General

  • Target

    WhatsApp.apk

  • Size

    86.1MB

  • MD5

    e187a7bd21dfc0c1d958159e70fc5bf3

  • SHA1

    7e10c52c957975d06c765aff26460ab44698b94b

  • SHA256

    1bc7fbb474b686dc5d06fe94370037e70cc9a3144e534cf154a434a682d278ec

  • SHA512

    6e4b3af2e254b11c936a263418d870f4248a02b97c26cf39c33e4c1b753fdb86713811a6635b8afbdd0a3f4a9e599e6e991c8644bc85e7bda684cb8edc3b59ca

  • SSDEEP

    1572864:p837EtsQx7kuc1DbP39FgPwpJl2Vas8VqMB4LlF6mdvLoF278bSx07il/pbnQ4Rg:1tsQZ1c1/NyMEQ4BFHdvLoFuNpp5g

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 20 IoCs

Files

  • WhatsApp.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.whatsapp

    com.whatsapp.Main


  • Calistoga-Regular.ttf
  • CourierPrime-Bold.ttf
  • Exo2-ExtraBold.ttf
  • FacebookScriptWA-Regular.otf
  • MorningBreeze-Regular.ttf
  • Optimistic_Text_A_Bd.ttf
  • Optimistic_Text_A_Md.ttf
  • Roboto-Medium.ttf
  • RobotoMono-Regular.ttf
  • aiv_spinner_animation.json
  • aiv_success_icon_animation.json
  • cl-messages_en_us.properties
  • cl-util.properties
  • cldr_strings.pack
  • clockDarkTheme.svg
    .xml
  • clockLightTheme.svg
    .xml
  • country_names_af.tsv
  • country_names_am.tsv
  • country_names_ar.tsv
  • country_names_az.tsv
  • country_names_bg.tsv
  • country_names_bn.tsv
  • country_names_ca.tsv
  • country_names_cs.tsv
  • country_names_da.tsv
  • country_names_de.tsv
  • country_names_el.tsv
  • country_names_en.tsv
  • country_names_es.tsv
  • country_names_et.tsv
  • country_names_fa.tsv
  • country_names_fi.tsv
  • country_names_fil.tsv
  • country_names_fr.tsv
  • country_names_ga.tsv
  • country_names_gu.tsv
  • country_names_ha.tsv
  • country_names_he.tsv
  • country_names_hi.tsv
  • country_names_hr.tsv
  • country_names_hu.tsv
  • country_names_id.tsv
  • country_names_it.tsv
  • country_names_ja.tsv
  • country_names_kk.tsv
  • country_names_kn.tsv
  • country_names_ko.tsv
  • country_names_lo.tsv
  • country_names_lt.tsv
  • country_names_lv.tsv
  • country_names_mk.tsv
  • country_names_ml.tsv
  • country_names_mr.tsv
  • country_names_ms.tsv
  • country_names_nb.tsv
  • country_names_nl.tsv
  • country_names_om.tsv
  • country_names_pa.tsv
  • country_names_pl.tsv
  • country_names_pt-BR.tsv
  • country_names_pt-PT.tsv
  • country_names_ro.tsv
  • country_names_ru.tsv
  • country_names_sk.tsv
  • country_names_sl.tsv
  • country_names_sq.tsv
  • country_names_sr.tsv
  • country_names_sv.tsv
  • country_names_sw.tsv
  • country_names_ta.tsv
  • country_names_te.tsv
  • country_names_th.tsv
  • country_names_tr.tsv
  • country_names_uk.tsv
  • country_names_ur.tsv
  • country_names_uz.tsv
  • country_names_vi.tsv
  • country_names_zh-Hans.tsv
  • country_names_zh-Hant.tsv
  • currency_metadata.json
  • e0001.png
    .png
  • emojis.oba
  • ephemeral_settings_lottie_animation.lottie
    .zip
  • animations/lf30_editor_cjab5ej6.json
  • manifest.json
  • fbpermissions.json
  • ic_content_sticker_location.svg
    .xml
  • ic_content_sticker_location_60_percent_black.svg
    .xml
  • ic_content_sticker_location_black.svg
    .xml
  • ic_content_sticker_location_emerald.svg
    .xml
  • libs.spk.zst
  • npci_otp_rules.json
  • npci_otp_rules_cl_1.5.json
  • phoenix-features.json
  • ptt_to_ptv_nux_tool_tip_animation.json
  • stella_e2e.svg
    .xml
  • stella_wa.svg
    .xml
  • strings_af.spk.br
  • strings_am.spk.br
  • strings_ar.spk.br
  • strings_az.spk.br
  • strings_bg.spk.br
  • strings_bn.spk.br
  • strings_ca.spk.br
  • strings_cs.spk.br
  • strings_da.spk.br
  • strings_de.spk.br
  • strings_el.spk.br
  • strings_en.spk.br
  • strings_es.spk.br
  • strings_et.spk.br
  • strings_fa.spk.br
  • strings_fi.spk.br
  • strings_fr.spk.br
  • strings_ga.spk.br
  • strings_gu.spk.br
  • strings_ha.spk.br
  • strings_hi.spk.br
  • strings_hr.spk.br
  • strings_hu.spk.br
  • strings_in.spk.br
  • strings_it.spk.br
  • strings_iw.spk.br
  • strings_ja.spk.br
  • strings_kk.spk.br
  • strings_kn.spk.br
  • strings_ko.spk.br
  • strings_lo.spk.br
  • strings_lt.spk.br
  • strings_lv.spk.br
  • strings_mk.spk.br
  • strings_ml.spk.br
  • strings_mr.spk.br
  • strings_ms.spk.br
  • strings_nb.spk.br
  • strings_nl.spk.br
  • strings_om.spk.br
  • strings_pa.spk.br
  • strings_pl.spk.br
  • strings_pt.spk.br
  • strings_ro.spk.br
  • strings_ru.spk.br
  • strings_sl.spk.br
  • strings_sq.spk.br
  • strings_sr.spk.br
  • strings_sv.spk.br
  • strings_sw.spk.br
  • strings_ta.spk.br
  • strings_te.spk.br
  • strings_th.spk.br
  • strings_tl.spk.br
  • strings_tr.spk.br
  • strings_uk.spk.br
  • strings_ur.spk.br
  • strings_uz.spk.br
  • strings_vi.spk.br
  • strings_zh-rCN.spk.br
  • strings_zh-rHK.spk.br
  • strings_zh-rTW.spk.br
  • transaction_confirmation_lottie_animation.json
  • v01_high_end_face_compressed.bin
  • validation.properties
  • version.properties
  • version_cl_1.5.properties
  • video_to_voice_icon_animation.json
  • voice_to_video_icon_animation.json
  • whatsapp-schema-persist-ids.json

Android Permissions

WhatsApp.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE_MICROPHONE

android.permission.FOREGROUND_SERVICE_CAMERA

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.NEARBY_WIFI_DEVICES

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.MANAGE_OWN_CALLS

android.permission.ACCESS_MEDIA_LOCATION

android.permission.BLUETOOTH

android.permission.BROADCAST_STICKY

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.GET_TASKS

android.permission.INSTALL_SHORTCUT

android.permission.MANAGE_ACCOUNTS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_PROFILE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SCHEDULE_EXACT_ALARM

android.permission.SEND_SMS

android.permission.USE_CREDENTIALS

android.permission.WAKE_LOCK

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_SYNC_SETTINGS

android.permission.REQUEST_INSTALL_PACKAGES