General
- Target a68d68e210a3ee6e9d8ef30c63de4658ef1023fbf27ca7c8d7b79bc6351f5677.apk
- Size 3.2MB
- Sample240615-cdsbdavgnb
- SHA256 a68d68e210a3ee6e9d8ef30c63de4658ef1023fbf27ca7c8d7b79bc6351f5677
- MD5 b8316305bcb65ba0fcb97f5cd9e61bee
- SHA1 9f25c81331ddd574d6882beb67e3c20194bb8056
- SHA512 68d23f15b55815cde891bf81be6bf5df1256bbaaa55a1da04d3b4a69217ee98e133cf0e6600fa5ad6d667f0689229ff143e5e5fe9e9aade09836572d5cda5315
- SSDEEP 49152:MjyFhDnA6ofoY/PH09ZxB+GrvqrCcfljByac1tvb7yUw2Gfk7QDiMrRb:qyFhn/2/PHYLFrymOlgaIRyt2SDiM1b
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
a68d68e210a3ee6e9d8ef30c63de4658ef1023fbf27ca7c8d7b79bc6351f5677.apk
Resource
android-x86-arm-20240611.1-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
tispy
C2
-
https://auth.familysafty.com/TiSPY/printIPN.jsp?screen=IntroScreen&model=Pixel+2&osversion=28&deviceid=358240051014041&version=3.2.183_14Jun24&rtype=T
Targets
-
- Target a68d68e210a3ee6e9d8ef30c63de4658ef1023fbf27ca7c8d7b79bc6351f5677.apk
- Size 3.2MB
- SHA256 a68d68e210a3ee6e9d8ef30c63de4658ef1023fbf27ca7c8d7b79bc6351f5677
- MD5 b8316305bcb65ba0fcb97f5cd9e61bee
- SHA1 9f25c81331ddd574d6882beb67e3c20194bb8056
- SHA512 68d23f15b55815cde891bf81be6bf5df1256bbaaa55a1da04d3b4a69217ee98e133cf0e6600fa5ad6d667f0689229ff143e5e5fe9e9aade09836572d5cda5315
- SSDEEP 49152:MjyFhDnA6ofoY/PH09ZxB+GrvqrCcfljByac1tvb7yUw2Gfk7QDiMrRb:qyFhn/2/PHYLFrymOlgaIRyt2SDiM1b
- MD5 SHA1 SHA512 SSDEEP
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Queries the phone number (MSISDN for GSM devices)
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.