General
- Target whatsapp-messenger-2-26-21-73.apk
- Size 133.3MB
- Sample260601-baf89sc12n
- SHA256 77c55952b1453d562a161ba86d43c9ac9eac7b8f0bf31f077a9a8073585111eb
- MD5 cf1186f66d3b3a198e95f8c208450744
- SHA1 36c9c43bd62788fab0904c30bbe87e2d80d145b6
- SHA512 762e81eb7623ba3e8952b363eb9821ecafa0af714b889f79da1d88e01e85ff5f9c0ddccb30fc5795a086019fdcf13d95e233f637f96ee15847cf4843d9d2f22e
- SSDEEP 3145728:Ai4eBnHwqty58hKJDQbJZh4ep05RNgEX2R7OqoG9Ul:AGc8hKqbfue+5R68qW
- TLSH T18C6833ABF3689D2EDCB215725C6F173152154E204B12AB5B3918331E3877BEA4F4ABC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
whatsapp-messenger-2-26-21-73.apk
Resource
android-35-x64-arm64-20260325-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target whatsapp-messenger-2-26-21-73.apk
- Size 133.3MB
- SHA256 77c55952b1453d562a161ba86d43c9ac9eac7b8f0bf31f077a9a8073585111eb
- MD5 cf1186f66d3b3a198e95f8c208450744
- SHA1 36c9c43bd62788fab0904c30bbe87e2d80d145b6
- SHA512 762e81eb7623ba3e8952b363eb9821ecafa0af714b889f79da1d88e01e85ff5f9c0ddccb30fc5795a086019fdcf13d95e233f637f96ee15847cf4843d9d2f22e
- SSDEEP 3145728:Ai4eBnHwqty58hKJDQbJZh4ep05RNgEX2R7OqoG9Ul:AGc8hKqbfue+5R68qW
- TLSH T18C6833ABF3689D2EDCB215725C6F173152154E204B12AB5B3918331E3877BEA4F4ABC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Patched UPX-packed file
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
-
Acquires the wake lock
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.