Resubmissions
05/03/2026, 19:15
260305-xyamaaax3z05/03/2026, 19:10
260305-xvr26aax2v1003/03/2026, 14:05
260303-rd357sat3x10Analysis
- max time kernel
146s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260129-en - resource tags
- submitted
03/03/2026, 14:05
General
- Target BotWhatsAppAssistant.apk
- Size 197KB
- Sample260303-rd357sat3x
- SHA256 d77d9242bbf4594277b96ed9af5f2fa721b82c578d0e0c640f42928ec8002257
Score
8/10
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 2 IoCs
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about active data network 1 TTPs 1 IoCs
- Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.playaddonservice1⤵
- Checks if the Android device is rooted.
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
-
getprop ro.product.cpu.abi2⤵
-
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
ContextData.xml
Alvin2.xml
Alvin2.xml
Alvin2.xml