Analysis
- max time kernel
3s - max time network
164s - platform
android_x64 - resource
android-33-x64-arm64-20231215-en - resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system - submitted
13/02/2024, 02:56
Behavioral task
behavioral1
Sample
097b8bb0a3a078847fff8bca1ccf08a0f11bad6978361ba1f3b6b2da63ff3018.apk
Resource
android-x86-arm-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
097b8bb0a3a078847fff8bca1ccf08a0f11bad6978361ba1f3b6b2da63ff3018.apk
Resource
android-33-x64-arm64-20231215-en
2 signatures
150 seconds
General
- Target 097b8bb0a3a078847fff8bca1ccf08a0f11bad6978361ba1f3b6b2da63ff3018.apk
- Size 62.7MB
- Sample240213-dfjyfsdb8x
- SHA256 097b8bb0a3a078847fff8bca1ccf08a0f11bad6978361ba1f3b6b2da63ff3018
- MD5 035ddb32b2e19ed3f246fbec6374d3e0
- SHA1 8a5bb8bc0ca035bb535d0b81bd983d78b630f42f
- SHA512 6b61f656ecccd92b9401de4eb03045ffab51cbe243046a1ca251314f74dd0eb4a8166b9c4920a102c047b951ba9907777af66b97c8b7951984a113aa5d863bcb
- SSDEEP 1572864:rGvmYKxzC3mSyZvVwTTvONh0+fFey7k4PXZoJ:C0xm3mS+vVKTvONr9Vk4PXu
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.extensions.jar 4334 com.whatsapp /system_ext/framework/androidx.window.extensions.jar 4334 com.whatsapp /system_ext/framework/androidx.window.sidecar.jar 4334 com.whatsapp /system_ext/framework/androidx.window.sidecar.jar 4334 com.whatsapp - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.whatsapp
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.whatsapp/files/Logs/whatsapp.log
- Size 1KB
- SHA256 29ad6d3df39d60546c43ddf0633245eed98af361bb21be2fc6bde7e6378e0117
- MD5 f788fdcd8cb3a21b80052c1a100c4b47
- SHA1 1f1dc3120dbbc2652166bde6f4632e9becac641a
- SHA512 ada134dc56886adbe00babf25e794e28063f54dab7f57e9bbe2d8f7856d8dd49a6b9b5b9aba365886dbdb01e9d8b74e638162f131c1376e7b4f86ef3b936de52
- MD5 SHA1 SHA512
- Path /data/data/com.whatsapp/no_backup/com.google.InstanceId.properties
- Size 63B
- SHA256 5864f3eebbd0580090a40c44a6929561cc4e5a0d24d7a8809a2041cfb1be66ec
- MD5 d7cd4955472451e33aa315f5e2e1ae5f
- SHA1 57fbcf53dac874bf830fd5fe7f426e406db6bc72
- SHA512 2b9385a4e59e3185afdce58631024a3ca0d5740eac3937933a78e00f042bb5e2cc9ebfa28a12bf60cbb5d0890a0f3af55dec3ef7e8645f645aab262ccaebf730
- MD5 SHA1 SHA512
- Path /system_ext/framework/androidx.window.extensions.jar
- Size 123KB
- SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
- MD5 3056e1bdb7d4e19789d0319eff484bd0
- SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
- SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
- SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
- MD5 SHA1 SHA512 SSDEEP
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 25KB
- SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
- MD5 29469324e59dfcc052f24b5af4e7b2c4
- SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
- SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
- SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
- MD5 SHA1 SHA512 SSDEEP