ba85f831e41c6a60418f84205c9de9c66402f9b7e5be13d29c543a42b0.apk
Resource
android-33-x64-arm64-20240624-en
| resource | yara_rule |
|---|---|
| static1/unpack001/5251a356421340a45c8dc6d431ef8a8cbca4078a0305a87f4fbd552e9fc0793e.apk | family_slocker_1 |
| resource | yara_rule |
|---|---|
| static1/unpack001/antivirus.apk | family_wipelock |
| description | ioc |
|---|---|
| Required by device admin receivers to bind with the system. Allows apps to manage device administration features. | android.permission.BIND_DEVICE_ADMIN |
| description | ioc |
|---|---|
| Required by accessibility services to bind with the system. Allows apps to access accessibility features. | android.permission.BIND_ACCESSIBILITY_SERVICE |
| Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. | android.permission.BIND_NOTIFICATION_LISTENER_SERVICE |
| description | ioc |
|---|---|
| Allows an application to read the user's contacts data. | android.permission.READ_CONTACTS |
| Allows an application to read SMS messages. | android.permission.READ_SMS |
| Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. | android.permission.CALL_PHONE |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE |
| Allows the app to answer an incoming phone call. | android.permission.ANSWER_PHONE_CALLS |
| Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. | android.permission.PROCESS_OUTGOING_CALLS |
| Allows an application to read the user's call log. | android.permission.READ_CALL_LOG |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
| Allows an application to read the user's calendar data. | android.permission.READ_CALENDAR |
| Allows an application to record audio. | android.permission.RECORD_AUDIO |
| Required to be able to access the camera device. | android.permission.CAMERA |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
| Allows an application to collect component usage statistics. | android.permission.PACKAGE_USAGE_STATS |
| Allows an application to read or write the system settings. | android.permission.WRITE_SETTINGS |
SLocker payload
Wipelock Android payload