wipelock | hxxp://6[.]177[.]191[.]248

- Target
  http://6.177.191.248
Score

10^/10

wipelock infostealer trojan
- Family: Wipelock
  Wipelock is an Android trojan with multiple capabilities, such as wiping data, reading and sending SMS messages without the victim's knowledge.
  trojan infostealer wipelock
- Wipelock Android payload
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Declares broadcast receivers with permission to handle system events
- Requests dangerous framework permissions
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Family: Wipelock

Wipelock Android payload

Contacts third-party web service commonly abused for C2

Declares broadcast receivers with permission to handle system events

Requests dangerous framework permissions

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

urlscan1

behavioral1