General
- Target WhatsApp.exe
- Size 1.2MB
- Sample260705-ameersa15r
- SHA256 ae9c1097bf5ace7b14f02cd47a2e347293dfdc74f054cb1e84017a633f5ad416
- MD5 af75d4950631c0f0c59fae9c79be2be3
- SHA1 ab469e0476578ada512ba64328f363655071c148
- SHA512 29d0ad4798ac020c2aeb7796d047bb8f5838925703c22c70bbfba3103cf30e16e22d1dade125f5557dc30fefef152b6f108341943a1591fa9a83e2545436f1bf
- SSDEEP 12288:1LjfASoPV8e+Tac0RDffXJjyYp25oNHSy5viczPsWGJaamIaq7pJ+V3ffXJjy8po:dIPVH+2DR7BWYp25o44PsW4zEvBW8pFe
- TLSH T1B9555B8127FC0939F6B70B79BD7A18214A36BC3D5542E69E094D192D18F2F168DE233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
WhatsApp.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
WhatsApp.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target WhatsApp.exe
- Size 1.2MB
- SHA256 ae9c1097bf5ace7b14f02cd47a2e347293dfdc74f054cb1e84017a633f5ad416
- MD5 af75d4950631c0f0c59fae9c79be2be3
- SHA1 ab469e0476578ada512ba64328f363655071c148
- SHA512 29d0ad4798ac020c2aeb7796d047bb8f5838925703c22c70bbfba3103cf30e16e22d1dade125f5557dc30fefef152b6f108341943a1591fa9a83e2545436f1bf
- SSDEEP 12288:1LjfASoPV8e+Tac0RDffXJjyYp25oNHSy5viczPsWGJaamIaq7pJ+V3ffXJjy8po:dIPVH+2DR7BWYp25o44PsW4zEvBW8pFe
- TLSH T1B9555B8127FC0939F6B70B79BD7A18214A36BC3D5542E69E094D192D18F2F168DE233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.