wipelock | mobelejen[.]apk

General

Target
mobelejen.apk
Size 549KB
Sample260228-3td2sscv2e
SHA256 7d59e24f4bdf28a846d21e2608796f7e91389c4778bec75369d7b05e3f8449a5
MD5 45be5a7857a4fa1c5eadd519e9402e8a
SHA1 36feb0809c1853f9a1f6d587302691abd7ce90e9
SHA512 46c869051e0c97b68f4388b87caecd82bf7362110a34ebb28ddc5fcd6c8a0e339eeaafbfce54d22593e245457fae7ec4c36b49a8556d3327ba7f90a40dd96a73
SSDEEP 12288:9cVS3EVqPlR6i0Ci3jM34D9zSxjRH6+O//n3tKpSsM+1HA+3De7:9OS3EW6i0C+M3SziN6+ONjstgYDe7
TLSH
T129C423A4C1DDB583C9FB973847695252D57B77B268201B4406DCA833E0AFB644F82B3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

wipelock

Malware Config

Signatures

Wipelock Android payload 1 IoCs

resource	yara_rule
sample	family_wipelock

Wipelock family
wipelock

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
mobelejen.apk

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
mobelejen.apk

File Explorer

mobelejen.apk

.apk 549KB

mobelejen.apk

SHA256 7d59e24f4bdf28a846d21e2608796f7e91389c4778bec75369d7b05e3f8449a5
MD5 45be5a7857a4fa1c5eadd519e9402e8a
SHA1 36feb0809c1853f9a1f6d587302691abd7ce90e9
SHA512 46c869051e0c97b68f4388b87caecd82bf7362110a34ebb28ddc5fcd6c8a0e339eeaafbfce54d22593e245457fae7ec4c36b49a8556d3327ba7f90a40dd96a73
SSDEEP 12288:9cVS3EVqPlR6i0Ci3jM34D9zSxjRH6+O//n3tKpSsM+1HA+3De7:9OS3EW6i0C+M3SziN6+ONjstgYDe7
TLSH
T129C423A4C1DDB583C9FB973847695252D57B77B268201B4406DCA833E0AFB644F82B3B
MD5 SHA1 SHA512 SSDEEP TLSH

android

Wipelock Android payload
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

d2646336e87d80826e788eba841c01614ce44e59

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=editor

Chains

Jan 1, 0001

com.elite

Android Permissions

mobelejen.apk

Permissions

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

mobelejen.apk

File Signature issue

com.elite.MainActivity

com.elite.LockScreen

com.elite.UninstallAdminDevice

com.elite.IntentServiceClass

com.elite.AdminReciever

com.elite.SMSReceiver

com.elite.BootReceiver

com.elite.AlarmReceiver

Sharing

General

Malware Config

Signatures

File Explorer

mobelejen.apk

File Signature issue

com.elite.MainActivity

com.elite.LockScreen

com.elite.UninstallAdminDevice

com.elite.IntentServiceClass

com.elite.AdminReciever

com.elite.SMSReceiver

com.elite.BootReceiver

com.elite.AlarmReceiver

Android Permissions

mobelejen.apk