Overview

overview

10

Static

static

10

[com.wa]Fo...YG.apk

android-10-x64

[com.wa]Fo...YG.apk

android-11-x64

7

[com.wa]Fo...YG.apk

android-13-x64

7

[com.wa]Fo...YG.apk

android-9-x86

6

Resubmissions

09/04/2024, 02:05

240409-chyzqabb8310

08/04/2024, 15:59

240408-tfhy6add2510

Analysis

  • max time kernel
    4s
  • max time network
    314s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    09/04/2024, 02:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    [com.wa]FouadWA+iOS+v9.96+by+stefanoYG.apk
  • Size 86.6MB
  • Sample240409-chyzqabb83
  • SHA256 bf99ecbe9d75ffa468884190be93a8020476e1e0fc7115574a3452111a349085
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
evasion

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs

Processes

  • com.whatsapp
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:4539

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        BTOR.DB
        • Path /data/data/com.whatsapp/databases/BTOR.DB
        • Size 20KB
        • SHA256 dd98241974487ce11a331a28a6eafb2f01b7eeb50ab579af07fce08ad6b076d5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.whatsapp/databases/BTOR.DB-journal
        • Size 512B
        • SHA256 4bc0bc463e6d567b1674c9c98770e2e42c3b46817587f0a3a50a53777b495759
        • MD5 SHA1 SHA512
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.whatsapp/databases/BTOR.DB-journal
        • Size 8KB
        • SHA256 7eb2af7ddd7b51d8df60255cf372cf30cffe797ef766dde0f060a7e87aa4ea4c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BTOR.DB-journal
        • Path /data/data/com.whatsapp/databases/BTOR.DB-journal
        • Size 8KB
        • SHA256 9396b126246ad3b191f72977f02b7ef3354216fd505d23b4a31065fb7bfe1fe7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB
        • Path /data/data/com.whatsapp/databases/EHS.DB
        • Size 24KB
        • SHA256 67b1bfc15425162ff85f8a3972c6ded0b3a4cc76452682eb361780b7caeb3af1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.whatsapp/databases/EHS.DB-journal
        • Size 512B
        • SHA256 c6a5624bb088d142e26f004f4d0e95fc0fe8fedf2aa59f32ca4dc356ab7b931c
        • MD5 SHA1 SHA512
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.whatsapp/databases/EHS.DB-journal
        • Size 8KB
        • SHA256 db178e4ab718acdba2587d3682d0ec4f1233697de9481e16934aa867d617ce94
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EHS.DB-journal
        • Path /data/data/com.whatsapp/databases/EHS.DB-journal
        • Size 8KB
        • SHA256 7759a694ef70f134db55bbf9a327fb95ffd7d69580ae42f901f5d55c20321b01
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        whatsapp.log
        • Path /data/data/com.whatsapp/files/Logs/whatsapp.log
        • Size 187B
        • SHA256 74473e1c13309e90ed90b89a4cebe9bcb0916fb3c7edc8a9128c0082cd12ec17
        • MD5 SHA1 SHA512
        Submit Download

        light_stock.xml
        • Path /data/data/com.whatsapp/files/light_stock.xml
        • Size 20KB
        • SHA256 819a237bb8bbbbfa3d1566526ef519bb3a5db1dca3f4fd6caf63aa75940d3d07
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        night_stock.xml
        • Path /data/data/com.whatsapp/files/night_stock.xml
        • Size 20KB
        • SHA256 812503a9c3eb0f1d6bb40ab7d7b05c8ae77b6cade4563f06f36b0e144a80c08a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.whatsapp/no_backup/com.google.InstanceId.properties
        • Size 63B
        • SHA256 91bb1537f7ce863d14fa5c6a240abafa645142f53c8d4bfc2d321688d5109b13
        • MD5 SHA1 SHA512
        Submit Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP
        Download