General

  • Target

    GBWhatsApp-202505192157-R50755853.apk

  • Size

    83.2MB

  • MD5

    c234c225fd240323b299dacd34f69fa8

  • SHA1

    67aee926b6eab5924328ce5722ca8a15199400f5

  • SHA256

    4bf114ce1eb36ad5e430e7e78e49bf21e8386f71e56bdaac0630723f44358d47

  • SHA512

    4e1e13e6bb8a9e73483e48409c68de62adc1cdde95ae744e2d9e2e8206bf71898535096777d68b7c347431af1723966591435111e820aa147a8e34a0ec3a9b43

  • SSDEEP

    1572864:7uKeqFkm84MvMFuQ6ZaFnSQ+eVycRKd2x+2hbNjjmap:7uKeq/85MAZZ0SOVycRL+2hbN39p

Score
10/10

Malware Config

Signatures

  • Android Triada payload 1 IoCs
  • Triada family
  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 19 IoCs

Files

  • GBWhatsApp-202505192157-R50755853.apk
    .apk android arch:arm64 arch:arm

    com.postt.asyncta

    com.whatsapp.Main


Android Permissions

GBWhatsApp-202505192157-R50755853.apk

Permissions

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.postt.asyncta_com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.INTERNET

com.postt.asyncta_com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.POST_NOTIFICATIONS

com.postt.asyncta_com.google.android.c2dm.permission.RECEIVE

android.permission.READ_PHONE_NUMBERS

android.permission.VIBRATE

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_MEDIA_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.GET_TASKS

android.permission.INSTALL_SHORTCUT

android.permission.MANAGE_ACCOUNTS

android.permission.MANAGE_OWN_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_PROFILE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.RECORD_AUDIO

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_CREDENTIALS

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.WRITE_SYNC_SETTINGS

android.permission.USE_FULL_SCREEN_INTENT

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.postt.asyncta_com.google.android.gms.permission.AD_ID

com.postt.asyncta_com.sec.android.provider.badge.permission.READ

com.postt.asyncta_com.sec.android.provider.badge.permission.WRITE