General

  • Target

    9c1b26882bc98a363924db4e5b35b4b5253fc859dfcb4402ca3eaceec3f1a5b7.apk

  • Size

    3.1MB

  • Sample

    240417-rq3p7sdc4x

  • MD5

    ddebce7ea1fd91f0e6063634e6ce6657

  • SHA1

    ec7c90cbee8b675c8d4eac2e7e2037b6473acb49

  • SHA256

    9c1b26882bc98a363924db4e5b35b4b5253fc859dfcb4402ca3eaceec3f1a5b7

  • SHA512

    dcc8ed2f2cd9d55b2a733991324d179765239d19ebd91cdcd24dcfa8178bb84bd08e32e9939eaabad0f87dd3f945ef7b40a44c81ccdd49a0d44effcddff1b76e

  • SSDEEP

    98304:JLD+vno2jPm6A5WxlrLrc2mJ8oy7UHFog:t0o2ju6IWxNZepHF/

Malware Config

Targets

    • Target

      9c1b26882bc98a363924db4e5b35b4b5253fc859dfcb4402ca3eaceec3f1a5b7.apk

    • Size

      3.1MB

    • MD5

      ddebce7ea1fd91f0e6063634e6ce6657

    • SHA1

      ec7c90cbee8b675c8d4eac2e7e2037b6473acb49

    • SHA256

      9c1b26882bc98a363924db4e5b35b4b5253fc859dfcb4402ca3eaceec3f1a5b7

    • SHA512

      dcc8ed2f2cd9d55b2a733991324d179765239d19ebd91cdcd24dcfa8178bb84bd08e32e9939eaabad0f87dd3f945ef7b40a44c81ccdd49a0d44effcddff1b76e

    • SSDEEP

      98304:JLD+vno2jPm6A5WxlrLrc2mJ8oy7UHFog:t0o2ju6IWxNZepHF/

    • TiSpy

      TiSpy is an Android stalkerware.

    • TiSpy payload

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about the current Wi-Fi connection.

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks.

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks