General

  • Target

    WiFiService.apk

  • Size

    3.4MB

  • Sample

    240707-clpv8a1cll

  • MD5

    677b845d55a3522fca907b600d081591

  • SHA1

    b04b581ca5190e0b3304b806ee536f3150a9ad9f

  • SHA256

    96f57fb420f05fc2fc3e33f4b1355ec9646614852fd958a230afcb48bb29f673

  • SHA512

    b5bccec91bcca954e4df14bf6300c56c9129ba53e332f268ad29a61e8ad71a6f7e78e460bd764d2ec4a0351557311517aabd0074d4ee062dd46284284a3f3c06

  • SSDEEP

    98304:7F5Vunh3U7gPegpovh5jbeFCFJjCSAll9Pt1g:R6h3d2nh5fmCGS+PI

Malware Config

Extracted

Family

tispy

C2

https://auth.familysafty.com/TiSPY/printIPN.jsp?screen=IntroScreen&model=Pixel+2&osversion=28&deviceid=358240051014041&version=3.2.183_07Jul24&rtype=T

Targets

    • Target

      WiFiService.apk

    • Size

      3.4MB

    • MD5

      677b845d55a3522fca907b600d081591

    • SHA1

      b04b581ca5190e0b3304b806ee536f3150a9ad9f

    • SHA256

      96f57fb420f05fc2fc3e33f4b1355ec9646614852fd958a230afcb48bb29f673

    • SHA512

      b5bccec91bcca954e4df14bf6300c56c9129ba53e332f268ad29a61e8ad71a6f7e78e460bd764d2ec4a0351557311517aabd0074d4ee062dd46284284a3f3c06

    • SSDEEP

      98304:7F5Vunh3U7gPegpovh5jbeFCFJjCSAll9Pt1g:R6h3d2nh5fmCGS+PI

    • TiSpy

      TiSpy is an Android stalkerware.

    • TiSpy payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries the phone number (MSISDN for GSM devices)

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Acquires the wake lock

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks