General

  • Target

    GBWhatsApp_v37.00_Developer_Abu_Arab.apk

  • Size

    82.6MB

  • Sample

    240910-t6rnzstcnl

  • MD5

    9e03bef6b8add72146097db67439c300

  • SHA1

    662ac27678390b72e20aa9c8861e5103371b1aa7

  • SHA256

    529db9024ac270087cef13924eb2f4a0a47e9f10a8bcb62c77c84d7b9ab776fd

  • SHA512

    643c9360e99e9a2ea56161d0a0af458d74d53246fd102be989d7e063d1b91d95eb80a1d9408ab4dfb94949c784a031443b230108bc10e94a2972534641393f21

  • SSDEEP

    1572864:Stm6F5vMmOTRS8FuPbrT9lQHMejaYVPapJHVrUVxDtH:SVFJqyPbrT2MQa4QVrUVz

Malware Config

Targets

    • Target

      GBWhatsApp_v37.00_Developer_Abu_Arab.apk

    • Size

      82.6MB

    • MD5

      9e03bef6b8add72146097db67439c300

    • SHA1

      662ac27678390b72e20aa9c8861e5103371b1aa7

    • SHA256

      529db9024ac270087cef13924eb2f4a0a47e9f10a8bcb62c77c84d7b9ab776fd

    • SHA512

      643c9360e99e9a2ea56161d0a0af458d74d53246fd102be989d7e063d1b91d95eb80a1d9408ab4dfb94949c784a031443b230108bc10e94a2972534641393f21

    • SSDEEP

      1572864:Stm6F5vMmOTRS8FuPbrT9lQHMejaYVPapJHVrUVxDtH:SVFJqyPbrT2MQa4QVrUVz

    • Patched UPX-packed file

      Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Acquires the wake lock

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks