samples.zip
- SHA256 1702176d5bf26ec2133bc2ba9bf425fffe7511c8aa1bce4280254743e619003e
Overview
overview
10Static
static
10SEX HD.apk
android-9-x86
7SEX HD.apk
android-10-x64
7SEX HD.apk
android-11-x64
7فرمته...1).apk
android-9-x86
7فرمته...1).apk
android-10-x64
7فرمته...1).apk
android-11-x64
7قفل ا�...1).apk
android-9-x86
4قفل ا�...1).apk
android-10-x64
4قفل ا�...1).apk
android-11-x64
1متجر p...1).apk
android-9-x86
1متجر p...1).apk
android-10-x64
1متجر p...1).apk
android-11-x64
1Behavioral task
behavioral1
Sample
SEX HD.apk
Resource
android-x86-arm-20260325-en
android-9-x86
2 signatures
30 seconds
Behavioral task
behavioral2
Sample
SEX HD.apk
Resource
android-x64-20260325-en
android-10-x64
1 signatures
30 seconds
Behavioral task
behavioral3
Sample
SEX HD.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
2 signatures
30 seconds
Behavioral task
behavioral4
Sample
فرمته الهاتف (1).apk
Resource
android-x86-arm-20260325-en
android-9-x86
2 signatures
30 seconds
Behavioral task
behavioral5
Sample
فرمته الهاتف (1).apk
Resource
android-x64-20260325-en
android-10-x64
1 signatures
30 seconds
Behavioral task
behavioral6
Sample
فرمته الهاتف (1).apk
Resource
android-x64-arm64-20260325-en
android-11-x64
2 signatures
30 seconds
Behavioral task
behavioral7
Sample
قفل الهاتف (1).apk
Resource
android-x86-arm-20260325-en
android-9-x86
1 signatures
30 seconds
Behavioral task
behavioral8
Sample
قفل الهاتف (1).apk
Resource
android-x64-20260325-en
android-10-x64
1 signatures
30 seconds
Behavioral task
behavioral9
Sample
قفل الهاتف (1).apk
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
30 seconds
Behavioral task
behavioral10
Sample
متجر play 1.0 (1).apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
30 seconds
Behavioral task
behavioral11
Sample
متجر play 1.0 (1).apk
Resource
android-x64-20260325-en
android-10-x64
0 signatures
30 seconds
Behavioral task
behavioral12
Sample
متجر play 1.0 (1).apk
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
30 seconds
General
- Target samples.zip
- Size 4.8MB
- Sample260328-v2lgvae161
- SHA256 1702176d5bf26ec2133bc2ba9bf425fffe7511c8aa1bce4280254743e619003e
- MD5 381f7dc1bb4aa2c490af0834c2057125
- SHA1 8c5ac885e0b180b9f1f2bee78e52784587449075
- SHA512 cdd57840275e37c90c930d6741e778395c64b818d6199cc4668e8ff19ee7f3bbf46e1b053df62944bbe5ac46bef0c3b540237816ba1f8b59797ab94544eb99ae
- SSDEEP 98304:YkeWsZ35gi3sgCNc8y7C7gs0UorLJiddqAtIMj4eEfdtXdfo4qhda0af9VBUmnG/:GVbgxd0C6BJcIMj4eetfo4GdmJU7d
- TLSH T17336336C97A8B7C6853B5F31DCDD250FA73E074D7901366202EDDC58BE3A2824A927A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- SLocker payload 1 IoCs
resource yara_rule static1/unpack001/قفل الهاتف (1).apk family_slocker_1 - Slocker family
- Wipelock Android payload 2 IoCs
resource yara_rule static1/unpack001/SEX HD.apk family_wipelock static1/unpack001/فرمته الهاتف (1).apk family_wipelock - Wipelock family
- Declares broadcast receivers with permission to handle system events 1 IoCs
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN - Requests dangerous framework permissions 8 IoCs
description ioc Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS - Insecure Codesign Algorithm 4 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/SEX HD.apk unpack001/فرمته الهاتف (1).apk unpack001/قفل الهاتف (1).apk unpack001/متجر play 1.0 (1).apk - Untrusted Codesign Signers 4 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/SEX HD.apk unpack001/فرمته الهاتف (1).apk unpack001/قفل الهاتف (1).apk unpack001/متجر play 1.0 (1).apk
File Explorer
-
samples.zip.zip 4.8MB
-
SEX HD.apk.apk 542KB
-
فرمته الهاتف (1).apk.apk 533KB
-
قفل الهاتف (1).apk.apk 23KB
-
متجر play 1.0 (1).apk.apk 3.9MB
SEX HD.apk
- SHA256 92b32ba0da4c2fb246e20abc52f756f5d8a7a0777b3dc5f59dc5572f5da723a7
- MD5 fe5544ab89175cfc977ff9684c430303
- SHA1 09b3a3900b54ffebc0072fec0992bbf4273b99b7
- SHA512 79bb18fbccba7b35f685a83e5096ad8f9295cf066df3af5c35e8e4233473eef1dc580ffd32a87ca20596fc39eb5bb5391f72c632c1f44a72f9a5350f556f8699
- SSDEEP 12288:McVS3EVqPlR6i0Ci3jM34D9RgEwFFHi+UV/nBumiVxDTm+1hAoqeV:MOS3EW6i0C+M3SRCFNi+UbumirDrqbeV
- TLSH T18CC4239CDAFDF283C5FB57341A24125BEA6BB76561307F8504DC8425E0FBA984B8076C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Wipelock Android payload
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
662a55f16f38818e87717ec9b18b74b7a8ba9a20
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
93:6e:ac:be:07:f2:01:df
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Feb 29, 2008 - Jul 17, 2035
com.elite
com.elite.MainActivity
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.READ_CONTACTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
com.elite.MainActivity
android.intent.action.MAIN
com.elite.LockScreen
com.elite.UninstallAdminDevice
android.intent.action.SEND
com.elite.IntentServiceClass
com.elite.AdminReciever
android.app.action.DEVICE_ADMIN_ENABLED
com.elite.SMSReceiver
android.provider.Telephony.SMS_RECEIVED
com.elite.BootReceiver
android.intent.action.BOOT_COMPLETED
com.elite.AlarmReceiver
فرمته الهاتف (1).apk
- SHA256 fcee982b3d0e1601b40078d98df03503668aec7542721f921ae8248bc3cec3a1
- MD5 9f01767647e2e72f446d374bbcb20c53
- SHA1 f6b1adcd7723b525418a05bcede5c671366d7ab3
- SHA512 4b9dc2dc08f015ed96a3ce30978994314d3edca84348eb62e7cb65d4d5477f179c44c80cc0a67863bc119555d0217f57681d047ce98ec405bd5eeaf2da8280ed
- SSDEEP 12288:kjRH6+O//n3tKpSsM+1HA+x283ecVS3EVqPlR6i0Ci3jM34D9Z:kN6+ONjstg38OOS3EW6i0C+M3SZ
- TLSH T145C423A4D2EDF583C9BBA73487654247D53777A268201B0016DCB837E4AFB644F42B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Wipelock Android payload
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
31fe3137b594c4b75602a3186c4f805537ac3f83
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android Debug,O=Android,C=US
Chains
Jan 1, 0001
Subject
CN=Android Debug,O=Android,C=US
Serial Number
4f:a0:c2:47
Issuer
CN=Android Debug,O=Android,C=US
Timespan
Jun 13, 2013 - Jun 6, 2043
com.elite
com.elite.MainActivity
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.READ_CONTACTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
com.elite.MainActivity
android.intent.action.MAIN
com.elite.LockScreen
com.elite.UninstallAdminDevice
android.intent.action.SEND
com.elite.IntentServiceClass
com.elite.AdminReciever
android.app.action.DEVICE_ADMIN_ENABLED
com.elite.SMSReceiver
android.provider.Telephony.SMS_RECEIVED
com.elite.BootReceiver
android.intent.action.BOOT_COMPLETED
com.elite.AlarmReceiver
قفل الهاتف (1).apk
- SHA256 ba46b7d282dab048d974cdc7a45b50fe7bf8f731d119768458c4af5c3d06e795
- MD5 f8910c895c80187d1af6606ede154bd6
- SHA1 d2d1fcbbc9ddd0646890c0b4bc3a23ebf432c523
- SHA512 3a2eb5e58ac2748c11f304f7b506a67043c89bc967532e73062d2c80b95a8beb0da8a759c407cb5c051de446957644399314f5c25d9ddf7e6ef75300fda6ac02
- SSDEEP 384:4bf0Mw7ufzNgSXM2v3YijqbA7Ke24v3YijqbA7Ke2Vv3YijqbA7Ke2Rv3YijqbAq:06yC12v3Yijqsuv4v3YijqsuvVv3Yij5
- TLSH T15CB2AE66B4E4B633F9B3E4782E790323BE7D63C84167C04D4124A624C7FFD089E68A95
- MD5 SHA1 SHA512 SSDEEP TLSH
-
SLocker payload
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
c26c52cf3d5afb455425d44f97e9044d96b3e2bb
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
93:6e:ac:be:07:f2:01:df
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Feb 29, 2008 - Jul 17, 2035
com.lololo
com.lololo.MainActivity
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SET_WALLPAPER
com.lololo.MainActivity
android.intent.action.MAIN
com.lololo.LockService
com.lololo.BootReceiver
android.intent.action.BOOT_COMPLETED
متجر play 1.0 (1).apk
- SHA256 8343d8d5be1338f401a58d63aaed071cb9006bead7f273fea26b9a88390303a2
- MD5 a9b05c05b6e5f087b52e5f397dd3e4c5
- SHA1 52f172ef460dc43eaa0c70994b55e2a5d37d4429
- SHA512 81601e319c9323b28a7e493654e44a00f7a1ef7c0b879085c7adafab2cdce822e5aceffe8b36d095c8c6a7b6a2bd268134f7b06931652d8e846a007c5f3952cc
- SSDEEP 98304:zDa917swb43Ld9tJ2A8t/c4cFp3RiayN2EOjM/VwIDG:Pa9G71C4TRiayxOY/KIDG
- TLSH T1431623260F46588AD899473D2BC38682F9935E913228A02D7154FD5BF7BC6F3D38ADC4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
b9e377b21c79ab7a65cc5c7bc0ac768fca36f802
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
93:6e:ac:be:07:f2:01:df
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Feb 29, 2008 - Jul 17, 2035
com.Mx.Hacker
.MainActivity
android.permission.VIBRATE
.MainActivity
android.intent.action.MAIN