Overview

overview

7

Static

static

7

WhatsApp_P...10.apk

android-9-x86

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    WhatsApp_Plus_v17.10.apk

  • Size

    54.3MB

  • Sample

    230113-zsjzwadc99

  • MD5

    4f774b19f651b067f18d07509c0c938d

  • SHA1

    4fc969b01a148d8fcc9d18349f84840ae4b2d69b

  • SHA256

    14df745b806095972151e6c293ded3839e0faeb7799919e9e1731cab3ecf181d

  • SHA512

    13ddc570cb8101d0494caf8f4e2dce16db325bed0caeab60c4d1e5b6f71aec29294d8e72e93e7710c65125e6426d3f30caaa88392ca0869780960ceab23b70b2

  • SSDEEP

    1572864:0uVJ08hkQK+fKvr0QoRkMpg9D2m3SXy9Q2m:g8W+fKvhoy59DfGyy2m

Score
7/10
androidevasionransomware

Malware Config

Targets

    • Target

      WhatsApp_Plus_v17.10.apk

    • Size

      54.3MB

    • MD5

      4f774b19f651b067f18d07509c0c938d

    • SHA1

      4fc969b01a148d8fcc9d18349f84840ae4b2d69b

    • SHA256

      14df745b806095972151e6c293ded3839e0faeb7799919e9e1731cab3ecf181d

    • SHA512

      13ddc570cb8101d0494caf8f4e2dce16db325bed0caeab60c4d1e5b6f71aec29294d8e72e93e7710c65125e6426d3f30caaa88392ca0869780960ceab23b70b2

    • SSDEEP

      1572864:0uVJ08hkQK+fKvr0QoRkMpg9D2m3SXy9Q2m:g8W+fKvhoy59DfGyy2m

    Score
    7/10
    evasionransomware

    • Acquires the wake lock.

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

MITRE ATT&CK Matrix

Tasks