Analysis

  • max time kernel
    47s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    13/02/2024, 03:05

General

  • Target

    3e596694e6c74a1991490f4bde5e2404fc1b6d57af8499b7fc67adb44e17394e.apk

  • Size

    75.6MB

  • MD5

    d73fa603bb7dfbd53f2ec4d05617b9e0

  • SHA1

    86f18b9d0ce32f3ff1c608ae4317329e4da44e1d

  • SHA256

    3e596694e6c74a1991490f4bde5e2404fc1b6d57af8499b7fc67adb44e17394e

  • SHA512

    4e004ec348e58f8229d1e3b5d2137b64dc09234d355425d8fa5544e67a4d4d80d3e098c2ba7bd5659e443050bae7a404e1a35a2341cd6809b5e83e1078d8bbc2

  • SSDEEP

    1572864:2R4YowDIMNvpPjEYr3V1c4sQ0MmDKPwpJ4qHSXKTHcvmM0hV:26YoEXEqFR0rDG0THSmZV

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.gbwhatsapp
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.gbwhatsapp/cache/SSLSessionCache/static.whatsapp.net.443

    Filesize

    5KB

    MD5

    e4cd57e2ab476aa7492a4abcb469c222

    SHA1

    6d56175f75ae03e202a75c52d20399ee6e14f3c8

    SHA256

    ed67e95443980b94343f710ca17c44a94b63380df01889a3519c1c1c26c18ed7

    SHA512

    f76d310ba247ee51582156dc97e5f9b07d4d26d5b688308202873e14f23a07c186446c610dd168ee85a80905f2f676108aab19aa3bb250f35d707ac6fb4f182b

  • /data/data/com.gbwhatsapp/cache/SSLSessionCache/static.whatsapp.net.443

    Filesize

    5KB

    MD5

    ee66eab55fbb6cf88015deef948315b8

    SHA1

    cbf0f0a417c809c66bef7336e3ea6984f7c1a95b

    SHA256

    289fa91d22149ef79c7a9827d586182f01425f6fecc132cce9df7ea34fdb6370

    SHA512

    3612e2f824b11b2434f3f939336091866e76897d211571b2c81142e488cb565e2e59b6eeb2e2e89c692f689b3d9c995fbdbf6ed16ab1962b9ea84731a22960ab

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00001DarkWallpaper.jpg

    Filesize

    2KB

    MD5

    ce57f4a8a7f6f2afb35c86dbb8f1f7dd

    SHA1

    9ead9440c73f6cceb0175e15dac473c9fe56155f

    SHA256

    b541695affda1e92cac2e9bf5993adc6ebaf1d17055b4afd28261e4baddf155d

    SHA512

    eeae2160ed0b6616e4ead8e417890c537f4aeda4a082b60a3b0296b678c1bb8a7a6dbec7768e6c32e3b4fe3b253509af84f89681348160995bd63e81f3833563

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00004DarkWallpaper.jpg

    Filesize

    6KB

    MD5

    531bf200db3d162acfb510cde1e08bcf

    SHA1

    3955e0aa357e718115b71ef37689e299b8c53268

    SHA256

    ab6ca08e575bc7bacd96303fc021d8a1d666fafd52673876b776a5869f7f2593

    SHA512

    b1d5e429446c44aceb939ab512e2cfe06effb0547413633eac383e073b4816a8257fa200418607dfa4417ee81a04908adada5fe1c8759d605e9e9235e4d1eaa6

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00005DarkWallpaper.jpg

    Filesize

    3KB

    MD5

    73a86bf812966a7c6ad0be9e8bcc1a58

    SHA1

    0ce4bd31324d287ecd21d138063c9510dda452c8

    SHA256

    781e06e41a1020793c3c18a337443f367b544bd3b37adffaf733bf0ac80af128

    SHA512

    a61fe84fdd6e74aedd03e25c5f5af5fe628eaed4bab6ac226c1c65d142c3d23407f710f7ae31ed7d32db53d30fd2d5d2a7fc5910403eda15616bf13ac2012a63

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00010DarkWallpaper.jpg

    Filesize

    17KB

    MD5

    2dfd35c3f9fc6742b9df24d12afd5738

    SHA1

    13f3837eb51283197bd4fa3d7a0982811859fb8f

    SHA256

    d6f01d529ab392e652a5472e9386123bf248a1a4172db61faf99459d497cf67e

    SHA512

    c9543eb3f3860dd5a9b130271bf3b8363da616156fe5d95706b6114414e0774283888697f5c231e71739b7d3c5a149c4f99a6a6c85ac649308a4f2616e96f6c6

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00011DarkWallpaper.jpg

    Filesize

    1KB

    MD5

    cc4574200ee7208cf6617996092c3bf9

    SHA1

    c2114fa2e62401f2bd51906aeb444cc7038950d0

    SHA256

    bbfa42ec9edb9e1d481892b62ee652cb6e70581c4ae0db732e2d9ba285e6d175

    SHA512

    41066b373d2ace78d11f52b1338779d04117b4a79fe544c57b8e7e18219794a24ab2ba87b7e3adca12e140b4f552f626a04b98ec79c386f4eec1e11538587d77

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00014DarkWallpaper.jpg

    Filesize

    12KB

    MD5

    99d7c876c5afde27414be758e9f85075

    SHA1

    07056bf1036e046b5472ba67909925cbebc68483

    SHA256

    a7214acf1170feabbb3cbd1159df4ac622f95eaa47a5c654bcbb5e93702b5a02

    SHA512

    64a87dc5aff4913e4e06e7ba284b4848f73fdd32d5a37acc3b41805699c1e2a83b7942ec8b6ac20c5361e0c80bbc53cd6ca6e181ac7ae5e5612fc61a568b1495

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00015DarkWallpaper.jpg

    Filesize

    12KB

    MD5

    5c374bd37d678475fbef3b4b82f99c75

    SHA1

    32f6bcacc16ef1b9b32a2efde2667d805f0c5ca2

    SHA256

    2f2f54535a01b728246e04bde355f758f661aa4d6337143bfc5130784aaeef16

    SHA512

    7336a302194db2bec705ae8a900242f845b67caa1362848fd251134cbc7d730febb7cda9413bb84c90ed6512153c232fc42bc9533e00fd53e3cd40506831f270

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00020DarkWallpaper.jpg

    Filesize

    16KB

    MD5

    bdc10d3425f632648c9d64d93c7b6deb

    SHA1

    ba1a2c31d42cd9e385a05926122a163395d454d1

    SHA256

    3bf8f668c2de257590429e45d4014c0f036613948b48975aa10c5b648f2a2efc

    SHA512

    445af864483b3fea6e6f2bc7692a14fe1f144698e82b9d42fa3a45f59e1cceb55d14e860351fe0993f019d9ebd4dad463a2e4fe4846c76393bb8a4c4a69d7665

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00021DarkWallpaper.jpg

    Filesize

    7KB

    MD5

    ca90a8532eee74a4d3d2b990748e35e7

    SHA1

    52c411c8c343d3a291287c7bd136d6a268e7ebe6

    SHA256

    8bac2370e868c39f7e85f03b6cbbc331eca663739cd1633c43f9ca26a429c365

    SHA512

    38c9a65ffce5de259a5a20b86e4bf5fe35fff9fc4105d3d88ac13ecb95c89734f6e3f33a090056c0f03ba98bb961d34ae127f0094968fd379f2f58d93949661b

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00024DarkWallpaper.jpg

    Filesize

    11KB

    MD5

    06f21dec58fec12197f66b32d2b28f2a

    SHA1

    62e336fef1ea67f022e8722d232719d35e99a7ca

    SHA256

    da9ce86503b2ce777a93adf45e24809bf350e5512dd87419f44f9b5422643873

    SHA512

    abdc1f4c8c5652188a8d658b0fc22057a984cee74fcfd465ebc80c43bafecece476815a18995e0e1dfed3a7a62f4a6fcf048e0f19eeb2f85e93a0947a76d9218

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00025DarkWallpaper.jpg

    Filesize

    6KB

    MD5

    75d3c7a6be3fd5702ac07e98f4506732

    SHA1

    6042f37348754733b42031fec907ed80386942b0

    SHA256

    a6c4c3a84470aa63e07cabfc0d64aa0a1b74f4c71adf881197663a734b3a7dca

    SHA512

    df719c3d8c7035e2acd8bf355168eade847e7beb183d9282ba6af72b6b1e1b1abd9ad8fbebc341463bdd293fc1ba2129010fc060cf222c9b35e6c99c3bd5bc13

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00028LightWallpaper.jpg

    Filesize

    4KB

    MD5

    53b52ec472863510b163b6add2bbe526

    SHA1

    ae9ea3b7d8ef900beab52e3105daf86d392afe5e

    SHA256

    88a31f243744984b5f4788f32a780bfd39fd50d205cba49c9d503452711df26a

    SHA512

    033311ab1b028626bc758a4417ed762996df5e28bb19277ccbbffa053788f225ba76ee5cdf30f83a3e8dabd9f69f6939fb139e6d1b2783900f4e8ecec4727768

  • /data/data/com.gbwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00029LightWallpaper.jpg

    Filesize

    1KB

    MD5

    65a4fe15b02783f00927632ca8c60720

    SHA1

    04ceed4e7a094dcb2b06836b632e027c1d4ef683

    SHA256

    10a5d7ece5da51fd8fcb7e9d0d9013672276d635d0f1f38674db76b70cf36a8a

    SHA512

    388cf8a45d9e04abdbaa44b73a64d2d041e3c8bc6351a0b61545c7890c39f239ce21b200fb72a79e91c08ed9e3b558f9e67d9c5c23ecb5d93bdfa1ef3b0a6ea0

  • /data/data/com.gbwhatsapp/cache/downloading-6233706798244705517.tmp

    Filesize

    73KB

    MD5

    26f985184419c9baf376aa694c5b9cd6

    SHA1

    5cd7628417612d95940e1b26b21b3112f938abfe

    SHA256

    5a89ab27be17e625c094159b40f68b6714ea3cc3cf8de1fd84ef584b725cb8ba

    SHA512

    2a5d9dd6d7ed5f6818417b6bcfed89e47c1b0e25242aca496e6356e62e3beeb02e3f168eb5471fc73a39bc56841f2109b753ff2c55be116774859dd0185d1ace

  • /data/data/com.gbwhatsapp/databases/BTOR.DB

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.gbwhatsapp/databases/BTOR.DB-journal

    Filesize

    512B

    MD5

    a773b5ce90e590f3b72a64d6794be785

    SHA1

    0737e876b8dc1817e1b92256de3e632b73b8846a

    SHA256

    247bb5f02e10acb2d540a60b40bd3f50f25f508722709514c619aeca0b8c61cf

    SHA512

    bf771e24e07793471827225bd6777d25f9e5d8bd2149509e821134d455d81dc38f804e9f844c79e6e30506a4f822e13cdbf4fe87b83ec5daf7a6cf7b3fcda3b2

  • /data/data/com.gbwhatsapp/databases/BTOR.DB-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.gbwhatsapp/databases/BTOR.DB-wal

    Filesize

    32KB

    MD5

    cca3b0307e0f84e2f3f84e7897d6a7d3

    SHA1

    e1e17004d72f59e93ba3b67e5ff3dce7a0f3fcfb

    SHA256

    fe5cf12e2eabfa65ee8fb3d20c919eb485d0309c26b76b5729ccf06897d26f50

    SHA512

    ea75a1ca9e8b973e738065a6031b6a90c9811c0b7136de697d853c434a9ad697a5d1f64cfcdc17e4daf1c362ab952680341757b1cdd7d65dba9a35d6c3000572

  • /data/data/com.gbwhatsapp/databases/EHS.DB-journal

    Filesize

    512B

    MD5

    e1d6964324ae94436c4b78587cbe8d9c

    SHA1

    801aaa09847f176090759e13ae235f887fa37992

    SHA256

    219ca5cf1e08f0c997d6d476cf15871c7193bdb05e00b80d59a72d6d25bb9c59

    SHA512

    81e210f4c573b15e332b8d5143358709c790f35849efecbedffc8ff525997aadd033c5660ec019b18c30a57847d19db5ce8ac0cf26b72dfc29ae3491e77df17f

