6bc304d4d3a448d14859e5f7ae45fb8342774197c3a60d9ce6cc59b7bc8912e6

Resubmissions

20-08-2023 05:48

230820-ghmznsfb3t 10

20-08-2023 05:47

230820-ggwkesde37 10

Analysis

max time kernel
293419s
max time network
24s
platform
android_x64
resource
android-x64-arm64-20230621-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system
submitted
20-08-2023 05:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

oSiNT_1.3 signed.apk
Size

10.9MB
MD5

06a97e2c3fdca8cfa39c7bd0583f1b7d
SHA1

f77b69cae7502b71fd3feaaa365b42e13df0a46e
SHA256

6bc304d4d3a448d14859e5f7ae45fb8342774197c3a60d9ce6cc59b7bc8912e6
SHA512

1332d74d559af8c2cfbaf01ace711e568317ddd1ed6fa42ef8ad8c51092f46f86f9a9004a529387d876a4fe177d803dabf5f8dfc32b4ccc182da8b90f53144a6
SSDEEP

196608:h7Vr4+Q5M5RSsaUWuuv8YOixk6jzb/4rZ36zWEpMFj0AS90zTDbndYXyaq:hJr4t5ywouGihbY6RyF4F90HDbGzq

Score

8^/10

Malware Config

Signatures

Makes use of the framework's Accessibility service. 1 IoCs

Processes:

com.oSiNT.Dev

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.oSiNT.Dev

Acquires the wake lock. 1 IoCs

Processes:

com.oSiNT.Dev

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.oSiNT.Dev

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.oSiNT.Dev

Loads dropped Dex/Jar 6 IoCs

Runs executable file dropped to the device during analysis.

Processes:

com.oSiNT.Dev

ioc	pid	process
/storage/emulated/0/sysdata/sysinfo0	4336	com.oSiNT.Dev
/storage/emulated/0/sysdata/sysinfo0	4336	com.oSiNT.Dev
/storage/emulated/0/sysdata/sysinfo1	4336	com.oSiNT.Dev
/storage/emulated/0/sysdata/sysinfo2	4336	com.oSiNT.Dev
/storage/emulated/0/sysdata/sysinfo3	4336	com.oSiNT.Dev
/storage/emulated/0/sysdata/sysinfo3	4336	com.oSiNT.Dev

com.oSiNT.Dev
1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Loads dropped Dex/Jar
PID:4336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.oSiNT.Dev/app_webview/Default/GPUCache/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.oSiNT.Dev/app_webview/Default/GPUCache/index-dir/temp-index

Filesize
96B

MD5
38c1912766caeedbdf2d1279febc71e5

SHA1
9591301ea3d081ea595e8c7e14a2454e958aff4c

SHA256
74ef0cb8906ca1199b76d7b1856d984b23e21f8eb96497a7d9a3ea317eb3000e

SHA512
8cd16f33eaa55ebcfa6b6ab9948135ee2fa98c413f77eb5cf7803ec5e5f5d1074b6e4384dfe14e1c9ee2084183ca830517a5672625e9ac91120e8726d3c739f5

Download Submit
/data/user/0/com.oSiNT.Dev/app_webview/Default/Web Data

Filesize
120KB

MD5
a48cd9324b1f8754b07f00d863b840f3

SHA1
11c6614775b35a58f440971dfc87c8aaac6d6173

SHA256
8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

SHA512
35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

Download Submit
/data/user/0/com.oSiNT.Dev/app_webview/Default/Web Data-journal

Filesize
2KB

MD5
08a530f83792fb52edd5301837420d2c

SHA1
a95ec58a43fd0abde912b2b02ef60311aeeb7360

SHA256
68cb06af8be1bd8d43ebb25975ab7b0fd91f92e805314c6b0465f23d5c3bcb3c

SHA512
d39fc26781d998257e533490e3f55777f66e8fc1e7b74997f07dd9da447e8eb3fc7e339e80472ddf33eef2fb37cce128a627290f1b1547f881916f2304b09b12

Download Submit
/data/user/0/com.oSiNT.Dev/app_webview/variations_seed_new

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.oSiNT.Dev/app_webview/variations_stamp

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.oSiNT.Dev/app_webview/webview_data.lock

Filesize
19B

MD5
9a00c7a3912974c19dbaea376d4cb3a5

SHA1
d48c96747d0b1350d6923f84a8479e1a757f84f2

SHA256
2e90f01a4af5633391be1013675ca876fc716ef85c9281edbdbd627c65956978

SHA512
16d7edda360c0497d304c4bdc5af1c508d27422de1516623635ee9046ac5ac77766d02be8e737c5963d190c2df5c97da92dad9766e37c8f877378629368ee9c1

Download Submit
/data/user/0/com.oSiNT.Dev/cache/WebView/Crashpad/settings.dat

Filesize
40B

MD5
18a54462c8568755d6cfeea831572e00

SHA1
69021107ae578758555e945ea3ecd54e61723eb8

SHA256
485df84b1317eb23c061b177c72730ba1afb12e0f27a248e68b2cc6db6552e5c

SHA512
0eb8581c25549d4a377efa2c31ef9a12d484945299cb4d4b4b29a8716790af5ec72049124efe4d4b03b8b54aee59136c4c264a9b658695358a5b40c70e03a863

Download Submit
/data/user/0/com.oSiNT.Dev/cache/WebView/Default/HTTP Cache/Code Cache/js/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.oSiNT.Dev/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

Filesize
96B

MD5
41158fc42054240ae35dc73370610123

SHA1
013a7e8ea7982e5707b94e5384fb8cbdd8d2a7ce

SHA256
5792b96017adf9e769b054322b10f14c0a18bed89af81fd9eeb3ba17292d9958

SHA512
60d587846bc37b38d0f24717cefd51b8db8c8eea7645967f92d04af503eef12452042d7dce95145753781ce9fabac3819a18c8590f70cf7052b6862973ced41e

Download Submit
/data/user/0/com.oSiNT.Dev/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.oSiNT.Dev/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

Filesize
96B

MD5
036da82b79a4567c3dfa7cf5be1532a7

SHA1
2969ba297f7ba4226b561120023c4c1c2f7700f0

SHA256
dfc07fc15750318f48ef95159558c51f042888276680dd44460e5d5b89e65061

SHA512
5bcde023aa59828005fb2fedb27974efeeebc591ceab1de1a2c310786b558ba4395ba2e9294a3918c94a9436b36def0ccb3301a68fb564baacfa6a10293e8615

Download Submit
/data/user/0/com.oSiNT.Dev/cache/WebView/font_unique_name_table.pb

Filesize
57KB

MD5
f080fa2a56ab5479d58063e5ea871447

SHA1
4b3fd57a98916fa5784305b76ba30af26b5253d9

SHA256
0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

SHA512
8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

Download Submit
/data/user/0/com.oSiNT.Dev/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
97ccd9a2b2063143df56b6937f961ca4

SHA1
5e78a91ae5df289ce83443cb7d5589dd3504fb5d

SHA256
248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

SHA512
86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

Download Submit
/data/user/0/com.oSiNT.Dev/shared_prefs/com.oSiNT.Dev.xml

Filesize
106B

MD5
3bccab369c69a834f513a73b21aa8845

SHA1
fd2ab017d555aaf340a8060c53c1093ae2e77559

SHA256
c5539ff1467af24705dac4decf415468f0150e39409a37187f1c9f72486c30f4

SHA512
2e644ffb2f2347fce7587d5ecfd17a1216614d8307fc2582e5cfa8b3af76d5df85ed9cf3bd68b6a7ddf245f2a55b8f8f09714cd6987945633ff90d8840beb666

Download Submit
/data/user/0/com.oSiNT.Dev/shared_prefs/com.oSiNT.Dev.xml

Filesize
142B

MD5
b9092b5047290c2c2f6ad79f7ef8fd91

SHA1
dcaba4aed6a3eb331324c9482228d8fcb9c617a5

SHA256
fbcce1e80424d4a06356acd4cb1b5a342a69e4a9eabfde16081acca36da8da1e

SHA512
03f74573bf4c26e0bdfd748dffbe7f0f1cd801e69b82b95c62e597fd302dcabb21c655e64f60bd7f1b6db856bf8ce1cbe7e98fe398938f36229a754aaa678149

Download Submit
/data/user/0/com.oSiNT.Dev/shared_prefs/com.oSiNT.Dev.xml

Filesize
218B

MD5
27509129db255f82f45fe8fdaab6e386

SHA1
73135f79e742a0e233bd37cf9587924d62d5e6da

SHA256
f1c835889d454a5ac315aa92fd30cffeb6b4a7b402569a8273b7bd1cf2a8e7fa

SHA512
1b3d135f29f92da52c236d801dd445349399706609e5ebc846d36d19a2a465355fb0d7f2859de0e8746d7d12f8e5e5c62daf5b24a2e88716177ef6a3b3485050

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-08-20.txt

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/sysdata/sysinfo0

Filesize
7KB

MD5
effbc10b41f027e5c2130835d524c99d

SHA1
affb65361d7a36d00e402ad869696578b5ac3259

SHA256
566fb91b6bf186c05c4ec051aa2e2802961cbb158df24a8fecaa0678febece84

SHA512
b2ddd0142a80663097e9b71d8d654d88382ef8f765c92f0c8fbf600f1174cb1b1e9e61088f954e609e6d2402fd4750b88945af7c1080018b991f2e6e6d9ad52a

Download Submit
/storage/emulated/0/sysdata/sysinfo0

Filesize
7KB

MD5
effbc10b41f027e5c2130835d524c99d

SHA1
affb65361d7a36d00e402ad869696578b5ac3259

SHA256
566fb91b6bf186c05c4ec051aa2e2802961cbb158df24a8fecaa0678febece84

SHA512
b2ddd0142a80663097e9b71d8d654d88382ef8f765c92f0c8fbf600f1174cb1b1e9e61088f954e609e6d2402fd4750b88945af7c1080018b991f2e6e6d9ad52a

Download Submit
/storage/emulated/0/sysdata/sysinfo0

Filesize
7KB

MD5
effbc10b41f027e5c2130835d524c99d

SHA1
affb65361d7a36d00e402ad869696578b5ac3259

SHA256
566fb91b6bf186c05c4ec051aa2e2802961cbb158df24a8fecaa0678febece84

SHA512
b2ddd0142a80663097e9b71d8d654d88382ef8f765c92f0c8fbf600f1174cb1b1e9e61088f954e609e6d2402fd4750b88945af7c1080018b991f2e6e6d9ad52a

Download Submit
/storage/emulated/0/sysdata/sysinfo1

Filesize
4KB

MD5
3748dfbaeae0d43d38471f14e4321dcd

SHA1
a5a6dcb2e325479cb25a44cb66216e09a843666c

SHA256
4830f1d48d41c7725686901a2d4f93a8ea722f6160dfecc6815ac85598e361db

SHA512
bde4b86489abafb3a5aff955ce232367044b6fdf106ea02847c3dbd78e49a02dd7c63bf82c26a3b630962aad16a877ece85af74608909a37a89b0591e012625c

Download Submit
/storage/emulated/0/sysdata/sysinfo1

Filesize
3KB

MD5
514d884ca8bb12d1b8f440f3e64c3f9f

SHA1
6242b72c85ce2a287e95fb2522afe1f559b277aa

SHA256
5a9b87d66daf4ad4791d980d9c3270c7806bc18c89e323472a500fb8ebfefc5e

SHA512
c18018ecb5742753f72dbe369c6f21b391b514a3d0dda2ef404cd53be299c42f3c774c7bec085d7c5713d42cf0fdb2f9e629d6cf5d635d3ca9271147e8420ac2

Download Submit
/storage/emulated/0/sysdata/sysinfo2

Filesize
5KB

MD5
a6fcd52b6b66cecf6862b4f36341bc04

SHA1
8b21ceb4d264f40cf7da42ce630c991a0eea4090

SHA256
47bb8e56ea3c98e4a3a8b1e557e8b8d7683683e6657df223907b7c1ef085018f

SHA512
90ed714810ad62ef12e861506814f595db1c407aa5d2ee659e0bf5fb67cc1d8bcfc5bd776c82ea7fc0e6cdb21e25e4fc0399e90bfdf666a2296769bdfb0efce9

Download Submit
/storage/emulated/0/sysdata/sysinfo2

Filesize
4KB

MD5
6b2bac966edac0048bac4336dd7ffdab

SHA1
4fa290b1ae3d09a70f29e05ac33701a937307a29

SHA256
9a0285c31c82617f5d5823210791ab57fa29c92ca8107b0fa0e7a7a35be96af8

SHA512
758a90200d4f08c263d52c931a2cdc9ce066d87c89f786e04b56cc90bdfce7918001db0349e7a037c5e79a7eeb9d3f6e43c661d37c0cdda43f7bf2853d63f4e2

Download Submit
/storage/emulated/0/sysdata/sysinfo3

Filesize
28KB

MD5
9506c5cbfc8e3e59fe9b9d52bea1ddd9

SHA1
b7ff5d775666cd07120ea14569dc00527cc53d1f

SHA256
725cce101997a2608c3a1b51de805caa6cfd7f9c8c84420d4b68135227b49edc

SHA512
44445051d25ab0188ec7233c97680a279c2d717a436966d8cd90153747a7dfafb7d39c5bda72acfafdef9f674e2de500723134c08cde76d885cbeab69bca89e0

Download Submit
/storage/emulated/0/sysdata/sysinfo3

Filesize
28KB

MD5
9506c5cbfc8e3e59fe9b9d52bea1ddd9

SHA1
b7ff5d775666cd07120ea14569dc00527cc53d1f

SHA256
725cce101997a2608c3a1b51de805caa6cfd7f9c8c84420d4b68135227b49edc

SHA512
44445051d25ab0188ec7233c97680a279c2d717a436966d8cd90153747a7dfafb7d39c5bda72acfafdef9f674e2de500723134c08cde76d885cbeab69bca89e0

Download Submit
/storage/emulated/0/sysdata/sysinfo3

Filesize
28KB

MD5
9506c5cbfc8e3e59fe9b9d52bea1ddd9

SHA1
b7ff5d775666cd07120ea14569dc00527cc53d1f

SHA256
725cce101997a2608c3a1b51de805caa6cfd7f9c8c84420d4b68135227b49edc

SHA512
44445051d25ab0188ec7233c97680a279c2d717a436966d8cd90153747a7dfafb7d39c5bda72acfafdef9f674e2de500723134c08cde76d885cbeab69bca89e0

Download Submit