Analysis
- max time kernel
3s - max time network
307s - platform
android_x86 - resource
android-x86-arm-20240221-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system - submitted
09/04/2024, 02:05
Behavioral task
behavioral1
Sample
[com.wa]FouadWA+iOS+v9.96+by+stefanoYG.apk
Resource
android-x64-20240221-en
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
[com.wa]FouadWA+iOS+v9.96+by+stefanoYG.apk
Resource
android-x64-arm64-20240221-en
2 signatures
300 seconds
Behavioral task
behavioral3
Sample
[com.wa]FouadWA+iOS+v9.96+by+stefanoYG.apk
Resource
android-33-x64-arm64-20240229-en
2 signatures
300 seconds
Behavioral task
behavioral4
Sample
[com.wa]FouadWA+iOS+v9.96+by+stefanoYG.apk
Resource
android-x86-arm-20240221-en
1 signatures
300 seconds
General
- Target [com.wa]FouadWA+iOS+v9.96+by+stefanoYG.apk
- Size 86.6MB
- Sample240409-chyzqabb83
- SHA256 bf99ecbe9d75ffa468884190be93a8020476e1e0fc7115574a3452111a349085
- MD5 57e49235f9691cd749e4b6f4377ffe5b
- SHA1 3b081bb56d49cf8e9a013491c9773e8ad390468b
- SHA512 dea9d1d3e45f7c96a5d8a5870a7379c6708bc15b03694c889984dfa054a2c7cb646f7d73b69eaa8c0f40d14c2c71edfdbed7cb6eb1de029633e06509a93a0a0c
- SSDEEP 1572864:IQOYDBO1c4s10MmDDPwpJ5kyQyEXMu1pM/lAU2HuqaEBGtzMxx:POY0o0rDbbXMWp+/29rBGBs
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.whatsapp
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.whatsapp/databases/BTOR.DB
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- MD5 SHA1 SHA512
- Path /data/data/com.whatsapp/databases/BTOR.DB-journal
- Size 512B
- SHA256 ae8ab9181ee6a085b09842fd2b545d499549e3a6b36095651c8b6daae2537c66
- MD5 ce9912378eea047fbe3b6f0bc8c4985b
- SHA1 9379d87b257aff80377de46d319d64f7f3b47f91
- SHA512 a3c191caf20b2379b8f3f0afa0a826d2ebb7934239bc000f4c2c14740c0e829333f94d21e71a7cc73a488d9143e1e570880b5a01c252ea0fe1af8ff794be715e
- MD5 SHA1 SHA512
- Path /data/data/com.whatsapp/databases/BTOR.DB-wal
- Size 32KB
- SHA256 5a69c0b256ec0d94ef40d2958b1e510e797d3a08cc5ecf3141eb53f6ff4fa041
- MD5 70e80588807fd9ef02b9d35e25541e65
- SHA1 e0ae811abf85171153f44db94d8a17d32aec097a
- SHA512 2fa1e309898d80a20764a51bc4ea8d09ba851ec38e61c762227d8b7261851d5afc09947bb0a8404b239da8c0bfc56de9cc5664a8671f7de34243f185173802a8
- SSDEEP 24:KlL8zyGSP/32U8htFDYgR+0zGSP/CQICo:OIzNSP/32hhttYS+0qSP/UR
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.whatsapp/databases/EHS.DB-journal
- Size 512B
- SHA256 4d7ec3f1f0965b1071905295bfd4251e4753e2fce763304a7e1c0b9781b407d3
- MD5 9ac8aab7ad0aa5795d3b75501fb14e24
- SHA1 bf9dd55034ef0c8430f2c39d7654123431f392b5
- SHA512 0604396ec45f7a1b3767542a2cc46a6deb45bfa0f63e710e5ee738d7c19a82380922969a40b1c487c3474ab649497b342bdf3002cc7aba5148016000646944bb
- MD5 SHA1 SHA512
- Path /data/data/com.whatsapp/databases/EHS.DB-wal
- Size 36KB
- SHA256 e5273eb933d42e27df623c04f559efc075ec31fbb8e014ec872b7f20a167890c
- MD5 8a265559302569ebdf2458412814c273
- SHA1 ca89d2e7bf1be4c92343d91136efc9eed2e0f7ee
- SHA512 9047dfb9a634797b482ca2091e8d55a80c03cb2d67d0eac07927b2a3bb8074c746388a7cfe2cd66d8a86ee222b37a3163de4d0ed10ee9d0c186ae8262501d151
- SSDEEP 48:9oL2zNSP/BesyYcdWAEOjAqWSP/BARxt:9oLu0P5ePPHE/qTP5qxt
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.whatsapp/files/Logs/whatsapp.log
- Size 187B
- SHA256 d1ba710d06e132d88d2453b5a2b7d8c338d9751bdd26e8eaa7536a36f02e763f
- MD5 bd86a6a55552c5e05f915ce86e4a8a6e
- SHA1 a6fe71b199456d74759c042bfa4fd1e6f7a12587
- SHA512 ca6ac3354b6961f8178b3e5ed6411296cd3d3b9b9146d4806e4946dd5099ef2fb9d8bddec2fa20d12500d022e5ad912562d53cf83ddf1388b3ba1fc4b9b7b208
- MD5 SHA1 SHA512
- Path /data/data/com.whatsapp/files/light_stock.xml
- Size 20KB
- SHA256 819a237bb8bbbbfa3d1566526ef519bb3a5db1dca3f4fd6caf63aa75940d3d07
- MD5 90ad3f9271671e93260080c65770932c
- SHA1 c42d3797096a0deed4a6ba22fec177d18dc04646
- SHA512 bb8fd1c8067aff6d1ade15b377d61849b9dd26733881bca17228a15c9ca7daffb30107194f5bb672c31d0f873230bf1192af0dafc181821c9fc4e750a1b10298
- SSDEEP 192:GQ5/GOiSwyv2d6apiNqHA34oBFhITFL+9USs:G57Swa2kaUMH1orhDG
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.whatsapp/files/night_stock.xml
- Size 20KB
- SHA256 812503a9c3eb0f1d6bb40ab7d7b05c8ae77b6cade4563f06f36b0e144a80c08a
- MD5 c2d0679fea746990936232a7169768bd
- SHA1 28b1eda655b657343ca277aec0d537fcf59004bd
- SHA512 217660b9fa3b96331a554a9bb82f93c3c5d87f7b9ed65a299f2dc4474ab830692ecca9159eab2e39397c9d29407ab667a29b531978af4fdb4965357d2064811d
- SSDEEP 192:kSV/NO6cS4vVNW6zxEiH8HYJ4uBhfmI4Fb+gySE:kQ5cS49NJzrcHvurfmhU
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.whatsapp/no_backup/com.google.InstanceId.properties
- Size 63B
- SHA256 1d7a9c5f6e86872a3408ec5b7a4632f0db29b31261dfe7d1a14c9f0decb3b7e5
- MD5 0bd7bf781706048610e2969c1bad8b74
- SHA1 9485d2556fac9a4aca929b307dfe08904b36c31f
- SHA512 e7739629a55758d8a7efd9c77d50d411cdd854755290a3a5d89df688ccb16e2efc7564c08b83bfc2aa8a546fbd11cef41e93153a4e9c102ec66cd810e84d9c7b
- MD5 SHA1 SHA512