General

  • Target

    24350d572904568447e8d4caeeddcaf1c3b9467c6df5e436a1397051f38eee3f

  • Size

    3.1MB

  • Sample

    240419-cb5hxsef2t

  • MD5

    f50bf2961a75efa697243caed447dccb

  • SHA1

    2048fe8aea9ca83e9d76a1bb416030a2504b9cd2

  • SHA256

    24350d572904568447e8d4caeeddcaf1c3b9467c6df5e436a1397051f38eee3f

  • SHA512

    f8aa94966527506e764c6eec9ac0a8328c6ba5c0b9d6b6e77fc24fd90638efd3fb32907373340c9abc911d8ca3676a888bf714a2490dac3454cdd9a9d804feee

  • SSDEEP

    98304:axeisnJaPgU/RvHAlsttL/ROuHKMnHypxE:8sJaIU6yH/JhaxE

Malware Config

Targets

    • Target

      24350d572904568447e8d4caeeddcaf1c3b9467c6df5e436a1397051f38eee3f

    • Size

      3.1MB

    • MD5

      f50bf2961a75efa697243caed447dccb

    • SHA1

      2048fe8aea9ca83e9d76a1bb416030a2504b9cd2

    • SHA256

      24350d572904568447e8d4caeeddcaf1c3b9467c6df5e436a1397051f38eee3f

    • SHA512

      f8aa94966527506e764c6eec9ac0a8328c6ba5c0b9d6b6e77fc24fd90638efd3fb32907373340c9abc911d8ca3676a888bf714a2490dac3454cdd9a9d804feee

    • SSDEEP

      98304:axeisnJaPgU/RvHAlsttL/ROuHKMnHypxE:8sJaIU6yH/JhaxE

    • TiSpy

      TiSpy is an Android stalkerware.

    • TiSpy payload

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about the current Wi-Fi connection.

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks.

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks