General

  • Target

    oSiNT_1.3 signed.apk

  • Size

    10.8MB

  • MD5

    b8ef93a69a0340dcfe42834392999070

  • SHA1

    efa5d8c9e50f8d9d33264cca048ff81e39039f61

  • SHA256

    167e4db4e9ac6309992210fb353d666fef731d6997867be35096de8c3eb19239

  • SHA512

    8570e007f84a97c0f0f81a2fbb27958d640943deed152cddbc9f9969cb23ff0c7dad59efce69a5f7ac0f0c985dedd5f30ccb006c1e7a39a5b2371de77284b919

  • SSDEEP

    196608:37Vr4+Q5M5RSsaUWucvLWlQ1tdZt4fZs6iWE2M7yiAS90AyVbnyOZuDLw:3Jr4t5ywocjBZF6oJ7RF90pVbJu0

Score
10/10

Malware Config

Extracted

Family

spynote

C2

soon-lp.at.ply.gg:17209

Signatures

  • Spynote family
  • Requests dangerous framework permissions 2 IoCs

Files

  • oSiNT_1.3 signed.apk
    .apk android

    com.oSiNT.Dev

    .MainActivity


Android Permissions

oSiNT_1.3 signed.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.sec.enterprise.knox.permission.CUSTOM_SETTING

android.permission.INTERNET