tispy

Sharing

Copy URL

Twitter E-mail

General

Target

1aa1e5ad87b97e025d58d525c4020d4378b5617d236f0fd8db74956a2c8d5abf.apk
Size

3.4MB
Sample

240701-bdlm6a1ekg
MD5

5d1b753189ffdf956fcbe14ea2930677
SHA1

6a36d97d829e5013be1c8c0d364ca837e6e8ba27
SHA256

1aa1e5ad87b97e025d58d525c4020d4378b5617d236f0fd8db74956a2c8d5abf
SHA512

c565c2b0e7d950e7b1cf98289a96ac2adfb8157991159fd2602737efdd1b4dbf7f067753165e2bcc533fcacf277b52a8c4e1237cd495d8fd1d4d16327c43e8f5
SSDEEP

98304:l5CKqnZxJlPhJi9QILswWRbJYhuv+k1NX5hkS:nOZnlCQILcJ6xk15wS

Score

10^/10

Malware Config

Extracted

Family

tispy

https://auth.familysafty.com/TiSPY/printIPN.jsp?screen=IntroScreen&model=Pixel+2&osversion=28&deviceid=358240051014041&version=3.2.183_30Jun24&rtype=T

Targets

- Target
  
  1aa1e5ad87b97e025d58d525c4020d4378b5617d236f0fd8db74956a2c8d5abf.apk
- Size
  
  3.4MB
- MD5
  
  5d1b753189ffdf956fcbe14ea2930677
- SHA1
  
  6a36d97d829e5013be1c8c0d364ca837e6e8ba27
- SHA256
  
  1aa1e5ad87b97e025d58d525c4020d4378b5617d236f0fd8db74956a2c8d5abf
- SHA512
  
  c565c2b0e7d950e7b1cf98289a96ac2adfb8157991159fd2602737efdd1b4dbf7f067753165e2bcc533fcacf277b52a8c4e1237cd495d8fd1d4d16327c43e8f5
- SSDEEP
  
  98304:l5CKqnZxJlPhJi9QILswWRbJYhuv+k1NX5hkS:nOZnlCQILcJ6xk15wS
Score

10^/10

tispy collection discovery evasion infostealer persistence spyware trojan
- TiSpy
  TiSpy is an Android stalkerware.
  trojan infostealer spyware tispy
- TiSpy payload
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1