Analysis
-
max time kernel
3s -
max time network
139s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
13-02-2024 02:41
Behavioral task
behavioral1
Sample
097b8bb0a3a078847fff8bca1ccf08a0f11bad6978361ba1f3b6b2da63ff3018.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
097b8bb0a3a078847fff8bca1ccf08a0f11bad6978361ba1f3b6b2da63ff3018.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
097b8bb0a3a078847fff8bca1ccf08a0f11bad6978361ba1f3b6b2da63ff3018.apk
-
Size
62.7MB
-
MD5
035ddb32b2e19ed3f246fbec6374d3e0
-
SHA1
8a5bb8bc0ca035bb535d0b81bd983d78b630f42f
-
SHA256
097b8bb0a3a078847fff8bca1ccf08a0f11bad6978361ba1f3b6b2da63ff3018
-
SHA512
6b61f656ecccd92b9401de4eb03045ffab51cbe243046a1ca251314f74dd0eb4a8166b9c4920a102c047b951ba9907777af66b97c8b7951984a113aa5d863bcb
-
SSDEEP
1572864:rGvmYKxzC3mSyZvVwTTvONh0+fFey7k4PXZoJ:C0xm3mS+vVKTvONr9Vk4PXu
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.whatsappioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4647 com.whatsapp /system_ext/framework/androidx.window.sidecar.jar 4647 com.whatsapp -
Acquires the wake lock 1 IoCs
Processes:
com.whatsappdescription ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.whatsapp
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5b43c91fd37806e42d891aa80cd5494ef
SHA155ba146e9c61f885a154de9a95b7f6aa12aa33dc
SHA256cb39e15f4c6c8f00c34fd8b7f1c6bf80b9fbf75c4de238a6a06804869917771c
SHA512683229e820436cba0c5e2bfce3dd2000ae6c63651604d73a96cdbd3caaac3943d3d76c442815e77832f83b7080c7bcfca389c77b46f443a3220006328790aeab
-
Filesize
12KB
MD5bdf3529e80318eb14e53a5bf3720c10d
SHA125c9ace4b1af6e80ebb2572345972c56505969ba
SHA256bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA51248b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b