92a30ed0f61fda6d93b86836687832be9b0c334b825f693dbcb7931e8a1cff86

Analysis

max time kernel
40s
max time network
155s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
27/03/2025, 22:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92a30ed0f61fda6d93b86836687832be9b0c334b825f693dbcb7931e8a1cff86.apk
Size

3.1MB
MD5

c67fd4a69cac079b2d97ad891b0b4c7e
SHA1

79877922a495282e78efa09d7cebf7bc13da3941
SHA256

92a30ed0f61fda6d93b86836687832be9b0c334b825f693dbcb7931e8a1cff86
SHA512

a8565ed4557e2eeae72dc5474a4fb1303b4d2a17dafa42c5564cadb031402705d0f420fdf67d5b422385976a91b1b21745c2482821c7a71e410e6f0bf329d4bf
SSDEEP

98304:hiBcUAdk6lQyb3U5oy3DDUNHYA+kOjY+y/pdJ+0r:FUAiKQ+32xDUNH0DjY+yLj

Score

8^/10

discovery evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 2 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4808	wifi.access.android
4808	wifi.access.android

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/wifi.access.android/code_cache/mv_update_v2.dex	4925	wifi.access.android:remote
/data/user/0/wifi.access.android/code_cache/mv_update_v2.dex	4925	wifi.access.android:remote

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	wifi.access.android:remote

wifi.access.android
1⤵
- Removes its main activity from the application launcher
PID:4808

wifi.access.android:remote
1⤵
- Loads dropped Dex/Jar
- Queries the mobile country code (MCC)
PID:4925

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/wifi.access.android/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
4156c4c3946d4f9747d8fcdcb3950b2e

SHA1
26c31dfc4aea25c951eab63fc9f48ba05db1cf57

SHA256
e1a819e4706b5ad71085462186a74a1f0160b33159bceaac713ca137568c1809

SHA512
cee0a01375b74bb4381b3a0a2c2741438b0bd1ef83b2bd68386b9a311d0b09b71b69f6abb602a9859be3aef38d2fda311b2b6368473bfedb0bdbfb394d367652

Download Submit
/data/misc/profiles/cur/0/wifi.access.android/primary.prof

Filesize
5.2MB

MD5
d300bdb4b3ea87f902fda5bf7bad33f2

SHA1
aa90761dbf400c3a66a28fd0a264fc1aedb491a7

SHA256
c28fc458d8c9545aba71901fc5bf7b1589c74d9bd5ae8817836c274ecae94576

SHA512
81cd2386f35a9a220dd299ece33a9d19f497180b6e69b4bc396ef3b8ae04cd1e9726d02735c85fb9aa5ab0834a369dc811be1b51a4a0b37f776c7e66c5de82cc

Download Submit