Extracted

• • Target

    d17bfc41c6e53c7ccfda5321d545652b4f368d615301a3645420fd564c163b30.apk

  • Size

    3.4MB

  • MD5

    e6cca432b971d4954640a9dd2cf09e6f

  • SHA1

    a5c22ee228ce02900cd076650033ee6fec010dee

  • SHA256

    d17bfc41c6e53c7ccfda5321d545652b4f368d615301a3645420fd564c163b30

  • SHA512

    ff2e9e4bbcfa6a1eb5521c3f698062123329c091d8909ca7c0bb6fbbb2a0078a3beeee983bc6642cf3d574bc36b5664360398833b9f7801f79bb346a2bfd96f5

  • SSDEEP

    98304:/UpRwn71Pk97KsQo+dNzPzrEdU84PiTRM:so71c5KsQrz7Vdiq

  Score

  10^/10

  tispycollectiondiscoveryevasioninfostealerpersistencespywaretrojan

  • TiSpy

    TiSpy is an Android stalkerware.

    trojaninfostealerspywaretispy

  • TiSpy payload

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Queries information about the current nearby Wi-Fi networks

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Requests cell location

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1