Analysis
-
max time kernel
1627957s -
max time network
167s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
14-06-2022 07:03
Static task
static1
Behavioral task
behavioral1
Sample
d518a26b3d98d4a8e1c0552e38da9bd70b43d626cfec71c831c1ad5314c69685.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
d518a26b3d98d4a8e1c0552e38da9bd70b43d626cfec71c831c1ad5314c69685.apk
Resource
android-x64-20220310-en
General
-
Target
d518a26b3d98d4a8e1c0552e38da9bd70b43d626cfec71c831c1ad5314c69685.apk
-
Size
1.4MB
-
MD5
318a13b57c37c485cbb3a7ca8067f21f
-
SHA1
136a1bf821a9af5ba6b658bacd27580b3c3988df
-
SHA256
d518a26b3d98d4a8e1c0552e38da9bd70b43d626cfec71c831c1ad5314c69685
-
SHA512
e53e37fcddbe6ec3947d0239933b36aaa7ccb1b71fbe3c02e37202191f9d5629f850d2e02a45788b2a63b5732d2abd664876a881eb4286ae141ce0b57af3a1a3
Malware Config
Extracted
octo
https://ifn1h8ag1g.com/MWNhMjI2OTkyNjA3/
https://irha3wzuu.top/MWNhMjI2OTkyNjA3/
https://uhnazu3au.top/MWNhMjI2OTkyNjA3/
https://hbaruuau3h.top/MWNhMjI2OTkyNjA3/
https://8ibaub3bav.com/MWNhMjI2OTkyNjA3/
https://ifua88ahahgh.com/MWNhMjI2OTkyNjA3/
https://utabwbazuu.com/MWNhMjI2OTkyNjA3/
Signatures
-
Octo
Octo is a banking malware with remote access capabilities first seen in April 2022.
-
Octo is a banking malware with remote access capabilities first seen in April 2022 3 IoCs
Processes:
resource yara_rule /data/user/0/com.carbuildz/cache/jysuptjbirvg family_octo /data/user/0/com.carbuildz/cache/jysuptjbirvg family_octo /data/user/0/com.carbuildz/cache/jysuptjbirvg family_octo -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.carbuildzioc pid process /data/user/0/com.carbuildz/cache/jysuptjbirvg 6090 com.carbuildz /data/user/0/com.carbuildz/cache/jysuptjbirvg 6090 com.carbuildz -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.carbuildzdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.carbuildz
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
Filesize
64KB
MD59b23e6a88d5a95f155f205cb04b93cd0
SHA1b62dccbbef087a0731f226b96d15d35d8aa5e5fc
SHA256f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857
SHA512bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482
-
Filesize
1KB
MD596dcc84102bf55dba7138069750891b9
SHA1a3edbbbbf8459f9943d5dcdc3e4e553d89491385
SHA25649065d6e67811b7be738ee1d0befbda590d460a1c3d53c77a455afd9afa5189d
SHA512115b36302bacc51466e41a61e841ce8c247e387ed9a14ac75d9621ed8928ffecea84de71de7165b82033bff856ebf84e496918bd3d2130a10019271c83434c00
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD5eff71a537696e1001bfd4a20618138aa
SHA145cf5366cebfa61d6c2b56522a62ae95e44132ab
SHA2563ecc5466cb13af324e40430b38ded4bde38ea5ab5e3830dc97ff267b39ba3714
SHA51221d5cc994917575015b9ff6d281da1c680a4a0298a4d042a149576a18e72ebf54985262c3ff0a7ba4dfd459ef1710fccff59a3f764fd6e52a89afcc25460f241
-
Filesize
112KB
MD5b663831f8cc130493476d94f2d7a5330
SHA1043a1956ab8e40821d67043f8a9110a8eb36fb93
SHA256c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
SHA512e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16
-
Filesize
1KB
MD58462b356e402833738ddbab221cae6d0
SHA127ca4a1faf6125da2201fddf1c900688060bc42a
SHA2564336fd2cb743fc00783bf9240de817a340f522897b9fb0c15995cf95601572d9
SHA512ab0f55b4ba67eeaf1888a1dcd325623ff2bb68bd987346b80a94cae16b12b25268828885592c710f02363be7fe36ca9ff678a17347f4c1571b5b6f8a310b9013
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
Filesize
36B
MD5a12a263104979057ae9dbb40d83b59e8
SHA1026730c58d7a6b472ab8884fe6d819be659eacdd
SHA2566526f61e629288462636e9f31fd16ac3244a1c261667d027d8c6ffbd90e12bad
SHA512592aa57d52029198dd8a6d10d01c89c3921bf6d3aa77261323ed7e3bf2950b2e2ee225a56877a1898a043cc52f820a06d506625ab3e9dde81c70219049e1c8b0
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
Filesize
40B
MD5e324ac48b206d0d56b7f4d41c8321b54
SHA11fa42c71c974f5d718e7137ddeb8ea585d0be143
SHA25657a88b8ff0cfdb2d8a0b3f18db1a30713aa53fb0e66b9ae945dc5ace5a91d57e
SHA5124dd81fc9e788e2536c69af81e2ff43bfbf33a85571a89902798ab34e436fb6993e0845b74c0e9e607bba73fdd1086a187e3000d1056d75d2f4bc263825a8b525
-
Filesize
156KB
MD55f360e5de48ea3f08b07a100a55a066e
SHA156047f76955d6014c1148b39e7fb5b61fcf2b7fd
SHA2569763b6cf87f2e07691ae2d699fbdf0298c33c91d522103bb03ddfd57fffbbe94
SHA5129557e1267b0db0393859e9811d9e1afd91f20a6e2ce51e3ce605091e5fbd9d824938a527b9b7b83863041a7a49976beec794efc8cfada93797f79e954c5b0e26
-
Filesize
156KB
MD55f360e5de48ea3f08b07a100a55a066e
SHA156047f76955d6014c1148b39e7fb5b61fcf2b7fd
SHA2569763b6cf87f2e07691ae2d699fbdf0298c33c91d522103bb03ddfd57fffbbe94
SHA5129557e1267b0db0393859e9811d9e1afd91f20a6e2ce51e3ce605091e5fbd9d824938a527b9b7b83863041a7a49976beec794efc8cfada93797f79e954c5b0e26
-
Filesize
156KB
MD55f360e5de48ea3f08b07a100a55a066e
SHA156047f76955d6014c1148b39e7fb5b61fcf2b7fd
SHA2569763b6cf87f2e07691ae2d699fbdf0298c33c91d522103bb03ddfd57fffbbe94
SHA5129557e1267b0db0393859e9811d9e1afd91f20a6e2ce51e3ce605091e5fbd9d824938a527b9b7b83863041a7a49976beec794efc8cfada93797f79e954c5b0e26
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
Filesize
452B
MD5ccb2f81aa164b6bb8e746afdf75e05fd
SHA14cf015a7952a8e030deb67b4650460a30b88c4ed
SHA256bacb30538a0d7ae1a1ef985533ea2e52191889af9089c69980858539ee08fd6b
SHA512091cd5b478f809d9fd7d560ff30fd864d269a838b795794122d13f32b430ae326211cb68310a32462035c3a7c2eab6b1d54c9d85023c3e737696320718dfe616
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD581ae7c35b5e8bdd548851324fe65eeb1
SHA1116f4520d702acc461abe845f855964c43ff0795
SHA2568d0e614602cb17c8868763c5b8c38bd895289754b708c4274015299da4a09ad6
SHA5125780b9247836a2113b94199bab7d575ba3a37ce17e4b625b080cf0c311a927a223faa80f9a5428466d641165c7b5c1bdbab5eb278d470a1f4aa7dfb9431a815b
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD576c6cfcd54f9a729aaf97e1435c9e636
SHA122a5147124b18021d450c762233dcb2b3aceaf3f
SHA256c3d8b37be1e8ab0869466ba9d8af9dcdd4d91b296cffe0f0bf3b1204e3f04a58
SHA5126c8895595482025695d8d5bf4a35caa080eadfc9e0f285274d43d0227328ec77906e140bdee4df7a43333591bd7cb4ef1f046f5bf43de6aac0bc0e172cc4782a
-
Filesize
96B
MD582633569a507f149742f1719226f0fbf
SHA14b2120c30098597336c5ed07e38c3700d28f1956
SHA256eee89cdf1736ef3e6edd03840e3ec8c474896bd5d94fbb6fd0028748cb8e71ac
SHA5122d96ba5471bc97877998f02d926b8d60c3280cf46c804e0edc06da71a49b115d41ecef982da90d3f71d7096674e62666738cab74e62b85ab9c84e1189f51a354
-
Filesize
127B
MD56ef709b8536878951e87c29a1518fc2b
SHA124376c70b00152501b3d98df61fa7db435339172
SHA25610b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
SHA51296547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9