General
- Target WhatsApp Installer.exe
- Size 1.4MB
- Sample260714-gvmvfahv3w
- SHA256 de460315a2b42cb377aa7bc7ce402829139a419081358a10e7c61550d1526717
- MD5 ed403bc4855e4ef0f07665f92f7ba991
- SHA1 69696dbc467acc3bcbaab245e23375d7216006a5
- SHA512 1a678f250bc73ac1d4f05a2acedddb9b9dabae407205f83747ca6098565d17b1195af2ee4ee7e0645ef68f8d818391eaa1e43bfc92f40acf5653395d2bc36cd3
- SSDEEP 24576:yjFohds+2DR7BWYpSwo44AsW4z3EBWapTe:yaHm7VjLsWAUha
- TLSH T13C655B8127F80435F7BB0B79BD7A18220A35BC396912E65E068D552D18F2F56CDE233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
WhatsApp Installer.exe
Resource
win10v2004-20260513-en
17 signatures
900 seconds
Behavioral task
behavioral2
Sample
WhatsApp Installer.exe
Resource
win11ltsc2024-20260709-en
13 signatures
900 seconds
Malware Config
Targets
-
- Target WhatsApp Installer.exe
- Size 1.4MB
- SHA256 de460315a2b42cb377aa7bc7ce402829139a419081358a10e7c61550d1526717
- MD5 ed403bc4855e4ef0f07665f92f7ba991
- SHA1 69696dbc467acc3bcbaab245e23375d7216006a5
- SHA512 1a678f250bc73ac1d4f05a2acedddb9b9dabae407205f83747ca6098565d17b1195af2ee4ee7e0645ef68f8d818391eaa1e43bfc92f40acf5653395d2bc36cd3
- SSDEEP 24576:yjFohds+2DR7BWYpSwo44AsW4z3EBWapTe:yaHm7VjLsWAUha
- TLSH T13C655B8127F80435F7BB0B79BD7A18220A35BC396912E65E068D552D18F2F56CDE233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.