  • /data/data/com.gbwhatsapp/databases/EHS.DB-wal

    Filesize

    32KB

    MD5

    ceeb2b7ee8d42e699da0a48ec3730ee0

    SHA1

    513d20ec6deb2f774b68082b4806a7a5385b1efb

    SHA256

    6ecd111a24c6c6b7c0b9341b07d3c07bbfdb714e13ed73ccd489b1b06001147f

    SHA512

    701b1c6d175e4ed17d64c684f3a9634deab1e29e9c02cfcd36a72f2bf431bb59fb3062f4d0c521370ae411c942ce22868fca917efbdaa4e19b1ceeeede90f477

  • /data/data/com.gbwhatsapp/databases/stickers.db-journal

    Filesize

    512B

    MD5

    1b3f597ac1bd3595d8bcfb71b98ebf58

    SHA1

    53cc895bdfcdf162ee4b4f8906be34abcd7dd4af

    SHA256

    0c59b857c7e9bc0d5a9cecb8bace128f50df87d8c211a07f3c8f703d5cda0302

    SHA512

    050ffa2bc7efd0843cfb7df1b2fd23ed403e3b2cf08a90212edc097b3acb0f5db54ea631e30170a34bb809169c23f30145ac6b497df767ef3c87d05af4e7602a

  • /data/data/com.gbwhatsapp/databases/stickers.db-wal

    Filesize

    16KB

    MD5

    578e8ae2a37423fe0d119687144d55df

    SHA1

    7548bbdb962700b11e99565e474dc9992649412e

    SHA256

    61f388c1fae074a9ffb997a597870467dbf7dfafa5eb6c8d4dd10f0c5454630d

    SHA512

    3b0de2efb5ad164a6e511858b118747be9fdc909757954f69aed8624e37ad8c0bd5f74438bcf365efbeafab3c0aa6726dc1c62d722b9a73cf76e4f51e32489b3

  • /data/data/com.gbwhatsapp/databases/sync.db-journal

    Filesize

    512B

    MD5

    60a98a3af8dde87b47bc1d95219b38d3

    SHA1

    9891848d493f85cc898c9a07e09c20840fc4b1c8

    SHA256

    a0223f411e3327ed2f67e59ec86cef96148e1851f2631701e132f05e1bd9bbcc

    SHA512

    a1f918c549539d1586c7ee9c508849ac554b5155ccaf11eacc17ad44127fc113eaf5022788eefa1213295c55fe17a81ceae42abac191b44669cfaabe29ddcb33

  • /data/data/com.gbwhatsapp/databases/sync.db-wal

    Filesize

    16KB

    MD5

    64df6ac671e2d6c6048d620f5286c4c8

    SHA1

    10a54a542345d04a18f870006411bf5601867ebf

    SHA256

    e9f095a50283511993d33aeb452798370ff601879f24f67bfd0bcf722684146f

    SHA512

    410ebf972c32e2aec9a7151db21c1da4d70ab33812bb452893538e7c7eea6833388ad28f5ca6d15339cf5c9d7bce14c320162402754cb7eb59ed093a5becf0e3

  • /data/data/com.gbwhatsapp/databases/wa.db-journal

    Filesize

    512B

    MD5

    068308bf57ecbd7dc99505783f3f2940

    SHA1

    27d3d31a66ab6ed2b71c362b9b9f3548f12b0a45

    SHA256

    74f38c2dac4f0000c4c6b2f9644210fe8d030d0a3e45ee35866f2829fefb0bca

    SHA512

    a645cfd75605ae51b4744c68593f00c666c7cc423db09e60e72339456f00d2de4eceb63918e111c75acb1e96fa414b475423dfac84571d12e84dcfcd127ee6b1

  • /data/data/com.gbwhatsapp/databases/wa.db-wal

    Filesize

    16KB

    MD5

    4e62415bf3f3f5c21f91d54526d53252

    SHA1

    b4528aa6a9e4366350e332ced0358c56badbf877

    SHA256

    ccc7a2ba4115a11b2109c4d852ca5763a41da3823fdfc2851271bcd3e9b1a9d2

    SHA512

    79ca0cb2ed5bd115d9dc8699570d139ae78dd8596a1ffc104b581466e7d09caa01598e007a2305e25b3203ee15c6d3cf8e6110fe8d16d205dbb675dcfce94031

  • /data/data/com.gbwhatsapp/files/.trash/d45d3449-579c-4d08-9981-ad1a77ef3663/cf691a9b-9121-4ea5-837c-468286fb8c70

    Filesize

    67B

    MD5

    d8141b97bb6b8752f676cba953de8e56

    SHA1

    b65fefc908682f7027ea3ca34ffd592a6d81ae87

    SHA256

    afff045ccff4a25dc9ed283acb206e37fbcdc6afd5adacc86c645d432e032a21

    SHA512

    98915af0eef59abcf116818f4398cbd5a0eaf31a65110422e186872f48aeb7400948d51d5b22b0ce82c07764f21dbcbf1e252bf5a49df0dea3951bda730092a3

  • /data/data/com.gbwhatsapp/files/.trash/d45d3449-579c-4d08-9981-ad1a77ef3663/fea3800b-9a92-4a29-b412-2de40a9a95e5

    Filesize

    526B

    MD5

    2c0f856d7250fb18c8dfe900ec9bd5d4

    SHA1

    10c62e9db2bdffd3d76829987e50d0efa5e0a72b

    SHA256

    62802cd5039ff363156f7d4dd4d7360d095090a6331131f018abba016b6e1aa6

    SHA512

    ef5d4481e27d2d6053a224f685b983e52d7ae0d2dbae4f349c1ed0191e4d5b737ce8e2f0d8a393f2384ff9bf05af29f47aea983d57d0b151e89b3cc8c6ef38e2

  • /data/data/com.gbwhatsapp/files/Logs/whatsapp.log

    Filesize

    4KB

    MD5

    7713fd96b672a56a4e2ffd6fbc62c6e3

    SHA1

    913e2df2b6d661805a7b152e8e6463094ac81107

    SHA256

    b45cb60c7b1c24b4b7bc7e33542ccbe04e03d764bf1b33b85d734df82b3dd902

    SHA512

    0fd4713c3977e590313e8bac9600277ec46d83c22ea66e66cac56c34e2cf06ac803d8de2c6b65f1a26da7fe25ef38ef29adb917be94fb79542b5aa303a2ff205

  • /data/data/com.gbwhatsapp/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    0c58e5ab36c57737739ab0dc7bc37853

    SHA1

    ba1b5a39199ff7d230a7681827e21e0d1cbf41ca

    SHA256

    40f28ef9be0d2259d1ae91483a64dfe1956cef2ad5179e7c7c56b65e84d3c365

    SHA512

    8d1d7b0465ce1a869bd043e000381d5104426cd7645fe91b6a21c3849e16d48af711844789284c9122d1054fbd3da742e1dc828a80170338f855c3f438c41d54

  • /data/data/com.gbwhatsapp/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    44e991245b0a74faa83299f01df0e7e7

    SHA1

    1e295632007b912d845a9f166251fb06baf5fe10

    SHA256

    868117ac0e2b8056b8c985fa4ca0f3e50dee9dfc0d70a72a3b7088710ee181f9

    SHA512

    8675874b0db36b750960ad0da745bff71b8f6c2b170fa0611e5bba9cd9b9fadf850b8e6eafe7987c945033d21539d53628b9f9ff4344340c0fb6c7a79ed12fd1

  • /data/data/com.gbwhatsapp/no_backup/androidx.work.workdb-wal

    Filesize

    112KB

    MD5

    6a4e4547239c6b6fe5bbcb74420bcb0d

    SHA1

    0638784111187ae226377fd4d41351e5ad60a1e5

    SHA256

    449b586d299401ec33fb19ec303b81f84409144ffff22ab5203972d9ec7490e4

    SHA512

    a9e528372cc065bd5dec7763e6dad23b19dbc3c121494684217d5e47830be344008dc86901b11ad6760f9c1dd431b622226072e973243950b608045d5e5b20c1

  • /data/data/com.gbwhatsapp/no_backup/com.google.InstanceId.properties

    Filesize

    63B

    MD5

    4b31da55833bf506a6ea203d503f03b5

    SHA1

    6969db63948a0d2ec93ba5bef7d3e8a27fb61d09

    SHA256

    00c645053e063db55728936eae37628929b9aa28179ebd12d6ed9a3c5def9ac2

    SHA512

    c633f133e87f5b909ec80d8d276e52ad5eb5277dc6d3a781bbb1ef582465768b2d2b362090c72e346528414a723826d513acec43d18656d6b0896713a99643be