General

  • Target
    whatsapp-messenger-2-26-21-73.apk
  • Size 133.3MB
  • Sample260601-baf89sc12n
  • SHA256 77c55952b1453d562a161ba86d43c9ac9eac7b8f0bf31f077a9a8073585111eb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      whatsapp-messenger-2-26-21-73.apk
    • Size 133.3MB
    • SHA256 77c55952b1453d562a161ba86d43c9ac9eac7b8f0bf31f077a9a8073585111eb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Patched UPX-packed file

      Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

    • Acquires the wake lock

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Queries information about active data network

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Mobile v16

Tasks