General

  • Target

    FMWhatsApp_v9.98.apk

  • Size

    76.2MB

  • Sample

    240212-ranw4sfd5x

  • MD5

    67fff717824a15937e777dc2a98472df

  • SHA1

    7efc96bae35f14883c353224d204e9a73841aa9e

  • SHA256

    1a5aac2a6c5a1e625821a2260675248596839806758d253156fb1c1da56ae8b9

  • SHA512

    bac2cd756d685be35defe236da6876135c1c2e3646447f86b46f0dafeacf2d047f7c1184b2691cc72af60f33c8682d329aa63857711e75eff126049fd34132cd

  • SSDEEP

    1572864:16qJzShywPkPnZS+/eignjMg4DmlxI0MmDS1c4sLPwpJnraBK:11mhy5nZVYj/4uu0rDSOECK

Score
10/10

Malware Config

Targets

    • Target

      FMWhatsApp_v9.98.apk

    • Size

      76.2MB

    • MD5

      67fff717824a15937e777dc2a98472df

    • SHA1

      7efc96bae35f14883c353224d204e9a73841aa9e

    • SHA256

      1a5aac2a6c5a1e625821a2260675248596839806758d253156fb1c1da56ae8b9

    • SHA512

      bac2cd756d685be35defe236da6876135c1c2e3646447f86b46f0dafeacf2d047f7c1184b2691cc72af60f33c8682d329aa63857711e75eff126049fd34132cd

    • SSDEEP

      1572864:16qJzShywPkPnZS+/eignjMg4DmlxI0MmDS1c4sLPwpJnraBK:11mhy5nZVYj/4uu0rDSOECK

    Score
    8/10
    • Patched UPX-packed file

      Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks