51c60a15fca17204f9be5e94bc12cf58ec2666fc363b4ac4724dafc387a28968

Sharing

Copy URL Twitter E-mail

General

Target
WiFi+Map_+Free+Wi-Fi+Near+You_8.6.51_APKPure.xapk
Size 176.4MB
Sample260715-m26tsaas8m
SHA256 51c60a15fca17204f9be5e94bc12cf58ec2666fc363b4ac4724dafc387a28968
MD5 210e2ae148347be5922d4074a6f1c4c7
SHA1 e38856238054932234aec4e661b95e71a4da9658
SHA512 43e2c60202dbef37a7c1d9bef30dc4437cd5cf6894b1b6aeaa91dfdcbbbf78b71a5647ba6fe2a2f31763d7a74952203ae6b92af8813e469e039be957f796986d
SSDEEP 3145728:qNmK8PYTlXLTlteubiKco9XO8c5PAYJcxmLDrWB3mp:qr0YRvLZuKco9s4CcyH
TLSH
T1A198DF43AD0E9922F559D63944E7CB14F2757C456B2383872A4EB6B8EDF32C0691E3B0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  WiFi+Map_+Free+Wi-Fi+Near+You_8.6.51_APKPure.xapk
- Size 176.4MB
- SHA256 51c60a15fca17204f9be5e94bc12cf58ec2666fc363b4ac4724dafc387a28968
- MD5 210e2ae148347be5922d4074a6f1c4c7
- SHA1 e38856238054932234aec4e661b95e71a4da9658
- SHA512 43e2c60202dbef37a7c1d9bef30dc4437cd5cf6894b1b6aeaa91dfdcbbbf78b71a5647ba6fe2a2f31763d7a74952203ae6b92af8813e469e039be957f796986d
- SSDEEP 3145728:qNmK8PYTlXLTlteubiKco9XO8c5PAYJcxmLDrWB3mp:qr0YRvLZuKco9s4CcyH
- TLSH
  T1A198DF43AD0E9922F559D63944E7CB14F2757C456B2383872A4EB6B8EDF32C0691E3B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  config.arm64_v8a.apk
- Size 21.8MB
- SHA256 d1e3b92709bdf29185e294fe8556257e63f80a605a2a5039d1a3bcf4ee183315
- MD5 ff553d7298c2de97068e2b976788e7f0
- SHA1 70156730908b502c01715fef946200dc8f6be211
- SHA512 a80fdeeb418e6bc78b7e59be2c7e78a4ba5aa516ea885a7e22b1388c3bc2e598d5cffcee2f70890feb70fcb599a07c92abd99d8bc296458b744fd8c6a27c8f29
- SSDEEP 393216:3Vg3J3k4hbH07EDJupqJJpKVEHXpDpFpSlkdcbTZXS2rokAXhhQiRE7:lMBVICcbxS2Uq
- TLSH
  T1F6379F09F94DE43BEFC5F0FC8D4A0BA3702978A85711C1A53922861DFD837E58B697A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  config.xxhdpi.apk
- Size 10.0MB
- SHA256 858889d0ef5f44db709c6b06029012498a35d8ef0170b3bb312ee1c73bb9b696
- MD5 adcf82e0b5c905fc73c0e6cc4a1a62fe
- SHA1 c62a91c47f530126bd610172873e555566dde0ed
- SHA512 0aec5c6bc44ea07928c67036d97b4ec380adc43bcd57ccd8f9e2140769a7b920a30fa333abf8e1f783c2ec37e88b9f1dfd01d025d1908f902656de5e1bfa2bef
- SSDEEP 196608:mVSyPxh1smhQfzShDt3m07pA7F8QjtV8tl/8Vf:ySqxhjGfzShDw07pA7FpBVw/A
- TLSH
  T110B63356C33EB80FDE36D13806B812D790EA4DC4B966D7211609F2689AF7D42BE53EC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  icon.png
- Size 105KB
- SHA256 4b9fc75badf73e1888c9f4bb707b69091afee9adba336c8b840a440576b10973
- MD5 321d4e57a0f460489dd82e11dc3ee8d7
- SHA1 536100b8d6470f46576292e88e45b732ba453d82
- SHA512 805c692c062031d1d395ce152d73cf7b07b7ba9bcf0d48a3d7301799468e19d5a415688018ba0b72b4a82a3c8222f58c3b95515d5407558ad1bef24146716b39
- SSDEEP 3072:30eA7MU7tOUSWVmF7Hz7eDcAgJZCACLiFn7Z:30eOQXWmV7eDpokA5FF
- TLSH
  T184B3E0B8FBD7E7A4B72F054D847D7E6B0BD10AC948C5588166171D42F6A8FA0D2432BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  io.wifimap.wifimap.apk
- Size 144.6MB
- SHA256 ff2da18d5da08cf286be6a1367c2eb1efbd47988aaff4b0014c2f73a5543b429
- MD5 b059cc3eb0d782d37e70aec07c5a4f45
- SHA1 c2a58e85454fefb0e2676042223f3549bd758579
- SHA512 d9fdf4cb5ef128cf97a58fba715d943b5af385e77675481eccc790557bbd536c90a95461a2de1e39856fe2383ced7c73929ce70844501624c587310c31636014
- SSDEEP 3145728:eNmK8PYTlXLTlteubiKco9XO8c5PAYJcxmLDA:er0YRvLZuKco9s4CcyA
- TLSH
  T14B78DF43AD0A8922F52DCA3554E7CB14F7756D416B2787832A4EB7B8DCF32C1691E2B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
behavioral10 behavioral11 behavioral9
- Target
  manifest.json
- Size 2KB
- SHA256 f090ccef351034ddebdcce86606eb5bb6eb2ed7bfd372b47a14d27bfa01fc41c
- MD5 c15bc0067ac6e7aeee9e792c2e32618b
- SHA1 dad5573c2e0e2166e53520bb7bba7d79cbecd337
- SHA512 f4541c541d8dd1c248bdbb5c363de3fb91908ccb66590485360c5eab98843f4f5a470dbda8209f50fc85f7ef07384ca3256cfa7d5244b5d4171c7a0237ca6273
- TLSH
  T16141F8135E6D6733AC9CC799713C088459680AE232ECD4CB89B54D66BD2EE881290FC9
- MD5 SHA1 SHA512 TLSH
Score

6^/10

persistence
- Drops desktop.ini file(s)
behavioral12 behavioral13

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped Dex/Jar

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13