Overview

overview

10

Static

static

10

FMWhatsApp...PK.apk

android-10-x64

FMWhatsApp...PK.apk

android-11-x64

7

FMWhatsApp...PK.apk

android-13-x64

7

FMWhatsApp...PK.apk

android-9-x86

6

Analysis

  • max time kernel
    61s
  • max time network
    346s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    12/02/2024, 16:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    FMWhatsApp-v9.98-GBApps.Org.PK.apk
  • Size 76.1MB
  • Sample240212-tkhh7aaa2z
  • SHA256 3476006a8f64bfe72a8b04477f6005293b5854cfbc58bee2ea28e59b58f0e316
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.fmwhatsapp
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4765

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        00001DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00001DarkWallpaper.jpg
        • Size 2KB
        • SHA256 b541695affda1e92cac2e9bf5993adc6ebaf1d17055b4afd28261e4baddf155d
        • MD5 SHA1 SHA512
        Submit Download

        00005DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00005DarkWallpaper.jpg
        • Size 3KB
        • SHA256 781e06e41a1020793c3c18a337443f367b544bd3b37adffaf733bf0ac80af128
        • MD5 SHA1 SHA512
        Submit Download

        00011DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00011DarkWallpaper.jpg
        • Size 6KB
        • SHA256 ad035e1d70649231fd3b1ee0b1ac649e27f1c373ec090858ef7b4e7b5d541c82
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00015DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00015DarkWallpaper.jpg
        • Size 12KB
        • SHA256 2f2f54535a01b728246e04bde355f758f661aa4d6337143bfc5130784aaeef16
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00020DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00020DarkWallpaper.jpg
        • Size 16KB
        • SHA256 3bf8f668c2de257590429e45d4014c0f036613948b48975aa10c5b648f2a2efc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00024DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00024DarkWallpaper.jpg
        • Size 11KB
        • SHA256 da9ce86503b2ce777a93adf45e24809bf350e5512dd87419f44f9b5422643873
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00013LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00013LightWallpaper.jpg
        • Size 15KB
        • SHA256 eb9c4cbe5a5c4bc6a2da5dd6b0789afb82ab0ac533b172e2532eae0f4630ba83
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00027LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00027LightWallpaper.jpg
        • Size 20KB
        • SHA256 bce7d9201ed26e55d92bb929272d08f6384d3f2b2f2ae708ed8a2df66a4f9e4c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00028LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00028LightWallpaper.jpg
        • Size 1KB
        • SHA256 704496e97d97d14d96613d879945113fb81530594986006486502a6339a08798
        • MD5 SHA1 SHA512
        Submit Download

        00031LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00031LightWallpaper.jpg
        • Size 1KB
        • SHA256 0626b6dae78a4f1366a90e3337ab8cc2bf65b4a335313a112ea5c060c85ad7e7
        • MD5 SHA1 SHA512
        Submit Download

        00032LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00032LightWallpaper.jpg
        • Size 27KB
        • SHA256 12867bc5e60114169b5375fecf5dea3efc693326b5588d7da5671326207fe6d3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        downloading-7001534245196814579.tmp
        • Path /data/data/com.fmwhatsapp/cache/downloading-7001534245196814579.tmp
        • Size 64KB
        • SHA256 38c308ae957cce57110c8425bf89ec50a1491647807c176df46a70d68e9da563
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB
        • Size 20KB
        • SHA256 dd98241974487ce11a331a28a6eafb2f01b7eeb50ab579af07fce08ad6b076d5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-journal
        • Size 512B
        • SHA256 2a9280efb48b454820737a2bf093afe27a7b81463550419b71f8a036202239b7
        • MD5 SHA1 SHA512
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-journal
        • Size 8KB
        • SHA256 7baf2a3eff12a0396cf91b17bb80b6f81d55d0fdcf9e6c4a26897bf2facedd67
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-journal
        • Size 8KB
        • SHA256 5975be4855bfe4692a50938560385f1a55e4acbf918b8ac61452b472459184b1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB
        • Size 24KB
        • SHA256 67b1bfc15425162ff85f8a3972c6ded0b3a4cc76452682eb361780b7caeb3af1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB-journal
        • Size 512B
        • SHA256 5c07224227398e970710e60b27a84f5e86c0648a37036751594e48c7bebd08ae
        • MD5 SHA1 SHA512
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB-journal
        • Size 8KB
        • SHA256 e42174d13452818255871972ccf9266df47482867bd7a9ba798cdee8823b86e3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB-journal
        • Size 8KB
        • SHA256 3cfa7e84347b3de3bbefc9450f759cf61a708c4f77fefa7ae60b8ddaf6d03758
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _jobqueue-FMWhatsAppJobManager
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager
        • Size 12KB
        • SHA256 bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _jobqueue-FMWhatsAppJobManager-journal
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-journal
        • Size 512B
        • SHA256 41d3f4838a1e8b543b701bd210e6042543bdfec6bab3c7049e27dc5dfa9e8d49
        • MD5 SHA1 SHA512
        Submit Download

        _jobqueue-FMWhatsAppJobManager-journal
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-journal
        • Size 8KB
        • SHA256 6daeae9269b1eb5bd6160d24656b6949d92e6011f05e9ef5aebe171b6bd65fd6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _jobqueue-FMWhatsAppJobManager-journal
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-journal
        • Size 8KB
        • SHA256 4f0881a7f02d3e2b0a20e48633ad7865ce5fb8ad46ab7339b55aaf99ac6548f2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        axolotl.db-journal
        • Path /data/data/com.fmwhatsapp/databases/axolotl.db-journal
        • Size 512B
        • SHA256 4fd124e31becfab9330dbcd80d9f525894037af5530651f7ac7fe17af0035ffe
        • MD5 SHA1 SHA512
        Submit Download

        axolotl.db-wal
        • Path /data/data/com.fmwhatsapp/databases/axolotl.db-wal
        • Size 132KB
        • SHA256 3068ad1fb4b39cb0738dcfec51bc7a680c509d45d4be7a53164d09990bb6eaaf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        chatsettings.db
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512
        Submit Download

        chatsettings.db-journal
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-journal
        • Size 512B
        • SHA256 9eb9be063019a84f9725d6c4c6da24263439b3a45cd23068431443a6880fd82e
        • MD5 SHA1 SHA512
        Submit Download

        chatsettings.db-shm
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        chatsettings.db-wal
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-wal
        • Size 16KB
        • SHA256 96f3df45d5f7baeb5ab0dc46dcd057d614c845936821682ba7cd16f958aa1d7c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        chatsettings.db-wal
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-wal
        • Size 36KB
        • SHA256 c52088c02ee307a21532300d804700ba597212ed2efd3bddeb6fc1145902a5cc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        stickers.db-journal
        • Path /data/data/com.fmwhatsapp/databases/stickers.db-journal
        • Size 512B
        • SHA256 402f79ea00b9c613af4e4728e4eed2075dbc641f786a404efa19aaa82e61660b
        • MD5 SHA1 SHA512
        Submit Download

        stickers.db-wal
        • Path /data/data/com.fmwhatsapp/databases/stickers.db-wal
        • Size 16KB
        • SHA256 13b7314340426c01f5ec8b688676504db110c0badb9c3ae541ae7c91c9436119
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        stickers.db-wal
        • Path /data/data/com.fmwhatsapp/databases/stickers.db-wal
        • Size 156KB
        • SHA256 dc8376d15b6d8a3c42452fba7d83f43e9240809a7a326863f0ee6923b4c15cd3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sync.db-journal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-journal
        • Size 512B
        • SHA256 a49c884be91edb24f797033396c027c5335a635170adef069761cd675af6e7bf
        • MD5 SHA1 SHA512
        Submit Download

        sync.db-wal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-wal
        • Size 116KB
        • SHA256 c09a3908620c08c57ef2b42706c889b6b22cd8354cd89eb4321793ed6aa814e1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        wa.db-journal
        • Path /data/data/com.fmwhatsapp/databases/wa.db-journal
        • Size 512B
        • SHA256 38fd095af315d19588603bdf439da7717d0f0f11fc24a1722c4710fab2aa5b35
        • MD5 SHA1 SHA512
        Submit Download

        wa.db-wal
        • Path /data/data/com.fmwhatsapp/databases/wa.db-wal
        • Size 12KB
        • SHA256 a6892c4c3d52e2c9b29400febec8e2d70d3eab36377ac4212f0928a087545eea
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        wa.db-wal
        • Path /data/data/com.fmwhatsapp/databases/wa.db-wal
        • Size 390KB
        • SHA256 b8448f60b78ee40790bfb853bd6a2c9fbbae7e9ddae7870e5ad770fa27413ccf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        81e1b0d9-3994-40e5-8f93-287316f73926
        • Path /data/data/com.fmwhatsapp/files/.trash/13e080b1-ce18-48bf-936a-5bc6761c9740/81e1b0d9-3994-40e5-8f93-287316f73926
        • Size 67B
        • SHA256 6690518197cc5e5a46afdbb2310ddf15c9156afad2308d01a5bfa39e458511ed
        • MD5 SHA1 SHA512
        Submit Download

        b806a4d9-bf77-47f6-9128-cdd81ea52c11
        • Path /data/data/com.fmwhatsapp/files/.trash/13e080b1-ce18-48bf-936a-5bc6761c9740/b806a4d9-bf77-47f6-9128-cdd81ea52c11
        • Size 526B
        • SHA256 b1b22a03ea7e16806b5e485119ea9724f34d20aca0f3d368382d8da63ef4e23a
        • MD5 SHA1 SHA512
        Submit Download

        whatsapp.log
        • Path /data/data/com.fmwhatsapp/files/Logs/whatsapp.log
        • Size 187B
        • SHA256 edc479d583a2baf84cc097195838748696818a475bf933d0220c377b8b616cd5
        • MD5 SHA1 SHA512
        Submit Download

        .superpack_version
        • Path /data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/.superpack_version
        • Size 31B
        • SHA256 d30b23be74e0225a950abf79604d3e78330e68c6cf56e837e2aea9e4c7a3a86f
        • MD5 SHA1 SHA512
        Submit Download

        extracted_pack_file.pack.tmp
        • Path /data/data/com.fmwhatsapp/files/extracted_pack_file.pack.tmp
        • Size 211KB
        • SHA256 fe0b20920dadfcca4b2dcfef21719bd39f5db5a4df9f69e11e1f6c178795cdf6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        wam.wam
        • Path /data/data/com.fmwhatsapp/files/wam.wam
        • Size 97B
        • SHA256 bbee59e83db5ca40daf7b235c70f696b44ba060f708c15e8a2b4d6f0eb91277a
        • MD5 SHA1 SHA512
        Submit Download

        wamprivatestats.wam
        • Path /data/data/com.fmwhatsapp/files/wamprivatestats.wam
        • Size 97B
        • SHA256 7ec3c9b55ea95da34f9cbe0519ac3d684af0c7df110b6a6a2f93ea3199c8782f
        • MD5 SHA1 SHA512
        Submit Download

        wamrealtime.wam
        • Path /data/data/com.fmwhatsapp/files/wamrealtime.wam
        • Size 197B
        • SHA256 08402965d1a9f96a0d91e81060fbd84c87abb057b16515eb958f559e69cc3e9f
        • MD5 SHA1 SHA512
        Submit Download

        dso_deps
        • Path /data/data/com.fmwhatsapp/lib-main/dso_deps
        • Size 384B
        • SHA256 2d79594eb8a8ba204a0435d6a93a2eced40eea28db0e946008927fe41849bea5
        • MD5 SHA1 SHA512
        Submit Download

        dso_manifest
        • Path /data/data/com.fmwhatsapp/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.fmwhatsapp/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.fmwhatsapp/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 30518296b253c5aa624090f19553664c5d5ed3439fc023c210ca014d9981bc49
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 3e179a3f16ae4d9e4d81c9abdf2b0d74112ecc053b4d451ec624edf05e325bca
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 48KB
        • SHA256 b2b7dde21b73a393cdc6b65061ffcc9259b09a49d0803f722cf88390046860a6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 152KB
        • SHA256 08fad7fd8e2c80b87586759d3a0f593c81a4a4eec97b0a0107f735a48a6e16ae
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.fmwhatsapp/no_backup/com.google.InstanceId.properties
        • Size 63B
        • SHA256 22573c1c63108fea0d368bf47037135a510b32ad60d6c903841b031c7eede2d6
        • MD5 SHA1 SHA512
        Submit Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP
        Download