General

  • Target

    WhatsApp_Plus_v16.20 (1).apk

  • Size

    49.5MB

  • Sample

    230202-dp26dsee87

  • MD5

    e1fa280f96a5de9cbdbabb0f81d22909

  • SHA1

    b67d37b955e3f7596758d39a82cea15be1eb3317

  • SHA256

    74db855a22ac2ef2454b7755a6b1179157a9fc57d5de6d771a6e01d9ba54e6aa

  • SHA512

    4a9c2be162d0530e90abeb3a3f5d0ec617fce58f25b9a6bb240d57a2f1bc9375341cb2f315d46b032cebcc3b91b4b437354b0cb0691d448c7aea56f29d274d3c

  • SSDEEP

    1572864:vtTdZS/9vl0u40pdT0D368I0v9du1wMKAlZ:vJSVvuu40pdIj+WMZlZ

Malware Config

Targets

    • Target

      WhatsApp_Plus_v16.20 (1).apk

    • Size

      49.5MB

    • MD5

      e1fa280f96a5de9cbdbabb0f81d22909

    • SHA1

      b67d37b955e3f7596758d39a82cea15be1eb3317

    • SHA256

      74db855a22ac2ef2454b7755a6b1179157a9fc57d5de6d771a6e01d9ba54e6aa

    • SHA512

      4a9c2be162d0530e90abeb3a3f5d0ec617fce58f25b9a6bb240d57a2f1bc9375341cb2f315d46b032cebcc3b91b4b437354b0cb0691d448c7aea56f29d274d3c

    • SSDEEP

      1572864:vtTdZS/9vl0u40pdT0D368I0v9du1wMKAlZ:vJSVvuu40pdIj+WMZlZ

    Score
    7/10
    • Acquires the wake lock.

    • Reads information about phone network operator.

    • Removes a system notification.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks