Overview
overview
10Static
static
76dda51e294...cc.apk
android-9-x86
106dda51e294...cc.apk
android-10-x64
10demo.html
windows7-x64
1demo.html
windows10-2004-x64
1floating-s...ed.xml
windows7-x64
1floating-s...ed.xml
windows10-2004-x64
3floating-s...te.xml
windows7-x64
1floating-s...te.xml
windows10-2004-x64
3free-text-...ed.xml
windows7-x64
1free-text-...ed.xml
windows10-2004-x64
3free-text-comment.xml
windows7-x64
1free-text-comment.xml
windows10-2004-x64
3fyb_iframe...l.html
windows7-x64
1fyb_iframe...l.html
windows10-2004-x64
1fyb_static...l.html
windows7-x64
1fyb_static...l.html
windows10-2004-x64
1maction.js
windows7-x64
1maction.js
windows10-2004-x64
1menclose.js
windows7-x64
1menclose.js
windows10-2004-x64
1mglyph.js
windows7-x64
1mglyph.js
windows10-2004-x64
1mmultiscripts.js
windows7-x64
1mmultiscripts.js
windows10-2004-x64
1ms.js
windows7-x64
1ms.js
windows10-2004-x64
1mtable.js
windows7-x64
1mtable.js
windows10-2004-x64
1multiline.js
windows7-x64
1multiline.js
windows10-2004-x64
1no_sleep.js
windows7-x64
1no_sleep.js
windows10-2004-x64
1General
-
Target
6dda51e294cc343b50106676ad5708face3cfc7f16d99f69a34e4b3b85c632cc.bin
-
Size
1.5MB
-
Sample
230818-1wpvzaed64
-
MD5
b19d2a01cdf45550d6ebcdf3b3be55d3
-
SHA1
10a3b5f0f6d4e5d36d77ba239ea62f5e9d5b4315
-
SHA256
6dda51e294cc343b50106676ad5708face3cfc7f16d99f69a34e4b3b85c632cc
-
SHA512
bd3a617f8fbd132d0b596bc56589696d36646fb5c2395ef24bd93f2cf5108d2a3fea007c8afa2267f6cd5e0fb05b9cf7e831aa6c2e5e9cf857fc6dbfc74956ea
-
SSDEEP
24576:aYum58rdGWVQQn0pEMUgTlIEfM3ArYNOb5Z9ZHqGgzmzKjU+La5CCaEAh74zZ:wm5aGWuQn0pugTS6MwcWZHqfU0a5CCa2
Static task
static1
Behavioral task
behavioral1
Sample
6dda51e294cc343b50106676ad5708face3cfc7f16d99f69a34e4b3b85c632cc.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
6dda51e294cc343b50106676ad5708face3cfc7f16d99f69a34e4b3b85c632cc.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral3
Sample
demo.html
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
demo.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
floating-sticky-note-selected.xml
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
floating-sticky-note-selected.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
floating-sticky-note.xml
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
floating-sticky-note.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
free-text-comment-selected.xml
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
free-text-comment-selected.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
free-text-comment.xml
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
free-text-comment.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
fyb_iframe_endcard_tmpl.html
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
fyb_iframe_endcard_tmpl.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
fyb_static_endcard_tmpl.html
