General

  • Target

    f2a7c16f932054acc0e8cac223fa39adfba4140a587ef1cc4a52cd7b74fcf172

  • Size

    59.7MB

  • MD5

    4985cc1276211fa3fb1998c6fd0a6941

  • SHA1

    6b75f24280f00182b054780c32587833000caae0

  • SHA256

    f2a7c16f932054acc0e8cac223fa39adfba4140a587ef1cc4a52cd7b74fcf172

  • SHA512

    678da64a3f30a611705e880a79547d5e4d7ee81b98f9c43ee955059275f25df48963f7230ef03b303bd58e997a8ca506d04ad2539441a104f997eb8dca182319

  • SSDEEP

    786432:qL9UzN7Gu9AxncuKc8YXcXwdV3Lw4z22/Z7ZYMNbiCFqM1/4GXF9BghVTNvl1Ryh:0uxL9LuKaV3L02/ZCMd5X1nghV1Fy7Jr

Score
10/10

Malware Config

Signatures

  • Android Triada payload 1 IoCs
  • Triada family
  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 23 IoCs

Files

  • f2a7c16f932054acc0e8cac223fa39adfba4140a587ef1cc4a52cd7b74fcf172
    .apk android arch:arm64

    com.whatsapp.w4b

    com.whatsapp.Main


Android Permissions

f2a7c16f932054acc0e8cac223fa39adfba4140a587ef1cc4a52cd7b74fcf172

Permissions

com.android.vending.BILLING

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.whatsapp.w4b.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.REORDER_TASKS

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.INTERNET

com.google.android.providers.gsf.permission.READ_GSERVICES

com.google.android.c2dm.permission.RECEIVE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.SCHEDULE_EXACT_ALARM

com.whatsapp.permission.MIGRATION_CONTENT_PROVIDER

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MEDIA_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BROADCAST_STICKY

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.GET_TASKS

android.permission.INSTALL_SHORTCUT

android.permission.MANAGE_ACCOUNTS

android.permission.MANAGE_OWN_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_PHONE_STATE

android.permission.READ_PROFILE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.USE_CREDENTIALS

android.permission.VIBRATE

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_SYNC_SETTINGS