triada | f2a7c16f932054acc0e8cac223fa39adfba4140a587ef1cc4a52cd7b74fcf172 | Triage

Sharing

General

Target

WhatsApp Business.apk
Size

59.7MB
Sample

240706-g3q7tsyckp
MD5

4985cc1276211fa3fb1998c6fd0a6941
SHA1

6b75f24280f00182b054780c32587833000caae0
SHA256

f2a7c16f932054acc0e8cac223fa39adfba4140a587ef1cc4a52cd7b74fcf172
SHA512

678da64a3f30a611705e880a79547d5e4d7ee81b98f9c43ee955059275f25df48963f7230ef03b303bd58e997a8ca506d04ad2539441a104f997eb8dca182319
SSDEEP

786432:qL9UzN7Gu9AxncuKc8YXcXwdV3Lw4z22/Z7ZYMNbiCFqM1/4GXF9BghVTNvl1Ryh:0uxL9LuKaV3L02/ZCMd5X1nghV1Fy7Jr

Score

10^/10

triada android discovery evasion execution impact persistence upx

Malware Config

Targets

- Target
  
  WhatsApp Business.apk
- Size
  
  59.7MB
- MD5
  
  4985cc1276211fa3fb1998c6fd0a6941
- SHA1
  
  6b75f24280f00182b054780c32587833000caae0
- SHA256
  
  f2a7c16f932054acc0e8cac223fa39adfba4140a587ef1cc4a52cd7b74fcf172
- SHA512
  
  678da64a3f30a611705e880a79547d5e4d7ee81b98f9c43ee955059275f25df48963f7230ef03b303bd58e997a8ca506d04ad2539441a104f997eb8dca182319
- SSDEEP
  
  786432:qL9UzN7Gu9AxncuKc8YXcXwdV3Lw4z22/Z7ZYMNbiCFqM1/4GXF9BghVTNvl1Ryh:0uxL9LuKaV3L02/ZCMd5X1nghV1Fy7Jr
Score

7^/10

discovery evasion execution impact persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Acquires the wake lock
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasionexecutionimpactpersistence

behavioral3

discoveryevasionexecutionimpactpersistence

behavioral4