Analysis
-
max time kernel
47s -
max time network
138s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
13/02/2024, 02:23
Behavioral task
behavioral1
Sample
1a5aac2a6c5a1e625821a2260675248596839806758d253156fb1c1da56ae8b9.apk
Resource
android-x86-arm-20231215-en
General
-
Target
1a5aac2a6c5a1e625821a2260675248596839806758d253156fb1c1da56ae8b9.apk
-
Size
76.2MB
-
MD5
67fff717824a15937e777dc2a98472df
-
SHA1
7efc96bae35f14883c353224d204e9a73841aa9e
-
SHA256
1a5aac2a6c5a1e625821a2260675248596839806758d253156fb1c1da56ae8b9
-
SHA512
bac2cd756d685be35defe236da6876135c1c2e3646447f86b46f0dafeacf2d047f7c1184b2691cc72af60f33c8682d329aa63857711e75eff126049fd34132cd
-
SSDEEP
1572864:16qJzShywPkPnZS+/eignjMg4DmlxI0MmDS1c4sLPwpJnraBK:11mhy5nZVYj/4uu0rDSOECK
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.fmwhatsapp -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.fmwhatsapp
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5fb9b168a5224ad8ac79d0ac2a05da6da
SHA182852b2e992306121e31a81144cda8a1ac2f8e27
SHA2568507e48d67270c95797a4d6fa9f244f773629e8e37477c3c72d0135d4410adb3
SHA512b1fb8ee860f80516e025028f1f14209e380660c013dd9529abc1c728ee8b0b0c7c0a94db1c295bf42d676f8adc3b78a724454e403eb9d78014ec50465d449f54
-
Filesize
512B
MD5c606707b7e8634b9d62a0e4a33f27f33
SHA113c871f9b4185950596ebb1bf301bfd3e874a859
SHA256aa71515fed9809ec022d19eb1c036e5c6f6682c0db6c98118c89679406ebf7db
SHA512885dfe9073dd94706ed99e319a49e98e4cf3d12a11eed180552b8f64ccfe3ff638ff2b3e82e8e3b709589325710f62b271059df6c6a42be5ffaceff26e8ef782
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
16KB
MD53a55e81623abc8dd5ef2ab505194dceb
SHA1f312b3ef7be623df3a16b1a43755a1df071450eb
SHA2560acf2f15eec2615a152654da3486bb0d067e46082a10f27b4939488ea4a53a9b
SHA5125a2a93685e9bddc71add33f6cb7094a8b5bb07c14fd92e3e322ad0dd2fe5b69aa48cd25c2a15429fa8ca199f10f32d5611573f66f5f106de000ac50d18b544d8
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD59d50058b6184fd3a12934f709b21425e
SHA198a9d7269709d658fd4818e82905f525afc5f74b
SHA2562d4e2076507ab35bcaf32321d0289376097a5950bf3dc9cb5b932361bb525a01
SHA512504816287bdea4e7df461451007fc8f2390b3b4fe1e2413737e50a9e415efef741bc8567cfb86928b9ce27dd3d7621c5fa663259a040d1976e75b619ca46bc32
-
Filesize
16KB
MD5c257823638a41ae6a8b86705447e8fac
SHA177d4bce77a6c6f9756e660cb82a3bbbe7b903cd6
SHA2569fdf063b7e945106b35137a497de6bf70fe4c504402f2f4da064dec1a9e740a9
SHA512e5fdfe25e6c25cb0bcdb49b53fbacdcb4d7785d69488d3f7ea3bbc2a4c9a692845ceafd338177945718ea040a4546b3c78039849edf81830257c3265dc7eed76
-
/data/data/com.fmwhatsapp/files/.trash/5ef7e677-eb5d-4e6e-9561-a8af3c966882/0ed251b3-f49e-4ca6-9c9f-350dc50b6a22
Filesize67B
MD5d8141b97bb6b8752f676cba953de8e56
SHA1b65fefc908682f7027ea3ca34ffd592a6d81ae87
SHA256afff045ccff4a25dc9ed283acb206e37fbcdc6afd5adacc86c645d432e032a21
SHA51298915af0eef59abcf116818f4398cbd5a0eaf31a65110422e186872f48aeb7400948d51d5b22b0ce82c07764f21dbcbf1e252bf5a49df0dea3951bda730092a3
-
/data/data/com.fmwhatsapp/files/.trash/5ef7e677-eb5d-4e6e-9561-a8af3c966882/17af3ca2-bc29-494c-b4b2-bdb2b21c503a
Filesize526B
MD52c0f856d7250fb18c8dfe900ec9bd5d4
SHA110c62e9db2bdffd3d76829987e50d0efa5e0a72b
SHA25662802cd5039ff363156f7d4dd4d7360d095090a6331131f018abba016b6e1aa6
SHA512ef5d4481e27d2d6053a224f685b983e52d7ae0d2dbae4f349c1ed0191e4d5b737ce8e2f0d8a393f2384ff9bf05af29f47aea983d57d0b151e89b3cc8c6ef38e2