General

  • Target

    Magisk.apk

  • Size

    541KB

  • MD5

    dc501babdc111ed3ea47d9af99586944

  • SHA1

    7fcba82486c3896b527206575aa8f221f0112b81

  • SHA256

    5aa7753c8f3808c71dabecc458f665358053bc0205ca2e78849accb09bd4f8d3

  • SHA512

    bc18013676c273d2d88ba7739f9182236ecdaed6787ffcfe9eb2157399d2af6c76ddd47e33db9bab1b8fd94ac1a6c2a758eedc99cc7642d6ed9e669e8d209e23

  • SSDEEP

    12288:VavjRH6+O//n3tKpSsM+1HA+jucMBfCb6vgdQPIwdgCir9k6amAs8U2b7m7+w:VYN6+ONjstgAul4bJLpCiBDRCUVh

Score
10/10

Malware Config

Signatures

  • Wipelock Android payload 1 IoCs
  • Wipelock family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • Magisk.apk
    .apk android

    com.elite

    com.elite.MainActivity


Android Permissions

Magisk.apk

Permissions

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK