Extracted

• • Target
    aadffa9bef2392c2ed812e2c2bf16bf401cdd3adbaa7346ce5875b794c2dc63b.apk
  • Size 3.2MB
  • SHA256 aadffa9bef2392c2ed812e2c2bf16bf401cdd3adbaa7346ce5875b794c2dc63b
  • MD5 b2e54878bffb4993e4f1335899960862
  • SHA1 d921dc86d6776bb1627efd94b68ca9896380a3fa
  • SHA512 7dee24f9af43f52f8d5681dfade14263b91525e0ebfb91b7bfd5604cdaa85e9d3f48181e23a23c7db643dd8a0af74ec78a3cacfd628139380ddb27e5fab74bc8
  • SSDEEP 98304:h6W4ZnpBAyPhKB4LyCNERP+do4qE02re9:gTpLByCN4+dhqEtA
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  tispycollectiondiscoveryevasioninfostealerpersistencespywaretrojan

  • TiSpy

    TiSpy is an Android stalkerware.

    trojaninfostealerspywaretispy

  • TiSpy payload

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Queries information about the current nearby Wi-Fi networks

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Requests cell location

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1