General
- Target WhatsApp.apk
- Size 12.2MB
- Sample260629-wxt4vsby9y
- SHA256 7754ae38cd6a7446a58d0b9dd0269e98effc1faf6917edf38122db9d9fb30140
- MD5 8433a50a1293c8b1f42d6724e5227dcb
- SHA1 81d451c213332cbf2899c687f75433b9ad515f85
- SHA512 4c9171292982719cea59a5ac92f9b1997a7bcc6d3284e0cb80c283e22a5a1a368e8bd39967ff746d310b757072caf327f83d74473edaac15b0306c13b6135335
- SSDEEP 196608:oXybI2P69Ty0hNu36Az0PJqC9q2bolbNfGuyP3heo0kr7HQE2xKg75uEsVDQqAEN:oXybCV7hNhS0Pvl4Bz0v0K14KYKVMw
- TLSH T1A8D63342FAED3936C1B6D33902E41531C5B5DC2093ABAA49344CBBB957BBEE44B483C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
WhatsApp.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
WhatsApp.apk
Resource
android-x64-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
WhatsApp.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target WhatsApp.apk
- Size 12.2MB
- SHA256 7754ae38cd6a7446a58d0b9dd0269e98effc1faf6917edf38122db9d9fb30140
- MD5 8433a50a1293c8b1f42d6724e5227dcb
- SHA1 81d451c213332cbf2899c687f75433b9ad515f85
- SHA512 4c9171292982719cea59a5ac92f9b1997a7bcc6d3284e0cb80c283e22a5a1a368e8bd39967ff746d310b757072caf327f83d74473edaac15b0306c13b6135335
- SSDEEP 196608:oXybI2P69Ty0hNu36Az0PJqC9q2bolbNfGuyP3heo0kr7HQE2xKg75uEsVDQqAEN:oXybCV7hNhS0Pvl4Bz0v0K14KYKVMw
- TLSH T1A8D63342FAED3936C1B6D33902E41531C5B5DC2093ABAA49344CBBB957BBEE44B483C5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the mobile country code (MCC)
-
Checks the presence of a debugger