Resubmissions
12-02-2024 13:53
240212-q69b9afc5s 1012-02-2024 13:52
240212-q6r3zafc3w 1012-02-2024 13:34
240212-qt47rsge54 10Analysis
-
max time kernel
156s -
max time network
318s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
12-02-2024 13:53
Behavioral task
behavioral1
Sample
GBWhatsApp_v17.60.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral2
Sample
GBWhatsApp_v17.60.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral3
Sample
GBWhatsApp_v17.60.apk
Resource
android-33-x64-arm64-20231215-en
Behavioral task
behavioral4
Sample
GBWhatsApp_v17.60.apk
Resource
android-x86-arm-20231215-en
General
-
Target
GBWhatsApp_v17.60.apk
-
Size
75.6MB
-
MD5
d73fa603bb7dfbd53f2ec4d05617b9e0
-
SHA1
86f18b9d0ce32f3ff1c608ae4317329e4da44e1d
-
SHA256
3e596694e6c74a1991490f4bde5e2404fc1b6d57af8499b7fc67adb44e17394e
-
SHA512
4e004ec348e58f8229d1e3b5d2137b64dc09234d355425d8fa5544e67a4d4d80d3e098c2ba7bd5659e443050bae7a404e1a35a2341cd6809b5e83e1078d8bbc2
-
SSDEEP
1572864:2R4YowDIMNvpPjEYr3V1c4sQ0MmDKPwpJ4qHSXKTHcvmM0hV:26YoEXEqFR0rDG0THSmZV
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
Processes:
com.gbwhatsappdescription ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.gbwhatsapp -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes:
com.gbwhatsappdescription ioc Process Framework API call javax.crypto.Cipher.doFinal com.gbwhatsapp
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD57f0d383f22f3e485bea0c623da9ddd70
SHA11b189b47a2fff4e9e6f89428dc6b54cf0bdc035d
SHA256a61452341a0a11d61904fa43780316091e69c9152e1258f3ed220ae3fb3c2c58
SHA51215038d2a0cd18eb62b314a3350e608d286213ddbb053b85e90ba267427f0c2c354d56fc6ea713e29eb6a3a638bb88f1bb768f77c62865bd7b6475abf16702b6e
-
Filesize
5KB
MD5eb94f6015e18052169dc5d96ff886bea
SHA1ebefc4ad270274753ab20eb67309048227a13002
SHA256f7d6d999d30cb02f1e00540db123ee4760891f8b7fa2fcbc9fc1bd42473948d3
SHA512020e2b3bd956f3e5e897f85d5dd6689bee5962db419920e43f43fcb6ff7dd74c0df9a441886cb1b4ecfa8ea70d045b9ff588624e8c1a60dd5eb91a4830c11990
-
Filesize
2KB
MD5ce57f4a8a7f6f2afb35c86dbb8f1f7dd
SHA19ead9440c73f6cceb0175e15dac473c9fe56155f
SHA256b541695affda1e92cac2e9bf5993adc6ebaf1d17055b4afd28261e4baddf155d
SHA512eeae2160ed0b6616e4ead8e417890c537f4aeda4a082b60a3b0296b678c1bb8a7a6dbec7768e6c32e3b4fe3b253509af84f89681348160995bd63e81f3833563
-
Filesize
6KB
MD59a0eccd09a93c4c552b0acd22c8d539e
SHA1e4e3f5f2dfe17fa710f0dba4d68e161389ee172c
SHA256203055c62be2f555d851b704154bd15cbd5bb0e5e03b57cb8ccb660a2051e68f
SHA5128468e870236b4e7964cf092a682cb787715223efc6bdfc27c6322fc103ca228a5e695f915d0b89529ab5014b6dd75bfdc1e99bad411471130c0ef6e5c8bc7f63
-
Filesize
6KB
MD5531bf200db3d162acfb510cde1e08bcf
SHA13955e0aa357e718115b71ef37689e299b8c53268
SHA256ab6ca08e575bc7bacd96303fc021d8a1d666fafd52673876b776a5869f7f2593
SHA512b1d5e429446c44aceb939ab512e2cfe06effb0547413633eac383e073b4816a8257fa200418607dfa4417ee81a04908adada5fe1c8759d605e9e9235e4d1eaa6
-
Filesize
3KB
MD573a86bf812966a7c6ad0be9e8bcc1a58
SHA10ce4bd31324d287ecd21d138063c9510dda452c8
SHA256781e06e41a1020793c3c18a337443f367b544bd3b37adffaf733bf0ac80af128
SHA512a61fe84fdd6e74aedd03e25c5f5af5fe628eaed4bab6ac226c1c65d142c3d23407f710f7ae31ed7d32db53d30fd2d5d2a7fc5910403eda15616bf13ac2012a63
-
Filesize
12KB
MD507f614c110a5fa6d30a86e1413bfaa31
SHA1386f8e5b8ebc34929cd2ae0ca0e33c24d7ef3e73
SHA256cacbe42ed53fcdda81a24fb9999780bfdfcebb3460fb256557a2c4e3586cbfa0
SHA512f4dbab79f895c3643ff41609e616543fdc2ca4de3c39383c419c950f3fe970496824345748a155af0300bfc1bd7da98ade475a1a19fc4cacbe9b093557d1e721
-
Filesize
16KB
MD552cb2647bfebe6f5156cec38a0c021b1
SHA13b39c5f4e1547cd3d9d8123f941f2dd59f5b98ff
SHA2566e22650a57fbea056247020289f741adc5301fbc87b798bc26e96c78e90f8de6
SHA512908c99f7262e859fd2401453adf1b919f6761f964c66853620c125f3682a9553c897af0574f16e1b1542b37912f96d6a986c7d3f8b839aa862d3f9cc7fb78897
-
Filesize
17KB
MD52dfd35c3f9fc6742b9df24d12afd5738
SHA113f3837eb51283197bd4fa3d7a0982811859fb8f
SHA256d6f01d529ab392e652a5472e9386123bf248a1a4172db61faf99459d497cf67e
SHA512c9543eb3f3860dd5a9b130271bf3b8363da616156fe5d95706b6114414e0774283888697f5c231e71739b7d3c5a149c4f99a6a6c85ac649308a4f2616e96f6c6
-
Filesize
6KB
MD5170f7b8c27e89e69894c7424d8a51c0d
SHA11f04dc232acfed339125909c186c10edf4d2aaa8
SHA256ad035e1d70649231fd3b1ee0b1ac649e27f1c373ec090858ef7b4e7b5d541c82
SHA512782b4229599d03463307b0ef5ee9c66fcd1e26a797cd78bffc3558723437fd2c34ca0525fa685071cd18ca968c22b57a957f29839be83bc313fe5f5b0f74f793
-
Filesize
6KB
MD561ba8a773f3212786553d7a203372022
SHA1c497c183838674b3ceba857e00a2b81324db898e
SHA256671727713db9b196bd1ef3066f570c0d4150c29abce448b71343a4c345397820
SHA5123feb62a5a1538ab147e1a41385304287cef5cb3c62079893147dfd964ab0b4f005b5474a45f46c756d976d525b24ef9095e23f662f62b69cf5519dfa9a4f3c51
-
Filesize
12KB
MD599d7c876c5afde27414be758e9f85075
SHA107056bf1036e046b5472ba67909925cbebc68483
SHA256a7214acf1170feabbb3cbd1159df4ac622f95eaa47a5c654bcbb5e93702b5a02
SHA51264a87dc5aff4913e4e06e7ba284b4848f73fdd32d5a37acc3b41805699c1e2a83b7942ec8b6ac20c5361e0c80bbc53cd6ca6e181ac7ae5e5612fc61a568b1495
-
Filesize
12KB
MD55c374bd37d678475fbef3b4b82f99c75
SHA132f6bcacc16ef1b9b32a2efde2667d805f0c5ca2
SHA2562f2f54535a01b728246e04bde355f758f661aa4d6337143bfc5130784aaeef16
SHA5127336a302194db2bec705ae8a900242f845b67caa1362848fd251134cbc7d730febb7cda9413bb84c90ed6512153c232fc42bc9533e00fd53e3cd40506831f270
-
Filesize
12KB
MD54c7f81eaa43b22633e1756ad0f220409
SHA1e8c488fc57d03ce8fd9deee499ba5a552fff0432
SHA2565b2d3b026139308ea7aa1cbcdda8f8e87f598b876c036732163549d34e66aba8
SHA5120c12f7a89260d517d6f60d33461e05686ced5715e199ec047006d563692e49034c663ce682b8f5895126ccf77ab893285aed0cf3a072c922ff1acb10bd13e3fe
-
Filesize
6KB
MD5cb070eae25593c6bcef719fbdbf3a582
SHA1dbf94e8b15d68854854e3b6a9c98bf74631c561b
SHA2563fac8d6c06ecb9f22f9596175652a3286d65dbbb95695ad292c5d0046b95ad42
SHA512ae09bc6f2165ce28397ff542d134228c65ebecc5ae00b476b9fd7f88f493d0f45547a38538a5f91b024dfcccf7e14a3c75b64a19d54d6d8eeeed95e8e49d6f0b
-
Filesize
16KB
MD5bdc10d3425f632648c9d64d93c7b6deb
SHA1ba1a2c31d42cd9e385a05926122a163395d454d1
SHA2563bf8f668c2de257590429e45d4014c0f036613948b48975aa10c5b648f2a2efc
SHA512445af864483b3fea6e6f2bc7692a14fe1f144698e82b9d42fa3a45f59e1cceb55d14e860351fe0993f019d9ebd4dad463a2e4fe4846c76393bb8a4c4a69d7665
-
Filesize
7KB
MD5ca90a8532eee74a4d3d2b990748e35e7
SHA152c411c8c343d3a291287c7bd136d6a268e7ebe6
SHA2568bac2370e868c39f7e85f03b6cbbc331eca663739cd1633c43f9ca26a429c365
SHA51238c9a65ffce5de259a5a20b86e4bf5fe35fff9fc4105d3d88ac13ecb95c89734f6e3f33a090056c0f03ba98bb961d34ae127f0094968fd379f2f58d93949661b
-
Filesize
4KB
MD5ebd17d4a08589b69ddc1e3c36f942534
SHA1c18a152b5214d43c3e47857805c7529f9cbf6853
SHA256393a7816cfc8d90da5d93e0fadd20879721e77930786c8eca4a47d44f47fcd20
SHA512cfa403e90a5e260cd3594277a48a9e3848b3eed8f8d092d0f76ac272f6ded1899c586494f1702d47efeb1f4c7c395e107661be74fb76ffba6714e95ec6212c1d
-
Filesize
11KB
MD506f21dec58fec12197f66b32d2b28f2a
SHA162e336fef1ea67f022e8722d232719d35e99a7ca
SHA256da9ce86503b2ce777a93adf45e24809bf350e5512dd87419f44f9b5422643873
SHA512abdc1f4c8c5652188a8d658b0fc22057a984cee74fcfd465ebc80c43bafecece476815a18995e0e1dfed3a7a62f4a6fcf048e0f19eeb2f85e93a0947a76d9218
-
Filesize
6KB
MD575d3c7a6be3fd5702ac07e98f4506732
SHA16042f37348754733b42031fec907ed80386942b0
SHA256a6c4c3a84470aa63e07cabfc0d64aa0a1b74f4c71adf881197663a734b3a7dca
