General
- Target bruno-wi1.apk
- Size 2.4MB
- Sample240530-cgppnabe87
- SHA256 149e43eacb61a1827ee4bc121e8de586fc0161cc23e5d7c13bc8426b17e350b2
- MD5 fcb3a66bcd553db071efd440220572e5
- SHA1 5913843e782e8b1f8b0e69f1a50bb1b1fb1b8a0c
- SHA512 e2b03637bd5cd2a56f7baa1348ea42848c2dbf5d854f8db3dfefcb4f1da647f3effdedd2422141af07c271c142fa8201b29e5b9b5e3a2259e0bea2d47e5f7563
- SSDEEP 49152:Map09YS76tl9YHKDUJ4iASylo/jkLYJETWt5ZePg3vuO:MaOrmtl9UKDsKeAc5ZrfuO
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
bruno-wi1.apk
Resource
android-x86-arm-20240514-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
tispy
C2
-
https://brunoespiao.com.br/esp/appprofile.jsp
Targets
-
- Target bruno-wi1.apk
- Size 2.4MB
- SHA256 149e43eacb61a1827ee4bc121e8de586fc0161cc23e5d7c13bc8426b17e350b2
- MD5 fcb3a66bcd553db071efd440220572e5
- SHA1 5913843e782e8b1f8b0e69f1a50bb1b1fb1b8a0c
- SHA512 e2b03637bd5cd2a56f7baa1348ea42848c2dbf5d854f8db3dfefcb4f1da647f3effdedd2422141af07c271c142fa8201b29e5b9b5e3a2259e0bea2d47e5f7563
- SSDEEP 49152:Map09YS76tl9YHKDUJ4iASylo/jkLYJETWt5ZePg3vuO:MaOrmtl9UKDsKeAc5ZrfuO
- MD5 SHA1 SHA512 SSDEEP
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Queries the mobile country code (MCC)
-
Queries the phone number (MSISDN for GSM devices)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Virtualization/Sandbox Evasion
2System Checks
2