tispy

General

Target

WiFiService.apk
Size

3.2MB
Sample

240605-cjebpsbb6w
MD5

340d39a9673d56c17da3c7dd4461b866
SHA1

6a8ab1a19106cef9eb2b5ad2d7b20131cf265d8d
SHA256

434d05703f91fcfb28db82468c02c50e1f8c83c01b4a7c4d2d153d712fea49f3
SHA512

4160a86bb955b1b3bc19fa4ca418c6163bd6561af6a4d76bf68d974be6a625798e2622c347255a308d634e62c923d10e19d03d89d433f8f6f6196587f735fafa
SSDEEP

49152:IDX+hjnAYePcx2XKibzeTpu1xgAqEPTSZi4LSQ2L:IDX+lnVePcx6f51x9qwTWSlL

Score

10^/10

Malware Config

Extracted

Family

tispy

C2

https://auth.familysafty.com/TiSPY/printIPN.jsp?screen=IntroScreen&model=Pixel+2&osversion=28&deviceid=358240051014041&version=3.2.183_05Jun24&rtype=T

Targets

- Target
  
  WiFiService.apk
- Size
  
  3.2MB
- MD5
  
  340d39a9673d56c17da3c7dd4461b866
- SHA1
  
  6a8ab1a19106cef9eb2b5ad2d7b20131cf265d8d
- SHA256
  
  434d05703f91fcfb28db82468c02c50e1f8c83c01b4a7c4d2d153d712fea49f3
- SHA512
  
  4160a86bb955b1b3bc19fa4ca418c6163bd6561af6a4d76bf68d974be6a625798e2622c347255a308d634e62c923d10e19d03d89d433f8f6f6196587f735fafa
- SSDEEP
  
  49152:IDX+hjnAYePcx2XKibzeTpu1xgAqEPTSZi4LSQ2L:IDX+lnVePcx6f51x9qwTWSlL
Score

10^/10

tispy collection discovery evasion infostealer persistence spyware trojan
- TiSpy
  TiSpy is an Android stalkerware.
  trojan infostealer spyware tispy
- TiSpy payload
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral1