General
- Target WhatsApp Installer.exe
- Size 1.4MB
- Sample260803-wyncpshl31
- SHA256 07c0c59029938ddccc80278f3583c8bac892375a8d07d4ccc02a741a8af56526
- MD5 1172947304a0f9c51f16411bfd25bbf8
- SHA1 012e7764e56c646d27aa238a33f7f999c9c4deb7
- SHA512 23f225e8bedb9c5ea96f8419a0234e6e80dc67436a76443ba070271d05327303248c3e0a87549e1b45574de40f035fee3480b9cea2c174bd385e700b3e961474
- SSDEEP 24576:cLdns1GG+2DR7BWYpCYo44AsW4z3ZBWapKi:8s137V3DsWAjhV
- TLSH T141656C8027FC1539F7B70B79BD7A18214B36BC39A952E6AE0549152C08F2B56CDE2337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
WhatsApp Installer.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
WhatsApp Installer.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target WhatsApp Installer.exe
- Size 1.4MB
- SHA256 07c0c59029938ddccc80278f3583c8bac892375a8d07d4ccc02a741a8af56526
- MD5 1172947304a0f9c51f16411bfd25bbf8
- SHA1 012e7764e56c646d27aa238a33f7f999c9c4deb7
- SHA512 23f225e8bedb9c5ea96f8419a0234e6e80dc67436a76443ba070271d05327303248c3e0a87549e1b45574de40f035fee3480b9cea2c174bd385e700b3e961474
- SSDEEP 24576:cLdns1GG+2DR7BWYpCYo44AsW4z3ZBWapKi:8s137V3DsWAjhV
- TLSH T141656C8027FC1539F7B70B79BD7A18214B36BC39A952E6AE0549152C08F2B56CDE2337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.