Analysis
- max time kernel
3s - max time network
147s - platform
android_x64 - resource
android-x64-20231215-en - resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system - submitted
19/02/2024, 16:21
Behavioral task
behavioral1
Sample
Labalabi For Whatsapp_v20.0.apk
Resource
android-x86-arm-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Labalabi For Whatsapp_v20.0.apk
Resource
android-x64-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Labalabi For Whatsapp_v20.0.apk
Resource
android-x64-arm64-20231215-en
1 signatures
150 seconds
General
- Target Labalabi For Whatsapp_v20.0.apk
- Size 3.4MB
- Sample240219-ttmt9sgd48
- SHA256 0e0201da887350f02171cce8ed2dfd0e1e0cf46110ee426a1d6dc236ea50206c
- MD5 1f400a6f883457e9378e37f7bfc76113
- SHA1 4cacd6df506f095382551e929b68bd96f5b64828
- SHA512 d88d9ca8e499bbb8e8517e00333a4096316e4d4a5496b6f56a2ecb63aa2168a62142ff2dbdd31596792a30e4191efaafa2d44c5d760c2ef153446e0d725eade3
- SSDEEP 98304:ytE0fr/hH4BD2dQaptpu2KJ3tCyC18dk9qx:2n4x2LptpuNJdCZ8diqx
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud labalabi.whatsapp /dev/qemu_pipe labalabi.whatsapp
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/labalabi.whatsapp/files/shared_prefs_sdk_ad_prefs
- Size 153B
- SHA256 15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c
- MD5 65026ee778e1372d9f4aed742772e893
- SHA1 5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc
- SHA512 589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616
- MD5 SHA1 SHA512