General

  • Target

    oSiNT_1.3 signed.apk

  • Size

    10.9MB

  • MD5

    9dcadd0bfbede04066327f829ea2772b

  • SHA1

    518ca1a708f63788f96eb573284b4dc7741ff037

  • SHA256

    adf1f7920c77f04dbb1f88ba4e99559bcceb444e85b7a11b2d00701b8b8b5852

  • SHA512

    1419845ac332fae489a65111dedf0bd4e840be006ce34525deb75f60265d9664964e9df5cc351a37ebd4eca2b22f6ea43df792742c28420c948bc52d66259b65

  • SSDEEP

    196608:n7Vr4+Q5M5RSsaUWutv/gRPyEk4qM64rZ06qWEuMvCuAS90cO1bn6SlS3e:nJr4t5ywot2eMw6QhvVF90d1bpie

Score
10/10

Malware Config

Extracted

Family

spynote

C2

soon-lp.at.ply.gg:17209

Signatures

  • Spynote family
  • Requests dangerous framework permissions 13 IoCs

Files

  • oSiNT_1.3 signed.apk
    .apk android

    com.oSiNT.Dev

    .MainActivity


  • client.ovpn
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi
    .elf linux arm
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.mips
    .elf linux mipsel
  • nopie_openvpn.x86
    .elf linux x86
  • nopie_openvpn.x86_64
    .elf linux x64
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi
    .elf linux arm
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.mips
    .elf linux mipsel
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64

Android Permissions

oSiNT_1.3 signed.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.INTERNET

android.permission.SEND_SMS

android.permission.ACCESS_NETWORK_STATE

com.sec.enterprise.knox.permission.CUSTOM_SETTING

android.permission.INTERNET