Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2c45d42c4d9872e3764ec1f2c68bc6adb356c9db553fd0f8f5ed49ed91933ab9.bin

  • Size

    2.7MB

  • MD5

    46707f9004839da2176e7b2c49b66672

  • SHA1

    c4f144ad03c23bf6d726c4fe61f842d19cc59325

  • SHA256

    2c45d42c4d9872e3764ec1f2c68bc6adb356c9db553fd0f8f5ed49ed91933ab9

  • SHA512

    e58a50d35d62fc8e8121c2f87d1366584d7c625764293fadd6158ed999c63fb49738f1e7b903a4b1bcc2d97aec2b784e74fa109076845de6c895b8e62bc84ec9

  • SSDEEP

    49152:ZYoQrw6Kjcf1ObPyI4trAm8a8KLGBHzFOTkCMmn6U9BrVT9mDl8r601sS8IQn:6oQrwFjEI4iZaUzYH99yIc

Score
10/10

Malware Config

Extracted

Family

octo

C2

https://93.123.109.166:7117/gate/

rc4.plain

Signatures

  • Octo family
  • Octo payload 1 IoCs
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • 2c45d42c4d9872e3764ec1f2c68bc6adb356c9db553fd0f8f5ed49ed91933ab9.bin
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.nameown12

    com.nameown12.p045l


Android Permissions

2c45d42c4d9872e3764ec1f2c68bc6adb356c9db553fd0f8f5ed49ed91933ab9.bin

Permissions

android.permission.CLEAR_APP_CACHE

android.permission.USE_FINGERPRINT

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ADD_VOICEMAIL

android.permission.INSTALL_SHORTCUT

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS