Overview

overview

10

Static

static

6

5c93b6875e...67.apk

android-10-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c93b6875ee294f03b29b390102809e9daf2efac67717e3b92231d49e4fc3467

  • Size

    9.3MB

  • Sample

    241009-jxs6cawgpm

  • MD5

    7912474dba7df6d46e8abd3ad47ed8ed

  • SHA1

    6ba6184aaa44070bdfc2bf8df9708d0a4356a250

  • SHA256

    5c93b6875ee294f03b29b390102809e9daf2efac67717e3b92231d49e4fc3467

  • SHA512

    ce3ed9df56e0d5dbc6d1bcda83c997c86d91021325f6c17cab81fffc9a01f83beaa80de71bf1ca7c214a631a2429848da34d55f8e97466ef3c351b47cfde5aaf

  • SSDEEP

    98304:GTiYcdoC796L81vcj7VRsz0nVKC55iSRGQCI7pxlpXU8Abu5nQ1LAjAM:GZcq1LQEj7VR6MUmrs4dQlAT

Score
10/10
octoandroidbankerdiscoveryevasioninfostealerrattrojan

Malware Config

Targets

    • Target

      5c93b6875ee294f03b29b390102809e9daf2efac67717e3b92231d49e4fc3467

    • Size

      9.3MB

    • MD5

      7912474dba7df6d46e8abd3ad47ed8ed

    • SHA1

      6ba6184aaa44070bdfc2bf8df9708d0a4356a250

    • SHA256

      5c93b6875ee294f03b29b390102809e9daf2efac67717e3b92231d49e4fc3467

    • SHA512

      ce3ed9df56e0d5dbc6d1bcda83c997c86d91021325f6c17cab81fffc9a01f83beaa80de71bf1ca7c214a631a2429848da34d55f8e97466ef3c351b47cfde5aaf

    • SSDEEP

      98304:GTiYcdoC796L81vcj7VRsz0nVKC55iSRGQCI7pxlpXU8Abu5nQ1LAjAM:GZcq1LQEj7VR6MUmrs4dQlAT

    Score
    10/10
    octobankerdiscoveryevasioninfostealerrattrojan

    • Octo

      Octo is a banking malware with remote access capabilities first seen in April 2022.

      bankertrojaninfostealerratocto

    • Octo payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Queries the phone number (MSISDN for GSM devices)

      discovery

    • Queries the mobile country code (MCC)

      discovery
    behavioral1

MITRE ATT&CK Mobile v15

Tasks