General
-
Target
024717faa7e98cf4b43860e5e88daff509c917421974e94f28ad6e1b2d3ad1f0.apk
-
Size
3.2MB
-
Sample
240529-nagk9ace8w
-
MD5
9a50745fddfeb34579b90677e397c836
-
SHA1
3fe07ffead8b8800df4a3528e1e6984af5e7a2b1
-
SHA256
024717faa7e98cf4b43860e5e88daff509c917421974e94f28ad6e1b2d3ad1f0
-
SHA512
191847860c837bfdadca8a8e1ac6fd35b995f902a2b84c9718ecc69aa8e7acc3cd09700f4ceaf9048d44c7ec168b909ac61f91fabfd54e0dabf6635af0c22227
-
SSDEEP
98304:PTd6LnwYGPsbAv1HVbZtlaAIFAp5ueWYhxc8WfhMs:b2wYGyAxVbf0a5ue1CZ
Static task
static1
Behavioral task
behavioral1
Sample
024717faa7e98cf4b43860e5e88daff509c917421974e94f28ad6e1b2d3ad1f0.apk
Resource
android-x86-arm-20240514-en
Malware Config
Extracted
tispy
https://auth.familysafty.com/TiSPY/printIPN.jsp?screen=IntroScreen&model=Pixel+2&osversion=28&deviceid=358240051014041&version=3.2.183_28May24&rtype=T
Targets
-
-
Target
024717faa7e98cf4b43860e5e88daff509c917421974e94f28ad6e1b2d3ad1f0.apk
-
Size
3.2MB
-
MD5
9a50745fddfeb34579b90677e397c836
-
SHA1
3fe07ffead8b8800df4a3528e1e6984af5e7a2b1
-
SHA256
024717faa7e98cf4b43860e5e88daff509c917421974e94f28ad6e1b2d3ad1f0
-
SHA512
191847860c837bfdadca8a8e1ac6fd35b995f902a2b84c9718ecc69aa8e7acc3cd09700f4ceaf9048d44c7ec168b909ac61f91fabfd54e0dabf6635af0c22227
-
SSDEEP
98304:PTd6LnwYGPsbAv1HVbZtlaAIFAp5ueWYhxc8WfhMs:b2wYGyAxVbf0a5ue1CZ
-
TiSpy payload
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Queries the mobile country code (MCC)
-
Queries the phone number (MSISDN for GSM devices)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
-
Reads information about phone network operator.
-