Overview

overview

10

Static

static

10

FMWhatsApp_v9.98.apk

android-10-x64

FMWhatsApp_v9.98.apk

android-11-x64

7

FMWhatsApp_v9.98.apk

android-13-x64

7

FMWhatsApp_v9.98.apk

android-9-x86

8

Analysis

  • max time kernel
    39s
  • max time network
    315s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    12/02/2024, 13:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    FMWhatsApp_v9.98.apk
  • Size 76.2MB
  • Sample240212-ranw4sfd5x
  • SHA256 1a5aac2a6c5a1e625821a2260675248596839806758d253156fb1c1da56ae8b9
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.fmwhatsapp
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4520

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        00001LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00001LightWallpaper.jpg
        • Size 10KB
        • SHA256 a515e8de501e935fe3e8d77d9fb9572ffbc011760a349c2c5efe5c89df350130
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00004LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00004LightWallpaper.jpg
        • Size 11KB
        • SHA256 dafc242f76eb9f036a848de7d0bbb8d8c1ebc7d61ff5f7add6f18bd63ef73922
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00018LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00018LightWallpaper.jpg
        • Size 1KB
        • SHA256 8dc950c49f725705601402588049e7fe75adaa39e1a6072e3fe0d1269ecb4d83
        • MD5 SHA1 SHA512
        Submit Download

        00019LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00019LightWallpaper.jpg
        • Size 5KB
        • SHA256 ae50a31de935c8d64278a0eb634597b7c900c7c291786f2a39db6f6b624734b1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00028LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00028LightWallpaper.jpg
        • Size 9KB
        • SHA256 b6a99ac0a16382b4189c7e6e6a1dc8a31d54fb39763a2c8d3329c96a43fcf9cf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00029LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00029LightWallpaper.jpg
        • Size 18KB
        • SHA256 0261ad4bbb5d653eb29509e333fab2f4f34e9fe71627e6a868d2d9bb1b73128b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        downloading-6453392650700075254.tmp
        • Path /data/data/com.fmwhatsapp/cache/downloading-6453392650700075254.tmp
        • Size 73KB
        • SHA256 5a89ab27be17e625c094159b40f68b6714ea3cc3cf8de1fd84ef584b725cb8ba
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB
        • Size 20KB
        • SHA256 dd98241974487ce11a331a28a6eafb2f01b7eeb50ab579af07fce08ad6b076d5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-journal
        • Size 512B
        • SHA256 0c8f0fd11d5bb2dd7cfbd76a1193d0e573581d9570d9a263987b3072f9b7b9a0
        • MD5 SHA1 SHA512
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-journal
        • Size 8KB
        • SHA256 85e0ad3a8116e8139c6f827d936a3b303fb14ebaa9c0e6ce299b36e69d9509a7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-journal
        • Size 8KB
        • SHA256 066bab5fd05a9edff08cae0605ce18667036125027766ea5ddbcd0628263f5a4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB
        • Size 24KB
        • SHA256 67b1bfc15425162ff85f8a3972c6ded0b3a4cc76452682eb361780b7caeb3af1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB-journal
        • Size 512B
        • SHA256 4b2844f7fcd9e5bec7c0875ab5c5c338ce65a76398d36ccdc307e9cfeddc69cc
        • MD5 SHA1 SHA512
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB-journal
        • Size 8KB
        • SHA256 110752e460ff5ed5308bdfab1d45172f8a9fc9f3f9afc3b133a011c2800cacd9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB-journal
        • Size 8KB
        • SHA256 0282a941dcb615262edcfcfe7034053df2ad2e85d532a44118d55c2e79d8c0a7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _jobqueue-FMWhatsAppJobManager
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager
        • Size 12KB
        • SHA256 bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _jobqueue-FMWhatsAppJobManager-journal
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-journal
        • Size 512B
        • SHA256 39cc7d590ffe17ff9b5a7fb37da9e4c13bbe762f91b08311408d1818e1f61c8d
        • MD5 SHA1 SHA512
        Submit Download

        _jobqueue-FMWhatsAppJobManager-journal
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-journal
        • Size 8KB
        • SHA256 200e5d0073a81bdab06455c3ba13db48fcc020a709bba4840650235a397b76c1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _jobqueue-FMWhatsAppJobManager-journal
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-journal
        • Size 8KB
        • SHA256 afd2234806565b757dcfd03515cc0e70d4798d12d162187a522d3da8db13ae0d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        axolotl.db-journal
        • Path /data/data/com.fmwhatsapp/databases/axolotl.db-journal
        • Size 512B
        • SHA256 6f7041bb9c3459a64f6c326566f4350a3fd657cef03fe5f4a66fe1877d17602c
        • MD5 SHA1 SHA512
        Submit Download

        axolotl.db-wal
        • Path /data/data/com.fmwhatsapp/databases/axolotl.db-wal
        • Size 164KB
        • SHA256 5edca9174fff38e0a7970931588a89028f41eb43ece30ad9fad8a52083bfab38
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        axolotl.db-wal
        • Path /data/data/com.fmwhatsapp/databases/axolotl.db-wal
        • Size 16KB
        • SHA256 12fd6558909d176491d2d658cb5810e82e5de6aeaa8d0209c8bbbfb6253d356b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        chatsettings.db
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512
        Submit Download

