triada | 529db9024ac270087cef13924eb2f4a0a47e9f10a8bcb62c77c84d7b9ab776fd | Triage

Sharing

General

Target

GBWhatsApp_v37.00_Developer_Abu_Arab.apk
Size

82.6MB
Sample

240809-h8n54axgln
MD5

9e03bef6b8add72146097db67439c300
SHA1

662ac27678390b72e20aa9c8861e5103371b1aa7
SHA256

529db9024ac270087cef13924eb2f4a0a47e9f10a8bcb62c77c84d7b9ab776fd
SHA512

643c9360e99e9a2ea56161d0a0af458d74d53246fd102be989d7e063d1b91d95eb80a1d9408ab4dfb94949c784a031443b230108bc10e94a2972534641393f21
SSDEEP

1572864:Stm6F5vMmOTRS8FuPbrT9lQHMejaYVPapJHVrUVxDtH:SVFJqyPbrT2MQa4QVrUVz

Score

10^/10

triada android discovery evasion persistence upx

Malware Config

Targets

- Target
  
  GBWhatsApp_v37.00_Developer_Abu_Arab.apk
- Size
  
  82.6MB
- MD5
  
  9e03bef6b8add72146097db67439c300
- SHA1
  
  662ac27678390b72e20aa9c8861e5103371b1aa7
- SHA256
  
  529db9024ac270087cef13924eb2f4a0a47e9f10a8bcb62c77c84d7b9ab776fd
- SHA512
  
  643c9360e99e9a2ea56161d0a0af458d74d53246fd102be989d7e063d1b91d95eb80a1d9408ab4dfb94949c784a031443b230108bc10e94a2972534641393f21
- SSDEEP
  
  1572864:Stm6F5vMmOTRS8FuPbrT9lQHMejaYVPapJHVrUVxDtH:SVFJqyPbrT2MQa4QVrUVz
Score

8^/10

discovery evasion persistence upx
- Patched UPX-packed file
  Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Acquires the wake lock
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasion

behavioral3

discoveryevasion

behavioral4

discoverypersistenceupx