Extracted

• • Target
    d17bfc41c6e53c7ccfda5321d545652b4f368d615301a3645420fd564c163b30.apk
  • Size 3.4MB
  • SHA256 d17bfc41c6e53c7ccfda5321d545652b4f368d615301a3645420fd564c163b30
  • MD5 e6cca432b971d4954640a9dd2cf09e6f
  • SHA1 a5c22ee228ce02900cd076650033ee6fec010dee
  • SHA512 ff2e9e4bbcfa6a1eb5521c3f698062123329c091d8909ca7c0bb6fbbb2a0078a3beeee983bc6642cf3d574bc36b5664360398833b9f7801f79bb346a2bfd96f5
  • SSDEEP 98304:/UpRwn71Pk97KsQo+dNzPzrEdU84PiTRM:so71c5KsQrz7Vdiq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  tispycollectiondiscoveryevasioninfostealerpersistencespywaretrojan

  • TiSpy

    TiSpy is an Android stalkerware.

    trojaninfostealerspywaretispy

  • TiSpy payload

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Queries information about the current nearby Wi-Fi networks

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Requests cell location

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1