Analysis
-
max time kernel
117s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
22-03-2024 09:43
Behavioral task
behavioral1
Sample
GBWhatsApp_Pro_v17.70.apk
Resource
android-x86-arm-20240221-en
General
-
Target
GBWhatsApp_Pro_v17.70.apk
-
Size
75.6MB
-
MD5
f8463591a68aad0597585a5383a15ef6
-
SHA1
55256fde61e9f17a732c31da5b1b7fd452267e71
-
SHA256
a9a2b6d1e462757abb4e050ac5561fddf155cc8d955056aada37e792a0768101
-
SHA512
0aac2da072ea697ed3eae3eb74975f6da30ebaa3d8a7dc3bf3c3b6bcf72820d974d60fcb19d877ce65d2eb87cca186ca98ef8ffcfbb7bc6369f67f14c2e36e0f
-
SSDEEP
1572864:c7vrTGr1V2jil7qtP+p1c4s50MmDyPwpJHLprum4hkvdMwoZQ:4+Yi9qNcU0rDuG4hadYm
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
Processes:
com.gbwhatsappdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.gbwhatsapp -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes:
com.gbwhatsappdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.gbwhatsapp
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD5f4480870475b3396a71e64040550ee68
SHA163ece2391774755d0547d7be5040a8a419e7f000
SHA256fdb3151abeb67c0e189d42c5386eede68e19b221b5569f25ab90ec96b6c3e6be
SHA51240804498ecbcfc7e710592542b2c67edc78a10a82f0f727e7a588d71b1f3f68d39acf1d91f9916a1f8aed22d968a1d0e51806f4c19cb203e4a22337124885033
-
Filesize
5KB
MD53235b4cef7f483e9ea417cb5b13f0f2e
SHA1edb2d49f41b53b17c08d2402f59b03c794da8a65
SHA25633eb1c11739f7654136acb608c11311506bf1088b11d1efcebd20e612f91dabd
SHA512d5bac4844520a2fbf7c4177f73e1be38c308eefd3bc3e1f890774568bffcf241c32dc0a2d68a2c7ee637d798533cf6b2ff55c95885457f4a0b35aeb7a916c3f3
-
Filesize
10KB
MD5931de8d191c8caf8445d5667dd76787d
SHA1b42d194ef8b45aba37caecdcb501eb6765a55557
SHA256a515e8de501e935fe3e8d77d9fb9572ffbc011760a349c2c5efe5c89df350130
SHA5127e4603d203652329f943597a95f2f6efdc4e48029086887b5701ed0fdfd6c521a47a3971b0b09a90d8fca98acd62ddb9fdac48bcf5fb69d15f94e68067f2b4e9
-
Filesize
27KB
MD5b3c313fb965d64d0cf42ff6b57d4a6e8
SHA1e6aa186990cbceab0061773924ca8af022693c70
SHA256ed08a2164f2e64af7efbf65786766dd17c52ba0746d0619db42b86f4593ce228
SHA5123d0ee1a280a25688f002c339787f6678bfaa8c7c903ea44908bd5aad2f381bd7aad530aecdab66cde62ef2375e298fdf5e7833e1258eba10c6d9fa10dc348dd4
-
Filesize
5KB
MD569fc890a8b8f761810e1f093d41850a1
SHA15f798f5335c7bd74e7900d17841cb029d0160e19
SHA256ae50a31de935c8d64278a0eb634597b7c900c7c291786f2a39db6f6b624734b1
SHA512cd41cbeb960393d95634f29db90beb5f6a9cdedcc398c05bf6d5f1481f8c8e5cd7f6b75d62fb9c28a8f2e3b92fa5f79a72b58d3c5b09c64ea4777e9d546c631a
-
Filesize
3KB
MD587a8e98c7fc1b2bbb35dde4386698a78
SHA1aadc5748df097b79ffbd70a7a8d15d6430bfafa7
SHA256851c0537dd1c1f70ee3fb845884bbb91cb9891141fbb8baf9390339c864e89fa
SHA51257472c38bee3cf402da2ea5af3e8a58f7b3858bee4676415ba4b15dde99fabec490b2681371ccf5cdf32a6046a019917b77d844a24ff34bdd0780fe203f8b974
-
Filesize
7KB
MD504204546974cdfd2cf80e49c0202ff3a
SHA1016939e98c7331d8a4db99549da47f16bfc52db0
SHA256cee73de8aef76b75c6aceb80a1f7843a43af8eb40fcf0788a6608d93a748fa7f
SHA51250a4f47e85ccb6827a5527509ad1ace4cd4f1af5bbfd8a44d624448a1f01d6fc63f6a8ceb0e69a250562668cbe5184ce651783d741ebea0698517a948961b758
-
Filesize
32KB
MD57bed7eddff689a98c7b70b73ced0a388
SHA1abb746a2b9aa06d9e1b5bb24a3a458a80ec3ac08
SHA256d1eedbd46245ef55b916be48960fc008a8d52cc7a9a5c3d27689b5dbb02e6772
SHA5122a7e3e8f3d9d4bb1a64203578105d08c683ef34147c89c4872baf50b717d4cba7732442a9266d5f40b7c67f23831eaf76a6edf6ef96a07baa39420682e47cfc4
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5bb23c6ab85b039d978a25f3fb90c769f
SHA14519df9e754ff603527b2260512e11edd7db2a12
SHA256bd629d9681183ff6c6f1c37ed505c31ab8723761da51fa6e061421c374cb1036
SHA512c0f84a83d67031ce370b9a2c23be2ac7fec5acf07055b468115809c755cd9fa34c269490942e811830a503b5bde3e66e2a29f85643fdaae60bcb49b1a63f9668
-
Filesize
32KB
MD553b1745c59b3d9fd3b31f27bdfdb3e33
SHA1cdd2db259702b9bc75c253869d9df23bef6748ae
SHA256d66dd61b441a323ca4f7d4d6f9a965e4b95cc9ea092b18db3a4983236a3fe83c
SHA512218ab094a70ba7f0db6b0b48947d838f7c125ddac7d52afb9e1b4d80c4be733c135a33549feeb968fde37299aa1cb22c11aee29be82d714455fc14b86ffe23c1
-
Filesize
512B
MD50c4eeaf03da1178f5d67aef9a08ed71b
SHA1a04da4f035f7a65b9a0a79d21ab99a2f1e6509a0
SHA25656e789e042fb668bab21aa0cd391bee8196a15e4a1665d143619b27472f506df
SHA512763ecdacf16e8c6801b81bdf94d278ccee9e8a56060e8ee20e09b92cdbd79fb5e80dd7f17a0892d27d9451935636422ac2b6bb3a0ae88e1bdab4676e5272a232
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
36KB
MD5598acfca5abc480c22d36187243f900d
SHA1ac124c51d8ceb341fd73d1e00c7cf79705c7b1cd
SHA25684118183e69635cccbc9388a41e45c71bcfedc982dc3bf508c17772254c319cc
SHA512f9d37cf687574207de9cfea7a0480e9e2a962585cca5b3cf3132aa43628a61e49ca06a4335f288f97ae08818e195104e0aee04f3cb3c8a46f5df47378dbc5472
-
Filesize
512B
MD592e4c614aa1a432ad04b21733f72545e
SHA18550ac2c273be86544e286bba2c791f0ff49492c
SHA256242e07c674136f7cf1b1fecb4fadc7333ada18ec7dcea2b1d0f6e75fed615e3b
SHA5126c68423993b8d1e84214786866a05fd376300a794c4c8f018f979cf517eb614ba05b659a433e41db3e6dfe1db4757f788952f041323bc2a6ce7b1e9689554dc0
-
Filesize
28KB
MD59fceba41243ce9994a1b7ed13548949f
SHA1d62bdc76bfded96d5237264adab173c99332d8d6
SHA256f23591bc4f884e5ec79ab0b09899aee92da3c2b086074a4da740fcfcc688d4ff
SHA512ee8c07f0ad4caca47efb5cd0a584d6d3ab75bd71cfd6c4a292bd026d3ace62e0a9fde5e68ac30e044e82fa9db13fdcb0f254eb628985e178ca21a939a244f41f
-
Filesize
512B
MD51c9534ea7d0bce218866df57fbde4e79
SHA14ee3d0c012bfec41f65f6431368d813e3ee5b957
SHA2561d29637cd219cf645ffdb7ff8058d25e390affc7f780237a6506cb49ef13bad7
SHA51207c23b47bda77555166cfe4d2b07ff7c5af064035c0fde8b0c785c40baf7e5e1754cead5e9bda41706614908eb918dfdcfab193b5efe79e96bc2b488064806df
-
Filesize
512B
MD59419ae964598171f07a811ecd85da04c
SHA120aa482854df4158149c6e64112bafe39b8f3242
SHA2568b10839cd18c7d882cdd881f8236dfede195235d601531f8b8a4ec835232ab21
SHA5124977ae661b67b884b4cb00e073d3d6c8e05f6fd765aecf0422290c2c1e6eaaa400e425eb6c5262db2f516989c0ae20885a07fb5ee24831ab8a888c4ceedc39b5
-
Filesize
16KB
MD5c9d7daee4dc9e00b6297366ee78832ef
SHA183a2990f256e5050e485e0cbf6b04313156594b0
SHA25603901f59b9b6ddb5a4bec97a5fba3a1119fa25c4486208d87c957caa7ede8880
SHA512f8466d60d84affcc7b395ab9637b2b6b12fa4fb98b59b8cd542168bb955de0a90e13b088eb519c4988f49c89ee7c2e51171bc807c4d3b3b69ce749c565eeeb26
-
Filesize
36KB
MD58787e26694204aba8b67a70fe4f4785c
SHA131caceb46b1a4b63d2a91f914232943a29e3f346
SHA256bbb91b35ad3d91f72fa0370c98d7ef1821649c773788988e7bc0504bc190629f
SHA5127d42f2f164644746e9905881c844e85b3af1df5afbb196620e3d84c3d6c840fb16cae1acd1701c174a8a51fab16206c6ff524aada6db369c4795f686dcfdd4be
-
Filesize
512B
MD5498a272eba76a42a9ac0767a10f47497
SHA1b28f69acd570d6c880966d516dfb17482abb875c
SHA2566bd59726f4f69031766626a9da1a68226d2f8d6cc7afb570d713f5c23e716303
SHA51284ec0ba9f99a9750b0012a3f217cfa4a2e24ef1713742d3c3731f9383f1320d38fd4dc0a20b41758da19f6cd2a9fa73df1abbeb84d1de38f176bb2ba461750bf
-
Filesize
16KB
MD5e04081cf5402bf9a73027390a63b7a66
SHA13e9f52c8e35036e6999747aa29b07c4114cd6090
SHA2564dc75e428aebda62afc4804353421be68b623cde8216b4802e16cb87a1cc0587
SHA51272b57dc2dfd556d1c8cd49f08b24bfe8a2e8685911b2c8ce8bdac8f31ceb78861c2257ce4af2e869d68a1b1e86791b0ac12286e267682fb27497717cec1fc9e6
-
Filesize
156KB
MD583a96ab57338a64764391e840a2284d8
SHA15cac069e07b2e9bd9cfddaa1de925c8cdfc804eb
SHA2564e86db7edafcec9751d0e136c0eec03d6354cdfdfef23b1015a4c3b13e784fab
SHA51259c059b8535755e6b48ca50ef593f34f860b61cccd22903d98af1249144ec2e84094d6731c1535cccb4cdbd30651bf1013796f4bde8b246605e2dc8ff66769d2
-
Filesize
512B
MD539e9902a97f9b86c7cb6eb99152e8e58
SHA156371f70d81c8cf17647bb7ec627a048fc8196af
SHA256efd23f9481e5c3447bae97346041c4f1044befaf584221b57a055c43d30c77bd
SHA5121cca1a18aab3e637d8e888c38430271741574b8137edaee7767db329cda09cddc951eecbda71b17958595a11e7583a41c6bacac7f5da9fa67366b3ef87110e76
-
Filesize
16KB
MD57e2d5050a8f4262b1666d65fc27cff54
SHA139e1968d6465161294ecfde99643be7ac27bd1a6
SHA256e8a7089856103ee2223528cafc592151fe18a3203ae8a069ab0104b493d768d3
SHA512806e305ae89d2dbd524d36201836c4a888d88aff6dfa93f134e31535973079867c66c00f637c33b17cd7b67d7a1d96b05812bb46346f070a9ffef45a6abe5486
-
Filesize
116KB
MD5f4d2806bfbef1a6e2f4ce5dd1dc7d07a
SHA1e7aeb598b530a640f6487d12168db0f4661679fd
SHA256fbd4af4031cf098e743d6b72de35bf6e6a16f94b22be2b18a111b0eb5bc2a087
SHA5128a590c6b32248887a0881d82c9ee0b1d18b9b783eb3e84bdebc51fd14d3f5eca9d2ff9be0d1ee0c3bb35eabc8adf1e9e55c6b5c4726718369400ed809305c6d9
-
Filesize
512B
MD524500eba511d76a6de66b22ac2f39954
SHA16c0d4c239354f03b143317bf2c6fa24cdec2b355
SHA256c3b9b9ce29a4d9f085d653bd74cf72dc4574bff8c4fa69e99bd8c4b82d6a8960
SHA512ae3226debb08330bc85f78ce397b394b6eeacd70da55d297123564670f784210f8088d5f20e5bb7db629e577423e231689e2c259a686d117e09ab80e909281b4
-
Filesize
16KB
MD5b718f7d21cba40d49206cc31e027aa4f
SHA1d55c89302c6ddc1eff28a952949c369392ba7abe
SHA256439a3caa0bce56aaa7a8e653d5283071a2520c479f75ae1ce872a71d22f3842a
SHA512e447edf48beca88e88c2735fd4e5d8fe02bf34b07ca62b864f690789636f2e48cb1d49c1b7e80bf38dd5555c52c91f4bc5d41dc98c849ce34bbb7f3f534aa633
-
/data/data/com.gbwhatsapp/files/.trash/8b12b7c9-dfea-47d2-9b94-0311b02bcc28/7d43db82-6cd7-4e63-b471-832c3f85b25e
Filesize66B
MD508bccb67d7e4cbbef7dba0104fced222
SHA118a20d26004f2633892395c9823d119bd4278775
SHA256cbd45b2a59d4e1c619fecc7265b9e9915fc808fa94d77acbb297d0713101700c
SHA512ece234bbe46d129175581ddc53a9482d0446a058cc35a5615d3454cc19e21c0f4d3813bcdcd682744bd1ef33209a4a9598d79eba3c591c290b1b39f7d1953a80
-
/data/data/com.gbwhatsapp/files/.trash/8b12b7c9-dfea-47d2-9b94-0311b02bcc28/acaf378c-805e-434e-8fa9-f5c44c38cec0
Filesize526B
MD52c0f856d7250fb18c8dfe900ec9bd5d4
SHA110c62e9db2bdffd3d76829987e50d0efa5e0a72b
SHA25662802cd5039ff363156f7d4dd4d7360d095090a6331131f018abba016b6e1aa6
SHA512ef5d4481e27d2d6053a224f685b983e52d7ae0d2dbae4f349c1ed0191e4d5b737ce8e2f0d8a393f2384ff9bf05af29f47aea983d57d0b151e89b3cc8c6ef38e2
-
Filesize
1.0MB
MD59152d25eca88440de101e99d9144ab63
SHA17825b0c0ce2375a6a9b4dd90dfe6b1828eaac8df
SHA256796aec1c13a6814be11436d725de888e7462dfc3fe15b7a96dc4a59f70dabfd1
SHA51294685635400fe578dc9178d9cc9ba093952557d7e8d8c77ff30fcec755bc0b4dbb7cd4e903e55f1199bcbb1719bec128f0bed3481792a53911654cdf0d539d12
-
Filesize
128KB
MD51ed861b7bb9eb7d9ce16d9125d3cf88e
SHA1ac18feb40bd8f7c526a15da9ad668615903ae9e0
SHA2563f87ea915f7e177074daa255a9e5fe8797cd9407140f5efaba164e8a7778ab7a
SHA512fe511bc84a556ba28c2da1ad91ac33bd9fac9b09886373bf633fa804e6815f7159e0004c8ff4be3a4a87a3f716498d4887ca74b4febb3748266969827f341098
-
Filesize
3KB
MD5cfaac46a9b3c925a53382f453c8c0d81
SHA18e82c86b6d77d7e1ef003aa7796b83ccc5efab7b
SHA2560d87625993ef963e9bebf8f21f22525807d48dc26b3195fe94bedfe877f376e7
SHA51222c8297645c4ffb8ba08e44e1136dcc3b3c16100ff837d7e3ae7bf3a1f181c12e9aa33f3f598d6d7e001536b9812106b4785c01f91a76874cd220a6229e787a2
-
Filesize
6.2MB
MD5d30ef6d482f228d307abc37194976927
SHA176c05111cc5396e59ebd497733b0eec3c9a96b8a
SHA2564ef4c861d1a142bd09437e468ccf61492222f65349f4ba22cff00cbd2298201d
SHA512930db55df927921f0a97e9dd0b75e4b3885f58b2e45725c96db92f19a8348809626715099f8d56af90af7b397f02c76fcbf114f51e96a7a38b92aed24f0123b3
-
Filesize
33B
MD58e8da35014055f7d81461b174fb5c4f7
SHA1fa608e4e9e330379ce63fa0adc0777986da85659
SHA256624d3993aa405b6718ac1c2ce1c75a2c1869d0fa838eca5f72729bf4eaede3ae
SHA51250762c24423225aa7836ab500cf2f6df0c0c0e67988399ffad2e185452b96fc96ea23fca2d4aff1281e7d319f4733ac5885d2d7865abefa90874cd9ede4bf5cb
-
Filesize
14KB
MD5ad4f03a0de28bbce17fa5fa6ffedcb87
SHA11aff1f5f33a089bf98545b47a12571e782bc662c
SHA2562f4338541405123620373068dce99c1b5a431705354f7a6415fb4871feb185cf
SHA512b60df609557a394bd6fc5f4da46205c3f25f8576ceb3b3a63fc35de1bd08b480164d301e533365ebfe030c3dc61a96fcdf8dbc9af5198fb0b63fa7cc02f8aa98
-
Filesize
211KB
MD50c723e248d4fbd04fba6b9716c4c4da7
SHA1a665110bf4b35616b3678debd41e5d7ed86fe4a4
SHA256fe0b20920dadfcca4b2dcfef21719bd39f5db5a4df9f69e11e1f6c178795cdf6
SHA512f718a2d52c84107d89d7476555f9dd193c4be7e16b75c26c1081aa93ebd2c56398035c7882328ffb3aa2c21f32b03ad223de01eadf786cfc6e023f9a2f7df8c4
-
Filesize
65KB
MD564bf0b475542abda0ad4b8e9b1714228
SHA17e05f7d1bb33457aa7cb1df03e0b134cd4f2ebdd
SHA256fc9f36d400cbc44d667cdf88046a4ecb236aea03a433a347cc934568fb1e3c66
SHA51229e31e15cc11daaa520b2a4a51d11f85aac0b3fa60512a48636e514c9b18d6a9812270c0cdeefb6a0e19e2de4f23bdaf03700236104f3c13a760719e3befb8e4
-
Filesize
97B
MD5a33819b94dd0d2a419f7c56ba4ddc2d2
SHA16691508bd3c3a0ce80a54e6ba0f065d3569cd2f4
SHA2567ec3c9b55ea95da34f9cbe0519ac3d684af0c7df110b6a6a2f93ea3199c8782f
SHA5122b28b0c800726632bd3eea84e26646e3422ce76bf53ec0f8f32ba836a71dd0b118a4da87c2456b289bdf409d0b27f5abf9aa8fd1f6257c7c2c35f20bd154e7ca
-
Filesize
197B
MD522a9d9c3a11defd795a708f503b65fef
SHA1d34ac45b697a6b6a1118dd4103b4b0b92a4790bf
SHA25608402965d1a9f96a0d91e81060fbd84c87abb057b16515eb958f559e69cc3e9f
SHA512e59c684f6eb3827e20e3aef1b283a0ef48dbd65144649688030f7ae1bcbad6d4c2d9845f331bb6c36d8c1723e75d1b9c0043403e420257e9df660fab41eafce8
-
Filesize
512B
MD5e943e2ca093445c5f68f1ae0792cd1ff
SHA1662d2f1ec8c8cd7d49167950f961031f1c7102b9
SHA2567128d63bd2b3305972bfbed47282bf62a1455b816dcd3a771d9bf2e04d5f6858
SHA512f31cbe5133c9d8b6a440b181c69f93f252a29ed5335a584b1da647d8e2cebd167b2935c8e9fe359ba3f56a6b4f6f8460cc8380e74824fbf401b546471868438c
-
Filesize
16KB
MD53a7a489e7a6f244ee1b7ca16de0b2394
SHA13847fcbcaf370d36906181e7dc9e38753d2dc882
SHA256ae909208e9161ce04ae1d797ba9e82571361d444f7c6f1d50817503096b53cd7
SHA51282d4c001c5efe3407e986151dc3e12e48d9381ba8c6dbad5564aeecb9139024bf825e283acfa70cc66a0700054f5b8b198814b0745cd3c4c98dd91abdf08a14b
-
Filesize
112KB
MD53c8295de850539edbd94e5484a2366e5
SHA1c6c08179bc0db0e63dc01dd0b3c87f48ffe6629e
SHA256fc815e98e32406eaf33ea9de26d37d82dc32f878df342b00cb2c37c3501a8fd8
SHA5123ffa4a1cf8fe7479b2fe5e3cb53ae7056ad65f6b8ba8ef26b60633d1f368a04311846eb145019dcfa005706f4f927fdbc8daefb986e7fd3fef632c072f950c94
-
Filesize
124KB
MD5f7e7fa686fb9b5e175d3bd51813bbc91
SHA1bb4f4c416b7ecbef87144a9daffe521850bede96
SHA25684ed680bb2982d168ba918b84fcd4eda652736c63549a70b219fab63d6d06f7f
SHA512b19a87f1a9024f82c488f3536c46fdd1d14cdec0d19108d09219e56d553e28058b3702e15ad3c0ef6bbc22dfe0f06c0437b4f5f218ed41ec50462a6b6508bea2
-
Filesize
63B
MD560226c9a64c526a7909e977c4d198961
SHA104c34f9a5ee740c05027727266fb9f220ec96546
SHA2566dd8e16012a241b2ddd14425727bd553f1473e18d4b145cd7a2ac9f1b814e2ce
SHA512fdd32c2466fb660b17d1cec0926e4a146f654940251cf9bdc3c240eeeb7d0c793a608e0442c3c35d88ae3c1ea9093f5835aabf06a088351a6235e45a867d5fcf