General
-
Target
FMWhatsApp_v9.98.apk
-
Size
76.2MB
-
Sample
240212-ranw4sfd5x
-
MD5
67fff717824a15937e777dc2a98472df
-
SHA1
7efc96bae35f14883c353224d204e9a73841aa9e
-
SHA256
1a5aac2a6c5a1e625821a2260675248596839806758d253156fb1c1da56ae8b9
-
SHA512
bac2cd756d685be35defe236da6876135c1c2e3646447f86b46f0dafeacf2d047f7c1184b2691cc72af60f33c8682d329aa63857711e75eff126049fd34132cd
-
SSDEEP
1572864:16qJzShywPkPnZS+/eignjMg4DmlxI0MmDS1c4sLPwpJnraBK:11mhy5nZVYj/4uu0rDSOECK
Behavioral task
behavioral1
Sample
FMWhatsApp_v9.98.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral2
Sample
FMWhatsApp_v9.98.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral3
Sample
FMWhatsApp_v9.98.apk
Resource
android-33-x64-arm64-20231215-en
Behavioral task
behavioral4
Sample
FMWhatsApp_v9.98.apk
Resource
android-x86-arm-20231215-en
Malware Config
Targets
-
-
Target
FMWhatsApp_v9.98.apk
-
Size
76.2MB
-
MD5
67fff717824a15937e777dc2a98472df
-
SHA1
7efc96bae35f14883c353224d204e9a73841aa9e
-
SHA256
1a5aac2a6c5a1e625821a2260675248596839806758d253156fb1c1da56ae8b9
-
SHA512
bac2cd756d685be35defe236da6876135c1c2e3646447f86b46f0dafeacf2d047f7c1184b2691cc72af60f33c8682d329aa63857711e75eff126049fd34132cd
-
SSDEEP
1572864:16qJzShywPkPnZS+/eignjMg4DmlxI0MmDS1c4sLPwpJnraBK:11mhy5nZVYj/4uu0rDSOECK
Score8/10-
Patched UPX-packed file
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Acquires the wake lock
-
Reads information about phone network operator.
-