slocker | WannaLocker[.]apk

Resubmissions

24/03/2025, 16:06 UTC

250324-tj2wfawk19 10

14/01/2025, 08:57 UTC

250114-kw2lrstlat 10

03/10/2024, 18:26 UTC

241003-w3ddastclf 10

25/03/2024, 16:50 UTC

240325-vcbaksgb5t 10

Sharing

Copy URL

Twitter E-mail

General

Target

WannaLocker.apk
Size

1.8MB
MD5

ba03c39ba851c2cb3ac5851b5f029b9c
SHA1

d72ca5ca1e7dc6431c041bfc6d7e3f9bfa39959c
SHA256

200d8f98c326fc65f3a11dc5ff1951051c12991cc0996273eeb9b71b27bc294d
SHA512

b4f6dfe04bbae931905438e6c23c653e0255a7af8c01cdb8d2c1f81c5ace987153550b9cf922bcb29e07ac3477ae7c859d538510c8770a13b5abe0911128d5d8
SSDEEP

49152:x7bFcxrjUIWXUZGlilIy0ywxepey0yDR5y0yzUjtP:xbFcVwXU/lOxeFDIQ

Score

10^/10

slocker

Malware Config

Signatures

SLocker payload 1 IoCs

resource	yara_rule
sample	family_slocker_2

Slocker family
slocker

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

WannaLocker.apk
.apk android

com.android.tencent.zdevs.bah

com.android.tencent.zdevs.bah.MainActivity

Activities

com.android.tencent.zdevs.bah.MainActivity

android.intent.action.MAIN

Permissions

android.permission.SET_WALLPAPER
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
com.android.launcher.permission.READ_SETTINGS
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.MODIFY_AUDIO_SETTINGS

Android Permissions

WannaLocker.apk

Permissions

android.permission.SET_WALLPAPER

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS