6a0eafcf69bdb1f04f28b5bf57ca181b30c3d0ae9069615b358bc72e4b1fc109

Analysis

max time kernel
76s
max time network
128s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
27/03/2025, 22:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6a0eafcf69bdb1f04f28b5bf57ca181b30c3d0ae9069615b358bc72e4b1fc109.apk
Size

3.1MB
MD5

42d04a0c4346dbce98a175ae8935c1c9
SHA1

0ba3b3de8235ccef38e0407697672733215a825f
SHA256

6a0eafcf69bdb1f04f28b5bf57ca181b30c3d0ae9069615b358bc72e4b1fc109
SHA512

0c456066d7884b9844e6dcaed3be639ba9b68abfc7858efb780ca15ace7ece9a7bfa3bed492f4278fe76627f7e7624c3707bf2616aa6807959d9a3276010262d
SSDEEP

98304:hiBcUAdk6lQyb3U5oy3DDUNHYA+kOjY+y/pdJ+8x:FUAiKQ+32xDUNH0DjY+yL5

Score

8^/10

discovery evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 2 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5094	wifi.access.android
5094	wifi.access.android

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/wifi.access.android/code_cache/mv_update_v2.dex	5195	wifi.access.android:remote
/data/user/0/wifi.access.android/code_cache/mv_update_v2.dex	5195	wifi.access.android:remote

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	wifi.access.android:remote

wifi.access.android
1⤵
- Removes its main activity from the application launcher
PID:5094

wifi.access.android:remote
1⤵
- Loads dropped Dex/Jar
- Queries the mobile country code (MCC)
PID:5195

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/wifi.access.android/files/profileInstalled

Filesize
24B

MD5
37720ccf9bb1931e41735216a0dcfbba

SHA1
53108fbcb946ac475ca828f7bfc822ae489212a8

SHA256
154311a46aedec11775e8a31abeb457a0ba6cdb6badd7c3fa64f60d155bd70d1

SHA512
58dd66cd43ab98362beaecb087f36d8fc15a839491aaf41991d29eb958554ce3917444e7120aa98dc4a2551318401c4205d8d77808846cdadaca5f3ee0b781dd

Download Submit
/data/data/wifi.access.android/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
751f58d5e917b9097af48e0881445996

SHA1
362de5519891799f31f45e207299528c788b53d9

SHA256
82c904eeff61b21f81697c9d9a65e5fa5d199e59639df181a08c18cab324ae32

SHA512
cecb03efde477cc5265aad32cd079404e27afc6e729740c19561521169f72cbdd00fe8fffc6b76c064c424b6d437e0263f957ac484f942bd5e6d84528d558c92

Download Submit
/data/misc/profiles/cur/0/wifi.access.android/primary.prof

Filesize
5.2MB

MD5
d300bdb4b3ea87f902fda5bf7bad33f2

SHA1
aa90761dbf400c3a66a28fd0a264fc1aedb491a7

SHA256
c28fc458d8c9545aba71901fc5bf7b1589c74d9bd5ae8817836c274ecae94576

SHA512
81cd2386f35a9a220dd299ece33a9d19f497180b6e69b4bc396ef3b8ae04cd1e9726d02735c85fb9aa5ab0834a369dc811be1b51a4a0b37f776c7e66c5de82cc

Download Submit
/data/misc/profiles/cur/0/wifi.access.android/primary.prof

Filesize
4KB

MD5
6fafc3b43b75a1759c3e738c9ca0a70c

SHA1
9f8d9a70358513700d3417f781e5bc8f98c6094a

SHA256
df0ea4abb98b7006446fbe54a9e61fab9d4a3998638eebd806c2aab4d84d5721

SHA512
039e7f4ba6db0a1d2612df19fd1a07ec765c7397fa0c71ca411b93afed7baae3fec600d19e68ac3b5116d2c3aba5f8e4ee6af10e9ecafd33421353973d2a02a2

Download Submit