Extracted

• • Target

    98684a1da1c798016c849af4633de7e241193712d4dabf5456ad523c3510f37c.apk

  • Size

    3.1MB

  • MD5

    50bb2abb1ea33311f1d4cd4d908050cf

  • SHA1

    1556abdf773dd5f08dd1f51355d3f8225ad71093

  • SHA256

    98684a1da1c798016c849af4633de7e241193712d4dabf5456ad523c3510f37c

  • SHA512

    1cdee03a1c417af039fba38f042c5489de2c2a77758a2e8d09cd22bbd6a915f6a84cc0d9fb242a21055efb6a46c13c08bbbaa1509ca993f27c35151998419e72

  • SSDEEP

    49152:2TkbhbnAK0nPEK6ciDuJCaKUPXqmyRf+zuGuX4aIyZWQW5AYXO8:2TkbJnr0nPq/0iUPXqm2RGbaI0WL59V

  Score

  10^/10

  tispycollectiondiscoveryevasioninfostealerpersistencespywaretrojan

  • TiSpy

    TiSpy is an Android stalkerware.

    trojaninfostealerspywaretispy

  • TiSpy payload

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Queries information about the current nearby Wi-Fi networks

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Requests cell location

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1