General
- Target WhatsApp Installer.exe
- Size 1.4MB
- Sample260716-ynmdrscw5k
- SHA256 7fd7dbfb45be96e439e3f454dcafde3af72faa3cc8c4cb3d772dbd2d4a2adefd
- MD5 afc10051f5f09409776f45b4a88db53c
- SHA1 f9a589329605848339c2898cee04700cc5fba596
- SHA512 eab6c39acc9a9d4806e663bb5ed9cc514e7a9d67e3ecffd737817f311d6798337a1e7a11f7d214be9eae00d6078c9cf8eb06afd04fc8996032568fd17d526394
- SSDEEP 24576:jP4Ovf+2DR7BWYpqqo44usW4z3VBW6pIp0:TvD7VlxsWA3BD
- TLSH T126654B8127F80439F6BB0F79BD7A18210A35BC39A912E69E064D552D18F2F16CDE2737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
WhatsApp Installer.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
WhatsApp Installer.exe
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target WhatsApp Installer.exe
- Size 1.4MB
- SHA256 7fd7dbfb45be96e439e3f454dcafde3af72faa3cc8c4cb3d772dbd2d4a2adefd
- MD5 afc10051f5f09409776f45b4a88db53c
- SHA1 f9a589329605848339c2898cee04700cc5fba596
- SHA512 eab6c39acc9a9d4806e663bb5ed9cc514e7a9d67e3ecffd737817f311d6798337a1e7a11f7d214be9eae00d6078c9cf8eb06afd04fc8996032568fd17d526394
- SSDEEP 24576:jP4Ovf+2DR7BWYpqqo44usW4z3VBW6pIp0:TvD7VlxsWA3BD
- TLSH T126654B8127F80439F6BB0F79BD7A18210A35BC39A912E69E064D552D18F2F16CDE2737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.