Extracted

• • Target

    WiFiService.apk

  • Size

    3.5MB

  • MD5

    0520ea3fa88dad54ba0ea68ac36db627

  • SHA1

    4b23fb3b04c13dd8e95d286f40492285cda69333

  • SHA256

    b36a55239f18d568148f2de1051ef6379e8a64a3a03bcfb455375245928bbbaa

  • SHA512

    c363764b0bb7b80e56da4a84a104452c523c52a4e5568ef085cd80b19e50f82c06aecc435c74b7047789a07155bb13be99ee0269a4fd0f3b737ef29d190ebfda

  • SSDEEP

    49152:ycJhFnAaaPgU7+pa9eyYDUjUHyjw71ltiUXTiXY2ODpBX7n/mrv1SXh:ycJ7nXaPJ6HejWyjwpiUX24DpOSXh

  Score

  10^/10

  tispycollectiondiscoveryevasioninfostealerpersistencespywaretrojan

  • TiSpy

    TiSpy is an Android stalkerware.

    trojaninfostealerspywaretispy

  • TiSpy payload

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Queries information about the current nearby Wi-Fi networks

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Requests cell location

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1