Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

65075ae993...22.apk

android-9-x86

10

65075ae993...22.apk

android-10-x64

10

Analysis

  • max time kernel
    2297172s
  • max time network
    147s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • submitted
    05/06/2023, 00:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    65075ae9938efafa6e52b50f70dbae7c5b9ad116e79fed356a1c72011910de22.apk

  • Size

    557KB

  • MD5

    e06f839e7c37e02e94467032510b0802

  • SHA1

    9e8afb2f94cd4a5cc80221b0ebf0b1ed9ab62e03

  • SHA256

    65075ae9938efafa6e52b50f70dbae7c5b9ad116e79fed356a1c72011910de22

  • SHA512

    543c9fcb98ef1cae44f8774d59de72c9ad19d2057cd84dd5068f302651cb254cf33456175dd5132975df52e90d3ffcf5df1544183d12fb16af91d2442fd1e9a8

  • SSDEEP

    12288:cCholSt/Zti+Rwgwzpp7GRWd7EfhB6rCIxrScmUMul7PpokcoYtWReyNx0BJ4:Joib3RwgwmWdwhgrmcGo7Ppok3Rx3

Score
10/10
octobankerinfostealerransomwarerattrojan

Malware Config

Extracted

Family

octo

C2

https://179.43.163.113/YTFlMzViNjNiNWM3/

https://179.43.163.122/YTFlMzViNjNiNWM3/

https://slmmistosi.com/YTFlMzViNjNiNWM3/

https://slmmistosi2.com/YTFlMzViNjNiNWM3/

https://179.43.163.117/YTFlMzViNjNiNWM3/

https://179.43.163.118/YTFlMzViNjNiNWM3/

https://yamass2432425ds.xyz/YTFlMzViNjNiNWM3/

https://yamass3432425ds.xyz/YTFlMzViNjNiNWM3/
AES_key

Signatures

  • Octo

    Octo is a banking malware with remote access capabilities first seen in April 2022.

    bankertrojaninfostealerratocto
  • Octo payload 3 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.wellmosty
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5006

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.wellmosty/.qcom.wellmosty
    Filesize

    48B

    MD5

    046a414913add6f5bb60072c7db819b6

    SHA1

    451ee4f6809260aec622d772fd329c7d0297a842

    SHA256

    b66c1320cb063a1d391c94273572ea6edae76c8c8b0a07f8d75c88686f0df72a

    SHA512

    4e6355f3051ed5e811ab030abde1f5be7f5e1cf33be99cd08477e9b6c015deb1d8bd75a09fb9c7176b8511c5ad0a67abc0902a3531e97564ccb6afc57496a47c

    Download Submit

  • /data/user/0/com.wellmosty/cache/bqlkfcilevcj
    Filesize

    448KB

    MD5

    c340e087b6382b3038fdc8f3bdbd9108

    SHA1

    591f61f9011f64e7df7b40a312503b5d73d99726

    SHA256

    2d1e51d0e1fb6799ffa9216d0ee777fa5e9b39e6e321c3191855d48dd5242706

    SHA512

    e145c7d58431330f83b8f14b2a85a62e9c4b822dd5ac42a6ecd26627321d9f59eeecd5cae4625490d24f65a7a22f9d5465570f9dcb8b7ce16e26b67fb758c78b

    Download Submit

  • /data/user/0/com.wellmosty/cache/bqlkfcilevcj
    Filesize

    448KB

    MD5

    c340e087b6382b3038fdc8f3bdbd9108

    SHA1

    591f61f9011f64e7df7b40a312503b5d73d99726

    SHA256

    2d1e51d0e1fb6799ffa9216d0ee777fa5e9b39e6e321c3191855d48dd5242706

    SHA512

    e145c7d58431330f83b8f14b2a85a62e9c4b822dd5ac42a6ecd26627321d9f59eeecd5cae4625490d24f65a7a22f9d5465570f9dcb8b7ce16e26b67fb758c78b

    Download Submit

  • /data/user/0/com.wellmosty/cache/bqlkfcilevcj
    Filesize

    448KB

    MD5

    c340e087b6382b3038fdc8f3bdbd9108

    SHA1

    591f61f9011f64e7df7b40a312503b5d73d99726

    SHA256

    2d1e51d0e1fb6799ffa9216d0ee777fa5e9b39e6e321c3191855d48dd5242706

    SHA512

    e145c7d58431330f83b8f14b2a85a62e9c4b822dd5ac42a6ecd26627321d9f59eeecd5cae4625490d24f65a7a22f9d5465570f9dcb8b7ce16e26b67fb758c78b

    Download Submit

  • /data/user/0/com.wellmosty/shared_prefs/main.xml
    Filesize

    131B

    MD5

    5f3dd0f7ebf04710708c47d08ae915f7

    SHA1

    cb3aa5ea8a24b87363a5c35d87c3df432d7d7b6b

    SHA256

    6c38390863c1250690bd798e72b9c3ccf447626290bfafbfd0f5bd5dffddabbf

    SHA512

    e53f169360037daf00e4d48ce9b0a3be9a3c1c04e1f2e06ab8fdcf88bbee2406519069a24639b3cda21f1a6ac15d06ee68b532065f92c6869591a5206b0098ee

    Download Submit

  • /data/user/0/com.wellmosty/shared_prefs/main.xml
    Filesize

    198B

    MD5

    8cc5ca4e291fc5bcc05a1137d9cccdc7

    SHA1

    cfeac1e42e2ef0aa12178922cd28a195717034b5

    SHA256

    9ce0a66fea722091da92040a7750334b9cd956d5ff402aa7a28a49e4e432c7c7

    SHA512

    a44f38d4364d185ed8d3603ba5320a8eefb2dc145eea1d58413a5ed8e6748096d9ddc7e69f6837a46342e01da5b5caab4e8acdd0939661a92104c8c6a3e08c95

    Download Submit

  • /data/user/0/com.wellmosty/shared_prefs/main.xml
    Filesize

    5KB

    MD5

    fa9a4c283d2a48b73a23bcff660cf2a7

    SHA1

    e069f852ca4242bfe8db82420e537cfeb0ba972c

    SHA256

    8beb093b9d6d2288a60de33663f5726cc144ee8d9f7a0271aaa45a94a0545dd4

    SHA512

    bf2bff069c3183d97e489cca49b3b603aa70c6834132369cec4caeeb3325f174bf74e25b81d24cd3cc73036d1ba0906da7ad2bb6982cb1ec6db0e6fca1047de7

    Download Submit