Analysis

  • max time kernel
    48s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    13/02/2024, 02:48

General

  • Target

    75f804d346dc48de24e447e262da09b75bb20405095bcee2ab2a775800158ef9.apk

  • Size

    69.6MB

  • MD5

    921ce55fa82f0025debcb7cb3cee27d8

  • SHA1

    cca091918c4b55d00dda82221a198023aff27dd6

  • SHA256

    75f804d346dc48de24e447e262da09b75bb20405095bcee2ab2a775800158ef9

  • SHA512

    569a25d5c9488e1aef22f064d5f751cfb2cdf5aa2e56747759cb7fba17facc373d8e31577a25a8025e5b3ae9c884f3d9603e4db7abe99d1ed3af2ed3dc0ff8e0

  • SSDEEP

    1572864:tHMbZg+KOS73QTXvmpQWACjrXS0CYZZW+jApvoG+oQP1o3N:tHmhKOS739QWAGXgYZZW1toGq9mN

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.fmwhatsapp
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4299

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00003DarkWallpaper.jpg

          Filesize

          6KB

          MD5

          9a0eccd09a93c4c552b0acd22c8d539e

          SHA1

          e4e3f5f2dfe17fa710f0dba4d68e161389ee172c

          SHA256

          203055c62be2f555d851b704154bd15cbd5bb0e5e03b57cb8ccb660a2051e68f

          SHA512

          8468e870236b4e7964cf092a682cb787715223efc6bdfc27c6322fc103ca228a5e695f915d0b89529ab5014b6dd75bfdc1e99bad411471130c0ef6e5c8bc7f63

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00007DarkWallpaper.jpg

          Filesize

          12KB

          MD5

          07f614c110a5fa6d30a86e1413bfaa31

          SHA1

          386f8e5b8ebc34929cd2ae0ca0e33c24d7ef3e73

          SHA256

          cacbe42ed53fcdda81a24fb9999780bfdfcebb3460fb256557a2c4e3586cbfa0

          SHA512

          f4dbab79f895c3643ff41609e616543fdc2ca4de3c39383c419c950f3fe970496824345748a155af0300bfc1bd7da98ade475a1a19fc4cacbe9b093557d1e721

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00008DarkWallpaper.jpg

          Filesize

          16KB

          MD5

          52cb2647bfebe6f5156cec38a0c021b1

          SHA1

          3b39c5f4e1547cd3d9d8123f941f2dd59f5b98ff

          SHA256

          6e22650a57fbea056247020289f741adc5301fbc87b798bc26e96c78e90f8de6

          SHA512

          908c99f7262e859fd2401453adf1b919f6761f964c66853620c125f3682a9553c897af0574f16e1b1542b37912f96d6a986c7d3f8b839aa862d3f9cc7fb78897

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00010DarkWallpaper.jpg

          Filesize

          9KB

          MD5

          708d203b6b602e86b5067d7de4261da4

          SHA1

          14470a1dcc4701e829846c5d368faf09e0419d0c

          SHA256

          582332443b90619e6ca5ef0fa6b7417cc8f8298096d7a579cb2d0afb7b049e0a

          SHA512

          c35ea49392b9ba8803d0b661dba15213445630d0d7bf30412b21ab8727d43854b8963dcf57495b26009eaf16990d58eb9067b6c8a80301d14a3f214923356d23

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00013DarkWallpaper.jpg

          Filesize

          6KB

          MD5

          61ba8a773f3212786553d7a203372022

          SHA1

          c497c183838674b3ceba857e00a2b81324db898e

          SHA256

          671727713db9b196bd1ef3066f570c0d4150c29abce448b71343a4c345397820

          SHA512

          3feb62a5a1538ab147e1a41385304287cef5cb3c62079893147dfd964ab0b4f005b5474a45f46c756d976d525b24ef9095e23f662f62b69cf5519dfa9a4f3c51

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00014DarkWallpaper.jpg

          Filesize

          12KB

          MD5

          99d7c876c5afde27414be758e9f85075

          SHA1

          07056bf1036e046b5472ba67909925cbebc68483

          SHA256

          a7214acf1170feabbb3cbd1159df4ac622f95eaa47a5c654bcbb5e93702b5a02

          SHA512

          64a87dc5aff4913e4e06e7ba284b4848f73fdd32d5a37acc3b41805699c1e2a83b7942ec8b6ac20c5361e0c80bbc53cd6ca6e181ac7ae5e5612fc61a568b1495

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00017DarkWallpaper.jpg

          Filesize

          12KB

          MD5

          4c7f81eaa43b22633e1756ad0f220409

          SHA1

          e8c488fc57d03ce8fd9deee499ba5a552fff0432

          SHA256

          5b2d3b026139308ea7aa1cbcdda8f8e87f598b876c036732163549d34e66aba8

          SHA512

          0c12f7a89260d517d6f60d33461e05686ced5715e199ec047006d563692e49034c663ce682b8f5895126ccf77ab893285aed0cf3a072c922ff1acb10bd13e3fe

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00018DarkWallpaper.jpg

          Filesize

          6KB

          MD5

          cb070eae25593c6bcef719fbdbf3a582

          SHA1

          dbf94e8b15d68854854e3b6a9c98bf74631c561b

          SHA256

          3fac8d6c06ecb9f22f9596175652a3286d65dbbb95695ad292c5d0046b95ad42

          SHA512

          ae09bc6f2165ce28397ff542d134228c65ebecc5ae00b476b9fd7f88f493d0f45547a38538a5f91b024dfcccf7e14a3c75b64a19d54d6d8eeeed95e8e49d6f0b

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00021DarkWallpaper.jpg

          Filesize

          7KB

          MD5

          ca90a8532eee74a4d3d2b990748e35e7

          SHA1

          52c411c8c343d3a291287c7bd136d6a268e7ebe6

          SHA256

          8bac2370e868c39f7e85f03b6cbbc331eca663739cd1633c43f9ca26a429c365

          SHA512

          38c9a65ffce5de259a5a20b86e4bf5fe35fff9fc4105d3d88ac13ecb95c89734f6e3f33a090056c0f03ba98bb961d34ae127f0094968fd379f2f58d93949661b

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00022DarkWallpaper.jpg

          Filesize

          4KB

          MD5

          ebd17d4a08589b69ddc1e3c36f942534

          SHA1

          c18a152b5214d43c3e47857805c7529f9cbf6853

          SHA256

          393a7816cfc8d90da5d93e0fadd20879721e77930786c8eca4a47d44f47fcd20

          SHA512

          cfa403e90a5e260cd3594277a48a9e3848b3eed8f8d092d0f76ac272f6ded1899c586494f1702d47efeb1f4c7c395e107661be74fb76ffba6714e95ec6212c1d

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00026DarkWallpaper.jpg

          Filesize

          8KB

          MD5

          ac6b93280a6876e6ea4099bc7b0e9aa4

          SHA1

          8e4cc8988a8d587a411f9e3155700c867879b491

          SHA256

          a81619be824e0001db6e0b9aa09fe7697c266c709cf9070807868144207fee1d

          SHA512

          f65326be86cdeace7ad97601c2ab62488062244b0a48a02f92711515783eeccea1130aa7352121a7815c10e0078146e60b4ddc5b1c91a3d4ffb8683fcc94cc0f

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00029DarkWallpaper.jpg

          Filesize

          10KB

          MD5

          bbe3486fdf4b7d3fd586c1530c3388cc

          SHA1

          d4387efe636ee2190988a011ef2d6dc04abfc356

          SHA256

          52c1a153f1406f7dbbbca9bbe937bee8a567f542e1b09e917ab0f603c9f4b735

          SHA512

          cdbe2130e368fd18bb7f8b9e652578bbf8f5c48d813931a512a600e37747de568794246519df949e7f3bb1d041d3b09ca7010eb0f5c850a76764eece54c1c2c4

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00005LightWallpaper.jpg

          Filesize

          4KB

          MD5

          3e7b95316651aed73a1dc44b83bc4be5

          SHA1

          6a152df8ef590018d541579497a5a29bba5ac084

          SHA256

          1493ba7478e984701e91d9915c42146a49808dd9d4a83821261ef23c7ed3511e

          SHA512

          17764f489712d241d333cdc56050ea2853c330a8be641630d1906a299b886951231881177c84018a313be28cd2697b04a9aaf56b3fb3e361392fca06eedd0e91

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00013LightWallpaper.jpg

          Filesize

          1KB

          MD5

          aabebfca057c433cada0c4fcb33e2db0

          SHA1

          b9628f707c6d04bcfc54574b7e17d1e3086ed80b

          SHA256

          6d2926ad029c671c0152a2c5b572250b6612906a6b4f10d3d537fa08f5d4d9c4

          SHA512

          4b502a51723e457608ff380c5c3f82f1f2cfc0bed427bb9b8ec787dc1b65dc33257668cb4448fa3928be8478226184e76626597d8c8646efe6073c3d71f584ba

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00026LightWallpaper.jpg

          Filesize

          4KB

          MD5

          72370969b3c89c8db398c66a799ffeb4

          SHA1

          5a5cd9d48ab706964cbec6a19c624b01d7d1dc91

          SHA256

          460db321d611779c638451f6d7365fe08808cbff736c3e38238cc3cf21345981

          SHA512

          37c6d6c090459707455528e79bbe4c0e72e664955b02ceb2830d7bc0da651be3ab6690541d819ea6c642233a0d25f1221f3ea0058f87d79c6ce40b3509b44ce8

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00027LightWallpaper.jpg

          Filesize

          18KB

          MD5

          13ae86668bf5b4d5168273fd44288a8c

          SHA1

          bb93269581b421cc3b4f2af7eee651603ef415a0

          SHA256

          0fef2cbe61da759ce236a613ebe71dae7362e77c9606315e5adb1d4f93dbf006

          SHA512

          e89d3b6d1376f829b17e8520200798d64b222c24e3a2e38a180179ee0ec80a9e1a6e9cf83cfc990b301b611b1f9a5da343ae0da7312f9b1ecd2f0b3325ddf342

        • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00032LightWallpaper.jpg

          Filesize

          27KB

          MD5

          816c283da71d7566b746c3edba82b492

          SHA1

          c7c538f46c15dc911230a8d610cd86cf43051e07

          SHA256

          12867bc5e60114169b5375fecf5dea3efc693326b5588d7da5671326207fe6d3

          SHA512

          4540b592ffae6a5ae6141ebd3022794cc27b68cdd295ad0d620649513371eb405283df332f3b555215c14eac1863d2e3cf665bcd11464374ccf0abbc053b6468

        • /data/data/com.fmwhatsapp/databases/BTOR.DB

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.fmwhatsapp/databases/BTOR.DB-journal

          Filesize

          512B

          MD5

          e736615db2ac3ef1b39f167c8e548245

          SHA1

          ac28247ef31ec0261553a9b55269c1e7288cc648

          SHA256

          3a216e1cd4a0cb032a19faabd01009688e026926f6e3a193ebde75d1421684bb

          SHA512

          a6eed6e3cd6fc5bf6fa153ac8b851c261685cb983bebbdd055654d2ffc0f74fcd45df38410faf42fc50a0a6fddb939298a993a8658dff3d26a7080345a02bfb2

        • /data/data/com.fmwhatsapp/databases/BTOR.DB-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.fmwhatsapp/databases/BTOR.DB-wal

          Filesize

          32KB

          MD5

          0c5b6a95ef0eabd268035aeeffcad8a1

          SHA1

          776108e985ece364f0b45bf10f18af209cf44cc6

          SHA256

          a3493f3e70bd59b20a1b3a9c4a6e64128ad191851515c0a0d668c082e5d7732c

          SHA512

          f5640945563aa0337fe7911d8ba0b5323792cbacb6cfb560e86155bcf93a70cdea33920395133956c054cdb5c91dce8b8e38a688642922dbbe9e17eb47b7db0d

        • /data/data/com.fmwhatsapp/databases/axolotl.db-journal

          Filesize

          512B

          MD5

          ae92047028953b08cd8bc7d00affead4

          SHA1

          624f7610cf42ac65599336649e8a13d0271e31ca

          SHA256

          27c6f6e4dcde1dc9c94f72298d8fc541243738a326aa3487427d7cc847301acb

          SHA512

          4ac4e6b20b287bb871a8d840b789746c3569b43a85e5ebf6e6c08b6e32a63821ebbda88fa3877fb5dfa3fc01341310406e3b9e8c23f5e0b791b3fbf213ec75cc

        • /data/data/com.fmwhatsapp/databases/sync.db-journal

          Filesize

          512B

          MD5

          8c205a092121a750636751942c5fca37

          SHA1

          38090e7b77c5643c0fed8997264ae6bd89640729

          SHA256

          39f770461b623f33e65d62c443940b274dfbcb84e03db6dee29b855aeb0e2e20

          SHA512

          4460446d980d24a340ad3b0e85df84d088edf879725b11a0992175326fb4c8a65ba25dc021940701e39a5980ef5a08c08ea18d9d8c02eaee3c1eb00df523155e

        • /data/data/com.fmwhatsapp/databases/sync.db-wal

          Filesize

          16KB

          MD5

          697574d1bf21b158071a0cfba9d70d1f

          SHA1

          2efbd35870160bd30741551ab26d0a4c25ba4684

          SHA256

          f013d029c95e66453217d960a7f845b8e62df9cd681f8d8109394105173358af

          SHA512

          6ae7ebea584821d6835cc33dfc5b0550a91d2e72022ece681c83c1db896f0b79e6e5eeb053ac096d2df788cfbc6436ab47d2b70039e39602578f347faa3d2147

        • /data/data/com.fmwhatsapp/files/.trash/9348c77e-6a33-444f-a469-1bb7072fc2d9/b26e8c08-d86d-4300-adcb-f95b625d4a26

          Filesize

          54B

          MD5

          97dec4b4b69533cb13191b08826be0e0

          SHA1

          a194f8263936c4b7a11dd3213f601942ed495a17

          SHA256

          e2af3308470a10914ffa9079428fde7867a960cbcb922d082a963089c49b75fe

          SHA512

          536974933de877e2468c4a15613a8a0f989bcc655768366a04901fcf03e3713f58dfc110f96c8cba9a4f335b73b50900dfd057729f058ac7cfc3f24c000f0a8a

        • /data/data/com.fmwhatsapp/files/Logs/whatsapp.log

          Filesize

          4KB

          MD5

          d960e03e8cb59b7c62e66c4cce036ffb

          SHA1

          27ffdd0a33fbbf5173fc1d15414c050d35992cb2

          SHA256

          da3b4e1dabda47a2969dc910cbe50444564036587e1340efd5b4b1cb05211613

          SHA512

          3eb28cf665b74348754bcbbd58d40529d19d50b3d14e9cc55ce1c44a1c396e253136f9d31630acb4e156e401ab059537089a39e046f758f2c4dd6d8f0d3d6c77

        • /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-journal

          Filesize

          512B

          MD5

          f9230a079b4dac6a842c3028417add38

          SHA1

          8359ae1176efa72a89e606898c0aa85f5473e509

          SHA256

          6831e81e3b4878c848159da03be373d8faf0222820fbd1ad3937f0b0c8daf29a

          SHA512

          3683cdd8f7dde0c913e1f25c4e3d4f6b46fe6ae7d7d1fa73a49ce7d1486fa495dc424a2602d4adda9259f3f54e71ddc36bf0ccad8f22339409d20a8fea5d8541

        • /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal

          Filesize

          16KB

          MD5

          0cb4c4f77adae5099e6b2452ee5937ba

          SHA1

          5ea5c233be9659b6bdd4eb76d7178902b0892a09

          SHA256

          602beedb86b8bb916198b40a567e085586827a7dc123fa1823307a3675f35143

          SHA512

          ef6ea0b387f5f44607a0bb98e89eaee66e2a45d0cef2a1b8090e34057056818a70d2dc72482c78e2e715c7e132c5b26c35ca873996b156d172430d4aba3c3b7b

        • /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal

          Filesize

          35KB

          MD5

          70ce6bdd6a1260b190eb7fb2505b6781

          SHA1

          309df274bc28dc97158ad5bb36dacc9705255d35

          SHA256

          a4cf8703b3e681be5638a9db6f6f8926345235002c4d58486c4856a6f8844f72

          SHA512

          85e4ea56d8bcb1e08361bb9ea08b644cb6be130225e2a558299efb4f218061a0e886a449e8694bbd05d72cce2a319fe4973c9994b85b80dbe9b6b1434d973cb2

        • /data/data/com.fmwhatsapp/no_backup/com.google.InstanceId.properties

          Filesize

          63B

          MD5

          b55dd6ecf01282e739096b9f5a865d07

          SHA1

          142991db52328ca1043442cb2b7bcdc322fa7a70

          SHA256

          05895f545f6b5c04a4c6e85e18a32a83cbab6392b059a214538db056270d7f73

          SHA512

          212f230e813e4345b74f4becaddd8df50465d908f9f51d853d62d205019af8a064268c54b89eb8a8986f9f9c872972ad58d8b1f6bee0852bf9b1f89964b3bddc