Overview

overview

10

Static

static

6

ce839a0b60...d7.apk

android-9-x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce839a0b60ed058c74783c1dbc54e0f90943f4b2e29f331ae9e25a0db1ed6ed7.apk

  • Size

    3.1MB

  • Sample

    240419-cdrpvade49

  • MD5

    b96678bd3e90470d73f8898c086b578f

  • SHA1

    fafed961f596d6220af3bd6101e2ed2c5a146e5d

  • SHA256

    ce839a0b60ed058c74783c1dbc54e0f90943f4b2e29f331ae9e25a0db1ed6ed7

  • SHA512

    31707454aecbb933184b375c89b37a11228ef122646c4d393f3ee56d97911f7aa59d4011bb7995d8c5436c881534d5b023934e7bc84b728e216f37ed5c2c9125

  • SSDEEP

    49152:f2HhnnAfGw93mP/FuaQFwSDXotujaghgRJpjZx1dVwdtp/7T6e0GX:f2HhnKGw1mP/FbQCFtuaJVDCdtgm

Score
10/10
tispyandroidcollectiondiscoveryevasioninfostealerspywaretrojan

Malware Config

Targets

    • Target

      ce839a0b60ed058c74783c1dbc54e0f90943f4b2e29f331ae9e25a0db1ed6ed7.apk

    • Size

      3.1MB

    • MD5

      b96678bd3e90470d73f8898c086b578f

    • SHA1

      fafed961f596d6220af3bd6101e2ed2c5a146e5d

    • SHA256

      ce839a0b60ed058c74783c1dbc54e0f90943f4b2e29f331ae9e25a0db1ed6ed7

    • SHA512

      31707454aecbb933184b375c89b37a11228ef122646c4d393f3ee56d97911f7aa59d4011bb7995d8c5436c881534d5b023934e7bc84b728e216f37ed5c2c9125

    • SSDEEP

      49152:f2HhnnAfGw93mP/FuaQFwSDXotujaghgRJpjZx1dVwdtp/7T6e0GX:f2HhnKGw1mP/FbQCFtuaJVDCdtgm

    Score
    10/10
    tispycollectiondiscoveryevasioninfostealerspywaretrojan

    • TiSpy

      TiSpy is an Android stalkerware.

      trojaninfostealerspywaretispy

    • TiSpy payload

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscovery

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about the current Wi-Fi connection.

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries information about the current nearby Wi-Fi networks.

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

      discovery

    • Acquires the wake lock

    • Reads information about phone network operator.

      discovery
    behavioral1

MITRE ATT&CK Matrix

Tasks