General
-
Target
f41f13888faad9dcd9ff8bba18b879412ec64f0566a27ed4ae4706a081d3f504.apk
-
Size
3.2MB
-
Sample
240621-b5yrssvfmh
-
MD5
7f79d9b024f513ad68a5a3561517399b
-
SHA1
d390f3787b989edb2b2de3bcf9ba1f51ab78faee
-
SHA256
f41f13888faad9dcd9ff8bba18b879412ec64f0566a27ed4ae4706a081d3f504
-
SHA512
d7981dda9baf9a6980877ea92b09f3ee0a190f155b736c9a911ab078f3ba65b0354d9c7cf604215b546542b23f8c4533f16399a52b53d76f5ba20c9aa511be30
-
SSDEEP
49152:TpNhFnAPTIwPcPXI9gMSYnCyF5PqYkGnUIpo082WnMm:TpNXnCTPPc8C05AuUIpo0SnMm
Static task
static1
Behavioral task
behavioral1
Sample
f41f13888faad9dcd9ff8bba18b879412ec64f0566a27ed4ae4706a081d3f504.apk
Resource
android-x86-arm-20240611.1-en
Malware Config
Extracted
tispy
https://auth.familysafty.com/TiSPY/printIPN.jsp?screen=IntroScreen&model=Pixel+2&osversion=28&deviceid=358240051014041&version=3.2.183_20Jun24&rtype=T
Targets
-
-
Target
f41f13888faad9dcd9ff8bba18b879412ec64f0566a27ed4ae4706a081d3f504.apk
-
Size
3.2MB
-
MD5
7f79d9b024f513ad68a5a3561517399b
-
SHA1
d390f3787b989edb2b2de3bcf9ba1f51ab78faee
-
SHA256
f41f13888faad9dcd9ff8bba18b879412ec64f0566a27ed4ae4706a081d3f504
-
SHA512
d7981dda9baf9a6980877ea92b09f3ee0a190f155b736c9a911ab078f3ba65b0354d9c7cf604215b546542b23f8c4533f16399a52b53d76f5ba20c9aa511be30
-
SSDEEP
49152:TpNhFnAPTIwPcPXI9gMSYnCyF5PqYkGnUIpo082WnMm:TpNXnCTPPc8C05AuUIpo0SnMm
-
TiSpy payload
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Queries the phone number (MSISDN for GSM devices)
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-