triada | b55863753f676d99ddc897acb1a0e715ba18834d87299de9beac0eeb11847a2f | Triage

Sharing

General

Target

WhatsApp.apk
Size

96.9MB
Sample

240901-n78q1azenj
MD5

3b07900d25e55d03f6a630858b24b0dc
SHA1

adc8b3102b577097dbf56c324d857b61a63464ca
SHA256

b55863753f676d99ddc897acb1a0e715ba18834d87299de9beac0eeb11847a2f
SHA512

8550ced79a62a5c7ae8b47db3b6e6e1db90133bbc971843e32115f461c329e0dcc05c9590974e4f308a51c45b70d0874c5f2ce81bbe0913df1528862e166e2aa
SSDEEP

3145728:FSSsHNvcyEuKAXBXq/Co0Lj8ip/l8PdR5kBGt:OpxXm0Lj8W6dowt

Score

10^/10

triada android discovery execution impact persistence upx

Malware Config

Targets

- Target
  
  WhatsApp.apk
- Size
  
  96.9MB
- MD5
  
  3b07900d25e55d03f6a630858b24b0dc
- SHA1
  
  adc8b3102b577097dbf56c324d857b61a63464ca
- SHA256
  
  b55863753f676d99ddc897acb1a0e715ba18834d87299de9beac0eeb11847a2f
- SHA512
  
  8550ced79a62a5c7ae8b47db3b6e6e1db90133bbc971843e32115f461c329e0dcc05c9590974e4f308a51c45b70d0874c5f2ce81bbe0913df1528862e166e2aa
- SSDEEP
  
  3145728:FSSsHNvcyEuKAXBXq/Co0Lj8ip/l8PdR5kBGt:OpxXm0Lj8W6dowt
Score

8^/10

discovery execution impact persistence upx
- Patched UPX-packed file
  Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Acquires the wake lock
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

Persistence

Event Triggered Execution

Broadcast Receivers

Scheduled Task/Job

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

behavioral2

discoveryexecutionimpactpersistenceupx