Overview

overview

10

Static

static

6

WiFiService.apk

android-13-x64

10

Resubmissions

15-05-2024 07:49

240515-jnrk6afh2w 10

15-05-2024 07:48

240515-jm6zfsfh46 6

10-05-2024 02:08

240510-ckjmtacg2x 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WiFiService.apk

  • Size

    3.2MB

  • Sample

    240515-jnrk6afh2w

  • MD5

    ce48f58dbae28bcb25677b8add0ddf64

  • SHA1

    e868c6fcaff35940e338e86e41494aea88797aa8

  • SHA256

    4e3e24dcd83d8ab0fcedb625bbc4ed75b99161cf0bc60153fa4ebbf13d60636a

  • SHA512

    367fd782ca81ac3c5a58f21d1615a6a60776773f6db24caa47a6e5267e83d474c2f7504bb7ff0e06455760d209a598138ad0496c82849825e018763ca67ae7d9

  • SSDEEP

    98304:P3/ynojPcxrkRN+wsKUHAUrFPW9/cZ+OEf:P6ojkxrkahFPW9/hOEf

Score
10/10
tispyandroidcollectiondiscoveryevasioninfostealerspywaretrojan

Malware Config

Targets

    • Target

      WiFiService.apk

    • Size

      3.2MB

    • MD5

      ce48f58dbae28bcb25677b8add0ddf64

    • SHA1

      e868c6fcaff35940e338e86e41494aea88797aa8

    • SHA256

      4e3e24dcd83d8ab0fcedb625bbc4ed75b99161cf0bc60153fa4ebbf13d60636a

    • SHA512

      367fd782ca81ac3c5a58f21d1615a6a60776773f6db24caa47a6e5267e83d474c2f7504bb7ff0e06455760d209a598138ad0496c82849825e018763ca67ae7d9

    • SSDEEP

      98304:P3/ynojPcxrkRN+wsKUHAUrFPW9/cZ+OEf:P6ojkxrkahFPW9/hOEf

    Score
    10/10
    tispycollectiondiscoveryevasioninfostealerspywaretrojan

    • TiSpy

      TiSpy is an Android stalkerware.

      trojaninfostealerspywaretispy

    • TiSpy payload

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscoveryevasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries the mobile country code (MCC)

      discovery

    • Queries the phone number (MSISDN for GSM devices)

      discovery

    • Reads the contacts stored on the device.

      collection

    • Acquires the wake lock

    • Checks if the internet connection is available

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1

MITRE ATT&CK Matrix

Tasks