triada | 529db9024ac270087cef13924eb2f4a0a47e9f10a8bcb62c77c84d7b9ab776fd | Triage

Sharing

General

Target

GBWhatsApp_v37.00_Developer_Abu_Arab.apk
Size

82.6MB
Sample

240910-vh5rdawbpb
MD5

9e03bef6b8add72146097db67439c300
SHA1

662ac27678390b72e20aa9c8861e5103371b1aa7
SHA256

529db9024ac270087cef13924eb2f4a0a47e9f10a8bcb62c77c84d7b9ab776fd
SHA512

643c9360e99e9a2ea56161d0a0af458d74d53246fd102be989d7e063d1b91d95eb80a1d9408ab4dfb94949c784a031443b230108bc10e94a2972534641393f21
SSDEEP

1572864:Stm6F5vMmOTRS8FuPbrT9lQHMejaYVPapJHVrUVxDtH:SVFJqyPbrT2MQa4QVrUVz

Score

10^/10

triada android discovery persistence upx

Malware Config

Targets

- Target
  
  GBWhatsApp_v37.00_Developer_Abu_Arab.apk
- Size
  
  82.6MB
- MD5
  
  9e03bef6b8add72146097db67439c300
- SHA1
  
  662ac27678390b72e20aa9c8861e5103371b1aa7
- SHA256
  
  529db9024ac270087cef13924eb2f4a0a47e9f10a8bcb62c77c84d7b9ab776fd
- SHA512
  
  643c9360e99e9a2ea56161d0a0af458d74d53246fd102be989d7e063d1b91d95eb80a1d9408ab4dfb94949c784a031443b230108bc10e94a2972534641393f21
- SSDEEP
  
  1572864:Stm6F5vMmOTRS8FuPbrT9lQHMejaYVPapJHVrUVxDtH:SVFJqyPbrT2MQa4QVrUVz
Score

8^/10

discovery persistence upx
- Patched UPX-packed file
  Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Acquires the wake lock
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx