1a5aac2a6c5a1e625821a2260675248596839806758d253156fb1c1da56ae8b9

Analysis

max time kernel
47s
max time network
132s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
13-02-2024 03:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1a5aac2a6c5a1e625821a2260675248596839806758d253156fb1c1da56ae8b9.apk
Size

76.2MB
MD5

67fff717824a15937e777dc2a98472df
SHA1

7efc96bae35f14883c353224d204e9a73841aa9e
SHA256

1a5aac2a6c5a1e625821a2260675248596839806758d253156fb1c1da56ae8b9
SHA512

bac2cd756d685be35defe236da6876135c1c2e3646447f86b46f0dafeacf2d047f7c1184b2691cc72af60f33c8682d329aa63857711e75eff126049fd34132cd
SSDEEP

1572864:16qJzShywPkPnZS+/eignjMg4DmlxI0MmDS1c4sLPwpJnraBK:11mhy5nZVYj/4uu0rDSOECK

Score

6^/10

Malware Config

Signatures

Acquires the wake lock 1 IoCs

Processes:

com.fmwhatsapp

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.fmwhatsapp

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes:

com.fmwhatsapp

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.fmwhatsapp

com.fmwhatsapp
1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4297

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00018LightWallpaper.jpg

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/data/com.fmwhatsapp/databases/BTOR.DB

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.fmwhatsapp/databases/BTOR.DB-journal

Filesize
512B

MD5
a12d68726f9642dc48dfe32275945aba

SHA1
a298e1402666629ffe015665fa39e039762a06e0

SHA256
da04dba3b6a1b1b36186ac188c69c77d479efe54852398e9939e5284c26a8735

SHA512
cbd40ff3bdb07501a62667fe4bb0a35353cd5c5c18fa5e8fe5797542ce9bfd09440ccc6bf1b89246db04efa679eac78381c99b662fbfa346d0369395730fa2b6

Download Submit
/data/data/com.fmwhatsapp/databases/BTOR.DB-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.fmwhatsapp/databases/BTOR.DB-wal

Filesize
32KB

MD5
02850b3ab1ef21d6e685e38ffe48c491

SHA1
12b6eeaf0c433ddc7d1afe3214739307f8707ac5

SHA256
fa00843e9d99a9afc806acd68fe8a1dd81ba9001d45df1f081553d20504dc8c5

SHA512
25d3cfc67a79d85e2815fd1783f5988cdfcbe88783c2bd284ea0b8ad6c120014cb4e1d31f7eedfe7bf394d7c7a5d4998d18f31937ca9806cc604fcd6f26726ef

Download Submit
/data/data/com.fmwhatsapp/databases/EHS.DB-journal

Filesize
512B

MD5
e8a033c2aae9c5393cbcdea91ea81e42

SHA1
2a7aefb40ec0251bfc4d91630717df8799c54624

SHA256
d30b149a9f95c65c176548633a1f6d385b6db44d4697b95c325a5b3c5b58e3f2

SHA512
7f98131fbdb3bf420ab7625a4318f05ec3e49f0e459f23df0cde828b81d2912d1188cae7953f9297cedc600320b16886a7036426a7616d8f91e80c3df9235c20

Download Submit
/data/data/com.fmwhatsapp/databases/EHS.DB-wal

Filesize
36KB

MD5
7d54f40dfc96b18f0a38532ffcea21c4

SHA1
0da5ab37b2f2225762357a884f07349208c05d41

SHA256
21479e4f3169c33b1315cdefe0e316a99ff6c15022d32335a46894f237da7424

SHA512
528d6a4b6667eb389e3108d16a64e53ce0a942e38eec4c63aef2229ae97b053e01e3706bfa34e976abd9ff65d47f2327c2c3cfa9063783d11aa2626f0e22c66d

Download Submit
/data/data/com.fmwhatsapp/files/.trash/9ccaa63b-b20c-4a50-ba06-7a3da92b4f4e/ce5d815d-edcf-4e8a-85db-4397580a0ec1

Filesize
526B

MD5
2c0f856d7250fb18c8dfe900ec9bd5d4

SHA1
10c62e9db2bdffd3d76829987e50d0efa5e0a72b

SHA256
62802cd5039ff363156f7d4dd4d7360d095090a6331131f018abba016b6e1aa6

SHA512
ef5d4481e27d2d6053a224f685b983e52d7ae0d2dbae4f349c1ed0191e4d5b737ce8e2f0d8a393f2384ff9bf05af29f47aea983d57d0b151e89b3cc8c6ef38e2

Download Submit
/data/data/com.fmwhatsapp/files/.trash/9ccaa63b-b20c-4a50-ba06-7a3da92b4f4e/cfb24075-7329-4138-8d60-ab526dd1dd62

Filesize
67B

MD5
d8141b97bb6b8752f676cba953de8e56

SHA1
b65fefc908682f7027ea3ca34ffd592a6d81ae87

SHA256
afff045ccff4a25dc9ed283acb206e37fbcdc6afd5adacc86c645d432e032a21

SHA512
98915af0eef59abcf116818f4398cbd5a0eaf31a65110422e186872f48aeb7400948d51d5b22b0ce82c07764f21dbcbf1e252bf5a49df0dea3951bda730092a3

Download Submit
/data/data/com.fmwhatsapp/files/Logs/whatsapp.log

Filesize
724B

MD5
82723966ff99faaf76b27c0b5ac43397

SHA1
1991048aaf122287382d22015d346a0707feacd4

SHA256
0198b583194710cc34e6366ef2c6075880be75fdd6028d1e2e50e03afe276446

SHA512
34b0321daedd1b7a57d6616c56c4e97e9ebc5b5d9d5567ded617203e80cfc771302a88e1fef893a0b4d85dfbcdfdd25c7737950bfc940bff1fcd9f3cb3b17d72

Download Submit
/data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/libvlc.so

Filesize
3KB

MD5
cfaac46a9b3c925a53382f453c8c0d81

SHA1
8e82c86b6d77d7e1ef003aa7796b83ccc5efab7b

SHA256
0d87625993ef963e9bebf8f21f22525807d48dc26b3195fe94bedfe877f376e7

SHA512
22c8297645c4ffb8ba08e44e1136dcc3b3c16100ff837d7e3ae7bf3a1f181c12e9aa33f3f598d6d7e001536b9812106b4785c01f91a76874cd220a6229e787a2

Download Submit
/data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/libwhatsapp.so

Filesize
145KB

MD5
54a8c20e7fb3887d34e46cd023a6dd9d

SHA1
e1dcd47ecf8bd64c2a56e075080a14d2bd045eae

SHA256
2066aa32f13ad40171265c575062b020e9a1840c98ce19e12d183057d6b781e4

SHA512
549d2de3bb303afd55cf8e01f381201262188f27093216d5e27ec5c1af8623558bc2524902a6a1a3f22612aca3f13653abca4743192786419dbb0ad09db02d8d

Download Submit
/data/data/com.fmwhatsapp/no_backup/com.google.InstanceId.properties

Filesize
63B

MD5
f6d38c2ca38c64a0eb992a415fa3bab0

SHA1
94c0f84afd432ee7810da9c3f100c54c1f8a625e

SHA256
98645bcfe12cf534b11779f3a41ce92d658a75427ad56af4e973e5c6ed60414b

SHA512
d56c7d4a0bff7c0e14e5ab49269fd6bbe4f913fa70dfa91e75408f1487e819db9ae5153bf99e932ca48862f6294aaa51ae83986d2cfa5aa3a98faa57f1c2997a

Download Submit