Analysis

  • max time kernel
    3s
  • max time network
    140s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    11/03/2024, 01:08

General

  • Target

    53b047fd8eb5cbfea1aee94d0c7cb1f3.apk

  • Size

    86.6MB

  • MD5

    53b047fd8eb5cbfea1aee94d0c7cb1f3

  • SHA1

    c489e9f0cf2cdb388aee91529bf148b6c8988986

  • SHA256

    2364eece11bf1afacb0d42d1532f1c6f916da8744077eb46e1c7bdab4e06f538

  • SHA512

    b7f1927e434efd6ab9b4ffb1ec49dfccace621ca9ca9bbeeaac9e77c24f0428af66ad409915041479f6fe0f1aaa927f71697fce10d9740e2e902c0dca61b3f06

  • SSDEEP

    1572864:GA68d1c4s80MmD/PwpJdwCU+cTMulFMnlLW7bqLUZJsWha0zJ6AXZj4:GedJ0rDnLTMGF+Q7hM

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • com.mbwhatsapp
    1⤵
    • Acquires the wake lock
    PID:4320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.mbwhatsapp/databases/BTOR.DB

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.mbwhatsapp/databases/BTOR.DB-journal

    Filesize

    512B

    MD5

    51dcb10ef9c88a750cf3ff54e6712f2a

    SHA1

    a7b1638878334601b0696e3cc7cc3f4703d969ad

    SHA256

    e0793f49eeee59b93420b95af6120a63113b7d9b601401b46c64bc2d70ca8b02

    SHA512

    229dfe065bdb6fad165cdb9f6d8e6987dccc3ae16576ba376dab29659b40ddd6ab756ce75a754b58915044d9df84de90866f7ff0de26b6750a31f659dc2db97f

  • /data/data/com.mbwhatsapp/databases/BTOR.DB-wal

    Filesize

    32KB

    MD5

    5332060e6fb57eadb4220acc5f9ea125

    SHA1

    4608a4a5ad4c79f5938eb3c2bea4f0dd5a3cda8e

    SHA256

    2cd9bc68c182796dd2dce84116b088213a9755b7d374aea44767d40b1e628917

    SHA512

    0b55ed4fcf6fc993c9e509deea7cea6ab2015de073fa10521405360e788a8261adffb5f10b227285cf8527c158301bbf30a7703af49b16f39fd055f783bcc76f

  • /data/data/com.mbwhatsapp/databases/EHS.DB-journal

    Filesize

    512B

    MD5

    793652715491833aa14e4aa2566d45cc

    SHA1

    2cd66bd8901bd1636b3a541e837481913e1b453f

    SHA256

    76efd7d3c433b24a1d7730ee1db2be89d7d2c85e3c338d69da664b6d0b36f21e

    SHA512

    b99122598ff2efdcde2b7fbe442ba0a0b892e9d01426f1f73e5d0f76b7501dbdbbd73a578261bf380253eb15d3bdf7ddc4a7633bc77897e83cab692fd71aed2d

  • /data/data/com.mbwhatsapp/databases/EHS.DB-wal

    Filesize

    36KB

    MD5

    f6343e6188b5cb1f5be5fe22c12fca33

    SHA1

    72b79de2575f7f28dccb53150be4b221cbef532b

    SHA256

    e4e97f3a07d28594601c3b1ade28592b70af52fb6247154ee96f8cc427b753c3

    SHA512

    4412707c8306e5bf0cd29e8fe27c09cc83cbffa84c28810c85a9a903356e151c0af47bbfacc8af41c1ee973242f136a1a9c68b444e8312972dc1edf94ed54d12

  • /data/data/com.mbwhatsapp/files/Logs/whatsapp.log

    Filesize

    187B

    MD5

    b7554ba35e0290d10e7194a2cb695caa

    SHA1

    4323fc53b99dff8cd23aa535c3666320a5d4e0de

    SHA256

    c2f37c7300735b0782786cdd050315c7174c37d35170794f43f3bf1e943c96fd

    SHA512

    d5fdef7c922444b31dabd83d463e1aeae15f2229e10867c6bc6674c9d1d1978d437564903732cdf35b3ff636f4eaaee937ee63f7b25ccb2401ac8b45affce8af

  • /data/data/com.mbwhatsapp/files/light_stock.xml

    Filesize

    20KB

    MD5

    90ad3f9271671e93260080c65770932c

    SHA1

    c42d3797096a0deed4a6ba22fec177d18dc04646

    SHA256

    819a237bb8bbbbfa3d1566526ef519bb3a5db1dca3f4fd6caf63aa75940d3d07

    SHA512

    bb8fd1c8067aff6d1ade15b377d61849b9dd26733881bca17228a15c9ca7daffb30107194f5bb672c31d0f873230bf1192af0dafc181821c9fc4e750a1b10298

  • /data/data/com.mbwhatsapp/files/night_stock.xml

    Filesize

    20KB

    MD5

    c2d0679fea746990936232a7169768bd

    SHA1

    28b1eda655b657343ca277aec0d537fcf59004bd

    SHA256

    812503a9c3eb0f1d6bb40ab7d7b05c8ae77b6cade4563f06f36b0e144a80c08a

    SHA512

    217660b9fa3b96331a554a9bb82f93c3c5d87f7b9ed65a299f2dc4474ab830692ecca9159eab2e39397c9d29407ab667a29b531978af4fdb4965357d2064811d

  • /data/data/com.mbwhatsapp/no_backup/com.google.InstanceId.properties

    Filesize

    63B

    MD5

    177a079d747db36214a72ede08dae47a

    SHA1

    93e87e64eabaf5528e089a7d95c169b22cf1fbf3

    SHA256

    36cf72d08148dd5a8dbc494ec06dc6558586a6cd66b53499ab0e803680cb2e08

    SHA512

    c09e79a35c0a6db043a434a4b06d4aa66a12a45a564dbcb9aadc4b4c71bf404a2fb359e71e2231ac364efa29f269a3fcfac6dd8731284fb04eb8dbbb88457335