General

  • Target

    GBWhatsApp_Pro_v17.57-gbup.net.apk

  • Size

    70.3MB

  • MD5

    b88758f0c475c3650a401946704b429e

  • SHA1

    b9582b8abedbbc72869b3f6c045e48319a11b0a4

  • SHA256

    5076949906171a24f0e5d886526437f4cd0d793d4e85086ed545aadfc38288e5

  • SHA512

    da1f5ea9417f9cb1ffc6d99ca0a64e05712140040bddca3c2f2b11967a8bcc8220ddc71cff348bd221bde97d025bbfcc86aed8a220872e9e9e5c1be6ea41c31c

  • SSDEEP

    1572864:r8UoM4JUteDelCAsD9zOUehYkM+U8mR3+iJ:rfoIteDelC59H3kRqRpJ

Score
10/10

Malware Config

Signatures

  • Android Triada payload 2 IoCs
  • Triada family
  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 22 IoCs

Files

  • GBWhatsApp_Pro_v17.57-gbup.net.apk
    .apk android arch:arm64 arch:arm

    com.gbwhatsapp

    com.gbwhatsapp.settings.SettingsNotifications


Android Permissions

GBWhatsApp_Pro_v17.57-gbup.net.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.RECEIVE_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.NEARBY_WIFI_DEVICES

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.MANAGE_OWN_CALLS

android.permission.BLUETOOTH

android.permission.BROADCAST_STICKY

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.GET_TASKS

android.permission.INSTALL_SHORTCUT

android.permission.MANAGE_ACCOUNTS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_PROFILE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SCHEDULE_EXACT_ALARM

android.permission.SEND_SMS

android.permission.USE_CREDENTIALS

android.permission.WAKE_LOCK

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_SYNC_SETTINGS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.USE_FULL_SCREEN_INTENT

com.android.launcher.permission.INSTALL_SHORTCUT