General

  • Target

    WhatsApp_Gold_V31.apk

  • Size

    79.1MB

  • MD5

    56ef68dd643124720ac57d9b7b15f4ed

  • SHA1

    61775bc63e039e1a09f2f1958b4ee21be45c80fa

  • SHA256

    ff9acd844ef86684dce8238990dc25bdd16197b6324557bd66f7fa6d2d546ce3

  • SHA512

    c400753147e5a7a2c0285d7b6aa70f7563d712c663a9574c0091b681a46439e2328f8aa0793ec758209dee70635271b2c13b42e9355e19e585607ec44c37ed51

  • SSDEEP

    1572864:0C9nz1W3ns15whM1c4s40MmDyPwpJg+LKrGb/gzaMsnleP+0f4:0Gz1A85MMV0rDu0b/aahg14

Score
10/10

Malware Config

Signatures

  • Android Triada payload 1 IoCs
  • Triada family
  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 24 IoCs

Files

  • WhatsApp_Gold_V31.apk
    .apk android arch:arm64 arch:arm

    com.WhatsApp2Plus

    com.WhatsApp2Plus.settings.SettingsNotifications


Android Permissions

WhatsApp_Gold_V31.apk

Permissions

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.RECEIVE_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE_MICROPHONE

android.permission.FOREGROUND_SERVICE_CAMERA

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.SCHEDULE_EXACT_ALARM

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.NEARBY_WIFI_DEVICES

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.MANAGE_OWN_CALLS

android.permission.ACCESS_MEDIA_LOCATION

android.permission.BLUETOOTH

android.permission.BROADCAST_STICKY

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.GET_TASKS

android.permission.INSTALL_SHORTCUT

android.permission.MANAGE_ACCOUNTS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_PROFILE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SEND_SMS

android.permission.USE_CREDENTIALS

android.permission.WAKE_LOCK

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED