Resubmissions

09-04-2024 02:05

240409-chyzqabb83 10

08-04-2024 15:59

240408-tfhy6add25 10

Analysis

  • max time kernel
    3s
  • max time network
    307s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    09-04-2024 02:05

General

  • Target

    [com.wa]FouadWA+iOS+v9.96+by+stefanoYG.apk

  • Size

    86.6MB

  • MD5

    57e49235f9691cd749e4b6f4377ffe5b

  • SHA1

    3b081bb56d49cf8e9a013491c9773e8ad390468b

  • SHA256

    bf99ecbe9d75ffa468884190be93a8020476e1e0fc7115574a3452111a349085

  • SHA512

    dea9d1d3e45f7c96a5d8a5870a7379c6708bc15b03694c889984dfa054a2c7cb646f7d73b69eaa8c0f40d14c2c71edfdbed7cb6eb1de029633e06509a93a0a0c

  • SSDEEP

    1572864:IQOYDBO1c4s10MmDDPwpJ5kyQyEXMu1pM/lAU2HuqaEBGtzMxx:POY0o0rDbbXMWp+/29rBGBs

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • com.whatsapp
    1⤵
    • Acquires the wake lock
    PID:4335

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.whatsapp/databases/BTOR.DB

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.whatsapp/databases/BTOR.DB-journal

    Filesize

    512B

    MD5

    ce9912378eea047fbe3b6f0bc8c4985b

    SHA1

    9379d87b257aff80377de46d319d64f7f3b47f91

    SHA256

    ae8ab9181ee6a085b09842fd2b545d499549e3a6b36095651c8b6daae2537c66

    SHA512

    a3c191caf20b2379b8f3f0afa0a826d2ebb7934239bc000f4c2c14740c0e829333f94d21e71a7cc73a488d9143e1e570880b5a01c252ea0fe1af8ff794be715e

  • /data/data/com.whatsapp/databases/BTOR.DB-wal

    Filesize

    32KB

    MD5

    70e80588807fd9ef02b9d35e25541e65

    SHA1

    e0ae811abf85171153f44db94d8a17d32aec097a

    SHA256

    5a69c0b256ec0d94ef40d2958b1e510e797d3a08cc5ecf3141eb53f6ff4fa041

    SHA512

    2fa1e309898d80a20764a51bc4ea8d09ba851ec38e61c762227d8b7261851d5afc09947bb0a8404b239da8c0bfc56de9cc5664a8671f7de34243f185173802a8

  • /data/data/com.whatsapp/databases/EHS.DB-journal

    Filesize

    512B

    MD5

    9ac8aab7ad0aa5795d3b75501fb14e24

    SHA1

    bf9dd55034ef0c8430f2c39d7654123431f392b5

    SHA256

    4d7ec3f1f0965b1071905295bfd4251e4753e2fce763304a7e1c0b9781b407d3

    SHA512

    0604396ec45f7a1b3767542a2cc46a6deb45bfa0f63e710e5ee738d7c19a82380922969a40b1c487c3474ab649497b342bdf3002cc7aba5148016000646944bb

  • /data/data/com.whatsapp/databases/EHS.DB-wal

    Filesize

    36KB

    MD5

    8a265559302569ebdf2458412814c273

    SHA1

    ca89d2e7bf1be4c92343d91136efc9eed2e0f7ee

    SHA256

    e5273eb933d42e27df623c04f559efc075ec31fbb8e014ec872b7f20a167890c

    SHA512

    9047dfb9a634797b482ca2091e8d55a80c03cb2d67d0eac07927b2a3bb8074c746388a7cfe2cd66d8a86ee222b37a3163de4d0ed10ee9d0c186ae8262501d151

  • /data/data/com.whatsapp/files/Logs/whatsapp.log

    Filesize

    187B

    MD5

    bd86a6a55552c5e05f915ce86e4a8a6e

    SHA1

    a6fe71b199456d74759c042bfa4fd1e6f7a12587

    SHA256

    d1ba710d06e132d88d2453b5a2b7d8c338d9751bdd26e8eaa7536a36f02e763f

    SHA512

    ca6ac3354b6961f8178b3e5ed6411296cd3d3b9b9146d4806e4946dd5099ef2fb9d8bddec2fa20d12500d022e5ad912562d53cf83ddf1388b3ba1fc4b9b7b208

  • /data/data/com.whatsapp/files/light_stock.xml

    Filesize

    20KB

    MD5

    90ad3f9271671e93260080c65770932c

    SHA1

    c42d3797096a0deed4a6ba22fec177d18dc04646

    SHA256

    819a237bb8bbbbfa3d1566526ef519bb3a5db1dca3f4fd6caf63aa75940d3d07

    SHA512

    bb8fd1c8067aff6d1ade15b377d61849b9dd26733881bca17228a15c9ca7daffb30107194f5bb672c31d0f873230bf1192af0dafc181821c9fc4e750a1b10298

  • /data/data/com.whatsapp/files/night_stock.xml

    Filesize

    20KB

    MD5

    c2d0679fea746990936232a7169768bd

    SHA1

    28b1eda655b657343ca277aec0d537fcf59004bd

    SHA256

    812503a9c3eb0f1d6bb40ab7d7b05c8ae77b6cade4563f06f36b0e144a80c08a

    SHA512

    217660b9fa3b96331a554a9bb82f93c3c5d87f7b9ed65a299f2dc4474ab830692ecca9159eab2e39397c9d29407ab667a29b531978af4fdb4965357d2064811d

  • /data/data/com.whatsapp/no_backup/com.google.InstanceId.properties

    Filesize

    63B

    MD5

    0bd7bf781706048610e2969c1bad8b74

    SHA1

    9485d2556fac9a4aca929b307dfe08904b36c31f

    SHA256

    1d7a9c5f6e86872a3408ec5b7a4632f0db29b31261dfe7d1a14c9f0decb3b7e5

    SHA512

    e7739629a55758d8a7efd9c77d50d411cdd854755290a3a5d89df688ccb16e2efc7564c08b83bfc2aa8a546fbd11cef41e93153a4e9c102ec66cd810e84d9c7b