Overview

overview

10

Static

static

10

75f804d346...f9.apk

android-9-x86

6

Analysis

  • max time kernel
    47s
  • max time network
    136s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    14/02/2024, 01:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    75f804d346dc48de24e447e262da09b75bb20405095bcee2ab2a775800158ef9.apk
  • Size 69.6MB
  • Sample240214-ccptvsfd45
  • SHA256 75f804d346dc48de24e447e262da09b75bb20405095bcee2ab2a775800158ef9
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.fmwhatsapp
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4251

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        static.whatsapp.net.443
        • Path /data/data/com.fmwhatsapp/cache/SSLSessionCache/static.whatsapp.net.443
        • Size 5KB
        • SHA256 fb663b002de4c14e9a11d1576f8edc49f8e452b0e59af1f301bbfe6094af86dc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00001DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00001DarkWallpaper.jpg
        • Size 2KB
        • SHA256 b541695affda1e92cac2e9bf5993adc6ebaf1d17055b4afd28261e4baddf155d
        • MD5 SHA1 SHA512
        Submit Download

        00004DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00004DarkWallpaper.jpg
        • Size 6KB
        • SHA256 ab6ca08e575bc7bacd96303fc021d8a1d666fafd52673876b776a5869f7f2593
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00005DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00005DarkWallpaper.jpg
        • Size 3KB
        • SHA256 781e06e41a1020793c3c18a337443f367b544bd3b37adffaf733bf0ac80af128
        • MD5 SHA1 SHA512
        Submit Download

        00010DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00010DarkWallpaper.jpg
        • Size 17KB
        • SHA256 d6f01d529ab392e652a5472e9386123bf248a1a4172db61faf99459d497cf67e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00011DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00011DarkWallpaper.jpg
        • Size 6KB
        • SHA256 ad035e1d70649231fd3b1ee0b1ac649e27f1c373ec090858ef7b4e7b5d541c82
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00013DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00013DarkWallpaper.jpg
        • Size 6KB
        • SHA256 671727713db9b196bd1ef3066f570c0d4150c29abce448b71343a4c345397820
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00014DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00014DarkWallpaper.jpg
        • Size 12KB
        • SHA256 a7214acf1170feabbb3cbd1159df4ac622f95eaa47a5c654bcbb5e93702b5a02
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00015DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00015DarkWallpaper.jpg
        • Size 12KB
        • SHA256 2f2f54535a01b728246e04bde355f758f661aa4d6337143bfc5130784aaeef16
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00020DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00020DarkWallpaper.jpg
        • Size 16KB
        • SHA256 3bf8f668c2de257590429e45d4014c0f036613948b48975aa10c5b648f2a2efc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00021DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00021DarkWallpaper.jpg
        • Size 7KB
        • SHA256 8bac2370e868c39f7e85f03b6cbbc331eca663739cd1633c43f9ca26a429c365
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00024DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00024DarkWallpaper.jpg
        • Size 11KB
        • SHA256 da9ce86503b2ce777a93adf45e24809bf350e5512dd87419f44f9b5422643873
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00025DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00025DarkWallpaper.jpg
        • Size 6KB
        • SHA256 a6c4c3a84470aa63e07cabfc0d64aa0a1b74f4c71adf881197663a734b3a7dca
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00026DarkWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/dark/00026DarkWallpaper.jpg
        • Size 8KB
        • SHA256 a81619be824e0001db6e0b9aa09fe7697c266c709cf9070807868144207fee1d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        00028LightWallpaper.jpg
        • Path /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00028LightWallpaper.jpg
        • Size 786B
        • SHA256 8ecb7a986e7c2d297905e86ea2825273a79ad0632f4f3db548aa890a195dd08f
        • MD5 SHA1 SHA512
        Submit Download

        BTOR.DB
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-journal
        • Size 512B
        • SHA256 5c6f613b5c156133dc36465eed7db791e1d5d584ddd1975907699057ced72991
        • MD5 SHA1 SHA512
        Submit Download

        BTOR.DB-shm
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-shm
        • Size 28KB
        • SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB-wal
        • Path /data/data/com.fmwhatsapp/databases/BTOR.DB-wal
        • Size 32KB
        • SHA256 be97e2302218dc251da0c515058303fa6940845d7ec7c3a473941ef855da8742
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        axolotl.db-journal
        • Path /data/data/com.fmwhatsapp/databases/axolotl.db-journal
        • Size 512B
        • SHA256 1da0fb3abc47fdf05ba6c2134c013e0acd256c539d864d1391d28d3e9ad5932c
        • MD5 SHA1 SHA512
        Submit Download

        axolotl.db-wal
        • Path /data/data/com.fmwhatsapp/databases/axolotl.db-wal
        • Size 16KB
        • SHA256 58758c7eac556cc487ca12801216c034b6379ef37d0008fcc0dbb053559e2e73
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        stickers.db-journal
        • Path /data/data/com.fmwhatsapp/databases/stickers.db-journal
        • Size 512B
        • SHA256 5e4a52c053de40878df3c56b34ac437cf3dcc257e6fefeed70dcc106f09d968e
        • MD5 SHA1 SHA512
        Submit Download

        stickers.db-wal
        • Path /data/data/com.fmwhatsapp/databases/stickers.db-wal
        • Size 16KB
        • SHA256 c28f481974276e9637a06a3868ad03aede683fe61a8e1f597d7fe38e80ab0254
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sync.db-journal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-journal
        • Size 512B
        • SHA256 28b5a8b6349b6c64cdcac759df7914a5f9cd0e602c9083d6c029b292577723a5
        • MD5 SHA1 SHA512
        Submit Download

        sync.db-wal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-wal
        • Size 16KB
        • SHA256 b4871e292100e7269693e4dcfb7203bb1a6c711b601f4ab220bdf8afa8b0ddf8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sync.db-wal
        • Path /data/data/com.fmwhatsapp/databases/sync.db-wal
        • Size 116KB
        • SHA256 7c0ad93babd6832f030f27062ecfed000651c57a21e78984b3ef0049b5116279
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        wa.db-wal
        • Path /data/data/com.fmwhatsapp/databases/wa.db-wal
        • Size 16KB
        • SHA256 47f775f60c6ed0e6405cda0776186e299aa413c9d73b7f3855501e62047f6fe9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        089c08fc-c2d3-47d6-8a92-ee67a5a6013f
        • Path /data/data/com.fmwhatsapp/files/.trash/88d8a525-fc06-49fc-96b4-e538ab1fb0cb/089c08fc-c2d3-47d6-8a92-ee67a5a6013f
        • Size 525B
        • SHA256 264b2b4e0cab3d8969065c105423702fc90ab7d6846963a55a09ba2a93286c33
        • MD5 SHA1 SHA512
        Submit Download

        c374604d-fc0f-46c4-a99e-5ff2bb45e320
        • Path /data/data/com.fmwhatsapp/files/.trash/88d8a525-fc06-49fc-96b4-e538ab1fb0cb/c374604d-fc0f-46c4-a99e-5ff2bb45e320
        • Size 54B
        • SHA256 e2af3308470a10914ffa9079428fde7867a960cbcb922d082a963089c49b75fe
        • MD5 SHA1 SHA512
        Submit Download

        libvlc.so
        • Path /data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/libvlc.so
        • Size 21KB
        • SHA256 c52dab197dc4650a02d7a4f39a6397e3bb03c9014b45d0651ac1f5b62b4016a7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libwhatsapp.so
        • Path /data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/libwhatsapp.so
        • Size 3.6MB
        • SHA256 e7a381f90d59659f7a29b03c0e4b36517666e3d8b02e39a20904d01dcb4271f2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 aa78f75f96e2f98e699787518a4046ed99da8e3b515905ae8d4c40c5c3d02fe1
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 ad43f617025da2ae8bed2abe427539d87a23310e9ec5c4d10c3d5bc4af0099b6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 112KB
        • SHA256 2b1f5a58a3b2a1e2549afe7172f57bb6d4ace04773eee6e30e8eca74a344eb6f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal
        • Size 160KB
        • SHA256 038e75d00736894d43768d038ed4a72654d0da2b96248860dd0a14b911d91bc3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.fmwhatsapp/no_backup/com.google.InstanceId.properties
        • Size 63B
        • SHA256 d6509738a19d846153b9049f23ef284cd416e1e01ff32ddf824042924dc1e600
        • MD5 SHA1 SHA512
        Submit Download