General

  • Target

    ae0dd81cee1a2adc28f044d26ebe03914f82b422df334e977698b6e380c4f0af.apk

  • Size

    88.6MB

  • MD5

    7f1e2ad6847cee1d9dd354a375ccec54

  • SHA1

    99c47d1d30be557ae259a8416ac3ba99ef1bf170

  • SHA256

    ae0dd81cee1a2adc28f044d26ebe03914f82b422df334e977698b6e380c4f0af

  • SHA512

    b5ac0ef523932d9ab642fc1815ea8958fa1476fca054df9d2f6272bd6e38323bb80b56929c2d52fd7ab784ca99bf448bfa80e43846197e287b2aa7874e07e877

  • SSDEEP

    1572864:tgi+fcwomAgRnK4lVXueepw2s08xGPq7d1dDR5K4oRjxVuKY3Tg:t1+fH7h3VzepXs08x5B/DRgxVuKcg

Score
10/10

Malware Config

Signatures

  • Android Triada payload 1 IoCs
  • Triada family
  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 26 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • ae0dd81cee1a2adc28f044d26ebe03914f82b422df334e977698b6e380c4f0af.apk
    .apk android arch:arm64 arch:arm

    com.WhatsApp2Plus

    androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity


Android Permissions

ae0dd81cee1a2adc28f044d26ebe03914f82b422df334e977698b6e380c4f0af.apk

Permissions

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.WhatsApp2Plus.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.REORDER_TASKS

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.INTERNET

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.VIBRATE

android.permission.RECEIVE_SMS

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MEDIA_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.GET_TASKS

android.permission.INSTALL_SHORTCUT

android.permission.MANAGE_ACCOUNTS

android.permission.MANAGE_OWN_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_PROFILE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.RECORD_AUDIO

android.permission.SCHEDULE_EXACT_ALARM

android.permission.SEND_SMS

android.permission.USE_CREDENTIALS

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES