Analysis
-
max time kernel
58s -
max time network
334s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
12-02-2024 16:07
Behavioral task
behavioral1
Sample
FMWA9.93_Official.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral2
Sample
FMWA9.93_Official.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral3
Sample
FMWA9.93_Official.apk
Resource
android-33-x64-arm64-20231215-en
Behavioral task
behavioral4
Sample
FMWA9.93_Official.apk
Resource
android-x86-arm-20231215-en
General
-
Target
FMWA9.93_Official.apk
-
Size
69.6MB
-
MD5
921ce55fa82f0025debcb7cb3cee27d8
-
SHA1
cca091918c4b55d00dda82221a198023aff27dd6
-
SHA256
75f804d346dc48de24e447e262da09b75bb20405095bcee2ab2a775800158ef9
-
SHA512
569a25d5c9488e1aef22f064d5f751cfb2cdf5aa2e56747759cb7fba17facc373d8e31577a25a8025e5b3ae9c884f3d9603e4db7abe99d1ed3af2ed3dc0ff8e0
-
SSDEEP
1572864:tHMbZg+KOS73QTXvmpQWACjrXS0CYZZW+jApvoG+oQP1o3N:tHmhKOS739QWAGXgYZZW1toGq9mN
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.fmwhatsappioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4643 com.fmwhatsapp /system_ext/framework/androidx.window.sidecar.jar 4643 com.fmwhatsapp -
Acquires the wake lock 1 IoCs
Processes:
com.fmwhatsappdescription ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.fmwhatsapp -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes:
com.fmwhatsappdescription ioc Process Framework API call javax.crypto.Cipher.doFinal com.fmwhatsapp
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5033211178942b0198b9f6549c26e87a7
SHA15fcb4ce18615a586539a7a1b0bdc7c250bb9b9e3
SHA2563ff51b1c6e9a829e60499c4d9b15e2792263166f6be6ae997b6f2ef9d1272d6f
SHA512d41bca07134428f90325aea460db0b1014b89b2b2043d938c99d3da4cff249e1b1a85e8afc04eb47527eb23ab28dc1926bf83fd03dbd30502320a2a28002e47a
-
Filesize
9KB
MD5fb9b168a5224ad8ac79d0ac2a05da6da
SHA182852b2e992306121e31a81144cda8a1ac2f8e27
SHA2568507e48d67270c95797a4d6fa9f244f773629e8e37477c3c72d0135d4410adb3
SHA512b1fb8ee860f80516e025028f1f14209e380660c013dd9529abc1c728ee8b0b0c7c0a94db1c295bf42d676f8adc3b78a724454e403eb9d78014ec50465d449f54
-
Filesize
12KB
MD5f41f531c07d4141546a531ff9caffdcd
SHA19dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5
SHA256bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646
SHA512e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4
-
Filesize
512B
MD52bd783f87f3dfef1ce90835ba4bebf66
SHA1a0f35c3fde04c7efb61e63b8ec2ccb2d240c8b81
SHA256a3a65c65a10313a662660cc4150327f71ad9302ffc865741b62721d608c73d86
SHA51231785db0bec6d789bd95b969a1c918cb18da78e3025e0078df3d3e47cfa14fa9445a6a2b52d5eac7fca756210d65ce5fc84ce3e5c4990a3dcc4b05a212ee7336
-
Filesize
8KB
MD5f45e858f924a5048e504d50bfa0fbf0b
SHA1daa8bac7bba91ee6c380eee711c1b248eb22dc80
SHA256015386ea9a5a2f5194035d32631ab38f24a5dc1599c32e750a0774f2f80c8b12
SHA512f3717b55730fa8fe84b14599660679869e85e59ea6a553bf18179fa9df96789830ac4a8788e74448628f3291471c392c72cbc1732f193acc34cc63d8196e5914
-
Filesize
8KB
MD5143b6a4501076516d14a4f5fe7b29da6
SHA10193e05ebbe7a5bbcdbba1b4e0b54417ac87740e
SHA2566ee694d9ca1fbf53be014688f69b4930481a7188b96c0dd692efa4dd33b512e8
SHA5122304871e928c833232577778717812fb0b62e25c85ddcdf53ffdd8c2289b7d480085876a32829bac4ea25cb8d65b813e3a7f033ae29b9e3b246a2950683f7497
-
Filesize
16KB
MD515532ebb0379d48368f7621241143284
SHA177ed78d133ad590e83ab0a43f2c89581d5bcc501
SHA25628724d67710ca6cd878315b0065b97a63762dedc54f13af1a71ca4070d421c2f
SHA512d1e0227fc9ee4c10f7b53baad4335e5035c4d27e37cf5fab8018dce19fb0a3e40c662337e1c38d606eec7a9899072d36a27e3dc4e9037fedac9cf9a8aca01a20
-
Filesize
512B
MD56b1b0077e11c200e26aa77757e38db98
SHA10f6f2b4e41c4a579f181429e83476c6c977a4331
SHA256140a5f23045a09ba57ffa11f22dfac34fb16eaa5bb8fc0383292524edfe14c3b
SHA5129e34af6cab20bfa39bdbca16e2e954653a7da630e2b402cc137c688e41fbac42391a9dfc80113c56190069090e38de42a0d75ba3bde3f9d7b8cdb5cda1ef432e
-
Filesize
8KB
MD53c665c304f6610662f2e86f0bfed5910
SHA140a267892ab5567b05ab9122339599221f99b220
SHA256d3a846153b8006c0ad85331492742457d96dd5f9f7e6f51213d67e1cc267cf9f
SHA5126dcd054e15b7ad9dc9fb7bab840d90f8320572b470d5b0ae263af2342df5a831f208c167b3a4697a49538a5790045d2f850ce19bfba5dd5ccd3548641d15bd57
-
Filesize
8KB
MD556582c865a26227a8927fc4a8f927993
SHA16095939e568f65c5fceda15d2e404c147c3d1a31
SHA2566992019597bd0438ad7aa50e547a9f11208b1587620cce1bc226e505e3c623e0
SHA51260f8894389421c5ae2656be7e0cfd325ad9ba22bbab03877a746aadb6d91368b1d554ad6bf4f52f0b934507dd906ead4a1f7ee4b23201ff57862a9b4da9bdff6
-
Filesize
512B
MD56a85a4a887483d2b812e0efedcbadb39
SHA1d8629b6b230f3c6fcc21efc22aea8e6b8f004d26
SHA256bcd88773cbac49861b8b5053008f773f87825b70c3153d7e89d6a8e8343a4ded
SHA512886b25faacb7b71ca0b246e39633e8f3711a7a3c60fded842165be6ee97da79a5c57d5063611254c0feffd5c5f9b34f56bc7ad4296472dbd5e112120179a7bbb
-
Filesize
16KB
MD5ce338fe6899778aacfc28414f2d9498b
SHA1897256b6709e1a4da9daba92b6bde39ccfccd8c1
SHA2564fe7b59af6de3b665b67788cc2f99892ab827efae3a467342b3bb4e3bc8e5bfe
SHA5126eb7f16cf7afcabe9bdea88bdab0469a7937eb715ada9dfd8f428d9d38d86133945f5f2f2688ddd96062223a39b5d47f07afc3c48d9db1d5ee3f41c8d274dccf
-
Filesize
16KB
MD545ad8e25f2a6e0c40034ab87f626bb53
SHA16d15d79a4ff845ed68053478a3e6e2c0e71b78b0
SHA256c2701a63e32abf8520179addfa59e4ffefa5f9fa093498314e6663be36e57da8
SHA512bf09bc73b6be28faee7d3e8b5b289864b0f12c4ec490690b3bf2fc14cfa6db8d511da559ab728e3c8d70d977c25f8bcd3f6bb918a274bcf97c67457157ea3fa7
-
Filesize
40KB
MD562feb917a7b41dde249bf50396e30902
SHA1d3d6ceffcda667e28f971f67154140e186318de3
SHA2568051de6a4eef85671e7502cd73d25d3c8e9328f2d244383bdac6a8bdd412438a
SHA5121fc0c1dab4b3793bd40c12c50fe5825b954343a1cccf99c8def6c99117db6b5d6ffe60e1c790d7d0dbb80e58ff319e341d115f16155991a9e659ed879b248dfc
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD533e2f9eba66f4cf3a9e9450a8237a2c3
SHA14136f64ea60011839ff61143c343db792473e63b
SHA2560a7bf3dcab3969509c2e7b515ae7724e7bb8baa92efb7afe9932eb1e5b1b7c0c
SHA5123d7e3f0de7643c4059a44bc28a47dac5444e2638a642494c1080f6777718aafe15eae40312335cd1313edd9ab87f6be497bd6d78bcfaf7a1d60d52e24fde972d
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD566383c140eabc1ba26b3fdc65c11a72e
SHA18e31eda340a94f208ff01b568f28ca01c582cdb3
SHA2565d2996c54693688f4a67ac3e61406dbd8bdf2b05173dc719b4790ef4f70c53c5
SHA512a067c08d050dd69b6a914e180209ddf86d92e1a853ef5cb95372a1df33e9c2b8ed446edb6d3484fd4b6502a120052017dab9dfbe7b8f7b54c0f109e1d02a4e47
-
Filesize
512B
MD530876fdd98880284b958a8b7836bb1f6
SHA1ffe3378fa1e0697b745deedd9aa6f92a86d44ada
SHA2564704fa59cf8a72fc8b412a4b244b099149cbb58f211bb650303388f2c021d6f1
SHA51265287032d4db9e2c8759010b4eb7f39b2946e64a47aba491fb897cb453e6336a12641fe9922741b7eea595cf74859cdb03c9ca86738f7032f6b885d1472254ff
-
Filesize
16KB
MD5e5786fd137f4f7c61b3d40c5775410a1
SHA1aa0172c5a4aec746674a819c947e67864e2eb16e
SHA2567d3d2e64cab028745160aba9262288c098ae1e64ee822cdc6149f13e6af506c6
SHA51227dbca77c3bfcf9d6c9db650380217c50dca2c7552dcc5c44e9509a876069cb13334008d52bf4389a15c03d60dd0c8edcf904898b34a0ec72264269009e2bab7
-
Filesize
512B
MD56432faf77f690c732c3f358c5f882273
SHA132179b5ac16d77a39317ee9b11575df3ac82ff48
SHA256b5b995e9216510e450ce2158e7282543acead4aaa6364f4e14be34b0bcb211e7
SHA512706efa4fa4d80db6262d8d48029fed47be125a40b06d13dd48547048f204021abf85f601928bfbca36d7595f6093805ad8454f85db008c14ab4ce31ae840d07d
-
Filesize
16KB
MD5e9a1ccdb0f5d560a9e96de9bfb49fd4e
SHA1e741b7b94e7e0ac3dbe621514b502391d3f20fd8
SHA256900687a1a83cb2b55616970565cfd058d146ab19bb8afa832b67f341f1361da1
SHA51216f8a85b0aafbf3dd1b6a676efbef1d6de2b8729d8470e10224468cc8e63811b7d38f46982bf19c1e8d2498ada4fc6f09b65bf8fb74eb16c96230f0bf4dc8295
-
Filesize
512B
MD540e97d4e0f1604979f301ff8573529d8
SHA1663aa372c945251ab423febf49bb4aa4c7728edc
SHA25629c409397821c5221eb686dfd183d80e5716a689bc4fbc6789df4e34cd14bbbd
SHA512119cc8a82a20870078f413ca3b5b8da35ec60fe077d1a5cd56202daa60ae71ce99b11eb48c9c51417bf14df76a7bea9ad7d079461af3b16655f4bde91bbe94c9
-
Filesize
16KB
MD52732ad364160dbad766dbda1ada5a421
SHA13e9f56558f76cbd6fa8a0230f244deebefb377a5
SHA25616853fe0c0419ea19f3a222c0d019fa041b6f5d1b7f66136be92207755934584
SHA512b6ca1e6dc137aa946f3642e0b813abdd77c38a01d6d17388b23785254a6892d87d2e5af61ff1011b5c141e0396036e3b797769ecc535a98ab024a504dd5f7cf1
-
/data/data/com.fmwhatsapp/files/.trash/40afca54-09b7-4b00-9aef-32f4a559d7fd/5d27b3dd-2f87-448c-83ac-04fda35842a4
Filesize54B
MD5d292323d1e075fb042e84cf6444f9c84
SHA1e18f001838c1e0cb6991b6a4b7e4813ff07ca04b
SHA256bb62afd1b6c8760e879bcebf19183716effd58717b8b9de764453e2db6e8034f
SHA5126050c900901bd506d7d2408748b5fde8d1621c9c6e451e0565aef4d22108eb6ad0aec16125257363cb15bb71ff670c33ff73ed22aa61c3c633082c679b6f135a
-
/data/data/com.fmwhatsapp/files/.trash/40afca54-09b7-4b00-9aef-32f4a559d7fd/5f15609c-ed4d-4f14-9e85-a8059617aa88
Filesize525B
MD5c7263af93ac3aa8ddcd5165fdfdca7c8
SHA10475e5960f5fbfc1ee1732e779b2e3f76512349a
SHA25654985bcfd8005f0048fc893e930a3bfa5534610efebc0ee2862e02f8e9acbecc
SHA512ab9b93f580bd83e5c054cadf208beb0188c5ce4685f6bcfe5b03a166e0e5a482c6393e899238d0f9fb1e24770392e9e9435f2ce61e6779452e67dd05049cd534
-
Filesize
185B
MD50fc5f46a0a509f3e913306b1d4af28a1
SHA1085c6b4b55810084f2d039624aede6e4f93eeb1c
SHA256b24a32dca1e36d9a59adbecc00d1dc24140c035088323eda7a5031abe7243d55
