General
-
Target
9bb9e19f8f64c5985540d220121ecbab.bin
-
Size
2.1MB
-
Sample
240604-dvpr9abd6w
-
MD5
23cdabf805d34995073c374893b98c62
-
SHA1
9d494aeeb361240b2314203fd0bca4a675ca9fc9
-
SHA256
ce716204328919afbaf52312e5039b150b24049a922b9acef44badd53bbbe5e2
-
SHA512
510397194239fc5f64e316f387c3a3f483437ac61aff0d386b341fa7b7ef3fe2abf12091cff1b5244f72cdcc27e072a4e88d253fab3f7cf0db13ac8a423b230a
-
SSDEEP
49152:9XNiPLgrxFxcS9s5f0LdaRNL6smi9UrzMlHD60nMjBcyz4wg:9diPLgnxcSCw8wuU26bcf
Static task
static1
Behavioral task
behavioral1
Sample
cf59b6b132b39e51221cd201bc042e3b75ee481c3d8810aa3f9a37d2de66a3ce.apk
Resource
android-x86-arm-20240603-en
Malware Config
Extracted
tispy
https://brunoespiao.com.br/esp/appprofile.jsp
Targets
-
-
Target
cf59b6b132b39e51221cd201bc042e3b75ee481c3d8810aa3f9a37d2de66a3ce.apk
-
Size
2.4MB
-
MD5
9bb9e19f8f64c5985540d220121ecbab
-
SHA1
1263a9e0edca505dd4bea877967c199feae4d87c
-
SHA256
cf59b6b132b39e51221cd201bc042e3b75ee481c3d8810aa3f9a37d2de66a3ce
-
SHA512
16d4e97f1197d3a921394f9c88f031c3eaf78e69d23291ab323ec2f077364559d21265a6f7e8c30e9be005a8e625a0e3b83506f338d9e1c93ee922796a7b2d5f
-
SSDEEP
49152:oYEra8J9rSapHhvZrtPSchNaVtUxHmz7fEoftfQEPZFf:SrBawHBZcIN64HmH9f5QI
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Queries the mobile country code (MCC)
-
Queries the phone number (MSISDN for GSM devices)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
-
Reads information about phone network operator.
-