General
- Target d5ba9b8102d25f4bd88560cbc244d68be012625c9578b02b4ab5012de2169e42
- Size 2.4MB
- Sample240613-csmpfa1cqf
- SHA256 d5ba9b8102d25f4bd88560cbc244d68be012625c9578b02b4ab5012de2169e42
- MD5 59e6040bda0928ca8b117084165039ce
- SHA1 c2cf664c98d58a0eab4ae1ab119adb1fb295c55c
- SHA512 73d652bca97296590ff191a658e4201b8690261ad3b3ddf93718c2480ac964b2feb5ad38b0ffdccda9d718d65b5f335cdc2cf29df4cb605ea14820dbf34491ad
- SSDEEP 49152:lsSMF0S4GeSk6ztePGKyX5yJtnwVR3ea2HpEwIoV/y7:lsJL7tztePGkLnwVca2J6oV/y7
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
d5ba9b8102d25f4bd88560cbc244d68be012625c9578b02b4ab5012de2169e42.apk
Resource
android-x86-arm-20240611.1-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
tispy
C2
-
https://brunoespiao.com.br/esp/appprofile.jsp
Targets
-
- Target d5ba9b8102d25f4bd88560cbc244d68be012625c9578b02b4ab5012de2169e42
- Size 2.4MB
- SHA256 d5ba9b8102d25f4bd88560cbc244d68be012625c9578b02b4ab5012de2169e42
- MD5 59e6040bda0928ca8b117084165039ce
- SHA1 c2cf664c98d58a0eab4ae1ab119adb1fb295c55c
- SHA512 73d652bca97296590ff191a658e4201b8690261ad3b3ddf93718c2480ac964b2feb5ad38b0ffdccda9d718d65b5f335cdc2cf29df4cb605ea14820dbf34491ad
- SSDEEP 49152:lsSMF0S4GeSk6ztePGKyX5yJtnwVR3ea2HpEwIoV/y7:lsJL7tztePGkLnwVca2J6oV/y7
- MD5 SHA1 SHA512 SSDEEP
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Queries the phone number (MSISDN for GSM devices)
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Virtualization/Sandbox Evasion
2System Checks
2