Analysis
-
max time kernel
2252894s -
max time network
154s -
platform
android_x64 -
resource
android-x64-20230831-en -
submitted
11-09-2023 22:03
General
-
Target
05aaa2964513b270063a89da52cb9ec4f7e96000979731f712983d2864769739.apk
-
Size
541KB
-
MD5
e90e18e21599aaf2da460ffe2010be46
-
SHA1
61fc862f08e8ce7b502a799a3ce51d4bee959734
-
SHA256
05aaa2964513b270063a89da52cb9ec4f7e96000979731f712983d2864769739
-
SHA512
cd24f2b770c5de4b1121aac538f21a58d9c45c8fe932b2348cb8fe2947d650d800a4a1d1b556664f7ae1e6e54a72035b38ee5608b6d564c40de00aafcb7e31a1
-
SSDEEP
12288:/tKQdBw42FeE9dy1vq+X9bbSGJ7spLN8uAqb:lKQkIsHOFSGupx8uT
Malware Config
Signatures
-
Octo
Octo is a banking malware with remote access capabilities first seen in April 2022.
-
Octo payload 3 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
com.farsoundcfm1⤵
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
450KB
MD58924f5a40375a72d7a240fbe7dc2b98d
SHA17c6487afdf78d4b43c6fbdb4dcd9feee12a08c92
SHA256806a030d960ccc00429aaa7c99a5cd303eb5f6204b9c646c832ef61cfac820d8
SHA512221665c885a7b4a28c06960598940ce86e41091bec3d9a5e128a0092c94232b403113560bcb3628a22ea0094b0dba6ad415e7fd1e623de549b88961bfeb3c8e9
-
Filesize
450KB
MD58924f5a40375a72d7a240fbe7dc2b98d
SHA17c6487afdf78d4b43c6fbdb4dcd9feee12a08c92
SHA256806a030d960ccc00429aaa7c99a5cd303eb5f6204b9c646c832ef61cfac820d8
SHA512221665c885a7b4a28c06960598940ce86e41091bec3d9a5e128a0092c94232b403113560bcb3628a22ea0094b0dba6ad415e7fd1e623de549b88961bfeb3c8e9
-
Filesize
450KB
MD58924f5a40375a72d7a240fbe7dc2b98d
SHA17c6487afdf78d4b43c6fbdb4dcd9feee12a08c92
SHA256806a030d960ccc00429aaa7c99a5cd303eb5f6204b9c646c832ef61cfac820d8
SHA512221665c885a7b4a28c06960598940ce86e41091bec3d9a5e128a0092c94232b403113560bcb3628a22ea0094b0dba6ad415e7fd1e623de549b88961bfeb3c8e9