General
- Target 4bcb6951c5f78c646c19771ff58c2ea749e734ae3fa916f130aeee8e083ca2e4.zip
- Size 3.1MB
- Sample240830-snqhja1ane
- SHA256 242c6bfbfcc88081d3d058f38595d3423d3e4c6a8e781db3bf047d4eefba1f0d
Score
10/10
Malware Config
Targets
-
- Target 4bcb6951c5f78c646c19771ff58c2ea749e734ae3fa916f130aeee8e083ca2e4.apk
- Size 3.5MB
- SHA256 4bcb6951c5f78c646c19771ff58c2ea749e734ae3fa916f130aeee8e083ca2e4
Score10/10TiSpy
TiSpy is an Android stalkerware.
Checks if the Android device is rooted.
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Queries the phone number (MSISDN for GSM devices)
Requests cell location
Uses Android APIs to to get current cell location.
Acquires the wake lock
Queries information about active data network
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
Location Tracking
1System Information Discovery
3System Network Configuration Discovery
2System Network Connections Discovery
3