Overview

overview

10

Static

static

10

[email protected]

android-10-x64

[email protected]

android-11-x64

7

[email protected]

android-13-x64

7

[email protected]

android-9-x86

6

Analysis

  • max time kernel
    51s
  • max time network
    347s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    12/02/2024, 16:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    [email protected]
  • Size 76.1MB
  • Sample240212-tk2xtsaa3w
  • SHA256 3476006a8f64bfe72a8b04477f6005293b5854cfbc58bee2ea28e59b58f0e316
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.fmwhatsapp
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4555

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        00002LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00002LightWallpaper.jpg
        • Size 10KB
        • SHA256 39fb86c3c500835c134d3638e2473b66aa1e132665f700b84c0140829678fedc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00003LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00003LightWallpaper.jpg
        • Size 8KB
        • SHA256 ae3fa98d1f1c417e7b9869a73ec6a9a107a20f82e96db3def9a29651391f5183
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00004LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00004LightWallpaper.jpg
        • Size 18KB
        • SHA256 f56b072e6ad0fcce9bfc1672813e26c61633173b855a77d1be7306e85adeb1bb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00005LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00005LightWallpaper.jpg
        • Size 5KB
        • SHA256 55b417dbae80b840665c968b6bd1fc3840786e6f9e8babeb6eb50ec89d4bb851
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00006LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00006LightWallpaper.jpg
        • Size 26KB
        • SHA256 7b3e377f7dd1ee2c41596f4e8e3ff874546ea3c06fdb89265e69f2944861abd0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00007LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00007LightWallpaper.jpg
        • Size 36KB
        • SHA256 833bd11f148d145dfdadba4fd8cedb0a2a125e1f4e10411e613f4a70de3ad2d0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00013LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00013LightWallpaper.jpg
        • Size 15KB
        • SHA256 eb9c4cbe5a5c4bc6a2da5dd6b0789afb82ab0ac533b172e2532eae0f4630ba83
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00016LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00016LightWallpaper.jpg
        • Size 16KB
        • SHA256 059499c43e66d3acf9b7a5b96f00a21390cbefc5047370444c07b7fa7dff8997
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00018LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00018LightWallpaper.jpg
        • Size 19KB
        • SHA256 095d80d06f45978a1f577a9ca0bb73c6c3e52517cda854d425b47455e27fd0eb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00022LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00022LightWallpaper.jpg
        • Size 11KB
        • SHA256 8e1b6c2b97dfa24c92ac68198a7a5fc8fa7cddfa23b00e263b06f588b5b2fedc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00026LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00026LightWallpaper.jpg
        • Size 20KB
        • SHA256 9a73ecfbf23e51176f6696a080a50e926d99e0a578d78a212f12d8fc48d6354f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00027LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00027LightWallpaper.jpg
        • Size 20KB
        • SHA256 bce7d9201ed26e55d92bb929272d08f6384d3f2b2f2ae708ed8a2df66a4f9e4c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00030LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00030LightWallpaper.jpg
        • Size 25KB
        • SHA256 9384f8760799d1d207946db885cf5dda68edc2f0491241acc724987efd711ff2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00031LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00031LightWallpaper.jpg
        • Size 9KB
        • SHA256 e6aff47397e808dcaf81b4cc8fe5aa9774cefca67e61d2aad95a8daf171a2936
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00032LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00032LightWallpaper.jpg
        • Size 27KB
        • SHA256 12867bc5e60114169b5375fecf5dea3efc693326b5588d7da5671326207fe6d3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB
        • Size 20KB
        • SHA256 dd98241974487ce11a331a28a6eafb2f01b7eeb50ab579af07fce08ad6b076d5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-journal
        • Size 512B
        • SHA256 bca3f1ec69c0e1f1564794cd4fb0279afa7f10979dc85423f0c8650bd6c63512
        • MD5 SHA1 SHA512
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-journal
        • Size 8KB
        • SHA256 a78ac3f4df453bf46bfdfa2f19dcf4303019549fc0a1f9d76f76a8b1195c25b7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-journal
        • Size 8KB
        • SHA256 95211c44b0cd91d6346204a7183bec84cb6ca3369c23b1d5b288c15d469ea7b3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB
        • Size 24KB
        • SHA256 67b1bfc15425162ff85f8a3972c6ded0b3a4cc76452682eb361780b7caeb3af1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB-journal
        • Size 512B
        • SHA256 1ea454aa4428c64e076bc69520b81d5bbb21c954188e45c29cc614fe5333a30e
        • MD5 SHA1 SHA512
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB-journal
        • Size 8KB
        • SHA256 22e5540df292fc6f1973554d00615434aa072d657666013c03c1134845d40e0e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB-journal
        • Size 8KB
        • SHA256 d2a531ec59d2b00bfecb4cc3d78d3fffb312d9dd885a2abcbb988603e2991f74
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _jobqueue-FMWhatsAppJobManager
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager
        • Size 12KB
        • SHA256 bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _jobqueue-FMWhatsAppJobManager-journal
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-journal
        • Size 512B
        • SHA256 4dcf783e52e348137b2214206fd5fe0a1a3e80ccd41af595e69798a40d13ff80
        • MD5 SHA1 SHA512
        Submit Download

        _jobqueue-FMWhatsAppJobManager-journal
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-journal
        • Size 8KB
        • SHA256 1ed1f591a1f75da30d013fb36bbbdedb8e180c255d413240176dec0359490049
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        axolotl.db-journal
        • Path /data/data/com.fmwhatsapp/databases/axolotl.db-journal
        • Size 512B
        • SHA256 84dd09c00286edda6e0888353c11c7e255d8a1e8841c1bb1eedc06856a7e5a03
        • MD5 SHA1 SHA512
        Submit Download

        axolotl.db-wal
        • Path /data/data/com.fmwhatsapp/databases/axolotl.db-wal
        • Size 132KB
        • SHA256 923aa05d897f2d92120cfde610029ec0c1df9209ed4da294719b3fcdfba186b8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        axolotl.db-wal
        • Path /data/data/com.fmwhatsapp/databases/axolotl.db-wal
        • Size 8KB
        • SHA256 dbf423965016dcabe59a8092267a40e2668e979f665516043f98b6a2cef85d9d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        chatsettings.db
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512
        Submit Download

        chatsettings.db-journal
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-journal
        • Size 512B
        • SHA256 cc175a5ca867d0c1dd7b839305f029ecc86baaf44f7d02c4bf4e9f462bf4fa3a
        • MD5 SHA1 SHA512
        Submit Download

        chatsettings.db-shm
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        chatsettings.db-wal
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-wal
        • Size 16KB
        • SHA256 1f8dc88bf3113b3f879dd4468a3b5e3db173ce657d015b18d21bddbfa659fe7b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        chatsettings.db-wal
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-wal
        • Size 36KB
        • SHA256 1b1e138ecdb8e71306f1ed8d15773bb3f0eae798d438732d71aaeb32d99c69b7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        stickers.db-journal
        • Path /data/data/com.fmwhatsapp/databases/stickers.db-journal
        • Size 512B
        • SHA256 f9c1650782e8330ecd783c5f366a28b6aa8477ce4334123900a71120375996ee
        • MD5 SHA1 SHA512
        Submit Download

        stickers.db-wal
        • Path /data/data/com.fmwhatsapp/databases/stickers.db-wal
        • Size 156KB
        • SHA256 c41792953d79509e1d760bc064ee25a1594f91143924f33df136fa443a704296
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sync.db-journal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-journal
        • Size 512B
        • SHA256 b45b1f05f46ec56a4f4dbd23a81ef422337aab75ba26c4bf36725fc655e116ed
        • MD5 SHA1 SHA512
        Submit Download

        sync.db-wal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-wal
        • Size 116KB
        • SHA256 36f7b4a4dbaf52d1c877702d7fda5ea3125af8a8b76fefbb5fb72f36b5dfedfd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        wa.db-journal
        • Path /data/data/com.fmwhatsapp/databases/wa.db-journal
        • Size 512B
        • SHA256 ba50a3de10d37bb45fa3d11e1fe8dffdc11c2a9dc3e0b28165561d9d1d7fc6c0
        • MD5 SHA1 SHA512
        Submit Download

        wa.db-wal
        • Path /data/data/com.fmwhatsapp/databases/wa.db-wal
        • Size 390KB
        • SHA256 eb5b1bb1e1fedc1171b32bac4061fdab32b4bba57d68ca569e6438948715e966
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        whatsapp.log
        • Path /data/data/com.fmwhatsapp/files/Logs/whatsapp.log
        • Size 187B
        • SHA256 67c8b919d0a84d4d72709a895bd4eb6abc2adf085cfabb830a5c6c80912c7e53
        • MD5 SHA1 SHA512
        Submit Download

        .superpack_version
        • Path /data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/.superpack_version
        • Size 31B
        • SHA256 ddc9f0c46175c5b3fa42ad8e422bb80a76e464c3ffcd60de511ca6dacf0eebf9
        • MD5 SHA1 SHA512
        Submit Download

        extracted_pack_file.pack.tmp
        • Path /data/data/com.fmwhatsapp/files/extracted_pack_file.pack.tmp
        • Size 211KB
        • SHA256 fe0b20920dadfcca4b2dcfef21719bd39f5db5a4df9f69e11e1f6c178795cdf6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        dso_deps
        • Path /data/data/com.fmwhatsapp/lib-main/dso_deps
        • Size 384B
        • SHA256 9856283bea75d37efc83d364559f3a58185c8bd28a3ca886c1748b9c37272e92
        • MD5 SHA1 SHA512
        Submit Download

        dso_manifest
        • Path /data/data/com.fmwhatsapp/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.fmwhatsapp/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.fmwhatsapp/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 5746be77c7d7c5b54127776834d676ca7f37b25395c7ba5f6f273994c547dda9
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 2ce7f9867e1709bd660fbcce583f43809a29ea108d6c99e9b4883eb38d728b97
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 160KB
        • SHA256 a4f234f220b9a201cdecf78f65cea7fe66c4464db9681e5ec31f60029f0b19ad
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.fmwhatsapp/no_backup/com.google.InstanceId.properties
        • Size 63B
        • SHA256 6130b22e7d42b07cbdb29dfa431d78c4a6b06cba9ad32400db194f17924f391e
        • MD5 SHA1 SHA512
        Submit Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP
        Download