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
fyb_static_endcard_tmpl.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
maction.js
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
maction.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
menclose.js
Resource
win7-20230712-en
Behavioral task
behavioral20
Sample
menclose.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
mglyph.js
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
mglyph.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
mmultiscripts.js
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
mmultiscripts.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
ms.js
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
ms.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
mtable.js
Resource
win7-20230712-en
Behavioral task
behavioral28
Sample
mtable.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
multiline.js
Resource
win7-20230712-en
Behavioral task
behavioral30
Sample
multiline.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
no_sleep.js
Resource
win7-20230712-en
Behavioral task
behavioral32
Sample
no_sleep.js
Resource
win10v2004-20230703-en
Malware Config
Extracted
octo
https://ipworldscanbest.xyz/NmE0N2YwOWEzMTM3/
https://ipworldbestscan.xyz/NmE0N2YwOWEzMTM3/
https://worldbestscanip.xyz/NmE0N2YwOWEzMTM3/
https://worldbestipscan.xyz/NmE0N2YwOWEzMTM3/
https://worldscanbestip.xyz/NmE0N2YwOWEzMTM3/
https://worldscanipbest.xyz/NmE0N2YwOWEzMTM3/
https://bestworldscanip.xyz/NmE0N2YwOWEzMTM3/
https://bestipworldscan.xyz/NmE0N2YwOWEzMTM3/
https://scanbestworldip.xyz/NmE0N2YwOWEzMTM3/
https://newfastcheckdns.xyz/NmE0N2YwOWEzMTM3/
https://newfastdnscheck.xyz/NmE0N2YwOWEzMTM3/
https://dnscheckdouble.xyz/NmE0N2YwOWEzMTM3/
https://checkdoubledns.xyz/NmE0N2YwOWEzMTM3/
https://doublecheckdns.xyz/NmE0N2YwOWEzMTM3/
https://alldnsfastcheck.xyz/NmE0N2YwOWEzMTM3/
https://dnsfastcheckall.xyz/NmE0N2YwOWEzMTM3/
Targets
-
-
Target
6dda51e294cc343b50106676ad5708face3cfc7f16d99f69a34e4b3b85c632cc.bin
-
Size
1.5MB
-
MD5
b19d2a01cdf45550d6ebcdf3b3be55d3
-
SHA1
10a3b5f0f6d4e5d36d77ba239ea62f5e9d5b4315
-
SHA256
6dda51e294cc343b50106676ad5708face3cfc7f16d99f69a34e4b3b85c632cc
-
SHA512
bd3a617f8fbd132d0b596bc56589696d36646fb5c2395ef24bd93f2cf5108d2a3fea007c8afa2267f6cd5e0fb05b9cf7e831aa6c2e5e9cf857fc6dbfc74956ea
-
SSDEEP
24576:aYum58rdGWVQQn0pEMUgTlIEfM3ArYNOb5Z9ZHqGgzmzKjU+La5CCaEAh74zZ:wm5aGWuQn0pugTS6MwcWZHqfU0a5CCa2
Score10/10-
Octo
Octo is a banking malware with remote access capabilities first seen in April 2022.
-
Octo payload
-
Makes use of the framework's Accessibility service.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
-
Removes a system notification.
-
Uses Crypto APIs (Might try to encrypt user data).
-
-
-
Target
demo.html
-
Size
1KB
-
MD5
03b178d1ff60f7b47438321299c1e1ea
-
SHA1
b4097afe68a2b28456cafad4b70f28bb87020527
-
SHA256
56a53efdc143e241faafa8eb1fafbf8aa82ea1c630465a5d66a9c406a134c99b
-
SHA512
ccd7c1c2c99de385b4c53056d2e014ae03164cc3927084750716a100316bb94a42ce4c127faf0bf8caf884ef470df23216c004b5f75deff1a4b62721d233ff7f
Score1/10 -
-
-
Target
floating-sticky-note-selected.svg
-
Size
1KB
-
MD5
3f6c78d5dce988f49847fe4f1f162eef
-
SHA1
624ab38349deea117f7b276cbfb847dc1bccf6ed
-
SHA256
58b6a52d0728eb1a9f11daea8bf164315e2487a6444b858589dc5a80970633d7
-
SHA512
8f7ac58714d341bc9b6a1883a023a11c996746e4d8527d75f27af458acb5efcb2cdae5176b5b3f07619ce97fec3a35a36d388071a59a936c1b71a7602b830a8d
Score3/10 -
-
-
Target
floating-sticky-note.svg
-
Size
1KB
-
MD5
4b4c8b45d543081d9dac87687593df4d
-
SHA1
214e10c12646fcd653f535bc0c008e671644c53f
-
SHA256
af8e5c64749d23d0c1df98a26db849d1efd6ddb1a04577dda1fff3d38ea9e605
-
SHA512
9e752aa1ac77e48a5a361110f9a78d0286138d5a2b904e3b0256a89382fa319d685b03605640aea13025c3fae05bad1afc919caa4a2888fd1402aa01761a5453
Score3/10 -
-
-
Target
free-text-comment-selected.svg
-
Size
1KB
-
MD5
40e27306cdc5e13177016979bc015748
-
SHA1
3ebf69ec8fe4c0a6ba3d81c4a04f783697830453
-
SHA256
a2bae68e9a38a6c1d7f7c393271d907d8d66d7aab836aa34ec0285f6f8160c15
-
SHA512
c1c6d1a0cc4f2318c5e0755e8f80835296db7a347cb4073a0a28df40f8cf83d910e484dbf1aab7f100c117bc40c4585c5aa37043f5f33a30d8e3796acfae7cb6
Score3/10 -
-
-
Target
free-text-comment.svg
-
Size
1KB
-
MD5
adae8c0ca024061d8c112cb9a359dd2d
-
SHA1
912dd0e92e7118fd9fda2e3d077142602f8b4346
-
SHA256
4aadfec59dada00e4509f1c183dd3ac87097729afcabdaced1a9c2dbd8f7e25e
-
SHA512
99605b08d90b93dc4628d9c85896bbe840ce7e32af1a0263ea31a51c35546e604c408b539d21429e81759317d138961ec30bacf2fd8bb6faaeffd696abaf554e
Score3/10 -
-
-
Target
fyb_iframe_endcard_tmpl.html
-
Size
521B
-
MD5
331ab67d131439c4c50e02a3d7445008
-
SHA1
675ac8d91e0a2fe211d49a8e42f20f018c4bd50c
-
SHA256
efdac80cdb4576d2e0d93512348e9dbdb06e69e23a1db81838dc5e40a16715d9
-
SHA512
eba60283d7d5562d3e27a9d5f9f382de621474796e68c4c7b8bf06fd20b081f5aa657ab58d988f40e76883eb8459e3b44f8f31f10424f6d181bffc3c28041e04
Score1/10 -
-
-
Target
fyb_static_endcard_tmpl.html
-
Size
3KB
-
MD5
d18fb1787ce0e84567496b8564e452aa
-
SHA1
007033d0824685600611af6992060577e127dd23
-
SHA256
2ae5e0576febb1a1cd63b10bf71644f99fcfd0fe7fb1f2d19525594165294e51
-
SHA512
ba5225a80941e3ee4ff18401b910968a6cab47634914ecb68213599b96fd4b39c8722e82bf2883faf355d9416a6f2acaa36151a5d8969079cfcd4c6795f6003b
Score1/10 -
-
-
Target
maction.js
-
Size
5KB
-
MD5
822831d9f1246ce179cd4f7c97faf45d
-
SHA1
8aea91382d6beb9e6a7ca0ccf9b57dd8e3b91a04
-
SHA256
49af583d364e9fb4a2b145edabc508d2faeb6b344182b709ef68a777d873a19b
-
SHA512
54b3e6496148c1dff3073bb32c650866ef1521af723c23bd05f43f1eb92a827ba8b2ba83a12c04507d39bd6899c091a705e94dd53061215a4bb9758f845c293b
-
SSDEEP
96:q4M7HFEmr+58tVPGncOVSRyexMG+fUI2JyXnJyfxO7LKcyDo:qb7Ht28tVPGncoJmMG+8VJyXJyfxOfKQ
Score1/10 -
-
-
Target
menclose.js
-
Size
9KB
-
