Analysis

  • max time kernel
    3s
  • max time network
    50s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    09/03/2024, 21:41

General

  • Target

    [com.mb]MBWA+iOS+v9.96+by+stefanoYG.apk

  • Size

    86.6MB

  • MD5

    53b047fd8eb5cbfea1aee94d0c7cb1f3

  • SHA1

    c489e9f0cf2cdb388aee91529bf148b6c8988986

  • SHA256

    2364eece11bf1afacb0d42d1532f1c6f916da8744077eb46e1c7bdab4e06f538

  • SHA512

    b7f1927e434efd6ab9b4ffb1ec49dfccace621ca9ca9bbeeaac9e77c24f0428af66ad409915041479f6fe0f1aaa927f71697fce10d9740e2e902c0dca61b3f06

  • SSDEEP

    1572864:GA68d1c4s80MmD/PwpJdwCU+cTMulFMnlLW7bqLUZJsWha0zJ6AXZj4:GedJ0rDnLTMGF+Q7hM

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • com.mbwhatsapp
    1⤵
    • Acquires the wake lock
    PID:4498

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.mbwhatsapp/databases/BTOR.DB

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.mbwhatsapp/databases/BTOR.DB-journal

    Filesize

    512B

    MD5

    87a27f76d8e99944f19932cf7c9d6a33

    SHA1

    d49cd2ced525505cbf7d5a921ee94eb1b870b75e

    SHA256

    850d88303adbcb3bf274161099b8e7e80a0b6aa44967643cc4ce8b0f6a4bf02c

    SHA512

    0ee9ad54ae3516f7353e7ef86b17be941e4c6cf56f5906ccae0e3ef6cf64fae1bab2b6747369a1b7a09e3cbbd149de56aff8def1b46f8ae3472e646403e79711

  • /data/data/com.mbwhatsapp/databases/BTOR.DB-wal

    Filesize

    32KB

    MD5

    1f06919348178d8dd3eab0e806e7e2ad

    SHA1

    aff878dc2daa13c3ebb48996410ae28e7720cf52

    SHA256

    54f13c901bcd332ed949e4bd5ed5516d92a069e08bdc169e7596c71d5ceb1720

    SHA512

    0884b45f45b55fb9245195d6af8bd42bbb010e909cc518c0adcedab60521a1f9bd6e8155765e35c917726eb71e25e736ce5862c339db3d89f61b69fd866ae63e

  • /data/data/com.mbwhatsapp/databases/EHS.DB-journal

    Filesize

    512B

    MD5

    fda2df28d28beecc909b78c6b80b9094

    SHA1

    078d5429bf770511c9bc82c3ba2b1f4145e88f4a

    SHA256

    85ff9defe883f4b02ef6ef31f9f7a43fee6b09489f568084bac190bde41c0bfc

    SHA512

    155202398ccb7cebb3a2f9cd4063379b9bc85957ed94bcd9098ff43959f6f5777a9a834ebd1b604c93b1b100596a55fa365c7778164dacd4abd4effaa8d99f12

  • /data/data/com.mbwhatsapp/databases/EHS.DB-wal

    Filesize

    36KB

    MD5

    14b314f20360336eaf33b3bca2539894

    SHA1

    9483ac82eb494eebe9ef6adfe25e3c0a07922448

    SHA256

    53018f6beb7f40a0d47a4a155cf17052ed8fdb6c79d67ddc5b0f89cb1e6cff5c

    SHA512

    fec335f03f606720cb366fc8daaf703e67a331814907da1b6fcd2d79fcc356f7398f40920ef02c3677f0774271036dc30dfe68155ea63f82ed085b802db839e8

  • /data/data/com.mbwhatsapp/files/light_stock.xml

    Filesize

    20KB

    MD5

    90ad3f9271671e93260080c65770932c

    SHA1

    c42d3797096a0deed4a6ba22fec177d18dc04646

    SHA256

    819a237bb8bbbbfa3d1566526ef519bb3a5db1dca3f4fd6caf63aa75940d3d07

    SHA512

    bb8fd1c8067aff6d1ade15b377d61849b9dd26733881bca17228a15c9ca7daffb30107194f5bb672c31d0f873230bf1192af0dafc181821c9fc4e750a1b10298

  • /data/data/com.mbwhatsapp/files/night_stock.xml

    Filesize

    20KB

    MD5

    c2d0679fea746990936232a7169768bd

    SHA1

    28b1eda655b657343ca277aec0d537fcf59004bd

    SHA256

    812503a9c3eb0f1d6bb40ab7d7b05c8ae77b6cade4563f06f36b0e144a80c08a

    SHA512

    217660b9fa3b96331a554a9bb82f93c3c5d87f7b9ed65a299f2dc4474ab830692ecca9159eab2e39397c9d29407ab667a29b531978af4fdb4965357d2064811d

  • /data/data/com.mbwhatsapp/no_backup/com.google.InstanceId.properties

    Filesize

    63B

    MD5

    e13a9db55b4bb3d7f64586b7180ddd82

    SHA1

    5f951a1091bac16a5cf99cfc7c5d4916ab0ab6c3

    SHA256

    5d15108427e96a1dc4b830d290954c431b7833c2431476839554e84682cd6d9f

    SHA512

    a5b2672d4882a5b0844acc9c3e137c73500168b9070b05f457f645b6b09029fd0fc04e774c600211eb9dd419785a803edc7f60830f080d4319c5654db1b3b7e5