097b8bb0a3a078847fff8bca1ccf08a0f11bad6978361ba1f3b6b2da63ff3018

Analysis

max time kernel
3s
max time network
132s
platform
android_x64
resource
android-33-x64-arm64-20231215-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
submitted
13-02-2024 02:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

097b8bb0a3a078847fff8bca1ccf08a0f11bad6978361ba1f3b6b2da63ff3018.apk
Size

62.7MB
MD5

035ddb32b2e19ed3f246fbec6374d3e0
SHA1

8a5bb8bc0ca035bb535d0b81bd983d78b630f42f
SHA256

097b8bb0a3a078847fff8bca1ccf08a0f11bad6978361ba1f3b6b2da63ff3018
SHA512

6b61f656ecccd92b9401de4eb03045ffab51cbe243046a1ca251314f74dd0eb4a8166b9c4920a102c047b951ba9907777af66b97c8b7951984a113aa5d863bcb
SSDEEP

1572864:rGvmYKxzC3mSyZvVwTTvONh0+fFey7k4PXZoJ:C0xm3mS+vVKTvONr9Vk4PXu

Score

7^/10

Malware Config

Signatures

Loads dropped Dex/Jar 4 IoCs

Runs executable file dropped to the device during analysis.

Processes:

com.whatsapp

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4294	com.whatsapp
/system_ext/framework/androidx.window.extensions.jar	4294	com.whatsapp
/system_ext/framework/androidx.window.sidecar.jar	4294	com.whatsapp
/system_ext/framework/androidx.window.sidecar.jar	4294	com.whatsapp

Acquires the wake lock 1 IoCs

Processes:

com.whatsapp

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.whatsapp

com.whatsapp
1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
PID:4294

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.whatsapp/files/Logs/whatsapp.log

Filesize
582B

MD5
01c2866fa8813dc95ebb9792dfc967d4

SHA1
6b47ac980b8ac789da4b2cc280b63d8c691c1e9c

SHA256
729049d56c9cdc9dacbd9f77ce19b7d93d64527248522e5faabfc15551fc187f

SHA512
2879d53f70dd8f1312f9cc0b1d5f12be461e033672aa0062b092c053927910519e23301fb82f265ccf4e248193fdb4daf2cc9e6a66e94731f5d8247704fd52f2

Download Submit
/data/data/com.whatsapp/no_backup/com.google.InstanceId.properties

Filesize
63B

MD5
c4c7f44c13253403b7c2e60295f9e7fc

SHA1
c5a40fbf7f9c66e2fb3378ca69af735b50c80256

SHA256
7886a24848387bbf96737ccfdd5bea97dcc0efa90ac0d9c6d096e1c7fc4e942f

SHA512
b48e887cdb0e4290cac7f7f23f41070843ac47dda8d4653dfc5f9802f03b7ccbd4c0b497850e65e5f1c7e67cd082cc0a015cc1e2e25e14c901ce45bf9252129c

Download Submit
/system_ext/framework/androidx.window.extensions.jar

Filesize
123KB

MD5
3056e1bdb7d4e19789d0319eff484bd0

SHA1
6791ae47aa9466fe0bca27ad6643f846853bbee4

SHA256
8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0

SHA512
c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
25KB

MD5
29469324e59dfcc052f24b5af4e7b2c4

SHA1
10c1e17ac6f598037bb51baa07945663645de4eb

SHA256
9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a

SHA512
5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

Download Submit