AG Virus 8.apk
- SHA256 d6dfb9aafb3dd4fcfc330a51d75f8b026326192d294413c2e30213ed0f563342
-
SLocker payload
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Behavioral task
behavioral1
Sample
AG Virus 8.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
AG Virus 8.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
AG Virus 8.apk
Resource
android-x64-arm64-20260325-en
SLocker is an Android ransomware that locks victim screens and encrypts files.
| resource | yara_rule |
|---|---|
| sample | family_slocker_1 |
| description | ioc |
|---|---|
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
| Allows an application to read the user's contacts data. | android.permission.READ_CONTACTS |
| Allows an application to read SMS messages. | android.permission.READ_SMS |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
| Required to be able to access the camera device. | android.permission.CAMERA |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| AG Virus 8.apk |
SLocker payload
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SET_WALLPAPER
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.REQUEST_INSTALL_PACKAGE
android.permission.CAMERA