Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
179198s -
max time network
161s -
platform
android_x86 -
resource
android-x86-arm-20230621-en -
submitted
18/08/2023, 22:00
Static task
static1
Behavioral task
behavioral1
Sample
433a62667ede1e404312ab08dab78c353b7fe7a82f2d7820e93adc94df69c3dc.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
433a62667ede1e404312ab08dab78c353b7fe7a82f2d7820e93adc94df69c3dc.apk
Resource
android-x64-20230621-en
General
-
Target
433a62667ede1e404312ab08dab78c353b7fe7a82f2d7820e93adc94df69c3dc.apk
-
Size
1.5MB
-
MD5
0aa5a0aa49e258fd8ef712280fe8cf5f
-
SHA1
3939e9a4efa7a58b046abc84699eb350ed339d1e
-
SHA256
433a62667ede1e404312ab08dab78c353b7fe7a82f2d7820e93adc94df69c3dc
-
SHA512
9546aeab180bbc637d9da902439a4915e3af35f669eafe7f333e7aa70fc3346a7392f8505a00f044e36d88374f533d95a70149f56793835c31aa6dec09dba03e
-
SSDEEP
24576:24JmEeFQ8V21krMeKYzj7Bgwe6JEId4U182IkoGxDYbSk6E/BtGJ6EwmnGcYOoUT:TF4Qv1k45Yzja6JXd4U182TohSk6EpQT
Malware Config
Extracted
octo
https://smartcontractlicense.info/puap9udshc2ZmZjMmUzMghst/
https://smartcontractlicensenow.info/puap9udshc2ZmZjMmUzMghst/
https://smartcontractlicensetodo.info/puap9udshc2ZmZjMmUzMghst/
https://smartcontractlicensewow.info/puap9udshc2ZmZjMmUzMghst/
Signatures
-
Octo
Octo is a banking malware with remote access capabilities first seen in April 2022.
-
Octo payload 3 IoCs
resource yara_rule behavioral1/files/4108-0.dat family_octo behavioral1/memory/4108-0.dex family_octo behavioral1/memory/4108-1.dex family_octo -
Makes use of the framework's Accessibility service. 2 IoCs
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.cutthousandjs Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText com.cutthousandjs -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
description ioc Process Framework service call android.content.pm.IPackageManager.getInstalledApplications com.cutthousandjs -
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.cutthousandjs -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.cutthousandjs/cache/caqpwxiegby 4108 com.cutthousandjs /data/user/0/com.cutthousandjs/cache/caqpwxiegby 4108 com.cutthousandjs -
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.cutthousandjs -
Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.cutthousandjs -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.cutthousandjs
Processes
-
com.cutthousandjs1⤵
- Makes use of the framework's Accessibility service.
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Acquires the wake lock.
- Loads dropped Dex/Jar
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Removes a system notification.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4108
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
88KB
MD5643acddb559cdbd01146fc2a3e1f3c6f
SHA13de0f45bdcadb75680eeebb3da25bea1eed2c7b5
SHA2564bd46412f8ff5dec51f64f2edb5421a1e55196cfce9aca2c5e62d88d57fafc8c
SHA512f959480b23e37c8597187822598b92a3f6e82d43ada8fd4bd9c9d9d80a1ee9863f32a429bcbff81a200f73a5e53fce5e3cd0bedf43d992a2de92c8c56babf1d5
-
Filesize
1KB
MD5fba71e5db5cdeb814ee808b854121680
SHA1ed32c59de80a7b3c5f81a9f729f2e5a5169ae571
SHA2565baaa23cda1ccae4398e18734a89a77a6fdda31fcbc846b91583279b11c75183
SHA5126ee6f3c9e167a02505c28074b65b8b39f8b4e6d63389d3cf153e79cd945325b30adcd7ce70fbab809daec38e61dc94133261d1712fc83841d07cb86203dc3d26
-
Filesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
Filesize
48B
MD5ff8f6095e3f9e4a13134a86d6152fdb4
SHA10b15fdc54f5d43a43421690031e8de24d8106ef4
SHA2569a52c0aeca8e1d224e2c14d2ce4d0ff90b6e7b7361260e8cb4f02cfe6e3b0946
SHA5127b07b77a80f1e68cd498fdddd5ada2c23ba80d23cec7b529ae404c66306d7df56fc9184d8a2b17eab3f27730fa636747086d4a69f9eadf7b632947ec3b17ea7a
-
Filesize
104KB
MD5dc79f9ce5f3ab5270b33e61119dfc959
SHA11844bf222a5144b513dcf2fb50a18c011701c647
SHA25647e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
SHA51218b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e
-
Filesize
1KB
MD54d801c5f43f33ab6dcebf6678b57824f
SHA1b81162e198c37313159b9e642a3bcdf8d514e5c0
SHA25653e69cb8cab945995fe836b0fa218f4a47150a3fb04bf929bfb4e225597f0ff6
SHA5121a9385ebe9df28abfb616dd4559ba3f8bf4b95ca6b5dd1fa40f7f84ae754b30f9cdba38ad7180c9bc0f712c52ff6374b5bf30e3a15d170efb2a1c6f937529b9a
-
Filesize
36B
MD50568b10e7edaa65ee99f815856eff203
SHA1c135d10532d2c02d5deaa4106d03d524412741db
SHA256dce89d86c9ea20193181c2d11c494a0727bd92c509ce4ad8e8698783677d59a7
SHA51217fa3fcca15c369f8a59379915636e2b00bad55d3191cec6669dfa69effc480c1ef2d179fb3cb615eec2dd35239a932707fc05c587df46adf31254a282831fc7
-
Filesize
156KB
MD5544f7f631070df1a8b7e9dc69174b6df
SHA1bbdf31751ed4e9605cfcefd6ac1e3b7488b5f460
SHA256c1b347de6f65d0a58ff0663df7e35a912ae1715d81c7b72755fea9a8a912ba04
SHA512e57786cb25fb4ac46aeea17b34478f40e5512769f4cf6282f41ebd0d94aaa64517eed138931d526be9e6086f71b2aa547b56370e39730f7da06fdc830e44e3cb
-
Filesize
156KB
MD5544f7f631070df1a8b7e9dc69174b6df
SHA1bbdf31751ed4e9605cfcefd6ac1e3b7488b5f460
SHA256c1b347de6f65d0a58ff0663df7e35a912ae1715d81c7b72755fea9a8a912ba04
SHA512e57786cb25fb4ac46aeea17b34478f40e5512769f4cf6282f41ebd0d94aaa64517eed138931d526be9e6086f71b2aa547b56370e39730f7da06fdc830e44e3cb
-
Filesize
156KB
MD5544f7f631070df1a8b7e9dc69174b6df
SHA1bbdf31751ed4e9605cfcefd6ac1e3b7488b5f460
SHA256c1b347de6f65d0a58ff0663df7e35a912ae1715d81c7b72755fea9a8a912ba04
SHA512e57786cb25fb4ac46aeea17b34478f40e5512769f4cf6282f41ebd0d94aaa64517eed138931d526be9e6086f71b2aa547b56370e39730f7da06fdc830e44e3cb
-
Filesize
6KB
MD5ebe65266fe87f0ad78df2bafbd13f275
SHA182f58e95760268bf167f97c5e2518a4b46725dd0
SHA256bbea4930efd680013f353bd03d38e2a89a436ca63d8796152e643c220de7f21f
SHA51255678706578beb3d9445a931238dce89e35751ab40e922c35f7a8528f79aac6e5ceca843c20d69db3c06cacfa24dd145888f6e253b11e206b23d6707d31b8855
-
Filesize
6KB
MD52df20be5b6fbcae720f356e886f37c70
SHA1f13ec05b7e18760bd9c9dac7b93b1bf77f1129f6
SHA256a23928fcc2e8eea1af19ff23d84afb54e95147badf1dc243d843045917476cce
SHA512bb9083a684bc4665a84e5f40b55f5a18a0937fa9a0d4257a844425d0cd6064d8c6c4f52ec3f91f1e6ca60b28551115d7f15b31b64d519a49ef2925e5cb3de0e7
-
Filesize
103B
MD527d12c15aa90e7eec7f86104578c70cd
SHA1216e662bcf850b1385fa50a46a53f50d29816d11
SHA256a589c98343148d1d872d5d7959d05161db763a6d48ab7eef483c2a94a115c02f
SHA512b5e83747bf05ee68985db89370f3140011b05dad136730abfd39082e30bbb72c3ebc124052f07e92c5d36fcf29b52a9477aef30668e3f950b79e80c00d2e539f
-
Filesize
19KB
MD5051b678906d7872624e4b8fec0d3ff69
SHA1d642c4aa1a3aeb5e20c8411e4b4398555fd76785
SHA256a68f185746e33893c49985fc03d222e000c0dd28455aaec5a136400d5e32bc25
SHA5122b53cb3f366dc24035afeb69c27b86ad229c3ebcd3ffe48b5ada040c271e0b7baaa89138f49c0377ffa195ca7c08d8e8f22843ea1934e65f9b00c6a85bd777fa
-
Filesize
6KB
MD56f99afe966da27ac89f8b77003b519ff
SHA12d86e6fc52e5d5f4454fba8c3f1a0c088b30c2c6
SHA256ba61193d69d9d2f3225954b9ddd09267b5820d04d20404c314d88ff74899f956
SHA5129032a478047e4357085d760548f2c3d639272529f56d6d3e702a305f7de2c41d5d80f40b0fc15b31e6c120f369b98895c202dd9bf26f97f95e9edf2837c6c726
-
Filesize
5KB
MD50324987521e139b8c10d716562a06423
SHA139078076f6b28ccb1e1c7c3dde88ab10d0d426f0
SHA256c047199c6f0464b084d6fda0b8111beea86120ffbc31ffb07527d77061bbc0e5
SHA51243e67b94fb2736c03ffd4e5ae9e558a001afaf7dfeeaebc46752c82a67fd2cd12e53d3b8ee26f610ba7aebc45689604e45ff7ec7bed3d22ba085da1bddcd502a
-
Filesize
106B
MD557f1321ae6dcc18f9cd9abf2800b22df
SHA1f0d1d3c0a6a5963c2edb7c2799dfd16d5cc8a392
SHA256c367c7cd22e57c3c84b56e06b4e990ba8d124ad759963681eee1adc3c06d0ece
SHA512a16c6f821da3830f247aa19140d52efb536c08ca67530719f54fedefe295b069634edb41c11edf6249758ee2bd5333ba6bd7aabdcb1a93aa9a5c0359bc57e01b
-
Filesize
8KB
MD548d987b57fac90800a5a46777c6f219e
SHA1b65e0d775a3e2428d1e6ecbd8f7501fa0568e094
SHA25688bd5350913ab43d4349892236d45616bf6721260804c34a5a2d0ab023089e6b
SHA5126c6332096cdf3e17025d223c1bb27ae9ce7a28c6db6bc382799496430524e63db75a6e9c530f01124f5d77377e4d92701e7be3d4ebdbf375c8c971f0a37a18a3
-
Filesize
47KB
MD5c83bd1363df1bca79510d48aa9248f13
SHA1934b3a960d6464e030675548931522e48127365b
SHA256763233c72b5084c269d84d5397d3d016256369be9425d1d1e2e8399c9bc91f6c
SHA51235c7ba88319ebbc66aafdecdf78fc0f163175f72ff5ebf8751b626d785adf2708baa3d19589e5db998082d9f8a7c3a798c5e11895e9649179e2807efdbb2a7fc
-
Filesize
10KB
MD5ba6b2ffcbcb0532c70b06a171e4f1419
SHA15ff8eff981695fba96c998e0931d7c1c1b054627
SHA2561de2a66e27ce973be71c43ee59d9fd6a8d02658fbb7c2eb5f9c89f4333af108c
SHA512ee6bbc49b73ccbd71a2542a519033f91bc8d4ee63d3d1917363e34c1519d5b20bb16eb4a3a4d96fe42d5c2e8ef0da4f00506790cbdbf61d3bde7f8094cfe697c
-
Filesize
6KB
MD58a0a4732ad5bead29df839cd4e45200e
SHA19cdf1795250fd58c04a1690b488ec9f0af136e8a
SHA256768a246a04c4a13a933d77657292408a8ec111ea2b788e78c32b91c23230e6df
SHA5129efc3413968d4683935c0d2883761c8c2c5b3fa2ea328b72a8a04b7c608745c08b82760fe6689273510b82c52fbcf3db616f680e81a3c23f16f058a8d6b37d17
-
Filesize
104B
MD5ea4325e8e0b34e3876aeeca007617092
SHA1b758f3297b24fd5860c2fe8d950ceca6d27a77ea
SHA256d9ac41022ed1edce169733fabecafbe66cce1ffefc3157a1ddc1ab2652329196
SHA512d852eefb36ed594f254da857d6f7036d54074656c6cc1eca93ffe939c4143de25ccec3e2b1211661088ac3095474cb9f67a5e802dbe4be53108ecbd0baecaf56
-
Filesize
73KB
MD519d44c0d78ddb9b1f72f0f27a85fd7c2
SHA176d7ee25ea597622d2c5ad8d23bc78f59b177d19
SHA25656012306af4cc4e5e19a829b678efb90c43e1e7ec6a77d1e98e6384282ef7005
SHA512c43bf9c46e2ab0d796e445c4ca2c2b0a700a86ad44642048733d1c4d85a5340e773deee7f345530badc1ee5385cd2a3fd751e6007e0a1b197537baa3111961c1
-
Filesize
9KB
MD5dabf7912a14b43fbbbc3821a6eeab3bd
SHA154591eb686cab444a0dbb2e6306c602fbf394753
SHA2567a784f4d3ed495a0e5b459c91c2b47f0d5169ed3fa17f4625896a06c6cd833f3
SHA5126be81c2d07dc6712212bcc8314aa71c650d6e5f06fd53fe3bbf3bba35e5afb8d2830ca21e21ea876e8ff72b44362068cfbeaba59891b0dfbcaef2d3a7d9ed8f3
-
Filesize
243B
MD50ed396c86380f8c15c077acd7af3d8ee
SHA1615294f07fe542abd8ef44ca121b538693a79aa0
SHA256bbbe26eaa7b2fb83de07c87c7d6008d26ac6867ccb76031bbd2575beee9cfdbc
SHA51261a254e8980834f415efaab16f90b5eefca92b93f220862740309fdeb11ebf4e63795c21b921de63e7c15ada448043cfc8eb60f0e5501ca1a70e11951329a445
-
Filesize
5KB
MD58916f0c318ec6e12fc6b0c5e0f631ebe
SHA1604a9c24d8a14735c23be384945ca17da100156b
SHA256fc12951f9a43e73c0b7bddfe47399ed8182d7ccd749e15600dc995be00f8111c
SHA5121aa5d592b0187b33a15e83bb1217f7fa400b2db132e7cf4ffdf7cb8e37c0eb9a48d7922c9cc4c4ba0ae0ae38b1c2a1b2110bda7d3b366557dd01dd731d28f09d
-
Filesize
13KB
MD5a6e7cfcee422161392e6da68b95761a0
SHA17d6f897c0e6f2422acac7e84176ec4d22aff8f70
SHA2562c8199a699d7e8fe593407d3fac26904f8c0467b6b6e17e1167f150473414a70
SHA5127c8f3d73f28b47c67cc10cc39850d12fac42c1f776d404343d58544c3769ad7993b9dc3fb2da1046dbbd99299e06f501ddd82d06820c2b703bb339eb64a6d5a7
-
Filesize
6KB
MD58d0fd85cea87904af4e01d2479d78ff4
SHA17e7b03f914b60837d20c4f9f7c42fd818a3d6b40
SHA2568b6403163a62786ff2478663c274ae6d1da135c0504b8f98d92767275eb5c3ba
SHA51203b53b0415f31823c2dc5f58bdba5b33c6b2269c661426f958e928bb1a941810cbb9f2e62abeda582a82974c59122a290a2e3bafac2c9735512d8076656594f8
-
Filesize
7KB
MD529a0697ea6600b5427829e7b22fdbb7f
SHA11a210a141424ff45846309ee466043eae65505b4
SHA256d3f92745e15b0bc3ff738e418011c212e4354074a41ddb7e3786df3c12f8a7ad
SHA512329338c99c2ad6c768e7f3c0aae2cf522fb5f847d93344ea5313ce4da2fb7ae1f3c55ba36c068239972ce9cec4347f96318d914568eccb103059af88ac140895
-
Filesize
125B
MD514de4fa6f8406cded52109f253fee338
SHA1ba597cf108ff64dd450685d848fd735115c17148
SHA256cc131e3f17d302eb12f7fd31a0a2b3e45ed7f5048b623e8ae3f51e7c13ad2944
SHA5120383cdfca473b2492bcb871224d85333ef1914392a8dc1cf28cb320508da2c0f4ef8d3dd7f6ad86c46ca00c73805e0a16896c0b546f267106b3222fc5f518d74
-
Filesize
11KB
MD5bc5e0b7a9320fa107bedbdfaad82bfa4
SHA1a953ec8157eb748ddfe96cfb28b5cd4a4e7d93f2
SHA2567afbaba546351855d7e0134459debd8726e426769e489744d33f0a502af09409
SHA5120722792d1bd9003bb08733d0a3c2ba2dc2a24b2d140358ec6e8820c2bcd1a0e971809e2972c82d63c4f44bbab5925f701ee755544ad373ede7634bf7231b329e
-
Filesize
6KB
MD547f7edfcf52e091b4ce1a2e58cfebbce
SHA1cc93f74c001c76f25b1666d584a252e2f079bc28
SHA2565dd38f41905d0ff47c39758b4688080583b624c311ea41badc871782675de8a1
SHA512904de1dec85f4d0291f95e989ef55d1f98c4853221156591bd9e25dcf1641e072fd4285ee3be868a14e1e5e3285b46464b1e5a1a4b7ea78d1987be658d4f4434
-
Filesize
6KB
MD5f8cd2cf200a56060c1b3247424bb95c3
SHA18cbca273d44136327aceac71b183b75eb88b52d6
SHA256d75ded2db3df4bc539b0acb6552964da56cec7c8073a1d952f8ae28ba55a5819
SHA512c9119847786957d2ff7c9e64fc9b716b6102cf6cf101a0f95c6079ae661713db3bd8a94e3dec81b6704f761dcd5c0deaeeb769d8c184429eec40f2c3f2001885
-
Filesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
Filesize
72B
MD52835f32e7f5e2bace03d9a5f48b88a19
SHA197420a006390e66d546c591812dce02070450a6e
SHA256e97589b35c889ba50056b7d8025182a39335a39a8a87f6ec2c39fd46c3153fad
SHA5129401dd054fa1124f70334bbeafdac187a4b106e0481ed5697083292c7b86d5bff260aeb9ce2c6c716c22cbebb98ece26edcb96fd84c7eb3c89167715618a0c0f
-
Filesize
480B
MD569b9517344c315caaf8f9d86bb80a79d
SHA10559f5a5914abc9056793cfe8d4fcfd7dd550733
SHA256830ca4623fda1a49ecfcc8ac5ee9f83ae557ac079bdc10034ebc735396592165
SHA51202b7ebf2b40be78c6ae6843d6146d72008597d320784eeee6bbc1f89b2bd353ebdb4dd66b0203de20b8dad8910a651fa73babef61d555618e0c6a91f2ff6c620
-
Filesize
127B
MD521223e9184445fe043476484cd8cb1f9
SHA12b4813f849121d60ba35eb0889080668bb62c778
SHA256bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48
-
Filesize
135B
MD511e130446722bafcc11a7585b6839222
SHA17968cdcd4721bad2387a8c6816fb10dac446e0d8
SHA256747be38f75ecba3123298e000d52365bc9c3c888a5c14e226fdb4ae7ff1d22d0
SHA51249800a05847f318ccf2c070822b32bdccf43cd5426c942f4c41ba5088479a85942f849fcef0a39f1c68743fae4575e48434ca2ffaf4517dbcecd8775975f1894
-
Filesize
3KB
MD5a6022bd04e9cf85dbde9202d999ff59d
SHA159382e0144aec1faaa38491c3514eb0ad4bfd0de
SHA256942b3bb16877715ed61f9d9fe54fbb4fcd768789f5095bb8e849a9fef5b44906
SHA51299e5f4d1736ab7ac43284fa15c1e33fe6469a1044e0f8163f9f97ae3aa6fc2433008c93a3fa1113251c2a561af37aaa7a029b74cbec6b3c3853bc3ea371bc646