Overview
overview
7Static
static
6DroidLocker.apk
android-13-x64
7DroidLocker.apk
android-10-x64
7DroidLocker.apk
android-11-x64
7DroidLocker.apk
android-14-x64
7DroidLocker.apk
android-15-x64
7DroidLocker.apk
android-9-x86
6childjosh.apk
android-13-x64
6childjosh.apk
android-10-x64
6childjosh.apk
android-11-x64
6childjosh.apk
android-14-x64
6childjosh.apk
android-15-x64
6childjosh.apk
android-9-x86
6General
- Target DroidLocker.apk
- Size 13.1MB
- Sample260705-aje7wsfs8s
- SHA256 0280fd7da2973e37e577caf2b2fcf06bc77cbcda47004fff6bad0ab77b89f5d9
- MD5 72094c814d2615e9c429ee5dc598ef43
- SHA1 7acde307c41d7149a87cf5ac7660d5bbeb5f9207
- SHA512 ac5af8d1d54ca9f2daa994c48a282d59279c5f16800c32497edfe280ac8e6373f4d2a8e5650e4fb93a5e8fc1adab3072d82babff3bfb68092aac4893305e46fc
- SSDEEP 393216:JfXXlHHxqq2Z7GStbZkdTddRsf66EB9KNxJA:JdgqUHNSbsip8N/A
- TLSH T198D62202FBD4DD0ED4F783329D3B5626150A4C66C347D2878B65F3B968B39E40E86AD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
DroidLocker.apk
Resource
android-33-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
DroidLocker.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
DroidLocker.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
DroidLocker.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
DroidLocker.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
DroidLocker.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral7
Sample
childjosh.apk
Resource
android-33-x64-arm64-20260325-en
Behavioral task
behavioral8
Sample
childjosh.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral9
Sample
childjosh.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral10
Sample
childjosh.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral11
Sample
childjosh.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral12
Sample
childjosh.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target DroidLocker.apk
- Size 13.1MB
- SHA256 0280fd7da2973e37e577caf2b2fcf06bc77cbcda47004fff6bad0ab77b89f5d9
- MD5 72094c814d2615e9c429ee5dc598ef43
- SHA1 7acde307c41d7149a87cf5ac7660d5bbeb5f9207
- SHA512 ac5af8d1d54ca9f2daa994c48a282d59279c5f16800c32497edfe280ac8e6373f4d2a8e5650e4fb93a5e8fc1adab3072d82babff3bfb68092aac4893305e46fc
- SSDEEP 393216:JfXXlHHxqq2Z7GStbZkdTddRsf66EB9KNxJA:JdgqUHNSbsip8N/A
- TLSH T198D62202FBD4DD0ED4F783329D3B5626150A4C66C347D2878B65F3B968B39E40E86AD8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Declares broadcast receivers with permission to handle system events
-
Declares services with permission to bind to the system
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Queries the mobile country code (MCC)
-
Requests dangerous framework permissions
-
- Target childjosh.apk
- Size 3.9MB
- SHA256 8cecf18ad253d15489d62eff824a2bec83a4d20f36ada95800d554b405c1baa1
- MD5 77c3faa441af2745255c56791086911e
- SHA1 bd035974faf84c64f1fc951021968994fde452a9
- SHA512 651bd33385a83b90d9e8125e6be7b7acc9d78b4d41e9ee339399bc1d24088d318c1b73fa081f54736a111d90d05d8600c325fd1cbed2cf489d618ede17a5720d
- SSDEEP 98304:JVKpi6/Ug7rJid/wwxrqmnQFFNFxUFIjM:JklUErsRwwxumnQCaI
- TLSH T1F4160142F7D5EA2EFDF383365B361A2511064CA2C353E683982573BD58B7AD04D8A7C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Acquires the wake lock
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Queries information about active data network