wipelock | cffed8818e94fb65eb2efa405188daf1ede9091279fdb0d099f2d66469e75b70 | Triage

Sharing

General

Target

gen_signed.apk
Size

625KB
Sample

250305-pvta8ayvb1
MD5

7fbbfbddd233bd288d74239aaed00d39
SHA1

f7185ae8a0f26be671644417449e23bcf91260fd
SHA256

cffed8818e94fb65eb2efa405188daf1ede9091279fdb0d099f2d66469e75b70
SHA512

30fb2220da300d0192f4fbf76b95bc88ee272d857e4aa0308be586356bf877f2f8b258b3b1da0c11d03d8356abb3b99a0877b176aee21dcd074df92184db592a
SSDEEP

12288:NcVS3E28sccs6iDsGJsOoF5GA6yaaBDt16LRSAXKja6epmPw5nRoNq+fA7AfOM:NOS3E28Xcs6iAGJ2p7au6LoAXKjappmd

Score

10^/10

wipelock android collection evasion impact privilege_escalation stealth trojan

Malware Config

Targets

- Target
  
  gen_signed.apk
- Size
  
  625KB
- MD5
  
  7fbbfbddd233bd288d74239aaed00d39
- SHA1
  
  f7185ae8a0f26be671644417449e23bcf91260fd
- SHA256
  
  cffed8818e94fb65eb2efa405188daf1ede9091279fdb0d099f2d66469e75b70
- SHA512
  
  30fb2220da300d0192f4fbf76b95bc88ee272d857e4aa0308be586356bf877f2f8b258b3b1da0c11d03d8356abb3b99a0877b176aee21dcd074df92184db592a
- SSDEEP
  
  12288:NcVS3E28sccs6iDsGJsOoF5GA6yaaBDt16LRSAXKja6epmPw5nRoNq+fA7AfOM:NOS3E28Xcs6iAGJ2p7au6LoAXKjappmd
Score

8^/10

collection evasion impact privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Reads the contacts stored on the device.
  collection
- Tries to add a device administrator.
  privilege_escalation impact
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Tasks

static1

behavioral1

collectionevasionimpactprivilege_escalationstealthtrojan

behavioral2

collectionevasionstealthtrojan

behavioral3

collectionevasionimpactprivilege_escalationstealthtrojan