MD5
07275ee1eea9545c6c1f7a14f9844e69
-
SHA1
032b7cee43d168bbc04abf627f07d5b5727587cd
-
SHA256
f82ecde8dc433118abe95fdfc03fd2cbfb702f1ec1a17bf9330949d26758d34a
-
SHA512
66153e952e9ade6f2bc84760d429626d2102b21189a3a8b6d6d245e0e5637559c603caf84ba7484083f463155060330e9c1aa96fb5a5eb0aae25cee90d3ab4ed
-
SSDEEP
192:Db7HteHSadK9Z+wIPxu1gXb1WyJcW1nbca1lJ80bTKZjF1k0yIlQ1X3Hym1o4Gm0:DbmU2bPztJZbmZM0JgSTGjEado/QmkQ3
Score1/10 -
-
-
Target
mglyph.js
-
Size
2KB
-
MD5
01e24ff5d9956428bee73ab5bb85af8e
-
SHA1
6cec9edb82a7af92ec5f9fb36840748d91a47dfc
-
SHA256
519e4f62c9fb65b66ea6d9e7ea88f5b3d2a7a9aa34d5005a7d06326dc885749d
-
SHA512
4354bdc30764c33160d14819fba7f4c64de4607f41cbb79bd732019410a0bf599069dc00ae86a71fe90837a269200e6ce899a19ddfaf7138f33bb9cb2bd8b3de
Score1/10 -
-
-
Target
mmultiscripts.js
-
Size
4KB
-
MD5
74b4f6dbb621a2c5d08bbc009bb3d864
-
SHA1
352212a8521d96d995ad3e63074d2d22957b6784
-
SHA256
40beaf853a681d2186222905ade4dc6d7d24b06616113e84ecb4cb9d61f6a9bf
-
SHA512
88779f75dda0b0182039a9e612f4cea71c71b1ea25cbe7306ba56151fac490cb01d3a75dd52303fdae11cafb4ab91ab36deda3a27cae76c10ccf797c1e378fa2
-
SSDEEP
96:p4M7HFEmzxik3e5mHhQ3tebgJE0Zf6TrKwn2WoOliSerg:pb7HtFik3e5mykn0krhT+g
Score1/10 -
-
-
Target
ms.js
-
Size
1KB
-
MD5
52e82bf9e4d6dbd729dec45dd96cb39c
-
SHA1
70509bf2de56e0596b25557e15149a6ece93ff98
-
SHA256
2beb4d2ef0f22ad2b1cab7afd718fac18a35e5dfbb1d5e8f629de6538d9c9dbf
-
SHA512
785f88958fcd549dd6e622ad54100ad6144e9daf6d8bdc6d6ac31a915df9d9409158bf75cc31dd19bece60496d6b00d9525185c346fe671c403ac1ac66bc6b21
Score1/10 -
-
-
Target
mtable.js
-
Size
11KB
-
MD5
2c0dc55e00a55e0c49245f323d61ebb5
-
SHA1
90bf1f6fad8ce7bdac76e0d8eb1109d01457ef16
-
SHA256
369ee9f8a7fd480acac9f386fedb3d10476d5178c64f0c95146f23d7eccd672b
-
SHA512
e88b689a4d80003c254328ed7cd516185559860cedabf7d62d012bcc976733b21d40c865926b395019642f77a5de60dffae6e6bdbd94108670b24f2b5c058752
-
SSDEEP
192:ob7HtVl78EWhxYTtUCezus+bvu5F9P0NB+B0/daBb2JwQ7NArcfXsegOg+40389/:obaQDE9+bX/daBb2JwQ7NoeXxgOgfue/
Score1/10 -
-
-
Target
multiline.js
-
Size
13KB
-
MD5
e0e501a4b55da2df438575befa87afcc
-
SHA1
d5c480bb48432af346d5e77fd79503b66116b922
-
SHA256
d565e22112d500db6af8be35ca0a1a4411f493261dbf0bc7c0ef7aa06d22e7e8
-
SHA512
da894e3857c57739d630cc2a0c2aadcce996a53d32aedef58ef71fcc34e961f908a070a5bfa6469535d3696ed53d79f623102dc79749a52b1b79bcbbf7375b83
-
SSDEEP
384:AbtYnWCKG1Lt/XZXsUkNbck7kXynPlTq3HNJy05gEHigjCX:AZ9CKEOdeXyt8cX
Score1/10 -
-
-
Target
no_sleep.js
-
Size
13KB
-
MD5
7748a45cd593f33280669b29c2c8919a
-
SHA1
e17ecf67de61920504d79194dbee5cd552a01cfd
-
SHA256
dce4eef0b197b640ad6aaab2228ee1ee7dccf8bd6d6b5de5484dd1bd16430a78
-
SHA512
49b3225a5994b724b16b1890e41697c71096402f48c338fe193cb538ac8f88b7d013c0b70e81786d476be3eaf3170049df1ced6cd8957098fffecf11c13b5586
-
SSDEEP
192:nRG+Fgkw+wi+FrZJqbzr+5rA7wbUCzebIkuHeIabmEWUSiaNRGApaFnoNhCaTLIf:n/gzi+FrZJqbzrarAyUX5uHej27W
Score1/10 -