Extracted

Extracted

• • Target
    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
  • Size 3.6MB
  • SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
  • MD5 0366ae0abf0ada8aed90322bfe07dfd5
  • SHA1 2f0779ce64f02944e87674745cb446c5bc620607
  • SHA512 52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
  • SSDEEP 98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  truthspybankercollectioncredential_accessdiscoveryevasionimpactinfostealerpersistencespywaretrojan

  • Truthspy

    Truthspy is an Android stalkerware.

    trojaninfostealerspywaretruthspy

  • Checks if the Android device is rooted.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Queries the unique device ID (IMEI, MEID, IMSI)

    discovery

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion
  behavioral1behavioral2