Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3202915s
  • max time network
    150s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • submitted
    22/09/2023, 22:00

General

  • Target

    022e1e2decb27cb580a1234ffb095b9ecd3b5462939023a825bc7e604ff2fd1a.apk

  • Size

    557KB

  • MD5

    0bcbd376e9bc986dac87590bc8eb22e7

  • SHA1

    1dc43f9ffa2f86171919eca852a9a417ece7c082

  • SHA256

    022e1e2decb27cb580a1234ffb095b9ecd3b5462939023a825bc7e604ff2fd1a

  • SHA512

    5644555a496dd00aaad9e27c64a5635e0085ac5fae9cd81881edbe0f8074d3ca03ab6c5a55c434f74c55c92eec6ba0e09288deddb0b28350115999891432becf

  • SSDEEP

    12288:hAi28oYZudl+QeQHFIU7Zuj9fMcloaArWDJJf+41naY7jCKcxznf:hAi2sZudJ2UYBMQv+AaYSxR

Malware Config

Signatures

  • Octo

    Octo is a banking malware with remote access capabilities first seen in April 2022.

  • Octo payload 3 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.bedhold27
    1⤵
    • Loads dropped Dex/Jar
    PID:4949

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.bedhold27/cache/jsyuggfsoyg

    Filesize

    449KB

    MD5

    882a1e4e99ae0002eeb7e92682684cf5

    SHA1

    523c3240acde39974fce6cd6b9097237215b0ffb

    SHA256

    c711224b7419ff9c4699a16adb63173b10127631e1ebff4b33e20975d5b991df

    SHA512

    d13fcb64de9c1c18dbe070c26463bd10dc22e30d25a5b5b9c444ac144fda0f81dae8895b1acecf0e9281fcebdcaea2c7dc6206ed72a8a5fb49c8f28f0f98d598

  • /data/user/0/com.bedhold27/cache/jsyuggfsoyg

    Filesize

    449KB

    MD5

    882a1e4e99ae0002eeb7e92682684cf5

    SHA1

    523c3240acde39974fce6cd6b9097237215b0ffb

    SHA256

    c711224b7419ff9c4699a16adb63173b10127631e1ebff4b33e20975d5b991df

    SHA512

    d13fcb64de9c1c18dbe070c26463bd10dc22e30d25a5b5b9c444ac144fda0f81dae8895b1acecf0e9281fcebdcaea2c7dc6206ed72a8a5fb49c8f28f0f98d598

  • /data/user/0/com.bedhold27/cache/jsyuggfsoyg

    Filesize

    449KB

    MD5

    882a1e4e99ae0002eeb7e92682684cf5

    SHA1

    523c3240acde39974fce6cd6b9097237215b0ffb

    SHA256

    c711224b7419ff9c4699a16adb63173b10127631e1ebff4b33e20975d5b991df

    SHA512

    d13fcb64de9c1c18dbe070c26463bd10dc22e30d25a5b5b9c444ac144fda0f81dae8895b1acecf0e9281fcebdcaea2c7dc6206ed72a8a5fb49c8f28f0f98d598