Overview

overview

10

Static

static

6

c098908271...4d.apk

android-10-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c098908271baf8f8c7d3fde0a421cf390ff6ad6d4c991d08feaab7a99f10634d

  • Size

    9.4MB

  • Sample

    241009-j2y76axcjm

  • MD5

    c9210640a1e19915b8cdfaffff5cb658

  • SHA1

    83f2c926a0e11a185eaa824f834c53206cebbd2b

  • SHA256

    c098908271baf8f8c7d3fde0a421cf390ff6ad6d4c991d08feaab7a99f10634d

  • SHA512

    620621efa2aae48ffdcaa7224c970f245f57b4c3026c2682594198672b956617bbbf383582814ab29acc7301dc91dcdd9320cc10b2211c9a083caeb9888e558f

  • SSDEEP

    196608:97hXfNriUADezEFVtaX0MN7cn0zxWv9dj7wR/5dzKHSo3nD:97hXfNrixjn0zxWo5dmHSo3nD

Score
10/10
octoandroidbankerdiscoveryevasioninfostealerrattrojan

Malware Config

Targets

    • Target

      c098908271baf8f8c7d3fde0a421cf390ff6ad6d4c991d08feaab7a99f10634d

    • Size

      9.4MB

    • MD5

      c9210640a1e19915b8cdfaffff5cb658

    • SHA1

      83f2c926a0e11a185eaa824f834c53206cebbd2b

    • SHA256

      c098908271baf8f8c7d3fde0a421cf390ff6ad6d4c991d08feaab7a99f10634d

    • SHA512

      620621efa2aae48ffdcaa7224c970f245f57b4c3026c2682594198672b956617bbbf383582814ab29acc7301dc91dcdd9320cc10b2211c9a083caeb9888e558f

    • SSDEEP

      196608:97hXfNriUADezEFVtaX0MN7cn0zxWv9dj7wR/5dzKHSo3nD:97hXfNrixjn0zxWo5dmHSo3nD

    Score
    10/10
    octobankerdiscoveryevasioninfostealerrattrojan

    • Octo

      Octo is a banking malware with remote access capabilities first seen in April 2022.

      bankertrojaninfostealerratocto

    • Octo payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Queries the phone number (MSISDN for GSM devices)

      discovery

    • Queries the mobile country code (MCC)

      discovery
    behavioral1

MITRE ATT&CK Mobile v15

Tasks