6a0eafcf69bdb1f04f28b5bf57ca181b30c3d0ae9069615b358bc72e4b1fc109

Analysis

max time kernel
40s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
27/03/2025, 22:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6a0eafcf69bdb1f04f28b5bf57ca181b30c3d0ae9069615b358bc72e4b1fc109.apk
Size

3.1MB
MD5

42d04a0c4346dbce98a175ae8935c1c9
SHA1

0ba3b3de8235ccef38e0407697672733215a825f
SHA256

6a0eafcf69bdb1f04f28b5bf57ca181b30c3d0ae9069615b358bc72e4b1fc109
SHA512

0c456066d7884b9844e6dcaed3be639ba9b68abfc7858efb780ca15ace7ece9a7bfa3bed492f4278fe76627f7e7624c3707bf2616aa6807959d9a3276010262d
SSDEEP

98304:hiBcUAdk6lQyb3U5oy3DDUNHYA+kOjY+y/pdJ+8x:FUAiKQ+32xDUNH0DjY+yL5

Score

8^/10

discovery evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 2 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4797	wifi.access.android
4797	wifi.access.android

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/wifi.access.android/code_cache/mv_update_v2.dex	4932	wifi.access.android:remote
/data/user/0/wifi.access.android/code_cache/mv_update_v2.dex	4932	wifi.access.android:remote

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	wifi.access.android:remote

wifi.access.android
1⤵
- Removes its main activity from the application launcher
PID:4797

wifi.access.android:remote
1⤵
- Loads dropped Dex/Jar
- Queries the mobile country code (MCC)
PID:4932

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/wifi.access.android/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
63d0e85035a505795950c560d98321eb

SHA1
4662c1aa3881fe96a679b2e5a84d420e542f590f

SHA256
765ec5e5d491d70b3f9e1208bf0c7e44933401982c60be7646d58f2beeb8174c

SHA512
86c8c7d4637d140092b8d490a95f99238309acde2632eb0de0c2fc80550b813fbe6d717c3cc86906965e923a32ca66df0dbc435872dd8064ff729c8e635c88ff

Download Submit
/data/misc/profiles/cur/0/wifi.access.android/primary.prof

Filesize
5.2MB

MD5
d300bdb4b3ea87f902fda5bf7bad33f2

SHA1
aa90761dbf400c3a66a28fd0a264fc1aedb491a7

SHA256
c28fc458d8c9545aba71901fc5bf7b1589c74d9bd5ae8817836c274ecae94576

SHA512
81cd2386f35a9a220dd299ece33a9d19f497180b6e69b4bc396ef3b8ae04cd1e9726d02735c85fb9aa5ab0834a369dc811be1b51a4a0b37f776c7e66c5de82cc

Download Submit