Extracted

• • Target

    7c44519e51cc203cdd23f27cefe7cf99de34abddf947ba55951721725f15aa57.apk

  • Size

    3.2MB

  • MD5

    2f73a6fe62a8ac27d658f15b1dc9a287

  • SHA1

    a40118f9d9a54938e6e261ee242716ac3a761e89

  • SHA256

    7c44519e51cc203cdd23f27cefe7cf99de34abddf947ba55951721725f15aa57

  • SHA512

    480a6c820664ce78b6284678019671edacc4cf98865e335f9816ce84507c2fe42b765db5103e27dab52605f95c5302f58c6691a869e24876df1f396c4d966d89

  • SSDEEP

    49152:pVPh+nACbPhX9CR3WHZn0/dwbDnog36hR4F41RemM3zfhVzsv5w:pVPcnzbPhoZW5nhnnHVyRtM3znzQw

  Score

  10^/10

  tispycollectiondiscoveryevasioninfostealerspywaretrojan

  • TiSpy

    TiSpy is an Android stalkerware.

    trojaninfostealerspywaretispy

  • TiSpy payload

  • Tispy family

    tispy

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Reads the contacts stored on the device.

    collection

  • Requests cell location

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion

  • Acquires the wake lock

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

  • Queries information about active data network

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1