General

  • Target

    WhatsApp.apk

  • Size

    104.5MB

  • MD5

    b64bf3de446ffa633b8b13d5af319615

  • SHA1

    ade81fd4a0ffec8eb61381b889aa637a06fdc946

  • SHA256

    a27fb8da94763c29b8c954c308381ecd762ea929b5d551402b920b837daf175b

  • SHA512

    9a45f1ca647f8ed23aecd3ebf6bed0c02445d5a122c22b112c0640d9f6c2adc9456404651533f181fbced0c8d2694b4a970e45c7c1695eb5365ec5298018d86c

  • SSDEEP

    1572864:10Mf943lLMfTD+tjHVruKewp/Hz52M+P9vMw6XyjKigtjV9Q4Ao:K89Ot5uKl/T5PuBMjyjKigpVpAo

Score
10/10

Malware Config

Signatures

  • Android Triada payload 1 IoCs
  • Triada family
  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 25 IoCs

Files

  • WhatsApp.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.whatsapp

    com.whatsapp.Main


Android Permissions

WhatsApp.apk

Permissions

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.whatsapp.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.INTERNET

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.VIBRATE

android.permission.RECEIVE_SMS

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MEDIA_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.GET_TASKS

android.permission.INSTALL_SHORTCUT

android.permission.MANAGE_ACCOUNTS

android.permission.MANAGE_OWN_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_PROFILE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.RECORD_AUDIO

android.permission.SCHEDULE_EXACT_ALARM

android.permission.SEND_SMS

android.permission.USE_CREDENTIALS

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.WRITE_SYNC_SETTINGS