SHA512ab42abe12fb95498194c5eeca5c16d314c0103d10a39cb20264b12ed1290ea088f5108037951f5b30b8b30ddf508f31809b5a0578cf763be220b90c2a57f9594
-
Filesize
30B
MD544541b61ee8087ff358ac2bba36f0cc7
SHA1dd742468046732b6834ec09bc0a90acc1adbf80e
SHA256a9c6c5bd5e3e5713e8a93988352f1011c16b15bb34c3adf076f7f6a01a5fc443
SHA5126f6bd6c5ef4c02fdc393dc2b964387b6b7edd96e2ca138464072071355ca55a5d835eb60efef9c7a78743bbd37562e42c4cbe0c77eb6cf584bf8ef79754b79e1
-
Filesize
211KB
MD50c723e248d4fbd04fba6b9716c4c4da7
SHA1a665110bf4b35616b3678debd41e5d7ed86fe4a4
SHA256fe0b20920dadfcca4b2dcfef21719bd39f5db5a4df9f69e11e1f6c178795cdf6
SHA512f718a2d52c84107d89d7476555f9dd193c4be7e16b75c26c1081aa93ebd2c56398035c7882328ffb3aa2c21f32b03ad223de01eadf786cfc6e023f9a2f7df8c4
-
Filesize
384B
MD55d865b4b6f43a1664dc85ba6db1b2802
SHA18fc0e754d9348b88b5af6624b2672dc0028d53ad
SHA256d13ca5aea408e4bc506349099cac6395cc861306c06cedbad66572f603c91c29
SHA512f39ba76b9c1140598e6faa445cbe1e7944962d6e0dca3f334174786c15264e3e77c51716802a71c94cee56d19fbb78996e91b40ac46ebc4f21c7749f7abb6e19
-
Filesize
5B
MD5c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA51229f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1
-
Filesize
1B
MD593b885adfe0da089cdf634904fd59f71
SHA15ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA2566e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
-
Filesize
1B
MD555a54008ad1ba589aa210d2629c1df41
SHA1bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA2564bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA5127b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339
-
Filesize
512B
MD5f24c35f9ce2ca54dea31512501d26d9d
SHA11603217db78a7b07b0cbc7fcd939b851f3447173
SHA256ce966cfc8604102c2efa33046b7c45b66e1fb0dc1175ddfbe27ebdb45bd27eda
SHA5124d07c2ff4f11cc0e24f96685b1b321cfb6f5ca4e4fe299ac4c2711e147b7e6742275f46e45b74febfacd9e9a2a5400dc2ff2b65c910b376cd0aaa51a58d841c0
-
Filesize
16KB
MD5b4ce041ff165175524ce875d97f2221f
SHA18e7b8e8fdd2b60666d511915664c7f7e23692b30
SHA256c50125ec5c2f635cc41eb9c4db0fb68b52f1d71af4726a834d0ce72d35c613c2
SHA512b331a87632ea6485a6c71cc5314360063c73366fc742228ac0f87a814f5331f9546985ae5f282a1a334325fcdab7969614a18a2ad0d3c565ef7bbbdda79444fd
-
Filesize
112KB
MD5bbfb1cbd7873f0bdffd8eed1941cf119
SHA143860d69648f058e304ce91a42f8a97279950301
SHA256356d960958d7a2d43814cea7662e475b06d7b762772f70f122d620c47b8d928f
SHA512b0b6c2ebce94f9643230032546cf3ca5accf71151817adb3c6a45ee3906265ecb1e3d28075a4f6ef39e5d88ab30255d65ede4012505f529a76ef540aade0e6d4
-
Filesize
63B
MD5fe4a50a275c77c66751148f086aecf99
SHA160563d3388a564847df2a5571282bd61edfcca7b
SHA256e48d0564da7454796af12aa93fe1dc28c968bdf239ac739f4899f3afa42ae6c1
SHA512fca2e8192d7e72ba631f665674c8e328ffbaff9c167671b093e3f40eb399ea45f628c5677b1e9015f9d575ff1cec1581a2fc47df096dabd56572ba096c0accad
-
Filesize
12KB
MD5bdf3529e80318eb14e53a5bf3720c10d
SHA125c9ace4b1af6e80ebb2572345972c56505969ba
SHA256bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA51248b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b