tispy

General

Target
6a386248e8856ebd0841cb70e0433189b251c4dbe9bc2dce2096d6996266abbe
Size 3.7MB
Sample240620-ckd3bsshjb
SHA256 6a386248e8856ebd0841cb70e0433189b251c4dbe9bc2dce2096d6996266abbe
MD5 085e45a58084320319df1ef0fffbdac4
SHA1 9cb8d7e4d84c8abe52a99e373fbc91834c6aa854
SHA512 c91b0627d0681346fc6ed00c5da21ad0537a1964061e70b5ea703e2e9c7ce682758b03fa212976b78561e9cc20036b6955f1175def6bdd5053ddc963c02791b3
SSDEEP 98304:9mL/mQjQ6PB/QxfassCyjslc1FTo7lNCQhXY:KOQjRJ/QVzojs+G7XVXY
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  6a386248e8856ebd0841cb70e0433189b251c4dbe9bc2dce2096d6996266abbe
- Size 3.7MB
- SHA256 6a386248e8856ebd0841cb70e0433189b251c4dbe9bc2dce2096d6996266abbe
- MD5 085e45a58084320319df1ef0fffbdac4
- SHA1 9cb8d7e4d84c8abe52a99e373fbc91834c6aa854
- SHA512 c91b0627d0681346fc6ed00c5da21ad0537a1964061e70b5ea703e2e9c7ce682758b03fa212976b78561e9cc20036b6955f1175def6bdd5053ddc963c02791b3
- SSDEEP 98304:9mL/mQjQ6PB/QxfassCyjslc1FTo7lNCQhXY:KOQjRJ/QVzojs+G7XVXY
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

tispy collection discovery evasion infostealer persistence spyware trojan
- TiSpy
  TiSpy is an Android stalkerware.
  trojan infostealer spyware tispy
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1