Extracted

• • Target
    355de72edd11b610733332272e1dd729c150c9dbb5228e9607b3029f3bc1b652.apk
  • Size 2.4MB
  • SHA256 355de72edd11b610733332272e1dd729c150c9dbb5228e9607b3029f3bc1b652
  • MD5 620e82cd61da1367affe88cbbfe0a553
  • SHA1 58110fede01f79ecb4f4b137d7f3120358927219
  • SHA512 bc70ddefd44bcc0f85fed900ec0e9c338794c51635f72103433a440f8ac46e32c6cca3652e8cddc8cfb8c90d7890daca910527092cd2a014ad32f261232069db
  • SSDEEP 49152:bD+HU/uoSrk2hPEY0jBLthdmdi+oEFJDQZaXtFEyW0sqGVRF:bD+0OrkgcYwNU0E0wde2sq+RF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  tispycollectiondiscoveryevasioninfostealerpersistencespywaretrojan

  • TiSpy

    TiSpy is an Android stalkerware.

    trojaninfostealerspywaretispy

  • Requests cell location

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion

  • Checks CPU information

    Checks CPU information which indicate if the system is an emulator.

    evasiondiscovery

  • Checks memory information

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Queries information about the current nearby Wi-Fi networks

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Registers a broadcast receiver at runtime (usually for listening for system events)

    persistence

  • Acquires the wake lock

  • Checks if the internet connection is available

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1