7c1cc01519d2c6140df19ad8611c2d26afaff3aa3930a1847b8f7d3570a52ae1

Analysis

max time kernel
26s
max time network
37s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
16-08-2024 16:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MBWhatsApp_1.3.1_by_stefanoYG.apk
Size

76.5MB
MD5

b650bfd2cec0ca68674d105a8f894021
SHA1

70691961150319d20d4dd017b65a7647fd6e6e7f
SHA256

7c1cc01519d2c6140df19ad8611c2d26afaff3aa3930a1847b8f7d3570a52ae1
SHA512

0b55278cd747564730333572bce669bb06d0d1326754d80bc36eb6bf062bdcf9b4222e28cfa0790514358480adf077bc77d79c3f1d2e7823b083ba54fa56cf2c
SSDEEP

1572864:AUEKAF1smH40qwr25mQlhN0uKGSSFMMUpX:UhF1smH40Ijv6uKGSGMtX

Score

8^/10

discovery execution impact persistence upx

Malware Config

Signatures

Patched UPX-packed file 1 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
behavioral1/files/fstream-15.dat	patched_upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/fstream-15.dat	upx

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.mbwhatsapp

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
9	raw.githubusercontent.com
11	raw.githubusercontent.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mbwhatsapp

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.mbwhatsapp

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.mbwhatsapp

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.mbwhatsapp

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.mbwhatsapp

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.mbwhatsapp

com.mbwhatsapp
1⤵
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4275

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mbwhatsapp/databases/BTOR.DB

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.mbwhatsapp/databases/BTOR.DB-journal

Filesize
512B

MD5
f59499f17c54ca798a0f993fc60c0d7f

SHA1
050f49b3185c00c759cfbb240d238742c886da02

SHA256
29f8ab34266530ac84632d56715cd182b9705726857111ae6b1d9900b819b2db

SHA512
2203d33e954a8e8cf2dfebb98d6e106b3290ec05f7508b7bef64b772b427e8fa6fedf23c36c5a4b6f5c099fef5ec1356ae75d87464c203b231e65531d91511cf

Download Submit
/data/data/com.mbwhatsapp/databases/BTOR.DB-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.mbwhatsapp/databases/BTOR.DB-wal

Filesize
32KB

MD5
98f34dde98cdafe85c9f413202a10383

SHA1
18d9c7568cdb373d817d8703e5f326924ab574c7

SHA256
24ebea6e015d62f2a2cbd35dcf2e06d738eb539a85e27e261af825a6cde5fc6f

SHA512
3720a372ad66512cefcc1da60ce2595e1c2c994743caceab9f025586822586effee8db1405277fe05c27a3f3bbdf7ae32058f0b682295a3204b91c2cb5d42567

Download Submit
/data/data/com.mbwhatsapp/databases/_jobqueue-WhatsAppJobManager-journal

Filesize
512B

MD5
ef58e2d0306dc66c779f9daf755ab32d

SHA1
d9d5783ee4d79ac4c974a33ec55c19de7f819cd7

SHA256
3fccc4c7ee3376f6cf512bdefe2775b83b15d21e7a1fbb3e19a679bd2b7ea406

SHA512
a8c6371a713f7acd8998a07aeb922d02694ac4bcdc5d61242b8483f42b275a2e3ff5f0b9aa5b5fe4d97332ae24ef994e37ab652eae11aade1eea5c8b69270412

Download Submit
/data/data/com.mbwhatsapp/databases/_jobqueue-WhatsAppJobManager-wal

Filesize
28KB

MD5
002f467ac65173127068a6eedd5fde4a

SHA1
7532fb3dda288e4da178aad92ffd9252e8b33391

SHA256
8ff0a60825062f9fc271a9d6af86f7b8c2fc936dd5c7efbce0dec8b67060c8f0

SHA512
4527e9add989becc2ef79696746d3813cf4b0edd4b68e21babfd7cffd05f31d152c446ad4b103d236ca9b89daf4c28d08efd33ec5c3cd62f13455c73c0e057e2

Download Submit
/data/data/com.mbwhatsapp/databases/axolotl.db

Filesize
164KB

MD5
5b6be0ba3bf1f37bc6d0e1c47be5c022

SHA1
94bbf65fe3ee5e343958007bde7b7f048fec7586

SHA256
219118dd6572a0462cdb00fc7675cf6b74b0c2e451ac38297d646d190333650d

SHA512
7c9ed7667ee2d93c10328d95845068db071a7f16ff4e28179400ca5ca8ac7ee1bec3cea1dcb6a879dd5123d12ada47656fd8482e312cd260e5f7e0e5b63e7847

Download Submit
/data/data/com.mbwhatsapp/databases/axolotl.db-journal

Filesize
512B

MD5
7dabb09f91761e7f1032435d636472a4

SHA1
e312ebea8b85da18ea14e3971d0795e36a8cc2a8

SHA256
01cc5dd28445c42902a26a2b8f25d2093e53f460142a21f72079435f8a40dd13

SHA512
efa6b65dcdcb7457db6e4fbfa469a42a72e3d5c4bf4576134f0fba753d8c74456d86be6af51a76e48565b90d5fab3e2a0463b4e82d440d7fa02296b590e514c0

Download Submit
/data/data/com.mbwhatsapp/databases/axolotl.db-wal

Filesize
16KB

MD5
8ca54c454cd0d2fa5ee00c3c712bfd2e

SHA1
9ca3c505791e4f08d47e06bd2cb328f50899e920

SHA256
7da1f94cdeaec34b1f87753cd62c3a7c6a94afeeb00d3d590d72a59025665969

SHA512
7887b19690477b1dab4e97fa7ef783a55d3e71b79f689ff0e7a862d6bb5b981dab73b1a8fda116796873f01969a7825d001f1152917bb76ebec7f72cae1c0259

Download Submit
/data/data/com.mbwhatsapp/databases/axolotl.db-wal

Filesize
426KB

MD5
5469e228bbb7a854f4d04ff1168e38e5

SHA1
3e548cd07aa3dcb49ef7f7d6b17f3eac698c5413

SHA256
3e5dcd3aa4564a06e75f963b482d29155a0add3f9cddd630e8399cd2725626f3

SHA512
f77ede23178960bf733978f99848340588807c71f7e6b56db53881f659261968654fc3be27dfd2b44a25878d4ddeb575b85ce1f399e71470e4775d27e000335e

Download Submit
/data/data/com.mbwhatsapp/databases/sync.db-journal

Filesize
512B

MD5
106445f7427151372a0c632592f45616

SHA1
ab95051581ccba82d60987087f5051c4af8e5100

SHA256
9bea67dbb8f65d909be55b2d0c2812d1915ce4dd8a12ee91efdcc1389228f77a

SHA512
41924ed8474bdf57ae9a069cf735459a3d1798dde80edf0ef0b7ac73599b1e2116d1ead8610e439edb087b59a50c143e6067f850ccc46b5d013d1864b3512384

Download Submit
/data/data/com.mbwhatsapp/databases/sync.db-wal

Filesize
16KB

MD5
1a7664dcba54c37fe0ba5e94dac0e6e8

SHA1
0089e1d5b69c3e1d70c3acd3daecc58bdc513bde

SHA256
894992404486e65ba593ede36e863c188c7b5e50b4a781288532fabe54a61bb8

SHA512
c34bf2d33ff76dc17c8f95bbb710335d5ad4efbc16700e3fce9b607a6fac2edc34fe3dc557ca7de816d1a26a99aa1351276f7e6340981e75c0c02f24ff641584

Download Submit
/data/data/com.mbwhatsapp/databases/sync.db-wal

Filesize
128KB

MD5
174d2f19195df209cd388c8d8b13b839

SHA1
a7639160942b5f568846a3399fcd856aa95d9aa4

SHA256
ef2c5a470a21c97cb5ea39e6f496fefd8977a00bf2ada0893ed10d3c900023eb

SHA512
15cfc8604ec4c8630a12d56eb1b4633ca1a599fe103cbcae3a159bbfa93179b3ae83485de039696d1ec4559d4175f71d26c4887e11af4f87c23c87b865fe16da

Download Submit
/data/data/com.mbwhatsapp/files/Logs/whatsapp.log

Filesize
55KB

MD5
1152419460cbcc8c8ccd97c476c5792e

SHA1
ed106647c942ae9bbc63f40452ff2d36146f1014

SHA256
3b1e0d27cdf02eee1f7e64ae80596fb1ee335452c7d702380f5593074e9e6a82

SHA512
4a00cd465ad03ca59848d6c36b7e3582f53ddb15d84a1a48bfab509c2372c90101c062bea34b8ae011c3d0d9f25bd5f78a852d79108d6fb65964519e158dc290

Download Submit
/data/data/com.mbwhatsapp/files/ShortcutInfoCompatSaver_share_targets/targets.xml.new

Filesize
73B

MD5
1d013e9c990af505f7ad011dc707ae55

SHA1
f383baccd994349cb1d8b0840eb765d648e5f1dd

SHA256
66356fbc7e31ab914814c28d44c261339b983fe10128dc5e8eb157d7283973e3

SHA512
b53a92cf9eda35901caf4e42c6b5a45f8ce2fc64184e223db3fa8a9c36b6915f5fa15fe954f8859f70ce0892f93dc5a36476b21a8ccdc549cba9a53a8dbf551e

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/.superpack_version

Filesize
32B

MD5
4fa5fb4e229f00ebc4caac5759c542fd

SHA1
3aeeb0a3ddde8978210690b6e3b2d3498114e101

SHA256
a0e217c99a4c993ad70cd0b4bc75ad56c1f9532e440cd42001cf58de4bad87dd

SHA512
e5d0aa7be81d9afbbc80597bb3a1cd9cd216864f1f29d94f762c797858c2033ae9485069338abb47ea3587ff7791d0eb326e5729aecda6a0e6cd66c7d0d21a8d

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libaom.so

Filesize
1.3MB

MD5
254a6da696d105e519dd1ab2e0395a27

SHA1
f9e1f333a0218bfe10d19bac245ee4a2bd2d9eb8

SHA256
b255be0e057d8138c3defb3b04812f9b3a58fa4a935bd2faf8336d9737dcb7e9

SHA512
302f35f2ab7443d3284c64aba11205996318fc75101a2a265c0e05669ceae8d85dac309ea30c85a7273ee199de233b0c2cf6bc233906dba9e0b81407f54dc6c9

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libar-bundle1.so

Filesize
59KB

MD5
f924a3fb5be037c736628f443a0ce90d

SHA1
249c3454670a2a4e2346aefd9b9bb3523fbf2ead

SHA256
f5523b3aa36cf6166bb8100c185b94f15332d265c64fb4f739619fa3f741b110

SHA512
37be43838861c4fdf0241457a485ecae6b55f208904c419575c7ba6feee8e1f552eb3901c43fb717de3a71f9002048669952021ca2f36fb45512edd97326a35b

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libar-bundle2.so

Filesize
1.9MB

MD5
9dc0730c28c51ed82862bef17521e8d7

SHA1
4199c01f423f4f1d2304cda8ca72e594604bb948

SHA256
713903aa6e206d1bdf0c74e87b38fa33832c597f4a5899cdc3f0979d801b12b3

SHA512
250daf4330e1721d8322783630be61a7d3ee2989224daa8f966244e18ad0b9c5464a6b855a0a4ac4512bec058da7c21cdd0900d2d44f31d24825c50002043d49

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libar-bundle3.so

Filesize
1.0MB

MD5
3e864e1fd0a83461aded93b768d0b15b

SHA1
075fcf4f8d5b4f0d8f8f8cdf07c68813badffc10

SHA256
9193c6a9782f613a90122adb336ca5f5e00c99fd233fc2413ee77993f9cbb34c

SHA512
e50165d9ec817f8231f3589b972951ecedac543c4ba7048e513a85acc57603bf20af770b7b9e414ffa664642a29640ac36578b30134ecdd9a7bd4d4ec13cf634

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libar-bundle4.so

Filesize
876KB

MD5
322e1fb7832ff3c60f114692226b96c0

SHA1
174d60c2657ada7d15bada22dacd335f4cbca75c

SHA256
431835a1e2a9b79bad48a89db8258b03fcf638bf359c806eb6bf7b502873f400

SHA512
95a1631615cb23534b227042511408e135a1c8d9d058778b69d1dffac80a38217b5b54e29633e04b715ccf5d3da68092226371cf7c46f0adc3601a2944016563

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libar-bundle5.so

Filesize
7.2MB

MD5
2428b0128e5ea3a5cb8e561d4056dc42

SHA1
0c5ab892e892bb5b29d37ffb6135c0e56e7dbd9a

SHA256
5100755a5ba10eb17425891360be849f769f4e0bd409dc5585c9990901aa31d8

SHA512
656f6b6bc2118675f63d0ca2931539e7cd75c85dc403b7f74e72ef935b32da6ae60f0b10e0277ba91a106caa343e7e1f3da07d13df28037721ffb5f042355ce6

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libc++_shared.so

Filesize
595KB

MD5
8060fa3cd601636d5d4a0cc0507b1cbf

SHA1
1b9e793e6e306b85d06ef7ab4b53e64736561bdb

SHA256
b216ebebe5303bbd9787bc7b771b67ed56beaf337b783b65b19eb36041f99571

SHA512
803de486b71e43c6e03820e0cd486114631743a03b74bde9497caa5499604d62e2dca6774c8c54a2f0ad60073b449eed1feef7b01f1f35cb0b0f86cc1076f40e

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libcurve25519.so

Filesize
116KB

MD5
2b8e8800859a19977ed3f5745ca187b5

SHA1
a847a54219b50fd3a85b050c2e1e17a6e1ba0077

SHA256
cd4465d9e00b8870d63764e2ef34f00dcd9887dcd183acddb886859511a8aaca

SHA512
13e4dd72341d00667f46bda48acce760df7b6852fed8db4befad5fcf662b2da828887829ecb52249b0f2aa30cd3fe7b085398af7af7b813cd256f7ed70bd21d0

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libfb.so

Filesize
58KB

MD5
c816fa5a6fb494142b1e0de26de7f987

SHA1
023018670e23972301a83b104d6fc485daabbbce

SHA256
69e757c3f9529202cd83df719ed964d3b33f3d12b0f72bdca71f38bdfd9520bb

SHA512
16fb0c7e48a7764d48e00d120f0c2d8a5bf6417a1bdc2828e218b1868666170714828ee4c05460d6ead9f82ba07c2655ab6f698e7550ae0fb694a94115320e92

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libfbjni.so

Filesize
118KB

MD5
c4ef9c147d59e2976ac95e1ff84e9b23

SHA1
698bc74ea5f8ecc3726d5c5234fc8f4943767083

SHA256
fb392056c53bc44dce6c6f637132b742874b0a6770d575e11234dc95892ec893

SHA512
5761c949334ba611598c9d772fb31c235b58694fe080ff99e274d77d5453340d0d18c3db385b2b78b1028221b15c68bb2699e947488a60aeb0a7a2202da6cc94

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libfbjni_kt.so

Filesize
20KB

MD5
30bf73563357b2981d7800fb127d1c70

SHA1
10ea5d456acc06c0933b2090b5c7675b4388b895

SHA256
3ab5aab376e68adf516ae7928c41dfe4c955e3d5b3453ea970ae66320024cebc

SHA512
0acacdbe4f8d4c3eca994a000447bf5ebc5746b7c6a26c4100302b5de693b3db4162579a9d87074f05dcdc857523afd9b13e8615f9c48395febda4178fe51914

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libfbsofterror.so

Filesize
7KB

MD5
e0d2f9c753be84beed39cae991390d1c

SHA1
246dd8f9a39bb42e4a070ee7b504213ae128598e

SHA256
19a0c1f2d3dd633a10f87776fcb5129fe17384c00d55984a5fb22a95da4f1769

SHA512
1cff7a7797c8412f616d6f8a986b8311fdd0401b5fbada7b53a57f06c5e0868d2680ce33890db258c7c20f3e6b9b00254f85acecbd39fac2d4348ea9fbdf4e79

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libflexlayout.so

Filesize
32KB

MD5
98b8947e485202ccede7fdda84854048

SHA1
925d6e6555f0e5c62d9894c3bcb12840dd217342

SHA256
248f19ac97288edccc47620bf2643d57c17e84c39126115f6bfc1c433a55b8f9

SHA512
2fbbfcd6d904af7f75e5609c29dfa42cfdefaa721b5e618723857a5800b99ebb58a5905e5559a063618c1edcff5fa08a2abf4a2244a779a4f4a622d3173ffa03

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libgifimage.so

Filesize
26KB

MD5
96d82f4bb33bfb97d238dbd65bb53858

SHA1
438b86db912c040210a248bd81ea733170822805

SHA256
ad1815c67b94387897968f57a73967f147bd457fa6d500203f47cab82a16a2f4

SHA512
7b42e272d1f142de869311dc9b3f3988de98808770e5baafb4964091915775effe3ff5353eb54e6683fc491ef8ffe818c1721b09a33c2a9905cfa1b11383e4a9

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libglog.so

Filesize
74KB

MD5
b0014b1faa696ee2e438bade6c1438a9

SHA1
e16854bd1ed4d3ebb199294791a7e6de47b94536

SHA256
242270fa61881a3008d00334bc527040e8948457419a10b1ddd6594a29e10ec5

SHA512
209096736246c3adde0d47830ff68e911ff8672ccaf6f3e5fdfeb216792498035f9b8082467416e198e27bf35791affbd905d01c63ad6dcb9924a5f3764bd89f

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libgraphicsengine-arengineservices-whatsappservicehost-native.so

Filesize
1.2MB

MD5
3d0490defa8c246e8123448495cbab03

SHA1
79caf3107d9d8edd52208c10b77d040fdbe9143b

SHA256
d8871cfab8f8885542f66c77e1d7d798351db8de39aa88fb69444a6db534e4e5

SHA512
f6714436dd54cffc0f799f0015e19d6f46452705341a29c192b688ce931a7977faa77802c6788eb92c4ed7496b18b22cfddfb8a993c675b6019183aad0d59e40

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libmagi.so

Filesize
981KB

MD5
8b48853b5d332dc85ddf5fd8827649be

SHA1
5022e2599864727506bd9ec8bd97f658e6b3cc9c

SHA256
a95abac465d9dd19cc52fcca2607404e2a26bdb66331d1260b180b49c7659548

SHA512
1c1e45f6bc1123e23587b9b558c770eaa192bf554dce51ac2a3577098b994cca637da65b301928498d3a9a1ee2722dae425a10840b836e2ad7f96e4f4b37b65b

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libminscompiler-jni.so

Filesize
42KB

MD5
6b4d3326e807c0bff89697325605ef36

SHA1
b7df556c673a61d43be9e12e1fafb5c9ee02785b

SHA256
4989f4394a694d9d0ef1339f79416e4c04b3a5d93a70e2975b4359b08b6e9de7

SHA512
b40d1e3220c2c689059de9efaec7e6091763479fa7ac8b9b1936797648e78775b5048ae00b48c9801e408de3f6f0f13f587cdbb4f871a1c5ab1bfe00265ce493

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo.so

Filesize
70KB

MD5
d3076f529c7daecb9ce0cd0a349f277a

SHA1
9ac8c29468c93b8c9769be5d426338e7e03c00a5

SHA256
03787b8cf4aa571cc39039ac738ea60ade4f600a3816d50cae2ee64176d56305

SHA512
5445caccbd72b7df0b0b71f80c86994df300d4b20fe04947cc8c029c47eadde212f4d4766a4f013e0b4bccd309388a9931daebce2dd7490fb8678c1ceccd91ee

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_atrace.so

Filesize
20KB

MD5
cba14ae588a50a51a71a708d94223430

SHA1
94079f9a6a8b7c871fdaf724f1d5a424c8446d54

SHA256
21d9e7a1a192c10d89a110e0950b121b931649b7e676d02864eb6eaa99b2f057

SHA512
335b2968b3cbd2bb36b61f1234d0f8dfd971f7e5bc386cff5d29ab872aa4da8dd3192717df6ed47390df038fdf24d492cc14d5d8395a56ffc9dcf8b281b87d9c

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_build.so

Filesize
3KB

MD5
34ecbfb7f64b1eb828f710a8a0c5f8a4

SHA1
e3563bb92409d837537a62f981a5d2866b9d5c84

SHA256
fee251137ea0db03b6e7524ed194088c47910e4b05b05897371df4cc5cfded1a

SHA512
b6e07549d805eb87f7bfd281d621c430f011438317f93044007a5a4716208f4cbaef660df473a859905c302bfc6ada389d6e7552d4da905fc9e3d375c9a4c6f2

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_counters.so

Filesize
30KB

MD5
39c56f27593165b17aed015baa9833c6

SHA1
c8e85b0e17bf39e905d3311ddc296429721caff7

SHA256
131948869bcb693511cd487ff87dd3e5fcd1cfdb69c3dc8767a9d89a1642c78a

SHA512
7512136c1ad282a2d8a87cc5f797758cc4c0008c25f3a26bc07f9eaacfbf90ab5a4dcec690eaa4d891fca512e569fc4b76c7350fdb614a4cfd659a7e8625eac4

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_fb.so

Filesize
3KB

MD5
e11367038b25e60796022892729ed18e

SHA1
ca3c1dd4c335e20f157f7e098930eee8215b548b

SHA256
f5ebe5b7ad257fa47b40bd9fe2c15c36df2a0ef6d566c782ed9b942670bf0d46

SHA512
daaeb60ce1b3229e0e089bd2794e2e10b3780660f145bdc8388a330b034a4d717887b634e022540f1baee8e84949127d6867dbbe913f5b0eb17ebb9b399ea612

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_fmt.so

Filesize
2KB

MD5
2fe063abcc33f1178e34d5a40086326f

SHA1
cfb5a3c1948100dadad247718e809da04eb33993

SHA256
ba55d9c0bb946278098a279a1b4827bca80b7bbc9f07d84d98fbf83b8a797ed0

SHA512
24255344ce429e8d5f0446a8e9eebc671ca6c434190d5d171f191b6d38574c289cfb941bac23350b734e14884f70bac8ec46afde4290e2d7d8ca996a1932cf14

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_jmulti_buffer_logger.so

Filesize
14KB

MD5
dea5fc9ab05864c89c7b9e50410d2664

SHA1
7e3568e2acc4b31ad7706fc38008df055769aff9

SHA256
87e5ee6c5e3c3f18b612a4bb85ba70a68a2900243b24c4f4f92912ed18d3c9f4

SHA512
3fa15be9440a9471a702d9190fb90cd5b70873a3c806b9ae9e0d42c2f2747bec684f82a1f0fc11610ac1a9aea839e88d7e757783bae66911be32d106e9a264e5

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_linker.so

Filesize
15KB

MD5
95cd7e221b423d8f5e2e297472c83dc4

SHA1
df0b2abd1bab3caa4dfd713a4cb772285032a2c4

SHA256
3eb9bae2df1c67c0284d5a0409483e05c7285490e8d4b358439481dd8f303458

SHA512
9d12385c24d486934b5072bffa01e262c698dfc0b5fe4f84b3259675ff4028511fd3b73934e796954c00edcf961f61e4e4e80829a8c4daa261bb52ceb57c478a

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_logger.so

Filesize
11KB

MD5
e3da014656068088abdcbed9c909edfd

SHA1
48e0c270bb89cdef233a171c41b1a2319696b389

SHA256
c6f9ebfb0a56d0b4c7a8e902979267e450171908dd6ffd301ab471d5d02abf49

SHA512
5df76df9b4caa4d1505f14ba00dafe2a730f0b37992c272e39f5c53b5505f53987e58433e4a6a0def4afc03b31758371841886daa7e33b7a433fce321e204fc6

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf.so

Filesize
19KB

MD5
962aa5577822ac7dd0b7f6b774ceaa82

SHA1
ff0a10b89cbada2d7eceea406d1d54541437318b

SHA256
7488d68d5faedc49e4910c68b61af220e76fc649cf246715946446bc38033623

SHA512
eed54c2b31382c8b27048a2e30b4436e7466694062931cadbbaf78427dd4702cf6fa3df698c2746560e4f4ee4254c5b2eff9eefa449847c63329108aa915e7d8

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf_buffer.so

Filesize
8KB

MD5
93efa0b57d0a608a99a06c2e487f9e69

SHA1
f597cb533c8c2d9564b886586109c7b237dd1e43

SHA256
b1d29ff3cf332bd5b33717943985f37b40e62c5f2e756969982eb53ac10c2611

SHA512
3ff6fefb85d275022a70d6e29678fc45b6ff99475240ff49132e337f176e98d4edeb15f3bcb470c25554b970f17cabe02623c53aa108d5d1f1ec5f1bdc3cbc94

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf_buffer_jni.so

Filesize
11KB

MD5
396899cff1e9ef46dc1ffce853051bf7

SHA1
a5e9eea3cf878d8c0d04f01f31338f225f94a797

SHA256
782be1a5c070fdd2d5e0171c107dfd1f14e0fe240cc6591c4cdcfd2eff40ac50

SHA512
80c02e4565f61f88ec86c12d1e94ecca32d45e48ce18b26a92c7436e0898d69f0562944e7bbe2ad89113d893d8173e2c00bf3520ca2408fac766228f5105d62e

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_multi_buffer_logger.so

Filesize
7KB

MD5
e4f82f90d8eea150eec751f9d0cd0a8b

SHA1
050b2a2424cac5100bc99968858029ed1427d3f4

SHA256
5b365219161471be3ef155fc20f2d0bffcc239225eeb5ff27dc4d6663aa87ae0

SHA512
948477443c16c48132e9d08f291a55f7a0d285654f8f3393b915dcfd4b6fedb261ecc43728051c571db68a8ed85d12fe21f4339252eb76f4044177d52223088c

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_plthooks.so

Filesize
18KB

MD5
d2793c0167f621b37a599bba572756a3

SHA1
be9206bd407ffb9e1a707af1ce46422491c6d681

SHA256
4d6ecff951dfc617b16ce11328d0db8d64667f955e15506e5ee953e9a96ad4ec

SHA512
11a0c8471169e721f1d2e4cff99198300b75678608c1852f1ae69d0873afc193dae64d1f4a37d08da8b7ce979401cb9b50f05d400bdb401d646dd6370c1e499d

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_sigmux.so

Filesize
5KB

MD5
62bced8e7bfbf62b404ff43c8d518c7b

SHA1
c5afb8225f2605b3ef2923dd25d2f757c521126b

SHA256
f63740874ef8e1ce4f7de0b42c7b28165b50a30361b436d89ad6743e6d90413e

SHA512
7a8beca1a1d765176f9d74bdb486f8f8a3a6c4c9df1a4218f5335c6405672fa9cc8f7527174993265a5c237e7270c5751640468ff5edfe468b23c57ac2d12e28

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_stacktrace.so

Filesize
71KB

MD5
3fcf26a7b42477841136bfa4bd3ce83e

SHA1
9b09292e54fe973e05ee055cc10f917a60854a0e

SHA256
a39b9f0de8d314fef9026be37a3f6cc7ad12634c0cdd08e498b0f96661b91927

SHA512
7f61f13bc081efa770e0ef76662853d09518be073735d614b0297e374e96afe85f062b70923fac697d51244726f92caae921b96de948a40f547eecdb22266ca0

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_systemcounters.so

Filesize
29KB

MD5
fcdefa08b6c8be3221adeefd96938c92

SHA1
8e3206466243d06493096716309fb1c88749c640

SHA256
b340a464a9be8a543b122edaac190a1e2ee83a0399c6318869eebbc8bc2be2bf

SHA512
695774ec0b2c7eb214d47138d406783f5308f81a00fac7597bc767d82300cc4890d1ed58cb6fb1378539dcc27250fcd8281de2e0e2238fc4c67ea4a3aeb0d80d

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_threadmetadata.so

Filesize
9KB

MD5
59745c63e1f631148daf982615af9923

SHA1
f299dbc36a4f7c1b44b99b05cf97140899f85aea

SHA256
a30520646c136aff9d230f1a8d93e072b5d9004fd8ec4053800618827cbedd75

SHA512
1f677856805688f0aa077c936705f5e9f26029a76c5e6fe8dbb0fbf03084c375b08b0342f0396818ec4039bf4055910159d69dc71b6a1658565e63706e89bf5b

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_util.so

Filesize
18KB

MD5
9653071fdb42af2302aed293c1a9b06d

SHA1
e8edbaf0791123cb55e39454250e9f6010620eda

SHA256
fe5d65434225350317d072d66a6753406f8c89da5fa9c9ee32ea4ddfe9172301

SHA512
1a75c6fe772e2a7dcc51eab1bcb6a703f0c1f114b61f7765623f38e7ee2c591110621856ee83cbd850231ac9390845224a5f17cd63d8c57ca9cc0512aa83275f

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofiloextapi.so

Filesize
2KB

MD5
e5c09191ae8a6151a958d0003808801f

SHA1
6e49c81ddd45272b6ad69133c08c2253e1c44272

SHA256
a5a4436ec4931d758933b2efd07c11e010297639ddefe812e30bdc41d059c265

SHA512
400e2040717d9af07a8312563db4fe3816cb22fef0d795090e9a9ad2f7d58571a082fa581fe903930b3e296eefd8d0d55dc4251f007793564065f0133afe3d78

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libpytorch.so

Filesize
1.4MB

MD5
c46cbe9cdfa36d3ee98fb69303a67802

SHA1
2dc84d3c1826b2fa014391ee6e076f158622c78e

SHA256
154e6e15a495fab492eb910c4a9a6346b851555b14fffa709aa0eaa03876cb96

SHA512
9e207ee16d5b8c69b56b05a68ff221b0538d2e75717e3df6a4dd51857cc67eb4a939a688065ba58616504e0b8de93150faff77c63a82bc27f35692c75a6d98af

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libstatic-webp.so

Filesize
316KB

MD5
1e409abd91e87af8ac1f1dd92f6c6728

SHA1
e377c6475afbad5c9c153cd84a043f19363e261b

SHA256
9bd80e789d9530e1de4c9623789b4dbeec0fb2d06d7b042931ee3b0dd321660f

SHA512
85858b5808100e0b18143cce48809631fb35b29956962cf7c0d31acfab42d7bcc9daecedaa85edfc4d7a3eb879e391d64089bc1c91b7ce508e447f7a7de463ff

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libtorch-code-gen.so

Filesize
2.4MB

MD5
b3e18b163c3579df963b410dec5e8767

SHA1
756b35e02318d766109e057c0d7682260904811d

SHA256
a679633c4385a84851fe52321b3fd357398826c4f13a415216a3177d52652e34

SHA512
e33b05e235d843cf6f7622f27d0a6e67541cc6d974d4e0e22c210e58d3dee37cfcb072501a5b5c13bdb50901bfa9890b60e19aec00d975008f0514a863889cf7

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libvlc.so

Filesize
4KB

MD5
3685c5b5782883f222c8f97367a66a2e

SHA1
d3d9f45d5334239e7f7487dd6ec5f45b7d8d63d7

SHA256
137e8ea9fdd914022c7034b5ab7f0f582b74f81466dd94487ff8f3d6db47dcf3

SHA512
14f7770d1e7d833129ace98e112675fcf58018c94069ec9f8be0f7d7176252a9571bf2c3efcc6c26725870ff442dfe7472e24585a2d4529a6de7eb3c1ec1e6be

Download Submit
/data/data/com.mbwhatsapp/files/decompressed/libs.spo/libwhatsapp.so

Filesize
6.3MB

MD5
eb2490ee77e7d2aed08b65599b6ec437

SHA1
c105ad0fd8981aa488415354f942acf459bc243b

SHA256
dd76bc89fa605f936ef959a1530e7d2bdeea2c59752ec7c6144b0dd42b961352

SHA512
76a524463ddd1118d115508977cf8cf818b6092466f3679e658bbde372ea4a68faa0902ed61faf02732e260008b23748f93e1a7c4fff8bb07d16746c1e14b10b

Download Submit
/data/data/com.mbwhatsapp/files/extracted_pack_file.pack.tmp

Filesize
213KB

MD5
79a7b896132e3425306c22ee9245b1b3

SHA1
c2644a692a75b291253d84eac34186e627325fbb

SHA256
1dffc9205463e064a73076f5cc8ed4f688250c06709ac3d23324aa29dd70e81d

SHA512
6cefeea15c0a4086e13c3c6d09e646c473a301bcf25dbc2f8c091d2988d6fdc50d069ecb3c3cfa9908773c77ae6a8280581ccc8887c224f1c729e974097d411f

Download Submit
/data/data/com.mbwhatsapp/files/wam.wam

Filesize
64KB

MD5
3249884d94e6cd5c76618216a2cbae0c

SHA1
565b8c3212deb5cdaed343a8e01d0b038a9b063e

SHA256
608bf31f2c93852ee7821bebcdc4d16168b9632f65aedf500199bbd36efae19f

SHA512
eff8a8c0f65013cb82a003eacf1aaab69634a23a4fe9ae629f38f260cc66430a800674e02af0b6ebf4b663eb6654fba7f76abf23ebbb3cc12735501d9c8e3ddd

Download Submit
/data/data/com.mbwhatsapp/files/wamdit3.wam

Filesize
77B

MD5
c4d92401c983265af6687d7e8b1dd951

SHA1
9115f0db4e3bf3cd0b2d6e9e16b54dff04e3b7fb

SHA256
c23cda05c6eaa4e266cdb350607d85b7fdae1b08915b090ff51ac2ea60e44200

SHA512
ca0d6f96cb3de0e268153e7bac0ed4caba6ef08835989aaac7dd703b8bd84f869ca0918998ac1f2dc290d40ae84caed36d93869142422721fa729a46eaaa1408

Download Submit
/data/data/com.mbwhatsapp/files/wamrealtime.wam

Filesize
197B

MD5
22a9d9c3a11defd795a708f503b65fef

SHA1
d34ac45b697a6b6a1118dd4103b4b0b92a4790bf

SHA256
08402965d1a9f96a0d91e81060fbd84c87abb057b16515eb958f559e69cc3e9f

SHA512
e59c684f6eb3827e20e3aef1b283a0ef48dbd65144649688030f7ae1bcbad6d4c2d9845f331bb6c36d8c1723e75d1b9c0043403e420257e9df660fab41eafce8

Download Submit
/data/data/com.mbwhatsapp/lib-main/dso_deps

Filesize
272B

MD5
33f16d8498cbf63eef9b3b14bd2b24a8

SHA1
e40cd331a70ef079b457da1fc52ef2573d6b293d

SHA256
3acdeeb72d2ce6e9fb319895b50472a85a37d7e4d2069dce0644377cfc56d7f9

SHA512
9535ffffa1a7490ccd8fb85d6bbe66ee0e9bab3047d1c6c5c3be499918765d731d161c1c4db3b8370f725766379ea4525057c4b627f106c17fcd7e1b57c38235

Download Submit
/data/data/com.mbwhatsapp/lib-main/dso_manifest

Filesize
5B

MD5
c06857e9ea338f3f3a24bb78f8fbdf6f

SHA1
c5a0a2529d2deb60fec041b4fbd722a2ebe31702

SHA256
957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

SHA512
29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

Download Submit
/data/data/com.mbwhatsapp/lib-main/dso_state

Filesize
1B

MD5
93b885adfe0da089cdf634904fd59f71

SHA1
5ba93c9db0cff93f52b521d7420e43f6eda2784f

SHA256
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

SHA512
b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

Download Submit
/data/data/com.mbwhatsapp/lib-main/dso_state

Filesize
1B

MD5
55a54008ad1ba589aa210d2629c1df41

SHA1
bf8b4530d8d246dd74ac53a13471bba17941dff7

SHA256
4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

SHA512
7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

Download Submit
/data/data/com.mbwhatsapp/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
42d28ec6eabaf35911fcf6680088babf

SHA1
cc0fdfa1a781e490d74e98db12c4ca5c6294fd87

SHA256
386a5b64bdeb38d0502a246188dc9ca6cee69832c0a1e518754918a63ba0d8c9

SHA512
4fe2b369402ddf079368257be9b1c45430840eca1a334db3571bc275fa4f7d1b24bba202fa41a9236191c5207b553a46d974ba8dfc5a6377d2024a83b95085a9

Download Submit
/data/data/com.mbwhatsapp/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
cefeda6d658cb31f0b3ce6efa223831f

SHA1
0be7354f3817a11063bb6ab0573f9cf1ff0cf9a6

SHA256
371768125c01e88b87b623c88056b249e1bfbfefc7091cda3b71048ca241e749

SHA512
4d21389c3b208458649a8fea92186296a5e1a64fae906f5b00d8affcfea37c1670cd235cfbba7c120e132ba42ef231dfb05e88721751df944388c4a2e02c218f

Download Submit
/data/data/com.mbwhatsapp/no_backup/androidx.work.workdb-wal

Filesize
112KB

MD5
43d95c88b0d02462b24d7f16dca65bfc

SHA1
4dc0bd543d606dd614adda9c9fcf503e9ffb52a0

SHA256
c09025dceff6c94288641b59c9dc3964691b4b085353c0ca93aca95a75557839

SHA512
e760c1140f81169bcf80d22edd50ef535f531c2eb5fe3abf096b9cb64b73c9517e39638e8b2c9957e500857c93b391bbde253102832f3e0797214e4a9b376a38

Download Submit
/data/data/com.mbwhatsapp/no_backup/androidx.work.workdb-wal

Filesize
185KB

MD5
a548f91ba8c7d7c4398684eb1b8bcedc

SHA1
0404a076834fc93882088b6d17a859f5c75f1d44

SHA256
5074c32eaf72c15da971de6cad34d85d66c79663984a9421c484636609d0f015

SHA512
4411a1d605d85e0d3f1a696d0cb0f05809de0f88bdd1691080f7ba50a7dc256accec609f46af407181b295f3e3992e9b9d3bed48077d72f0ac24d2df1d814f05

Download Submit
/data/data/com.mbwhatsapp/no_backup/com.google.InstanceId.properties

Filesize
63B

MD5
8760118e039e0506f280a493e553562c

SHA1
c88c9e7eefca7d58142c5f510a24bab5f932b382

SHA256
255afa77f0936e4b329f9fa2305137db9eb84b11e44a4db8e4cc4247b907223c

SHA512
5be5f5a12e7d9bfc5c87a660b22ebff45ec7840d3e2e4cde1d7bded7a7f7ed29c3d590383454a0d46d3fac6af8323683c321fc58fdcdec3cec6ac31056b393ae

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads