Extracted

• • Target

    cd80c5277cb969a98f3111b276dbf3f8d9133e5ca2d486b65e412b08237aad37.apk

  • Size

    3.2MB

  • MD5

    5f699c322872a5f92ffc484068eb789d

  • SHA1

    2cb52c1189f8a45cb8f093bde5c69b417b7fa150

  • SHA256

    cd80c5277cb969a98f3111b276dbf3f8d9133e5ca2d486b65e412b08237aad37

  • SHA512

    3e7a2ede97ea45f2d6254b5f1035b657f18478e2ce5528dcb15a422ef26d8928a1362958cf5e2477ad49fe5fe43fd2eee1edb5c850b889766c03483836c20587

  • SSDEEP

    98304:ochfn9bP5pafr13YTZlMJmZ4flpO78M2rsOB9:o09bBp61ITTMK4dpOIM2YOn

  Score

  10^/10

  tispycollectiondiscoveryevasioninfostealerpersistencespywaretrojan

  • TiSpy

    TiSpy is an Android stalkerware.

    trojaninfostealerspywaretispy

  • TiSpy payload

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Queries information about the current nearby Wi-Fi networks

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Requests cell location

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1