Overview

overview

10

Static

static

10

FMWhatsApp...PK.apk

android-10-x64

FMWhatsApp...PK.apk

android-11-x64

7

FMWhatsApp...PK.apk

android-13-x64

7

FMWhatsApp...PK.apk

android-9-x86

6

Analysis

  • max time kernel
    160s
  • max time network
    308s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    12/02/2024, 16:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    FMWhatsApp-v9.98-GBApps.Org.PK.apk
  • Size 76.1MB
  • Sample240212-tkhh7aaa2z
  • SHA256 3476006a8f64bfe72a8b04477f6005293b5854cfbc58bee2ea28e59b58f0e316
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.fmwhatsapp
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4252

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        static.whatsapp.net.443
        • Path /data/data/com.fmwhatsapp/cache/SSLSessionCache/static.whatsapp.net.443
        • Size 5KB
        • SHA256 c7f9a321ad63d2b7f8077b7009b89126fd1697e846f8552c1915b7637e9158db
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        static.whatsapp.net.443
        • Path /data/data/com.fmwhatsapp/cache/SSLSessionCache/static.whatsapp.net.443
        • Size 5KB
        • SHA256 7e4398570aa9241a243559c3ae23cae89f306c84643e6848dcf613cd1acff181
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00005DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00005DarkWallpaper.jpg
        • Size 3KB
        • SHA256 781e06e41a1020793c3c18a337443f367b544bd3b37adffaf733bf0ac80af128
        • MD5 SHA1 SHA512
        Submit Download

        00011DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00011DarkWallpaper.jpg
        • Size 6KB
        • SHA256 ad035e1d70649231fd3b1ee0b1ac649e27f1c373ec090858ef7b4e7b5d541c82
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00024DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00024DarkWallpaper.jpg
        • Size 11KB
        • SHA256 da9ce86503b2ce777a93adf45e24809bf350e5512dd87419f44f9b5422643873
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00001LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00001LightWallpaper.jpg
        • Size 4KB
        • SHA256 fb13f53ce784443cb4cdb97ce46eb5d6a945d76fbd8fae3c6fab8484f777d27d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00002LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00002LightWallpaper.jpg
        • Size 10KB
        • SHA256 39fb86c3c500835c134d3638e2473b66aa1e132665f700b84c0140829678fedc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00003LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00003LightWallpaper.jpg
        • Size 12KB
        • SHA256 707ef8a4b946419cd1c307a090c89924aaf1a5a72f4fc23c58e7a837a7efc566
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00004LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00004LightWallpaper.jpg
        • Size 16KB
        • SHA256 cf3c23119a1726fb4732a2aa2f2a087edfc18b4716c34347f53c9da0ea78953d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00006LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00006LightWallpaper.jpg
        • Size 26KB
        • SHA256 7b3e377f7dd1ee2c41596f4e8e3ff874546ea3c06fdb89265e69f2944861abd0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00007LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00007LightWallpaper.jpg
        • Size 36KB
        • SHA256 833bd11f148d145dfdadba4fd8cedb0a2a125e1f4e10411e613f4a70de3ad2d0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00012LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00012LightWallpaper.jpg
        • Size 19KB
        • SHA256 45de3ecf843a7a19fe590d1cd44ee5d325b87d0899a41f46168a253796a03b39
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00013LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00013LightWallpaper.jpg
        • Size 15KB
        • SHA256 eb9c4cbe5a5c4bc6a2da5dd6b0789afb82ab0ac533b172e2532eae0f4630ba83
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00016LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00016LightWallpaper.jpg
        • Size 16KB
        • SHA256 059499c43e66d3acf9b7a5b96f00a21390cbefc5047370444c07b7fa7dff8997
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00017LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00017LightWallpaper.jpg
        • Size 31KB
        • SHA256 0bb186e8302fa0cd263fef0c554931b274b94976e364049c7917befd0adab971
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00018LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00018LightWallpaper.jpg
        • Size 5KB
        • SHA256 588651f0e4254a7e733a3e8a4391953dab1b7920119a97656327fa60a511e3ef
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00022LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00022LightWallpaper.jpg
        • Size 11KB
        • SHA256 8e1b6c2b97dfa24c92ac68198a7a5fc8fa7cddfa23b00e263b06f588b5b2fedc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00023LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00023LightWallpaper.jpg
        • Size 33KB
        • SHA256 d96f87e017f5642c2aae7f8be2d0157f66ddb4d7adfd7068b95d589211b63e8f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00026LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00026LightWallpaper.jpg
        • Size 23KB
        • SHA256 56d07b625ab5610f5fff0058e1f5ae7b91eefe925ee6e4760d306bcb67380dd9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00027LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00027LightWallpaper.jpg
        • Size 20KB
        • SHA256 bce7d9201ed26e55d92bb929272d08f6384d3f2b2f2ae708ed8a2df66a4f9e4c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00029LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00029LightWallpaper.jpg
        • Size 5KB
        • SHA256 65f182cdf6d28b54a58afee2178b30fb1fef9f44afb920cc429ebf06436100b5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00030LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00030LightWallpaper.jpg
        • Size 23KB
        • SHA256 37768fd864ffed5b49f08f937e475cc5b4d0ed36b189dc5e56f8b83305989393
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00032LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00032LightWallpaper.jpg
        • Size 27KB
        • SHA256 12867bc5e60114169b5375fecf5dea3efc693326b5588d7da5671326207fe6d3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        downloading-4689855466590652775.tmp
        • Path /data/data/com.fmwhatsapp/cache/downloading-4689855466590652775.tmp
        • Size 8KB
        • SHA256 2dc62cc7cc990a25abf1e96e3b867164075a2a33936b7a72ebee31fdf9142907
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-journal
        • Size 512B
        • SHA256 eb7b3e85b7115398e099a2ce1f4ac813894f769b557fa672e8796a4739ace580
        • MD5 SHA1 SHA512
        Submit Download

        BTOR.DB-wal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-wal
        • Size 16KB
        • SHA256 a7d21ca6d36bb2605a239a2329626bfe65672a476206020df1792d4965334eed
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB-journal
        • Size 512B
        • SHA256 9d6ec1dcc71f8b037add8a4d10f4f6fd74db0986d43ef51e090f2bf191eb943f
        • MD5 SHA1 SHA512
        Submit Download

        EHS.DB-shm
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB-shm
        • Size 28KB
        • SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB-wal
        • Path /data/data/com.fmwhatsapp/databases/EHS.DB-wal
        • Size 36KB
        • SHA256 823eb0a92deeb1242e5cc3e3d608695a60c23a08e36100ad737ebe6a49b046d1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _jobqueue-FMWhatsAppJobManager-journal
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-journal
        • Size 512B
        • SHA256 fafe9b1877fd0b52af674499d3bd0cbf9af04627b07215bfa4b1e41341855db2
        • MD5 SHA1 SHA512
        Submit Download

        _jobqueue-FMWhatsAppJobManager-wal
        • Path /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-wal
        • Size 28KB
        • SHA256 918667e56f6b099cac6181ab2ec85b1f5d38e211402da24bd714581274a532e2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        axolotl.db-journal
        • Path /data/data/com.fmwhatsapp/databases/axolotl.db-journal
        • Size 512B
        • SHA256 188eff71dfe03bce0358a5b6b715b4b918d04a5bb0dddc0cc41cddd6ebfbe174
        • MD5 SHA1 SHA512
        Submit Download

        axolotl.db-wal
        • Path /data/data/com.fmwhatsapp/databases/axolotl.db-wal
        • Size 132KB
        • SHA256 c8ed713cab44262adb57f4bd41935d5c5fba624cae654b0a7c992cc532a4ce65
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        chatsettings.db-journal
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-journal
        • Size 512B
        • SHA256 8203f50695f1e93f576ac158ceeaeb97fbc619fb9c1b69df4b90def63f5b77c4
        • MD5 SHA1 SHA512
        Submit Download

        chatsettings.db-wal
        • Path /data/data/com.fmwhatsapp/databases/chatsettings.db-wal
        • Size 36KB
        • SHA256 82ccaac8729fced93773534fa09fc9a0aaf4a14c858486cda593fcd57dd150a5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        stickers.db-wal
        • Path /data/data/com.fmwhatsapp/databases/stickers.db-wal
        • Size 16KB
        • SHA256 79a8e7127cad706feb0d094d2cb9dc80e9bdb0f1056e4ac32e67eb3b25449f82
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sync.db-journal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-journal
        • Size 512B
        • SHA256 d7f0b7823c6d42c8eb2348f88446475d4eb16fb9d69daf41698992ce0965072e
        • MD5 SHA1 SHA512
        Submit Download

        sync.db-wal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-wal
        • Size 16KB
        • SHA256 dadf09bc477ed270c410547281c507e44c3355af222b360b57f2283ed812a6f3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sync.db-wal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-wal
        • Size 116KB
        • SHA256 ccceb13953fea7c812251f703914491359f99d5b08cbb2755a48a85704c6a442
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        wa.db-wal
        • Path /data/data/com.fmwhatsapp/databases/wa.db-wal
        • Size 16KB
        • SHA256 7bfdd8f36c5d7e85eb4ec0bdc390c5df23495c64ba86cbcbd5c6e9034e91e46b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        wa.db-wal
        • Path /data/data/com.fmwhatsapp/databases/wa.db-wal
        • Size 390KB
        • SHA256 80ba40d6507af4ecd634070a25e4c27fd68278b11e16824abca9f859d6509d59
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        b066feb6-4d6d-47a9-8ce8-47145608436d
        • Path /data/data/com.fmwhatsapp/files/.trash/0303143d-ebbf-497a-a2bc-242983f570b1/b066feb6-4d6d-47a9-8ce8-47145608436d
        • Size 526B
        • SHA256 62802cd5039ff363156f7d4dd4d7360d095090a6331131f018abba016b6e1aa6
        • MD5 SHA1 SHA512
        Submit Download

