Extracted

• • Target
    93a8f4468461c74f87061434e789234f579564ca605341782e3e3cf77af30e3f
  • Size 2.4MB
  • SHA256 93a8f4468461c74f87061434e789234f579564ca605341782e3e3cf77af30e3f
  • MD5 2cab9c2e804f53f2c5481a9ee37a15f9
  • SHA1 2ad8b6ee577fabb4b0a687290bd7ad16c16ee616
  • SHA512 1941ca420b3e6c42699a016853489245370ff5eafb9eb3b23ef0bf41c67afd6f6c4f810237d2a93cbec588c99712792ab670987ad9ca572dc7ee5ec767580b91
  • SSDEEP 49152:xw1jc/hSN7WIGta7DnqifkMC4u/BHHfIwaJm8OE43f:xw1QoNFWiJSHHAwao/E43f
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  tispycollectiondiscoveryevasioninfostealerpersistencespywaretrojan

  • TiSpy

    TiSpy is an Android stalkerware.

    trojaninfostealerspywaretispy

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Queries information about the current nearby Wi-Fi networks

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Requests cell location

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1