General

  • Target

    com.whatsapp2plus-39.00.apk

  • Size

    85.3MB

  • MD5

    cfeb62a7a0106ceecafe9fbbe13fa444

  • SHA1

    690b71675b9331f35a0bc88d50e28e03354069e0

  • SHA256

    087988a6259e8fd826f8cd54ea22f12c74037eb00b1ffcfe9e8473def4fd06d9

  • SHA512

    180db60f94cad1e0707ea593a4547bfa89c43a4d5eed6c2541fab1efa7185341cf2e9712c8844b1e4f1d6bbbdadf4ff373c55997a0d5d8cd435e5b1f51c655e1

  • SSDEEP

    1572864:+ZCEKEu51mcWvgekZ+VwZuKh2s08xGP52hG7d1dDR5K4oRjxXB:+1O1mLoeDGuKss08xjhGB/DRgxXB

Score
10/10

Malware Config

Signatures

  • Android Triada payload 1 IoCs
  • Triada family
  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 26 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • com.whatsapp2plus-39.00.apk
    .apk android arch:arm64 arch:arm

    com.WhatsApp2Plus

    androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity


Android Permissions

com.whatsapp2plus-39.00.apk

Permissions

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.WhatsApp2Plus.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.REORDER_TASKS

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.INTERNET

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.VIBRATE

android.permission.RECEIVE_SMS

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MEDIA_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.GET_TASKS

android.permission.INSTALL_SHORTCUT

android.permission.MANAGE_ACCOUNTS

android.permission.MANAGE_OWN_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_PROFILE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.RECORD_AUDIO

android.permission.SCHEDULE_EXACT_ALARM

android.permission.SEND_SMS

android.permission.USE_CREDENTIALS

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES