Resubmissions
12/02/2024, 13:53
240212-q69b9afc5s 1012/02/2024, 13:52
240212-q6r3zafc3w 1012/02/2024, 13:34
240212-qt47rsge54 10Analysis
-
max time kernel
48s -
max time network
167s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
12/02/2024, 13:34
Behavioral task
behavioral1
Sample
GBWhatsApp_v17.60.apk
Resource
android-x86-arm-20231215-en
General
-
Target
GBWhatsApp_v17.60.apk
-
Size
75.6MB
-
MD5
d73fa603bb7dfbd53f2ec4d05617b9e0
-
SHA1
86f18b9d0ce32f3ff1c608ae4317329e4da44e1d
-
SHA256
3e596694e6c74a1991490f4bde5e2404fc1b6d57af8499b7fc67adb44e17394e
-
SHA512
4e004ec348e58f8229d1e3b5d2137b64dc09234d355425d8fa5544e67a4d4d80d3e098c2ba7bd5659e443050bae7a404e1a35a2341cd6809b5e83e1078d8bbc2
-
SSDEEP
1572864:2R4YowDIMNvpPjEYr3V1c4sQ0MmDKPwpJ4qHSXKTHcvmM0hV:26YoEXEqFR0rDG0THSmZV
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.gbwhatsapp -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.gbwhatsapp
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD5fa89143beb037442c63e13b1c28cba8f
SHA18ca9c5a2ca39c5f1d39aa292effb322b6498f2ba
SHA256ebbbbb7cab9c2bf9daa47eb87ef9e75d5ad775c6541a6a0ea2b8b1c74f776bfd
SHA512551bd004551b9426f1450149ae79f4c4c7784eaa0d812e0e67fa9eec9f42476d1459df5715b685027fee967d55a6b8abcc28657abd0b759841ea3412de3737ee
-
Filesize
5KB
MD596da66ff80a06f867990ef66b6eaee8f
SHA1feef641726c1a01efee753f35bc5248cf20d2a0b
SHA256615c0511f9f8457fdbd54eb008007e2e72d17b5b964f2b6e59ef18f372b2aa7b
SHA512663adfe09c9d54d7e6271dc13ac14c7df419e03ea75f19cddbd75272f1b1efa7e38fa26e6d4b5abd99523c9e56457962939a427ab12c20b6b7e72614937d935e
-
Filesize
10KB
MD5931de8d191c8caf8445d5667dd76787d
SHA1b42d194ef8b45aba37caecdcb501eb6765a55557
SHA256a515e8de501e935fe3e8d77d9fb9572ffbc011760a349c2c5efe5c89df350130
SHA5127e4603d203652329f943597a95f2f6efdc4e48029086887b5701ed0fdfd6c521a47a3971b0b09a90d8fca98acd62ddb9fdac48bcf5fb69d15f94e68067f2b4e9
-
Filesize
10KB
MD5676d050f5082a83d37ea086300b02779
SHA18f17f1d79ad47ca722a7d60c8e96c2bea0af590f
SHA25639fb86c3c500835c134d3638e2473b66aa1e132665f700b84c0140829678fedc
SHA5128b3aed029a22e22e63e8982def6133fc2f47649cb23b5605a55cba129b030bde7967dd21cb236efc1e5346826ec266b4ecd76b0a4b3af28d999e46805d52c70f
-
Filesize
12KB
MD53bf0b92edf4db6604554828d983d154d
SHA186980ce01d87da26057e30e52f5967e5fb56271b
SHA256707ef8a4b946419cd1c307a090c89924aaf1a5a72f4fc23c58e7a837a7efc566
SHA51240162c0fa8ffd17446dd02209814444e6dc14e76983fd4045e3b56899788f350a0ef988e67c56a416504ab808d7d4dbbfda7e193a241424317e717e749908be6
-
Filesize
26KB
MD50fc379931037bbd3faf17eaf50917bb6
SHA1a0e6ba9c8053a8e99443115e4957df52734619b8
SHA2567b3e377f7dd1ee2c41596f4e8e3ff874546ea3c06fdb89265e69f2944861abd0
SHA5129828e44556a7f21cf2657bc622f4d48353c3e951a9dc73ffd05190e15b7cb017407790a3b2f6d10a9913db4490665890a9c369b38a3afca3d98f01fe6e61a73d
-
Filesize
36KB
MD55478917f86f83638e0c2199fc8ee6c84
SHA139bae4da6cec4733cede64673a13a03bb79bb0ea
SHA256833bd11f148d145dfdadba4fd8cedb0a2a125e1f4e10411e613f4a70de3ad2d0
SHA512e8ce7068e926b7e0505a9612e93b6adfaf768e204362cc3dae8fd45637ca5d09e3c27b52b650588804cf383742f2099959a7a01dc62f3afd76d61f46c83dca2f
-
Filesize
15KB
MD5c6c2fed91c2a1f694746428d5d4727b2
SHA1ad4d05e6ac201124a926e55f5297c1b62b8d4a6c
SHA256eb9c4cbe5a5c4bc6a2da5dd6b0789afb82ab0ac533b172e2532eae0f4630ba83
SHA5126bf91f9f72b6f470f72137cb28abf3c8c8de9aa41ed35b8ad0611bc77e42fc095991326dfc66873d8433eea910a210232e79ce3489e4bfb92a92d8e25dc5f31b
-
Filesize
23KB
MD57f773558b21a74428c49154da6ed4799
SHA1826e2c852398c1b96b4695fbcb35a3a83c824e02
SHA256c84966910534b33b335303a7550f38db9825fd5eae9253998319308fd01a1963
SHA512e0fe7fd942b178c14e79c3b0edef5c67d57e584b9391e26731afabd44609b4db6eb5f0644aca20622094b56c18e9a4d15def5da0e8fd94ab5d0c949f952ec01f
-
Filesize
5KB
MD569fc890a8b8f761810e1f093d41850a1
SHA15f798f5335c7bd74e7900d17841cb029d0160e19
SHA256ae50a31de935c8d64278a0eb634597b7c900c7c291786f2a39db6f6b624734b1
SHA512cd41cbeb960393d95634f29db90beb5f6a9cdedcc398c05bf6d5f1481f8c8e5cd7f6b75d62fb9c28a8f2e3b92fa5f79a72b58d3c5b09c64ea4777e9d546c631a
-
Filesize
11KB
MD55db74de1133d28a74f6f35938e399c41
SHA102120fefb72f533eef47ad594e3c17e508847e5e
SHA2568e1b6c2b97dfa24c92ac68198a7a5fc8fa7cddfa23b00e263b06f588b5b2fedc
SHA51201b2fbb6e51595130ed3eb735535eb0287928075c43582bf72ddfaab58e6d7c3ff75941c16f58c6d5746c93a6797b840578095c512bde64bec20a0a01d404cd3
-
Filesize
12KB
MD5b8e8fd04da01e6f03de1175e80796b17
SHA1d7d9536a3f049b7adb261d226c2fe23d5d5352a3
SHA256494a3c1e290d8ee5c0cdf12e45f91f628b3fae4bd0224c6af8189dff5fb48bfe
SHA5123c74c1a14fc7c20bae226e7fb9b403bfef3d7ab41e03e00f8686a6f2cd1b3191834bfd6afb000c070402cca8e2a3b9b83a1e741ee97bc9c822e3b69e8e82140c
-
Filesize
20KB
MD552231d417236f89bd91b51d2bca4a989
SHA1a7643d01aeec118ce0b48f7275e64fe51b4c5710
SHA256bce7d9201ed26e55d92bb929272d08f6384d3f2b2f2ae708ed8a2df66a4f9e4c
SHA5121161fa5de4d91258ee73c5941cb633889526bb86477aada1b5db2dedc3040c94543331259d5434c17fba47731c718cfdf2d9571a5a8b52b761ec9e977a98c986
-
Filesize
786B
MD5a064dc0dd7ecae3e2f5e5c0560951c00
SHA145c21713826346729d8e69327dd5c853628f8cf6
SHA2568ecb7a986e7c2d297905e86ea2825273a79ad0632f4f3db548aa890a195dd08f
SHA512df6b28cd05f4ad92778f294674f9798ff73b4589cc8645774ea637d65b8068afd9564994962d835b3573cdcbbe5a55b6853b605a90371aadd9a5ddd180b12849
-
Filesize
1KB
MD56c03f99b4e177a6fca29ce81a525093f
SHA1a8673a1184808453bd10463ff14806b1fd092f9b
SHA25601e5520b66e1cd4ebd794653fec4d8eaf4ec470f5fb6f141ed84a0ab49cac791
SHA5129ff3851ed37727cff95f0d5964548e936955004d734a2e174828cbd0335c2dcd18f894acd9e7cdf755ceb7bd54b24814ee1908566fb08146404c1fa2e5b1cceb
-
Filesize
27KB
MD5816c283da71d7566b746c3edba82b492
SHA1c7c538f46c15dc911230a8d610cd86cf43051e07
SHA25612867bc5e60114169b5375fecf5dea3efc693326b5588d7da5671326207fe6d3
SHA5124540b592ffae6a5ae6141ebd3022794cc27b68cdd295ad0d620649513371eb405283df332f3b555215c14eac1863d2e3cf665bcd11464374ccf0abbc053b6468
-
Filesize
73KB
MD526f985184419c9baf376aa694c5b9cd6
SHA15cd7628417612d95940e1b26b21b3112f938abfe
SHA2565a89ab27be17e625c094159b40f68b6714ea3cc3cf8de1fd84ef584b725cb8ba
SHA5122a5d9dd6d7ed5f6818417b6bcfed89e47c1b0e25242aca496e6356e62e3beeb02e3f168eb5471fc73a39bc56841f2109b753ff2c55be116774859dd0185d1ace
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5ff369ac7e21a87ce0fd2a273e838d002
SHA1a7e9d0c94c3112594d0a1b59a43a7302953f3587
SHA2568caf24bf0de4974ea9b8e5f706f990a89a3d7a7f5a62652153f36bd23c471e7b
SHA512add7f6a25fd738b608d9b5f0ecc5e7503a45a02a6c9b87174d20b8da64671c88e6123d93723aaaf54c00bd9adc437744945351be757e1442e9b2c454b1d69ce2
-
Filesize
32KB
MD5b5dfd793ec1a870ad1a21b70c07d89b3
SHA15a3cf3f8f546aabd665c38671994355969639317
SHA256062ff402e5aadabba44054b97a0b5f46f2a6e4029f27910f14537097adb007e3
SHA51262901f9547f771a426adbf3e3205425a33430a61f0488de6d02736298234cb9d1e27879109655b9a3f442f4a4b8da563f50970425ab3548f60c05440e59bba8d
-
Filesize
512B
MD537b19789e813b0e0a4170f70de1a2a9b
SHA11c1aa4e9d60084136cca1d39a4e1f310f4f19d39
SHA2565150751f6ec094ce9fade0bbf286ea7f614f569a6846db6cff891f20de0768c1
SHA5122c1ee0674b971db1d525c6d9cb77ebdab49a816bd54c43eb0131bb152ca2e941e056af829c3c75e46ffcc110ab4f4711dbf67b2504dd875f834e63ee493a32d6
-
Filesize
32KB
MD5a63f64c28d40828e77e4f275f90a1e7b
SHA13aafc7e9b2620c3d2c6e4d8a3cc30fef0bf7be52
SHA256cfb69659a5f73af35ba59d2800a936b5ee94ba1d4fdd9384dab2654c6045cfe2
SHA512c1979e05833a078d5fed710f23dae8d3f0c77a0ac666235cf1c665c76806780162941c3b5c918cbb6005d7413caf0cfb7cc71b533505528a6f43303b71f20210
-
Filesize
100KB
MD5be941f5d2209190d97bf0d3f573cd7c0
SHA182aa9ba6a1a4fafb244586387e8901bbfa32aa8a
SHA25628e5feafd0f8782520ec44783fe7ed2985e3f3356c35170aa53fcc75c55b4694
SHA5124208d3ab40ff3a293ab37c0090d76fbd8c56aa8e75c4059f6e9372f603256ac5a71aa175299450c7d108890450591775b2bfd544d81326c41eff2509f812c8d4
-
Filesize
512B
MD54281a628c14f96a3ac2fdd98a344e975
SHA142de5441719136185878ff193c425c2b339129fb
SHA25644e37dd4a2ee228a202bdbce5c22683e1e68c657bb7f8d209c17ff3da279c230
SHA5127a9eeeb0e5ba52bc96affa9ec8791d5adb8e70368cafddcd3f3d00040b01c48add95ca948558988913b2b0a80c85525bda7f9d28ce7c1d18baf80fd69c599475
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
16KB
MD5b43826318b2a770c3522df4b2d834920
SHA10e1f8e8120ac3743eed68924486b388abf31ab36
SHA256fd058fc892fb2a496e32f124bca21ac9eadc5ac0b898259eb5633fa3ef14c264
SHA512dae1a07ed7f072fde8f648da1ed9fb5ce7cec7be1038460cbbd321428dbd9400cd29a3352d97452a87d01a898811044e27e10bd06869cafdd55edb0c185bf267
-
Filesize
36KB
MD563fad7c69f3ee853e4ac33251d7d1f04
SHA150b721219e36830cace171de552d9de76533da9b
SHA2567e61f124d83aec5a3f257dd90d245130f7360cb2263ea4cbc97ee0a98e73745a
SHA512a0144d8bb5ae4638f960451e7e8f6088d4c51b1b3a615358874acb7acc2acdcc936190ae206c2ca5d08b860ef1c5bea645841e92a3b7a705fd29ac226d4c822b
-
Filesize
512B
MD537775974047ec357feaf3219f1c66663
SHA1a743763d61a4601f28392fb339f53d56e9d54add
SHA256d29e40e50b767bd03e9e320eb3c74928bbc4206d6e5180d80fbda6640e4ad969
SHA512a335421942bf26085cddafaa17c12e5b69ad67976e426a5934821f4f4c60a63d2a729b719bdb8b971b9906bccf2fdc68969fdefd4b260bc528fcba5722cd2d3b
-
Filesize
16KB
MD5e3eb326c4cf7ca642a0672704eccf764
SHA137120f5459a11f8774d6f7aa30c3e4fad0188b8e
SHA256d05df629d6243e3b5730775ca13a18c9e178f31bc457e1755652b7bf62175dc0
SHA512dcf409c38bd1d8c0423de1a13d09b0eaf5934bfcf5e7c9c75c7c500560954f6aeb1f7851c047c01d81d51dc5c0c3057e722b3a2a81917234a340f9f1a14fd12d
-
Filesize
512B
MD5d735e202378c1b73a0de39f5c5ee0063
SHA1390c8f694a63ec1659d40489137acf8b92187e83
SHA25611096577818cc3e8f0fbc53b7e045c8ce5f1afadc49a5f9623452f6f93b4e0cc
SHA512ae12fee9236bb57f90ac81eb7f8f8c3448601e3f96de2d2c4087e458db348e18d1f112cea76f16c0233fc4a67bb843e575dad64beb8f9d333831f89a851c8bdd
-
Filesize
16KB
MD5ad75320af4ed3f439966a709ea29efd3
SHA16e7ee38e9d64e555854154156dffdf6dfb6955ac
SHA2568a72ffcf654ca1bb937160bfa821caa20a0a204ded3887ac00d569b18ebe8a9a
SHA5123a09698613506892b1a0debe496c43d9998eb9fc02390a056058625e7ba29118a22d5d230823ef86ed6c7237ac6a6a47c1f2b0832e5c12d0f4734e712a9eae67
-
Filesize
512B
MD52d5bfb36828080db024b9fef47ccba3e
SHA158767d7fd7a477c0ec6b5d5bf89b69dcb9d5fc27
SHA25671b8802eaee835e901a535eca376b444fc84ee479eb3a8424d4de074a6ae1314
SHA51231c096538079176b21925e4c6a1bbb8a2af9f1b23ada92d6c5795e86884ba3da3f86153c8bda9606b49e4213140f41f38a74f2dfe742711c52dfb68bb96b2fa8
-
Filesize
16KB
MD5737d1b9f4182ab3cf569e62293ae0c91
SHA11069897e6421bae72ff9c55b1260f297c5408e75
SHA256ebcb157dd73b8c207dce6ca03335e300df4fa6e6bf10292ffd3888e511ac0f80
SHA512cc2c357a7af63bf9ecf9b7059279fa9356ddb84c6a4572528eea016edc313c78ac74de8e9a789c1da490c150d5c80abfab5818d72064560a9f520fc4c6ef541e
-
Filesize
390KB
MD5416baef7c97eca709da1119e2f57fc49
SHA149ae171586c909bec1f68054a829b2417c005d26
SHA2560da0ef30d493b07e6cc567d779a0cd4486761264a5700ed463388a17dcb21629
SHA51294ae47584c0070d5954e6d6c7b239013c7d6216a4c9077ba635a2be73bdcf9a2709f31e54397f6760c08b357ff2cc9d08a723e289eaecab1a80f33dba571b451
-
/data/data/com.gbwhatsapp/files/.trash/53616246-82e3-4712-b0ab-c8de22980811/56aa25b7-214b-4275-baf0-dc4aae2e1a3e
Filesize526B
MD52c0f856d7250fb18c8dfe900ec9bd5d4
SHA110c62e9db2bdffd3d76829987e50d0efa5e0a72b
SHA25662802cd5039ff363156f7d4dd4d7360d095090a6331131f018abba016b6e1aa6
SHA512ef5d4481e27d2d6053a224f685b983e52d7ae0d2dbae4f349c1ed0191e4d5b737ce8e2f0d8a393f2384ff9bf05af29f47aea983d57d0b151e89b3cc8c6ef38e2
-
/data/data/com.gbwhatsapp/files/.trash/53616246-82e3-4712-b0ab-c8de22980811/eab2cfe5-d0c1-4319-b45b-269b27d05947
Filesize67B
MD5d8141b97bb6b8752f676cba953de8e56
SHA1b65fefc908682f7027ea3ca34ffd592a6d81ae87
SHA256afff045ccff4a25dc9ed283acb206e37fbcdc6afd5adacc86c645d432e032a21
SHA51298915af0eef59abcf116818f4398cbd5a0eaf31a65110422e186872f48aeb7400948d51d5b22b0ce82c07764f21dbcbf1e252bf5a49df0dea3951bda730092a3
-
Filesize
187B
MD50cc7730e9a702e16f25c842d4bbeb8ca
SHA18acb48f9ab397e40a12d9cfd01b90f04230158de
SHA25688376a39ffb636ae06841ce363230098b7576c69b66cb3707b2f6cef59f1760e
SHA5126826a0a3627d56a9c3a79c9e293a0adc4c85e813577045685ccf4fbcaceda16db5d19ce3fdfc422fde8cf27b86c7c02c8f4eb4ebeedc242c4a616fa202d8cbcc
-
Filesize
33B
MD5d3848b682368e524c7efc4d193bfbbb5
SHA195a14c2c57e86ebc0a498a640bffd529d96ed676
SHA256b3a9e7acc602dd24e9e334bb2398a0375910ea45bab682d93c486316d20542fc
SHA51223cb283f46ecde1d6da805c2dd3120275ba3268c0e8f5a8bee5c8f4ad7778a5f0a613dae1aab753853334ac1d13214f8953620c673acf45b09355b568e044181
-
Filesize
14KB
MD5ad4f03a0de28bbce17fa5fa6ffedcb87
SHA11aff1f5f33a089bf98545b47a12571e782bc662c
SHA2562f4338541405123620373068dce99c1b5a431705354f7a6415fb4871feb185cf
SHA512b60df609557a394bd6fc5f4da46205c3f25f8576ceb3b3a63fc35de1bd08b480164d301e533365ebfe030c3dc61a96fcdf8dbc9af5198fb0b63fa7cc02f8aa98
-
Filesize
211KB
MD50c723e248d4fbd04fba6b9716c4c4da7
SHA1a665110bf4b35616b3678debd41e5d7ed86fe4a4
SHA256fe0b20920dadfcca4b2dcfef21719bd39f5db5a4df9f69e11e1f6c178795cdf6
SHA512f718a2d52c84107d89d7476555f9dd193c4be7e16b75c26c1081aa93ebd2c56398035c7882328ffb3aa2c21f32b03ad223de01eadf786cfc6e023f9a2f7df8c4
-
Filesize
512B
MD5df92b76e7136b6959721e47d35169717
SHA1ff3270ef7dc030c87096e9f9ff66a610c5ce6ec4
SHA256e6cef198bd4b064e7157b2902e365754f261a6bcecb211e92f875527c3d369f2
SHA5121db00cbb26b1d42e0ec251cc1f6579ae33b5100616d34d967451d9e8d59d7ad06ce6dcf95a7305c3e936f3ef052acafb073a090e54bd3c636a7eeab6552a7367
-
Filesize
16KB
MD5e7d44e4de9bbf78181984f6ac7d32545
SHA1af7c4e5c4b21e3248389caef401f10b79cdafc97
SHA25625a1ca75e529c0d19800a499a5b8aa4e2172845aaf3df3ed0974489e4b2b6db8
SHA51260c0677e9c9bbd33ce1658867f81404001d6b2c499dcc8ef0ceb91fe5bae2d576ad4f15a57485964378daa02fdf762eee48dc034e32855024575efbe699e3775
-
Filesize
67KB
MD5f82e0efdc385ae8b87057675dd64a876
SHA183b6b3a4c05b9ebc9925936126b48f44a9609c25
SHA25623128878bcb48ab3c97a4987ba87f538838ea81940bfb70b94eebe393e150ca4
SHA512ff7d0d7dee2f0599b270ab298f7ed207eed7d8b4b98a0669b5350eaec095fc86c2d7d8b02c4d503699006d8d4e8607ac8a5ddfad647321b161403489673dff39
-
Filesize
63B
MD51b0a756838a89a2f948327d815af8d12
SHA170570bd333327d26c9d8ce098e2e4f60cdc93f76
SHA2560868004f08b486af1a4928ba15d9b48e09d4424d96e133f34e17450d5c692417
SHA512433c254bb33df66fe61aca3b611da25fbac6e83dae3d6693bed39ebdbe6744d21d46f9dd486c23f6c9c03407e369461a8002b01d34d289661ada025b8690b59c