General
-
Target
GBWhatsApp_Pro_v17.85.apk
-
Size
72.1MB
-
Sample
240530-15vgtabd41
-
MD5
d18a4dcc8c539efaff36b41109e41fc2
-
SHA1
23ceff833c9b896095c5c68ac5376c99eb522fea
-
SHA256
f1be4ec0fa7ff519e75cdb69356be676cd0d758bf400271c0aeef747474e8293
-
SHA512
e1634af07e61d40357a9203aed455e3263d099c09fbe53d520e0d144bf199882f894d9057a9a19bae9ac59cb5cb46b6ce0ee01e7df7c333c575bee6e7b50844e
-
SSDEEP
786432:MGqLVnhTeU4jha2namVbW3UBdIQFvYI46Cy9chHr6FbXST9+7OoJPCQaG1M3q25f:MGqRnNp2VDXzlShLsJPC2DwPwpJoyI
Malware Config
Targets
-
-
Target
GBWhatsApp_Pro_v17.85.apk
-
Size
72.1MB
-
MD5
d18a4dcc8c539efaff36b41109e41fc2
-
SHA1
23ceff833c9b896095c5c68ac5376c99eb522fea
-
SHA256
f1be4ec0fa7ff519e75cdb69356be676cd0d758bf400271c0aeef747474e8293
-
SHA512
e1634af07e61d40357a9203aed455e3263d099c09fbe53d520e0d144bf199882f894d9057a9a19bae9ac59cb5cb46b6ce0ee01e7df7c333c575bee6e7b50844e
-
SSDEEP
786432:MGqLVnhTeU4jha2namVbW3UBdIQFvYI46Cy9chHr6FbXST9+7OoJPCQaG1M3q25f:MGqRnNp2VDXzlShLsJPC2DwPwpJoyI
-
Patched UPX-packed file
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
-
Reads information about phone network operator.
-
Schedules tasks to execute at a specified time
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
-