General

  • Target

    [COM.FM]DELTA_v6.4.4.apk

  • Size

    86.3MB

  • MD5

    cdc3ab00fbed86998e3128cc850abdaf

  • SHA1

    11d2b1fb9ce179fa0807fd25aab9d0373daa75a0

  • SHA256

    d7a8d9ae136944eadc48a1aadd1576a36a87ecc12e1396915f84bfe2a0ad026d

  • SHA512

    b9216a46c6b529f6420f2c503ef280e344902836424007dd4cdabb81c8e818ae877bf6ba8ded8016922e0f9c4bb1bbf0ef3c14c87e09f63d14242b0ddc02a384

  • SSDEEP

    1572864:xRbbW32DxFpCYuzrzusQ9KJ0xXJuKuLCPf+f:/yGDxF0fRDJCXJuKiKfI

Score
10/10

Malware Config

Signatures

  • Android Triada payload 1 IoCs
  • Triada family
  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 26 IoCs

Files

  • [COM.FM]DELTA_v6.4.4.apk
    .apk android arch:arm64 arch:arm

    com.fmwhatsapp

    com.fmwhatsapp.Main


Android Permissions

[COM.FM]DELTA_v6.4.4.apk

Permissions

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.fmwhatsapp.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.REORDER_TASKS

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.INTERNET

com.google.android.providers.gsf.permission.READ_GSERVICES

com.google.android.c2dm.permission.RECEIVE

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.VIBRATE

android.permission.RECEIVE_SMS

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MEDIA_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.GET_TASKS

android.permission.INSTALL_SHORTCUT

android.permission.MANAGE_ACCOUNTS

android.permission.MANAGE_OWN_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_PROFILE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.RECORD_AUDIO

android.permission.SCHEDULE_EXACT_ALARM

android.permission.SEND_SMS

android.permission.USE_CREDENTIALS

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED