General

  • Target

    oSiNT_1.3 signed.apk

  • Size

    10.8MB

  • Sample

    230518-v8z9ksdb96

  • MD5

    b8ef93a69a0340dcfe42834392999070

  • SHA1

    efa5d8c9e50f8d9d33264cca048ff81e39039f61

  • SHA256

    167e4db4e9ac6309992210fb353d666fef731d6997867be35096de8c3eb19239

  • SHA512

    8570e007f84a97c0f0f81a2fbb27958d640943deed152cddbc9f9969cb23ff0c7dad59efce69a5f7ac0f0c985dedd5f30ccb006c1e7a39a5b2371de77284b919

  • SSDEEP

    196608:37Vr4+Q5M5RSsaUWucvLWlQ1tdZt4fZs6iWE2M7yiAS90AyVbnyOZuDLw:3Jr4t5ywocjBZF6oJ7RF90pVbJu0

Score
10/10

Malware Config

Extracted

Family

spynote

C2

soon-lp.at.ply.gg:17209

Targets

    • Target

      oSiNT_1.3 signed.apk

    • Size

      10.8MB

    • MD5

      b8ef93a69a0340dcfe42834392999070

    • SHA1

      efa5d8c9e50f8d9d33264cca048ff81e39039f61

    • SHA256

      167e4db4e9ac6309992210fb353d666fef731d6997867be35096de8c3eb19239

    • SHA512

      8570e007f84a97c0f0f81a2fbb27958d640943deed152cddbc9f9969cb23ff0c7dad59efce69a5f7ac0f0c985dedd5f30ccb006c1e7a39a5b2371de77284b919

    • SSDEEP

      196608:37Vr4+Q5M5RSsaUWucvLWlQ1tdZt4fZs6iWE2M7yiAS90AyVbnyOZuDLw:3Jr4t5ywocjBZF6oJ7RF90pVbJu0

    Score
    8/10
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks