General

  • Target

    oSiNT_1.3 signed.apk

  • Size

    10.9MB

  • MD5

    a6eb77efa3f4f6880becd5b384a30dee

  • SHA1

    f272c0ebd7fb9f3bf05fd5f086013b315ee1f9a2

  • SHA256

    4be2a85f3ec1fa2e58d48d4dd06201ca55665e011a19332d67bed985a882d443

  • SHA512

    9685e75a1e794c9c9e6c9504e877d14faeb247c3b6a3991439bdb80ed2e8799d4fe510d1de03b89ed939e3a975d1f44eaef2c0d8780ef45e3bcddfd0fe90bb6a

  • SSDEEP

    196608:Y7Vr4+Q5M5RSsaUWuuv+WQrfvX/4zZ36XWE1MFj0AS90DT7bn9YXGCjV:YJr4t5ywouWpXQ6VmFIF90n7bavjV

Score
10/10

Malware Config

Extracted

Family

spynote

C2

soon-lp.at.ply.gg:17209

Signatures

  • Spynote family
  • Requests dangerous framework permissions 13 IoCs

Files

  • oSiNT_1.3 signed.apk
    .apk android

    com.oSiNT.Dev

    .MainActivity


  • client.ovpn
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi
    .elf linux arm
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.mips
    .elf linux mipsel
  • nopie_openvpn.x86
    .elf linux x86
  • nopie_openvpn.x86_64
    .elf linux x64
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi
    .elf linux arm
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.mips
    .elf linux mipsel
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64

Android Permissions

oSiNT_1.3 signed.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.INTERNET

android.permission.SEND_SMS

android.permission.ACCESS_NETWORK_STATE

com.sec.enterprise.knox.permission.CUSTOM_SETTING

android.permission.INTERNET