SHA512df719c3d8c7035e2acd8bf355168eade847e7beb183d9282ba6af72b6b1e1b1abd9ad8fbebc341463bdd293fc1ba2129010fc060cf222c9b35e6c99c3bd5bc13
-
Filesize
8KB
MD5ac6b93280a6876e6ea4099bc7b0e9aa4
SHA18e4cc8988a8d587a411f9e3155700c867879b491
SHA256a81619be824e0001db6e0b9aa09fe7697c266c709cf9070807868144207fee1d
SHA512f65326be86cdeace7ad97601c2ab62488062244b0a48a02f92711515783eeccea1130aa7352121a7815c10e0078146e60b4ddc5b1c91a3d4ffb8683fcc94cc0f
-
Filesize
10KB
MD5676d050f5082a83d37ea086300b02779
SHA18f17f1d79ad47ca722a7d60c8e96c2bea0af590f
SHA25639fb86c3c500835c134d3638e2473b66aa1e132665f700b84c0140829678fedc
SHA5128b3aed029a22e22e63e8982def6133fc2f47649cb23b5605a55cba129b030bde7967dd21cb236efc1e5346826ec266b4ecd76b0a4b3af28d999e46805d52c70f
-
Filesize
12KB
MD53bf0b92edf4db6604554828d983d154d
SHA186980ce01d87da26057e30e52f5967e5fb56271b
SHA256707ef8a4b946419cd1c307a090c89924aaf1a5a72f4fc23c58e7a837a7efc566
SHA51240162c0fa8ffd17446dd02209814444e6dc14e76983fd4045e3b56899788f350a0ef988e67c56a416504ab808d7d4dbbfda7e193a241424317e717e749908be6
-
Filesize
2KB
MD537ec254f7f2d4f80554eed97657ed80f
SHA17a568de5b5855fa5e596e0d4bd63e5f330963772
SHA25605d19d5dd0b63e35b62586b17ab4981e147ac96a52c9fba6990ff80dbc7d5cd4
SHA5123eaff891a65f8a49d23c7296399d0c2310550afa6a2dc7405b8b01f38d58ae9bd536ac77b9843d725789c86efc7c6a6e72c9003191a64c42f98f78c76f225cfa
-
Filesize
26KB
MD50fc379931037bbd3faf17eaf50917bb6
SHA1a0e6ba9c8053a8e99443115e4957df52734619b8
SHA2567b3e377f7dd1ee2c41596f4e8e3ff874546ea3c06fdb89265e69f2944861abd0
SHA5129828e44556a7f21cf2657bc622f4d48353c3e951a9dc73ffd05190e15b7cb017407790a3b2f6d10a9913db4490665890a9c369b38a3afca3d98f01fe6e61a73d
-
Filesize
36KB
MD53844eeffb62483c20a3d5d790d3f8398
SHA1fb4aa0a1719e049184b8b7cea143dcfa40d5fbdd
SHA256cde555ac6c9bf0064aa1d0c84c079157f7e17c85a53ebc89b4c46e1985700690
SHA51203f0c45086d61d9b229f77502af374cbf217f82c41ffae6165ca9a93578fd8aaa68662e1cb9a152d9028b515350a37a9ba964b8d2dd0051cb7b46117de62acb4
-
Filesize
13KB
MD56c65ab470284a0408e209a751a845e3c
SHA143fdfe960a2832c816e0f5ad6172687455fdfd94
SHA256e198aee2cc7b868480ae31951b48689d8ea05fff1d0ffceccab4b829f1cab146
SHA512c33ee837369a8891dbc115b307f1ddf225eadcf6af927727c12fad59bffc74e4f94b271c3a5d561feec4317e25237d69ac19a78275c8edfec3ac3c1244b78e74
-
Filesize
27KB
MD5816c283da71d7566b746c3edba82b492
SHA1c7c538f46c15dc911230a8d610cd86cf43051e07
SHA25612867bc5e60114169b5375fecf5dea3efc693326b5588d7da5671326207fe6d3
SHA5124540b592ffae6a5ae6141ebd3022794cc27b68cdd295ad0d620649513371eb405283df332f3b555215c14eac1863d2e3cf665bcd11464374ccf0abbc053b6468
