Resubmissions

09/04/2024, 02:05

240409-chyzqabb8310

08/04/2024, 15:59

240408-tfhy6add2510

Analysis

  • max time kernel
    3s
  • max time network
    307s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    09/04/2024, 02:05

General

  • Target
    [com.wa]FouadWA+iOS+v9.96+by+stefanoYG.apk
  • Size 86.6MB
  • Sample240409-chyzqabb83
  • SHA256 bf99ecbe9d75ffa468884190be93a8020476e1e0fc7115574a3452111a349085
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • com.whatsapp
    1⤵
    • Acquires the wake lock
    PID:4335

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        BTOR.DB

        • Path /data/data/com.whatsapp/databases/BTOR.DB
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        BTOR.DB-journal

        • Path /data/data/com.whatsapp/databases/BTOR.DB-journal
        • Size 512B
        • SHA256 ae8ab9181ee6a085b09842fd2b545d499549e3a6b36095651c8b6daae2537c66
        • MD5 SHA1 SHA512

        BTOR.DB-wal

        • Path /data/data/com.whatsapp/databases/BTOR.DB-wal
        • Size 32KB
        • SHA256 5a69c0b256ec0d94ef40d2958b1e510e797d3a08cc5ecf3141eb53f6ff4fa041
        • MD5 SHA1 SHA512 SSDEEP

        EHS.DB-journal

        • Path /data/data/com.whatsapp/databases/EHS.DB-journal
        • Size 512B
        • SHA256 4d7ec3f1f0965b1071905295bfd4251e4753e2fce763304a7e1c0b9781b407d3
        • MD5 SHA1 SHA512

        EHS.DB-wal

        • Path /data/data/com.whatsapp/databases/EHS.DB-wal
        • Size 36KB
        • SHA256 e5273eb933d42e27df623c04f559efc075ec31fbb8e014ec872b7f20a167890c
        • MD5 SHA1 SHA512 SSDEEP

        whatsapp.log

        • Path /data/data/com.whatsapp/files/Logs/whatsapp.log
        • Size 187B
        • SHA256 d1ba710d06e132d88d2453b5a2b7d8c338d9751bdd26e8eaa7536a36f02e763f
        • MD5 SHA1 SHA512

        light_stock.xml

        • Path /data/data/com.whatsapp/files/light_stock.xml
        • Size 20KB
        • SHA256 819a237bb8bbbbfa3d1566526ef519bb3a5db1dca3f4fd6caf63aa75940d3d07
        • MD5 SHA1 SHA512 SSDEEP

        night_stock.xml

        • Path /data/data/com.whatsapp/files/night_stock.xml
        • Size 20KB
        • SHA256 812503a9c3eb0f1d6bb40ab7d7b05c8ae77b6cade4563f06f36b0e144a80c08a
        • MD5 SHA1 SHA512 SSDEEP

        com.google.InstanceId.properties

        • Path /data/data/com.whatsapp/no_backup/com.google.InstanceId.properties
        • Size 63B
        • SHA256 1d7a9c5f6e86872a3408ec5b7a4632f0db29b31261dfe7d1a14c9f0decb3b7e5
        • MD5 SHA1 SHA512