        chatsettings.db-journal
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-journal
        • Size 512B
        • SHA256 1039a66efbd0463bd35a0a79148128e4ee1e200faf35ae526f513551643f3d13
        • MD5 SHA1 SHA512
        Submit Download

        chatsettings.db-wal
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-wal
        • Size 16KB
        • SHA256 02eeea22afec602d969745d160508b92e401ae19879e4333e16d7620fa94a757
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        chatsettings.db-wal
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-wal
        • Size 36KB
        • SHA256 1e4a098c81cf3c9ebea2f7e80de98e40ab5054938f32b2bb4b792f9f8dbe1833
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        stickers.db-wal
        • Path /data/data/com.fmwhatsapp/databases/stickers.db-wal
        • Size 32B
        • SHA256 7e45c81597ab0ff6c93cb7b7007da06ab04df440ed48c73808e60f95f50aa8ed
        • MD5 SHA1 SHA512
        Submit Download

        sync.db-journal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-journal
        • Size 512B
        • SHA256 34d0b73bf0d7214ebce589ef12e1067da838049d076258f79d832068cd882d10
        • MD5 SHA1 SHA512
        Submit Download

        sync.db-wal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-wal
        • Size 16KB
        • SHA256 8a84809fc3aa678ffc8490301722420c572c9df93591fa485b3a23b61a2ce027
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sync.db-wal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-wal
        • Size 76KB
        • SHA256 00daf1072cd632397dc83994ddd11a40a43f7b598f90553ecbc2322e4ef07c51
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        576f403f-be5b-4856-b1a2-93dd7261577a
        • Path /data/data/com.fmwhatsapp/files/.trash/40f6f9b4-79a4-4525-8759-57b4731d9917/576f403f-be5b-4856-b1a2-93dd7261577a
        • Size 526B
        • SHA256 b1b22a03ea7e16806b5e485119ea9724f34d20aca0f3d368382d8da63ef4e23a
        • MD5 SHA1 SHA512
        Submit Download

        5ada37fa-2358-4230-a08b-c89d15ac541a
        • Path /data/data/com.fmwhatsapp/files/.trash/40f6f9b4-79a4-4525-8759-57b4731d9917/5ada37fa-2358-4230-a08b-c89d15ac541a
        • Size 67B
        • SHA256 6690518197cc5e5a46afdbb2310ddf15c9156afad2308d01a5bfa39e458511ed
        • MD5 SHA1 SHA512
        Submit Download

        whatsapp.log
        • Path /data/data/com.fmwhatsapp/files/Logs/whatsapp.log
        • Size 187B
        • SHA256 cfdde4c8596885bae8c7f8d1fac6a6dc906a0a1e4a228fc43a0580244a88fe24
        • MD5 SHA1 SHA512
        Submit Download

        .superpack_version
        • Path /data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/.superpack_version
        • Size 31B
        • SHA256 7460f2af53e810f2c0a28c8f7dbe3b745919005e4da2be1c70f9b28239529a76
        • MD5 SHA1 SHA512
        Submit Download

        extracted_pack_file.pack.tmp
        • Path /data/data/com.fmwhatsapp/files/extracted_pack_file.pack.tmp
        • Size 211KB
        • SHA256 fe0b20920dadfcca4b2dcfef21719bd39f5db5a4df9f69e11e1f6c178795cdf6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        wam.wam
        • Path /data/data/com.fmwhatsapp/files/wam.wam
        • Size 97B
        • SHA256 bbee59e83db5ca40daf7b235c70f696b44ba060f708c15e8a2b4d6f0eb91277a
        • MD5 SHA1 SHA512
        Submit Download

        wamprivatestats.wam
        • Path /data/data/com.fmwhatsapp/files/wamprivatestats.wam
        • Size 97B
        • SHA256 7ec3c9b55ea95da34f9cbe0519ac3d684af0c7df110b6a6a2f93ea3199c8782f
        • MD5 SHA1 SHA512
        Submit Download

        wamrealtime.wam
        • Path /data/data/com.fmwhatsapp/files/wamrealtime.wam
        • Size 197B
        • SHA256 08402965d1a9f96a0d91e81060fbd84c87abb057b16515eb958f559e69cc3e9f
        • MD5 SHA1 SHA512
        Submit Download

        dso_deps
        • Path /data/data/com.fmwhatsapp/lib-main/dso_deps
        • Size 384B
        • SHA256 269eb3fb229206a461ff8473bf1e740591167cd137659b74471a3691d7583a3a
        • MD5 SHA1 SHA512
        Submit Download

        dso_manifest
        • Path /data/data/com.fmwhatsapp/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.fmwhatsapp/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.fmwhatsapp/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 160KB
        • SHA256 f07603680dc1a28b36563af6227f5c54730fa3f89ac8e8a61af9bcf1ed995292
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 25fe13cff197bf7c6ab99e89ab15192c7b9ea695bb084ebc58c295a9277c11b8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 112KB
        • SHA256 491278cf43cd41364b237fc39ccf393a39987d63b9771a8bd95f5a63cb71bbf7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.fmwhatsapp/no_backup/com.google.InstanceId.properties
        • Size 63B
        • SHA256 383c3c8d9d34ebe8aa3ebcdafbecdbe1fdd8cda39eccfe326531b03b5dc68a57
        • MD5 SHA1 SHA512
        Submit Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP
        Download