General
-
Target
96f57fb420f05fc2fc3e33f4b1355ec9646614852fd958a230afcb48bb29f673
-
Size
3.4MB
-
Sample
240707-cleegstanc
-
MD5
677b845d55a3522fca907b600d081591
-
SHA1
b04b581ca5190e0b3304b806ee536f3150a9ad9f
-
SHA256
96f57fb420f05fc2fc3e33f4b1355ec9646614852fd958a230afcb48bb29f673
-
SHA512
b5bccec91bcca954e4df14bf6300c56c9129ba53e332f268ad29a61e8ad71a6f7e78e460bd764d2ec4a0351557311517aabd0074d4ee062dd46284284a3f3c06
-
SSDEEP
98304:7F5Vunh3U7gPegpovh5jbeFCFJjCSAll9Pt1g:R6h3d2nh5fmCGS+PI
Static task
static1
Behavioral task
behavioral1
Sample
96f57fb420f05fc2fc3e33f4b1355ec9646614852fd958a230afcb48bb29f673.apk
Resource
android-x86-arm-20240624-en
Malware Config
Extracted
tispy
https://auth.familysafty.com/TiSPY/printIPN.jsp?screen=IntroScreen&model=Pixel+2&osversion=28&deviceid=358240051014041&version=3.2.183_07Jul24&rtype=T
Targets
-
-
Target
96f57fb420f05fc2fc3e33f4b1355ec9646614852fd958a230afcb48bb29f673
-
Size
3.4MB
-
MD5
677b845d55a3522fca907b600d081591
-
SHA1
b04b581ca5190e0b3304b806ee536f3150a9ad9f
-
SHA256
96f57fb420f05fc2fc3e33f4b1355ec9646614852fd958a230afcb48bb29f673
-
SHA512
b5bccec91bcca954e4df14bf6300c56c9129ba53e332f268ad29a61e8ad71a6f7e78e460bd764d2ec4a0351557311517aabd0074d4ee062dd46284284a3f3c06
-
SSDEEP
98304:7F5Vunh3U7gPegpovh5jbeFCFJjCSAll9Pt1g:R6h3d2nh5fmCGS+PI
-
TiSpy payload
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Queries the phone number (MSISDN for GSM devices)
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-