-
Filesize
32KB
MD57bed7eddff689a98c7b70b73ced0a388
SHA1abb746a2b9aa06d9e1b5bb24a3a458a80ec3ac08
SHA256d1eedbd46245ef55b916be48960fc008a8d52cc7a9a5c3d27689b5dbb02e6772
SHA5122a7e3e8f3d9d4bb1a64203578105d08c683ef34147c89c4872baf50b717d4cba7732442a9266d5f40b7c67f23831eaf76a6edf6ef96a07baa39420682e47cfc4
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD57ebde740a99f21c42001f99d8c91273d
SHA188e3510ece6e87049ce1c3eea4db5ddde7cb2005
SHA256a679382fda34944aa614687345495d1324eada07dd56e353bc3985943edba1c6
SHA512f9938d5095a266746ae97ede17cc45d3891c045ec847a24f5becee558e361ffc71b685fb2d4573f9bb4f23e0b4de5942939a70ec07d48e8d17645d1fabb5b7b5
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
32KB
MD536fe819291b7b819721fabc20602e182
SHA18a432800cd3071e0b64ac873d03cb2d1305eab42
SHA2566c252f6b311046a2fa9baefaccdba9b6086b5c4ee2ff31855d2e078a8241a0dd
SHA512f88302302b9b842b9ca6344640faf133a515b9df23bc28509570b9d1e8ef088f54367ecd6db5f3419a692661ea183a3f438857ef913c7951d97215d00f72a153
-
Filesize
512B
MD5683839fe2c1cf81b55703dc276f74a38
SHA13941d91000935cf3c1530ac9625f56462a39b31f
SHA256085fd07ce71caeed756ae84b8117d130c270cc2e74b73f5506c94019e3eda281
SHA51225eb7c58314ca7a25e472ef8b7dabf478cb0b39c16c00cd898ed0f162b13fb4e6c4d8ac78f81addafabf345faa8f4d3add8ddab74fa5221c4c9091a776fbf413
-
Filesize
32KB
MD500d782b0fd2f6e961a5f0cbc1231dbe1
SHA164b95c01f1be8ef9717766ee56632fc7134e0e09
SHA2569d872354e896428679054eb910ff2f284dae110f4f0e07fb89386e2c3e63e681
SHA51203ba58af9af52b21bb6b94bf16344dcd7faf1bfd1c6dbcfd39d210758db449f88bab1bf8b3cee777207f6b9c1c3e150e165d0333c6c4941e4334beb84a3cf1bf
-
Filesize
512B
MD5596b9c9a12daf875a2e193ca60aeb277
SHA15c655ecab968b8dba8845bad2c331747e640c6fb
SHA2567c9521e92848f12542dba5dbd6023bc7e5d2619a083e35d78325a5828f394ee8
SHA512dbe5cb867ff0e80965f145343efc6a7fea205841befd5fb1e7bf674d974b539b133ce7f9df570cf2bbdcaefa699f09f88dca3f8a0176d440a1bcc00f28cc47e7
-
Filesize
16KB
MD562aaba23bd1990b6d582de4725ac4937
SHA1a91263bfbf26936baade0815eac2fe09f621407f
SHA2567418cb350a8a2b7e132fa49ef94ed3618e72e5b163caf233675d9be61cc15e5d
SHA512aad6e70e20c8649aedde595cc94b2dfcfd706daf68ba869349db8c70c458bee6663e51bfb838227a415356104b4149027d470b6d9d6a791bdc78091093b11d91
-
Filesize
156KB
MD5aa74d601e85e54caf02e4096d1210050
SHA10648b410de4e1b92803cb4dbd5fe08cf7c97a1da
SHA2561e2c81645baca4f80e3efd92779e641ed77fbc2c29ad1cddf6aee5d5c21683b9
SHA5128d1fb3026676e700a3c429033efe5c5dc035a43c6713a6ee147a18e45bcfb932f49789e2359eaff5c5cc603dfbe8a70fc8ab0f3cc90b4d217bbc4e67159980a7
-
Filesize
512B
MD572747d85f7b7f7c408f490151f135e4d
SHA1ac98df6cf7be89002a19aeeee7aef0dc2a5aa916
SHA25622345afc40b707deb251344b5bb79a50435ac85d686782226f73a68005773268
SHA5126109841ab19eeda7e702cba08cb8ea875b3b2f33cac7b30f3a1ad79e3381fbcd10f3fc8127d7b72e0e11c90a9dd521e017c001f3d04ad05fe181d8cf37500bd1
-
Filesize
16KB
MD52910769cfae2135c0841ecb0f64ed91f
SHA142310be6bab8ae511737daad212bc9d4d85f08a3
SHA25681ae858a84421c32d101b527e66d0101a734cd470a14641ed5afeaeff3e18f6d
SHA51228be9000e75c08e1c0fe7fd14a808f67c8f857310bc9b8b29d5bea368c56c8a7641ba4977af9173aac91dac4a961706c6d2a4f1be6dd33db51c6e6b6f8454c34
-
/data/data/com.gbwhatsapp/files/.trash/c99fb79d-371c-4810-97c8-84dfd939b9f2/4432d6c1-a0f2-4e5a-be87-099ebfe4cfcf
Filesize526B
MD52c0f856d7250fb18c8dfe900ec9bd5d4
SHA110c62e9db2bdffd3d76829987e50d0efa5e0a72b
SHA25662802cd5039ff363156f7d4dd4d7360d095090a6331131f018abba016b6e1aa6
SHA512ef5d4481e27d2d6053a224f685b983e52d7ae0d2dbae4f349c1ed0191e4d5b737ce8e2f0d8a393f2384ff9bf05af29f47aea983d57d0b151e89b3cc8c6ef38e2
-
/data/data/com.gbwhatsapp/files/.trash/c99fb79d-371c-4810-97c8-84dfd939b9f2/9286cd14-8f0d-4c4e-a255-b00223ac1131
Filesize67B
MD5d8141b97bb6b8752f676cba953de8e56
SHA1b65fefc908682f7027ea3ca34ffd592a6d81ae87
SHA256afff045ccff4a25dc9ed283acb206e37fbcdc6afd5adacc86c645d432e032a21
SHA51298915af0eef59abcf116818f4398cbd5a0eaf31a65110422e186872f48aeb7400948d51d5b22b0ce82c07764f21dbcbf1e252bf5a49df0dea3951bda730092a3
-
Filesize
3KB
MD5cfaac46a9b3c925a53382f453c8c0d81
SHA18e82c86b6d77d7e1ef003aa7796b83ccc5efab7b
SHA2560d87625993ef963e9bebf8f21f22525807d48dc26b3195fe94bedfe877f376e7
SHA51222c8297645c4ffb8ba08e44e1136dcc3b3c16100ff837d7e3ae7bf3a1f181c12e9aa33f3f598d6d7e001536b9812106b4785c01f91a76874cd220a6229e787a2
-
Filesize
2.9MB
MD5a36731dcfd6e14c4c4e648a58615e6a2
SHA14e530d1485f9c3226fb4ce1cb19ba29fcaa015f0
SHA25655c7b293433c81da544c7f0c8a615a86bc875b600957901420fbe8d962b7a227
SHA512169da3745375016b532869dda54a55afd182417287ec839b44a4597fb6f5e04a50f3c2354ac0083204a1f4150d694dab5d8c84777af8f2b8996b29eb8921b8a3
-
Filesize
63B
MD54d37a961e101dbc3201b3140eab7a0e6
SHA17312e9b725923a2ee54b72d762da870157714aa0
SHA25651b918ea75acb745dd9438a5684c02737824a5d67165bca7a428542f80d94fa8
SHA512640ce4668434cb57f62986e438f8f251c09dd1829859aa27bd5af8e5bc7d2bf94dc0f19ae0e1f6ffc0e532aa69fd300e0d2d656601e446010286a139580388dc