9cc9fba099c35d65638f521e5a1d748ea432b64d82fe9732cfc52f8b57d3dffd.zip
- SHA256 988c70a7a9bca317a297fbefe0f192cca9494f476a7e0f28b940acab557e30fc
Behavioral task
behavioral1
Sample
9cc9fba099c35d65638f521e5a1d748ea432b64d82fe9732cfc52f8b57d3dffd.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
9cc9fba099c35d65638f521e5a1d748ea432b64d82fe9732cfc52f8b57d3dffd.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
9cc9fba099c35d65638f521e5a1d748ea432b64d82fe9732cfc52f8b57d3dffd.apk
Resource
android-x64-arm64-20260325-en
SLocker is an Android ransomware that locks victim screens and encrypts files.
| resource | yara_rule |
|---|---|
| static1/unpack001/9cc9fba099c35d65638f521e5a1d748ea432b64d82fe9732cfc52f8b57d3dffd.apk | family_slocker_1 |
| description | ioc |
|---|---|
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/9cc9fba099c35d65638f521e5a1d748ea432b64d82fe9732cfc52f8b57d3dffd.apk |
SLocker payload
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.