Extracted

• • Target
    96f57fb420f05fc2fc3e33f4b1355ec9646614852fd958a230afcb48bb29f673
  • Size 3.4MB
  • SHA256 96f57fb420f05fc2fc3e33f4b1355ec9646614852fd958a230afcb48bb29f673
  • MD5 677b845d55a3522fca907b600d081591
  • SHA1 b04b581ca5190e0b3304b806ee536f3150a9ad9f
  • SHA512 b5bccec91bcca954e4df14bf6300c56c9129ba53e332f268ad29a61e8ad71a6f7e78e460bd764d2ec4a0351557311517aabd0074d4ee062dd46284284a3f3c06
  • SSDEEP 98304:7F5Vunh3U7gPegpovh5jbeFCFJjCSAll9Pt1g:R6h3d2nh5fmCGS+PI
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  tispycollectiondiscoveryevasioninfostealerpersistencespywaretrojan

  • TiSpy

    TiSpy is an Android stalkerware.

    trojaninfostealerspywaretispy

  • TiSpy payload

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Queries information about the current nearby Wi-Fi networks

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Requests cell location

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1