Analysis

  • max time kernel
    5s
  • max time network
    134s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    08-04-2024 16:06

General

  • Target

    [com.wa]FouadWA+iOS+v9.93+by+stefanoYG.apk

  • Size

    85.3MB

  • MD5

    7402a7d92183b99faeac2967fe7570de

  • SHA1

    cadb0118049928a80369ab2301cbb1ef1f6832ef

  • SHA256

    203f76141b22ecce26beb7b5f5244c6da345be7d95b6da841d9c099d52ef1f09

  • SHA512

    98b52bb44b84ed0518bbd931f5f30dd9f1a1ae14b70920b631b0fda70a7a92655f6c8f4a32525cc9f9d22a53ebadbb635a6eac6bf0007257a1373fda70b86655

  • SSDEEP

    1572864:4PqVvW+QcQIE1c4sU0MmDhPwpJcyDOzWHDMX+MtYPlpHq1sNrxT:4YWDWEF0rDZwHDy+k8pTx

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • com.whatsapp
    1⤵
    • Acquires the wake lock
    PID:4262

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.whatsapp/databases/BTOR.DB

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.whatsapp/databases/BTOR.DB-journal

    Filesize

    512B

    MD5

    4bbbbbd96ba26281635b994368c2a056

    SHA1

    61f71e62e7a75de56ca14ef9de5574c98e7b3a45

    SHA256

    bdfabddc9c086d95353fa8e40403047a041a40cf71ba46c3df7169f77429362b

    SHA512

    16ad743be5bc1d85efdd9f389b584b85ea683f984af3ffa3c7bfca40d5e948b6f96934279cd711929383ac5a812a87ad32c034539d755dccb66ebf3548554b75

  • /data/data/com.whatsapp/databases/BTOR.DB-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.whatsapp/databases/BTOR.DB-wal

    Filesize

    32KB

    MD5

    a1d2f953136563c1462203fda99272bf

    SHA1

    3703c5986cb76e39ed434f9c4991d09488852baf

    SHA256

    c71c6496d34f28651adb12bca4d5ed83686855828ef637dd8761b8797e2a1e67

    SHA512

    8b0f62437c3f42c0071324504a6f6f8d976a3cd5c3b8b04aa2029ccabf4c6054d3caff3eb98931896654e2f18cb65fbb77501a7e7160b5b32d410d3e9b183ba3

  • /data/data/com.whatsapp/databases/EHS.DB-journal

    Filesize

    512B

    MD5

    8d0b280a1a693ed2e92e6c8542550c02

    SHA1

    93e14ff3bfe6006fedd0d129fa35a68857d13ab5

    SHA256

    d3dd9d3340fa9da12af106949c5570e11bfcf2e54992d644a4d27faeb1aebcea

    SHA512

    051f66e2cc55555fb6e7afa3f353a486e7828c156a6edd51637ecaa5fdafabd51e36674fab0394a82e48404076924334d94726c9cf38c321d2a47db796c81a1d

  • /data/data/com.whatsapp/databases/EHS.DB-wal

    Filesize

    32KB

    MD5

    5c90271e0f5be581c41106d54be72914

    SHA1

    fb0b8054daf0553af5443df631b0de3eba5492d7

    SHA256

    8eaf599c93db3afe250c4daea4148600349e021b0acdfeaf9388509c7be4b72b

    SHA512

    7b5c769cd29683ad852a5513c62ab7a35231326bebcd8e9078a9ddeeb2d5416a4faadeec5a50513dd8746e85ca1f4bccd492ff2739051a3fa670b077f190c632

  • /data/data/com.whatsapp/files/Logs/whatsapp.log

    Filesize

    187B

    MD5

    3ad2e2d8f15cb6f589e389a1893b9524

    SHA1

    c638967c2d2beffc65be652eae9355d09ca7b7f9

    SHA256

    1eaea999a545d7aa9c0464a1e5474b06720f078f7fe44a272587b1ee7ca87756

    SHA512

    6ae693f07a31e20083ee927c706e584908628f7fe200d1787de05d2ee05d08d94a4b744bd34efae2acc80e85645102d6b0dea84f40128533dbafcd90c9b35957

  • /data/data/com.whatsapp/files/light_stock.xml

    Filesize

    20KB

    MD5

    90ad3f9271671e93260080c65770932c

    SHA1

    c42d3797096a0deed4a6ba22fec177d18dc04646

    SHA256

    819a237bb8bbbbfa3d1566526ef519bb3a5db1dca3f4fd6caf63aa75940d3d07

    SHA512

    bb8fd1c8067aff6d1ade15b377d61849b9dd26733881bca17228a15c9ca7daffb30107194f5bb672c31d0f873230bf1192af0dafc181821c9fc4e750a1b10298

  • /data/data/com.whatsapp/files/night_stock.xml

    Filesize

    20KB

    MD5

    c2d0679fea746990936232a7169768bd

    SHA1

    28b1eda655b657343ca277aec0d537fcf59004bd

    SHA256

    812503a9c3eb0f1d6bb40ab7d7b05c8ae77b6cade4563f06f36b0e144a80c08a

    SHA512

    217660b9fa3b96331a554a9bb82f93c3c5d87f7b9ed65a299f2dc4474ab830692ecca9159eab2e39397c9d29407ab667a29b531978af4fdb4965357d2064811d

  • /data/data/com.whatsapp/no_backup/com.google.InstanceId.properties

    Filesize

    63B

    MD5

    e7dfe46ff99874bb505b71b8e76c0e72

    SHA1

    95e3e65fcc455b0762748ac6727b694c2f622eb9

    SHA256

    2adcf7651d2044dec1dfd808198a90e9cb288e362cbfd6a0c40ce9bec21b6c6a

    SHA512

    ff2c0e11f4a4f5e34659521f7577be6638c1e1736454db7dc193c71f65adcaa58dbf37648022fdd8656459c1bf73ace4dac75dab74ce609c69ec1e6bfd8c47b2