General
- Target WhatsApp%20Installer.exe
- Size 1.4MB
- Sample260722-ar6ptaha28
- SHA256 7368b5d12ce3320363d246d8355126d9f22e1af0b139d96178e212dbd6e593db
- MD5 cfc02c5b31aab5abdb87a31b915f6ead
- SHA1 a0da51732c0ea975d7aa887d20149c730b53a39b
- SHA512 d396c77b9011a0c9d4f07aff3f86a1d4577a810bc2c5dab2b9cbf11b6b94ba094e243dc18f90ab3320c7b4fbfdf6ffaff9c7724b00c19442a66096f13954346e
- SSDEEP 24576:l8DzUieCR+dJ+2DR7BWYpajo44lsW4z3dBWapYxr:l8DzUieCR+dZ7VsCsWA/h8
- TLSH T104655B8137FC1435F6BB0B79BD7A18224A35BC3DA912E69E0549152D18F2B16CDE233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
WhatsApp%20Installer.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
WhatsApp%20Installer.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target WhatsApp%20Installer.exe
- Size 1.4MB
- SHA256 7368b5d12ce3320363d246d8355126d9f22e1af0b139d96178e212dbd6e593db
- MD5 cfc02c5b31aab5abdb87a31b915f6ead
- SHA1 a0da51732c0ea975d7aa887d20149c730b53a39b
- SHA512 d396c77b9011a0c9d4f07aff3f86a1d4577a810bc2c5dab2b9cbf11b6b94ba094e243dc18f90ab3320c7b4fbfdf6ffaff9c7724b00c19442a66096f13954346e
- SSDEEP 24576:l8DzUieCR+dJ+2DR7BWYpajo44lsW4z3dBWapYxr:l8DzUieCR+dZ7VsCsWA/h8
- TLSH T104655B8137FC1435F6BB0B79BD7A18224A35BC3DA912E69E0549152D18F2B16CDE233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.