Resubmissions

27/05/2026, 09:56

260527-lycabscy2x

27/05/2026, 07:59

260527-jvqmfabs8z10

27/05/2026, 07:52

260527-jqs7rsa19z10

General

  • Target
    WhatsApp_Plus_Updated_2026.apk
  • Size 94.9MB
  • Sample260527-lycabscy2x
  • SHA256 0da0ff0953010c606d1623d43fb66a8667265127bf17912441b21c993be674c2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: Triada

    Triada is an Android banking trojan first seen in 2016.

  • Android Triada payload 1 IoCs
  • Declares services with permission to bind to the system 4 IoCs
  • Requests dangerous framework permissions 19 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • WhatsApp_Plus_Updated_2026.apk
    .apk 94.9MB

WhatsApp_Plus_Updated_2026.apk

  • SHA256 0da0ff0953010c606d1623d43fb66a8667265127bf17912441b21c993be674c2
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Android Triada payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
b2c98df879769cb05419dd5b4ff128dc20ac35b665c80c116b8b5bad56269573
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Common Name,OU=Organizational Unit,O=Organization,L=Locality,ST=State,C=Country
app.storageu.payloadys

Android Permissions

WhatsApp_Plus_Updated_2026.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.NEARBY_WIFI_DEVICES

android.permission.CAMERA

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.VIBRATE

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

com.android.vending.BILLING

android.permission.FOREGROUND_SERVICE_MICROPHONE

android.permission.FOREGROUND_SERVICE_CAMERA

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_PHONE_CALL

android.permission.SCHEDULE_EXACT_ALARM

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.DETECT_SCREEN_CAPTURE

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_ADVERTISE

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_OWN_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_MEDIA_LOCATION

android.permission.BROADCAST_STICKY

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.GET_TASKS

android.permission.INSTALL_SHORTCUT

android.permission.MANAGE_ACCOUNTS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_BASIC_PHONE_STATE

android.permission.READ_PROFILE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.USE_CREDENTIALS

android.permission.WAKE_LOCK

android.permission.WRITE_CONTACTS

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES