Analysis

  • max time kernel
    47s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    13-02-2024 03:03

General

  • Target

    75f804d346dc48de24e447e262da09b75bb20405095bcee2ab2a775800158ef9.apk

  • Size

    69.6MB

  • MD5

    921ce55fa82f0025debcb7cb3cee27d8

  • SHA1

    cca091918c4b55d00dda82221a198023aff27dd6

  • SHA256

    75f804d346dc48de24e447e262da09b75bb20405095bcee2ab2a775800158ef9

  • SHA512

    569a25d5c9488e1aef22f064d5f751cfb2cdf5aa2e56747759cb7fba17facc373d8e31577a25a8025e5b3ae9c884f3d9603e4db7abe99d1ed3af2ed3dc0ff8e0

  • SSDEEP

    1572864:tHMbZg+KOS73QTXvmpQWACjrXS0CYZZW+jApvoG+oQP1o3N:tHmhKOS739QWAGXgYZZW1toGq9mN

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.fmwhatsapp
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4221

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00001DarkWallpaper.jpg

    Filesize

    2KB

    MD5

    ce57f4a8a7f6f2afb35c86dbb8f1f7dd

    SHA1

    9ead9440c73f6cceb0175e15dac473c9fe56155f

    SHA256

    b541695affda1e92cac2e9bf5993adc6ebaf1d17055b4afd28261e4baddf155d

    SHA512

    eeae2160ed0b6616e4ead8e417890c537f4aeda4a082b60a3b0296b678c1bb8a7a6dbec7768e6c32e3b4fe3b253509af84f89681348160995bd63e81f3833563

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00004DarkWallpaper.jpg

    Filesize

    4KB

    MD5

    e4c94b089a6c48c2ac3639d2b64705b3

    SHA1

    9e5ca45745d57cae62a30b18393d578adce448f5

    SHA256

    ba6ecdef0ff0f186935c983c5c6db8153e18309c9b3e8d8d578a78d98376a23f

    SHA512

    e7ce878a2a79260724a66c2ec3225d1a8e0b530568ce88e4247f0185a6ddb4469ccc71eff222b7f58f5ad4385299abe3536acfc4fc9df8896c019f5288ecbb5a

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00005DarkWallpaper.jpg

    Filesize

    3KB

    MD5

    73a86bf812966a7c6ad0be9e8bcc1a58

    SHA1

    0ce4bd31324d287ecd21d138063c9510dda452c8

    SHA256

    781e06e41a1020793c3c18a337443f367b544bd3b37adffaf733bf0ac80af128

    SHA512

    a61fe84fdd6e74aedd03e25c5f5af5fe628eaed4bab6ac226c1c65d142c3d23407f710f7ae31ed7d32db53d30fd2d5d2a7fc5910403eda15616bf13ac2012a63

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00007DarkWallpaper.jpg

    Filesize

    12KB

    MD5

    07f614c110a5fa6d30a86e1413bfaa31

    SHA1

    386f8e5b8ebc34929cd2ae0ca0e33c24d7ef3e73

    SHA256

    cacbe42ed53fcdda81a24fb9999780bfdfcebb3460fb256557a2c4e3586cbfa0

    SHA512

    f4dbab79f895c3643ff41609e616543fdc2ca4de3c39383c419c950f3fe970496824345748a155af0300bfc1bd7da98ade475a1a19fc4cacbe9b093557d1e721

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00010DarkWallpaper.jpg

    Filesize

    17KB

    MD5

    2dfd35c3f9fc6742b9df24d12afd5738

    SHA1

    13f3837eb51283197bd4fa3d7a0982811859fb8f

    SHA256

    d6f01d529ab392e652a5472e9386123bf248a1a4172db61faf99459d497cf67e

    SHA512

    c9543eb3f3860dd5a9b130271bf3b8363da616156fe5d95706b6114414e0774283888697f5c231e71739b7d3c5a149c4f99a6a6c85ac649308a4f2616e96f6c6

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00011DarkWallpaper.jpg

    Filesize

    6KB

    MD5

    170f7b8c27e89e69894c7424d8a51c0d

    SHA1

    1f04dc232acfed339125909c186c10edf4d2aaa8

    SHA256

    ad035e1d70649231fd3b1ee0b1ac649e27f1c373ec090858ef7b4e7b5d541c82

    SHA512

    782b4229599d03463307b0ef5ee9c66fcd1e26a797cd78bffc3558723437fd2c34ca0525fa685071cd18ca968c22b57a957f29839be83bc313fe5f5b0f74f793

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00013DarkWallpaper.jpg

    Filesize

    6KB

    MD5

    61ba8a773f3212786553d7a203372022

    SHA1

    c497c183838674b3ceba857e00a2b81324db898e

    SHA256

    671727713db9b196bd1ef3066f570c0d4150c29abce448b71343a4c345397820

    SHA512

    3feb62a5a1538ab147e1a41385304287cef5cb3c62079893147dfd964ab0b4f005b5474a45f46c756d976d525b24ef9095e23f662f62b69cf5519dfa9a4f3c51

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00014DarkWallpaper.jpg

    Filesize

    12KB

    MD5

    99d7c876c5afde27414be758e9f85075

    SHA1

    07056bf1036e046b5472ba67909925cbebc68483

    SHA256

    a7214acf1170feabbb3cbd1159df4ac622f95eaa47a5c654bcbb5e93702b5a02

    SHA512

    64a87dc5aff4913e4e06e7ba284b4848f73fdd32d5a37acc3b41805699c1e2a83b7942ec8b6ac20c5361e0c80bbc53cd6ca6e181ac7ae5e5612fc61a568b1495

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00015DarkWallpaper.jpg

    Filesize

    12KB

    MD5

    5c374bd37d678475fbef3b4b82f99c75

    SHA1

    32f6bcacc16ef1b9b32a2efde2667d805f0c5ca2

    SHA256

    2f2f54535a01b728246e04bde355f758f661aa4d6337143bfc5130784aaeef16

    SHA512

    7336a302194db2bec705ae8a900242f845b67caa1362848fd251134cbc7d730febb7cda9413bb84c90ed6512153c232fc42bc9533e00fd53e3cd40506831f270

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00018DarkWallpaper.jpg

    Filesize

    6KB

    MD5

    cb070eae25593c6bcef719fbdbf3a582

    SHA1

    dbf94e8b15d68854854e3b6a9c98bf74631c561b

    SHA256

    3fac8d6c06ecb9f22f9596175652a3286d65dbbb95695ad292c5d0046b95ad42

    SHA512

    ae09bc6f2165ce28397ff542d134228c65ebecc5ae00b476b9fd7f88f493d0f45547a38538a5f91b024dfcccf7e14a3c75b64a19d54d6d8eeeed95e8e49d6f0b

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00020DarkWallpaper.jpg

    Filesize

    16KB

    MD5

    bdc10d3425f632648c9d64d93c7b6deb

    SHA1

    ba1a2c31d42cd9e385a05926122a163395d454d1

    SHA256

    3bf8f668c2de257590429e45d4014c0f036613948b48975aa10c5b648f2a2efc

    SHA512

    445af864483b3fea6e6f2bc7692a14fe1f144698e82b9d42fa3a45f59e1cceb55d14e860351fe0993f019d9ebd4dad463a2e4fe4846c76393bb8a4c4a69d7665

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00021DarkWallpaper.jpg

    Filesize

    7KB

    MD5

    ca90a8532eee74a4d3d2b990748e35e7

    SHA1

    52c411c8c343d3a291287c7bd136d6a268e7ebe6

    SHA256

    8bac2370e868c39f7e85f03b6cbbc331eca663739cd1633c43f9ca26a429c365

    SHA512

    38c9a65ffce5de259a5a20b86e4bf5fe35fff9fc4105d3d88ac13ecb95c89734f6e3f33a090056c0f03ba98bb961d34ae127f0094968fd379f2f58d93949661b

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00024DarkWallpaper.jpg

    Filesize

    11KB

    MD5

    06f21dec58fec12197f66b32d2b28f2a

    SHA1

    62e336fef1ea67f022e8722d232719d35e99a7ca

    SHA256

    da9ce86503b2ce777a93adf45e24809bf350e5512dd87419f44f9b5422643873

    SHA512

    abdc1f4c8c5652188a8d658b0fc22057a984cee74fcfd465ebc80c43bafecece476815a18995e0e1dfed3a7a62f4a6fcf048e0f19eeb2f85e93a0947a76d9218

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00025DarkWallpaper.jpg

    Filesize

    6KB

    MD5

    75d3c7a6be3fd5702ac07e98f4506732

    SHA1

    6042f37348754733b42031fec907ed80386942b0

    SHA256

    a6c4c3a84470aa63e07cabfc0d64aa0a1b74f4c71adf881197663a734b3a7dca

    SHA512

    df719c3d8c7035e2acd8bf355168eade847e7beb183d9282ba6af72b6b1e1b1abd9ad8fbebc341463bdd293fc1ba2129010fc060cf222c9b35e6c99c3bd5bc13

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00026DarkWallpaper.jpg

    Filesize

    8KB

    MD5

    ac6b93280a6876e6ea4099bc7b0e9aa4

    SHA1

    8e4cc8988a8d587a411f9e3155700c867879b491

    SHA256

    a81619be824e0001db6e0b9aa09fe7697c266c709cf9070807868144207fee1d

    SHA512

    f65326be86cdeace7ad97601c2ab62488062244b0a48a02f92711515783eeccea1130aa7352121a7815c10e0078146e60b4ddc5b1c91a3d4ffb8683fcc94cc0f

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00016LightWallpaper.jpg

    Filesize

    7KB

    MD5

    55e6aa14d1ac9b425cc2491a1dfcd2d7

    SHA1

    99e9a6da5c1f3ddf453e826319b512eb4d585167

    SHA256

    94cf4e6e2e6f7acfac3dcfb9b04635c01822e52ae37456b49e8f33a455f5f087

    SHA512

    81cde30bcdec5b0bbc6dd83fd64136d67b7ac5f4df2df3220d475787b58f015e9b7b8e1cfd038ad22dae668104ee47b3a202b1768325faa4f241e2560ba8af81

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00022LightWallpaper.jpg

    Filesize

    11KB

    MD5

    5db74de1133d28a74f6f35938e399c41

    SHA1

    02120fefb72f533eef47ad594e3c17e508847e5e

    SHA256

    8e1b6c2b97dfa24c92ac68198a7a5fc8fa7cddfa23b00e263b06f588b5b2fedc

    SHA512

    01b2fbb6e51595130ed3eb735535eb0287928075c43582bf72ddfaab58e6d7c3ff75941c16f58c6d5746c93a6797b840578095c512bde64bec20a0a01d404cd3

  • /data/data/com.fmwhatsapp/databases/BTOR.DB

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.fmwhatsapp/databases/BTOR.DB-journal

    Filesize

    512B

    MD5

    7f4321781fdba5224909e600c12a02ba

    SHA1

    30f1e8e48d4e66a54abc8bf77f86b2b78c3e67ba

    SHA256

    caafc56542be8b49f750f5edadfd9a06093b07a2b47f5fdda83ad6c8853ae34a

    SHA512

    6b65d5135a69af5f05b616b11bbac22d785435f280628cf1f8f69b6508b54f6279b24faeb2907f2dabf91dda3a966138507085076924cbd407982c4fc3118456

  • /data/data/com.fmwhatsapp/databases/BTOR.DB-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.fmwhatsapp/databases/BTOR.DB-wal

    Filesize

    32KB

    MD5

    0f7fbb665523be52dc9792a97e718d08

    SHA1

    9b06413e0cb6198714025e227d21a863e256b76b

    SHA256

    7701e4095f1cb677f73bd0fc57672f9f636518a20829c0ab788b9a16ddce77f4

    SHA512

    18c6e3da4e4a06a715f74f1864a1b571f0d1d94da11f8acdfa77921130b07480121d21307a69551c7a9e15d4f4e92670972cbe95d47daedbc09d2786f0ba0e54

  • /data/data/com.fmwhatsapp/files/Logs/whatsapp.log

    Filesize

    4KB

    MD5

    e353933c50b981e5866a1e04c4264acc

    SHA1

    d914c6d36a490dbca447512fb98233329c76ee8b

    SHA256

    76b6708486e26bf3d8408ffa3345987dac6b043459845ffa247f1d965d15aeaf

    SHA512

    1619ddcd85d07c76613bf24f651d909aae0ca8b98be173c0ebab35b76471067ddd350650d6f8eae485854c0b5bb381e17f9972734862a79602358b146d204ade

  • /data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/libvlc.so

    Filesize

    21KB

    MD5

    47cc21921c1c4e305a946245a79bd15d

    SHA1

    37393692c44ae65de680b44775416705037e2f75

    SHA256

    c52dab197dc4650a02d7a4f39a6397e3bb03c9014b45d0651ac1f5b62b4016a7

    SHA512

    c4f3bb7e45ad9a5acea7fd58a2c40bbc72ab616aa55f4302b2cd9c508a33e1e42ff72c75bbd4f3fb7feb2145c15bbc6d64d6cfe0dcea42c1b3fc1e0db322da25

  • /data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/libwhatsapp.so

    Filesize

    16KB

    MD5

    c739a013ebbe4acc86b7c9fd31d7a382

    SHA1

    80ea35b39165c3aedbf1e6a3b8f8ba0c682a4c04

    SHA256

    77625d901ab36c2f4470e8ce3ec37f67e5f8284f011e88dee076acc5b02b0ff4

    SHA512

    c7aebd745b7b33849fae2db26dc28fd2622f97f854e9f70c74eb455c99796f791103ad6c2453748680372849ab2a218697d6acdc8025b19e229719453f68167f

  • /data/data/com.fmwhatsapp/no_backup/com.google.InstanceId.properties

    Filesize

    63B

    MD5

    8bc6d8195660c19950180d2232989c36

    SHA1

    186d9990b4c30327df048a2c99148999620db53b

    SHA256

    843728e58e2d76adf8ed70f7ac658b36ed2a38d25d3493c4aaa06a4adb88f511

    SHA512

    acc42494b4a3e51173dc263863fbc883748a2cc73a97e9d7e32d3cb0bb2d3303e25c584c03886ed5f791b299f0b2114a96ac839234f4281b1b653dda49ca64f7