tispy

General

Target

WiFiService.apk
Size

3.2MB
Sample

240620-cfkdjsxbjr
MD5

7f79d9b024f513ad68a5a3561517399b
SHA1

d390f3787b989edb2b2de3bcf9ba1f51ab78faee
SHA256

f41f13888faad9dcd9ff8bba18b879412ec64f0566a27ed4ae4706a081d3f504
SHA512

d7981dda9baf9a6980877ea92b09f3ee0a190f155b736c9a911ab078f3ba65b0354d9c7cf604215b546542b23f8c4533f16399a52b53d76f5ba20c9aa511be30
SSDEEP

49152:TpNhFnAPTIwPcPXI9gMSYnCyF5PqYkGnUIpo082WnMm:TpNXnCTPPc8C05AuUIpo0SnMm

Score

10^/10

Malware Config

Extracted

Family

tispy

C2

https://auth.familysafty.com/TiSPY/printIPN.jsp?screen=IntroScreen&model=Pixel+2&osversion=28&deviceid=358240051014041&version=3.2.183_20Jun24&rtype=T

Targets

- Target
  
  WiFiService.apk
- Size
  
  3.2MB
- MD5
  
  7f79d9b024f513ad68a5a3561517399b
- SHA1
  
  d390f3787b989edb2b2de3bcf9ba1f51ab78faee
- SHA256
  
  f41f13888faad9dcd9ff8bba18b879412ec64f0566a27ed4ae4706a081d3f504
- SHA512
  
  d7981dda9baf9a6980877ea92b09f3ee0a190f155b736c9a911ab078f3ba65b0354d9c7cf604215b546542b23f8c4533f16399a52b53d76f5ba20c9aa511be30
- SSDEEP
  
  49152:TpNhFnAPTIwPcPXI9gMSYnCyF5PqYkGnUIpo082WnMm:TpNXnCTPPc8C05AuUIpo0SnMm
Score

10^/10

tispy collection discovery evasion infostealer persistence spyware trojan
- TiSpy
  TiSpy is an Android stalkerware.
  trojan infostealer spyware tispy
- TiSpy payload
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1