Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
3202915s -
max time network
150s -
platform
android_x64 -
resource
android-x64-20230831-en -
submitted
22/09/2023, 22:00
Static task
static1
Behavioral task
behavioral1
Sample
022e1e2decb27cb580a1234ffb095b9ecd3b5462939023a825bc7e604ff2fd1a.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral2
Sample
022e1e2decb27cb580a1234ffb095b9ecd3b5462939023a825bc7e604ff2fd1a.apk
Resource
android-x64-20230831-en
General
-
Target
022e1e2decb27cb580a1234ffb095b9ecd3b5462939023a825bc7e604ff2fd1a.apk
-
Size
557KB
-
MD5
0bcbd376e9bc986dac87590bc8eb22e7
-
SHA1
1dc43f9ffa2f86171919eca852a9a417ece7c082
-
SHA256
022e1e2decb27cb580a1234ffb095b9ecd3b5462939023a825bc7e604ff2fd1a
-
SHA512
5644555a496dd00aaad9e27c64a5635e0085ac5fae9cd81881edbe0f8074d3ca03ab6c5a55c434f74c55c92eec6ba0e09288deddb0b28350115999891432becf
-
SSDEEP
12288:hAi28oYZudl+QeQHFIU7Zuj9fMcloaArWDJJf+41naY7jCKcxznf:hAi2sZudJ2UYBMQv+AaYSxR
Malware Config
Signatures
-
Octo
Octo is a banking malware with remote access capabilities first seen in April 2022.
-
Octo payload 3 IoCs
resource yara_rule behavioral2/files/fstream-1.dat family_octo behavioral2/memory/4949-0.dex family_octo behavioral2/memory/4949-1.dex family_octo -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.bedhold27/cache/jsyuggfsoyg 4949 com.bedhold27 /data/user/0/com.bedhold27/cache/jsyuggfsoyg 4949 com.bedhold27
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
449KB
MD5882a1e4e99ae0002eeb7e92682684cf5
SHA1523c3240acde39974fce6cd6b9097237215b0ffb
SHA256c711224b7419ff9c4699a16adb63173b10127631e1ebff4b33e20975d5b991df
SHA512d13fcb64de9c1c18dbe070c26463bd10dc22e30d25a5b5b9c444ac144fda0f81dae8895b1acecf0e9281fcebdcaea2c7dc6206ed72a8a5fb49c8f28f0f98d598
-
Filesize
449KB
MD5882a1e4e99ae0002eeb7e92682684cf5
SHA1523c3240acde39974fce6cd6b9097237215b0ffb
SHA256c711224b7419ff9c4699a16adb63173b10127631e1ebff4b33e20975d5b991df
SHA512d13fcb64de9c1c18dbe070c26463bd10dc22e30d25a5b5b9c444ac144fda0f81dae8895b1acecf0e9281fcebdcaea2c7dc6206ed72a8a5fb49c8f28f0f98d598
-
Filesize
449KB
MD5882a1e4e99ae0002eeb7e92682684cf5
SHA1523c3240acde39974fce6cd6b9097237215b0ffb
SHA256c711224b7419ff9c4699a16adb63173b10127631e1ebff4b33e20975d5b991df
SHA512d13fcb64de9c1c18dbe070c26463bd10dc22e30d25a5b5b9c444ac144fda0f81dae8895b1acecf0e9281fcebdcaea2c7dc6206ed72a8a5fb49c8f28f0f98d598