        fa6419e9-403b-4429-a6d1-739cbcf09ccc
        • Path /data/data/com.fmwhatsapp/files/.trash/0303143d-ebbf-497a-a2bc-242983f570b1/fa6419e9-403b-4429-a6d1-739cbcf09ccc
        • Size 67B
        • SHA256 afff045ccff4a25dc9ed283acb206e37fbcdc6afd5adacc86c645d432e032a21
        • MD5 SHA1 SHA512
        Submit Download

        whatsapp.log
        • Path /data/data/com.fmwhatsapp/files/Logs/whatsapp.log
        • Size 187B
        • SHA256 7e9eb921a93ee57de66e7068f3a60499dd94f34a0424005f457688de73351e8e
        • MD5 SHA1 SHA512
        Submit Download

        .superpack_version
        • Path /data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/.superpack_version
        • Size 33B
        • SHA256 0390a6ec4bef671d118d898e1c4c19635d8325919f5a867da45d0c6feb4ec448
        • MD5 SHA1 SHA512
        Submit Download

        libtorch-code-gen.so
        • Path /data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/libtorch-code-gen.so
        • Size 979KB
        • SHA256 e5623587400de1ba49a1d41d88892c2c6dc42626c74f53e40d9ac15e98db7f99
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libvlc.so
        • Path /data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/libvlc.so
        • Size 3KB
        • SHA256 0d87625993ef963e9bebf8f21f22525807d48dc26b3195fe94bedfe877f376e7
        • MD5 SHA1 SHA512
        Submit Download

        libwhatsapp.so
        • Path /data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/libwhatsapp.so
        • Size 788KB
        • SHA256 3ab90df61f9c37feb394fa58d36a0d9b4540ea5e69b38c74b320127be7898c2d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        strings_en.pack
        • Path /data/data/com.fmwhatsapp/files/decompressed/strings_en.spk.br/strings_en.pack
        • Size 14KB
        • SHA256 2f4338541405123620373068dce99c1b5a431705354f7a6415fb4871feb185cf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        extracted_pack_file.pack.tmp
        • Path /data/data/com.fmwhatsapp/files/extracted_pack_file.pack.tmp
        • Size 211KB
        • SHA256 fe0b20920dadfcca4b2dcfef21719bd39f5db5a4df9f69e11e1f6c178795cdf6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        wam.wam
        • Path /data/data/com.fmwhatsapp/files/wam.wam
        • Size 97B
        • SHA256 bbee59e83db5ca40daf7b235c70f696b44ba060f708c15e8a2b4d6f0eb91277a
        • MD5 SHA1 SHA512
        Submit Download

        wamprivatestats.wam
        • Path /data/data/com.fmwhatsapp/files/wamprivatestats.wam
        • Size 97B
        • SHA256 7ec3c9b55ea95da34f9cbe0519ac3d684af0c7df110b6a6a2f93ea3199c8782f
        • MD5 SHA1 SHA512
        Submit Download

        wamrealtime.wam
        • Path /data/data/com.fmwhatsapp/files/wamrealtime.wam
        • Size 197B
        • SHA256 08402965d1a9f96a0d91e81060fbd84c87abb057b16515eb958f559e69cc3e9f
        • MD5 SHA1 SHA512
        Submit Download

        dso_deps
        • Path /data/data/com.fmwhatsapp/lib-main/dso_deps
        • Size 272B
        • SHA256 5eddcf56179f0c823543e154a9896b834cef2cfae99e94da96feda430ed10ee1
        • MD5 SHA1 SHA512
        Submit Download

        dso_manifest
        • Path /data/data/com.fmwhatsapp/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.fmwhatsapp/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.fmwhatsapp/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 72be1d031f2cf14b1650171851b92012fe121a90fc76ff9904a53a5aab8832ca
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 f66371aaf2c33da1a5fd467484ab5a15ae8ae28f9d653d3bcf8c28f076106d96
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 112KB
        • SHA256 a67e3d8af55d0c7939f7ca81e8714f259b64618d5c4cd9efff127dfcf459138f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 169KB
        • SHA256 a5bcbcd1c913e79723b74534ab8d7f4ace83bf34f4b5682ca8a4811c8b20fe54
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.fmwhatsapp/no_backup/com.google.InstanceId.properties
        • Size 63B
        • SHA256 6e9ed3790c79cda41fcc789355c2321f2e80cacf1706c360a69cf26ba5f26a98
        • MD5 SHA1 SHA512
        Submit Download