92a30ed0f61fda6d93b86836687832be9b0c334b825f693dbcb7931e8a1cff86

Analysis

max time kernel
45s
max time network
151s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
27/03/2025, 22:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92a30ed0f61fda6d93b86836687832be9b0c334b825f693dbcb7931e8a1cff86.apk
Size

3.1MB
MD5

c67fd4a69cac079b2d97ad891b0b4c7e
SHA1

79877922a495282e78efa09d7cebf7bc13da3941
SHA256

92a30ed0f61fda6d93b86836687832be9b0c334b825f693dbcb7931e8a1cff86
SHA512

a8565ed4557e2eeae72dc5474a4fb1303b4d2a17dafa42c5564cadb031402705d0f420fdf67d5b422385976a91b1b21745c2482821c7a71e410e6f0bf329d4bf
SSDEEP

98304:hiBcUAdk6lQyb3U5oy3DDUNHYA+kOjY+y/pdJ+0r:FUAiKQ+32xDUNH0DjY+yLj

Score

8^/10

discovery evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 2 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5063	wifi.access.android
5063	wifi.access.android

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/wifi.access.android/code_cache/mv_update_v2.dex	5164	wifi.access.android:remote
/data/user/0/wifi.access.android/code_cache/mv_update_v2.dex	5164	wifi.access.android:remote

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	wifi.access.android:remote

wifi.access.android
1⤵
- Removes its main activity from the application launcher
PID:5063

wifi.access.android:remote
1⤵
- Loads dropped Dex/Jar
- Queries the mobile country code (MCC)
PID:5164

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/wifi.access.android/files/profileInstalled

Filesize
24B

MD5
01d8c0cbb78ea4b88b50680bb527b07e

SHA1
d8759b10ed2ad8899c4778913f0bcd6e7285ae2d

SHA256
fa2c1c82248ea3556c10c60721762137d7ff03307077a7609c151d0fb493d321

SHA512
848b930d7411d4b305124f20917abb2ed786f8505877cc08acf21410d966c83686f395bf22df21e066652b2b4790ec090d22b6392e3979218c35720e719d1b9e

Download Submit
/data/data/wifi.access.android/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
fced309685f93fb3d97da54175478893

SHA1
497051bc60a5c4792ed9fe4962f11e62c2b059a1

SHA256
cb6b6b7b648dcc30ffc80a78be19f6d3a090e1a4c0e7fae6e793a8166ef46d26

SHA512
0e4a67f5c1f7511638172ddd74c6f172ef5134cde6b758acf574f49cd5b6faddc69a5edaf0f7e3155ec8a583645d71dcbd09e6dfa3950240aefbbacc5ff30156

Download Submit
/data/misc/profiles/cur/0/wifi.access.android/primary.prof

Filesize
5.2MB

MD5
d300bdb4b3ea87f902fda5bf7bad33f2

SHA1
aa90761dbf400c3a66a28fd0a264fc1aedb491a7

SHA256
c28fc458d8c9545aba71901fc5bf7b1589c74d9bd5ae8817836c274ecae94576

SHA512
81cd2386f35a9a220dd299ece33a9d19f497180b6e69b4bc396ef3b8ae04cd1e9726d02735c85fb9aa5ab0834a369dc811be1b51a4a0b37f776c7e66c5de82cc

Download Submit
/data/misc/profiles/cur/0/wifi.access.android/primary.prof

Filesize
4KB

MD5
0d77dee725e9feb93779388183865819

SHA1
a9be2b71851fe1680c475a85f70b9d9eafc2c142

SHA256
0cbad119025d4a032dc4451c3b1c0e2297d0cd1333cb51aefcfca8a5e1faa7ab

SHA512
169621d4fbc0c1b11706ae47598b799991986ae0c555728ded52a11abd53f67c459003057e15aa469514d7bb4b329a059ab991dd615c2d0e8a0cbf60bb4c0d0a

Download Submit