Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

47bfb50cea...7e.apk

android-9-x86

10

47bfb50cea...7e.apk

android-10-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47bfb50ceab09ebb9e049067f5ba0b84c6b5fd57e1273ad3d282c59cde4f137e.bin

  • Size

    292KB

  • MD5

    3e258846c65e02983a040f966f0fe02d

  • SHA1

    b131dd90ce1fc8789afd3ce0be9881147d260fd3

  • SHA256

    47bfb50ceab09ebb9e049067f5ba0b84c6b5fd57e1273ad3d282c59cde4f137e

  • SHA512

    94768ac4cf27cf83a28132d254bfe83a827dcfd3233bf9d68aeffbf81464350fd1ec3cf12ace0c518f518c5fc1ded3bf1f2796fa6b1350ce87a6b3ed6859848b

  • SSDEEP

    6144:rRR+6Rg0MasNUFrB/7QbBKrTyU+kiyXZrm7Y4cd5nlSfkwl/EuGS:Bg0tsNWB/MVKvybermcdfnobnD

Score
10/10
octo

Malware Config

Extracted

Family

octo

C2

https://skylinejr.top/YTZhZjliODdlYTI4/

https://forestnx.top/YTZhZjliODdlYTI4/

https://moonlightvg.top/YTZhZjliODdlYTI4/

https://seabreezehf.top/YTZhZjliODdlYTI4/

https://riverflowbd.top/YTZhZjliODdlYTI4/

https://starbursttc.top/YTZhZjliODdlYTI4/

https://wildspiritzm.top/YTZhZjliODdlYTI4/

https://dreamcatcherly.top/YTZhZjliODdlYTI4/

https://goldenpathrw.top/YTZhZjliODdlYTI4/

https://sunbeamfc.top/YTZhZjliODdlYTI4/

https://stormchaserqt.top/YTZhZjliODdlYTI4/

https://cloudburstkp.top/YTZhZjliODdlYTI4/

https://nightshadewm.top/YTZhZjliODdlYTI4/

https://earthboundxl.top/YTZhZjliODdlYTI4/

https://fireblazeqh.top/YTZhZjliODdlYTI4/

https://oceanviewjk.top/YTZhZjliODdlYTI4/

https://silverstreamph.top/YTZhZjliODdlYTI4/

https://mountainpeakyd.top/YTZhZjliODdlYTI4/

https://blueskytm.top/YTZhZjliODdlYTI4/

https://greenfieldzc.top/YTZhZjliODdlYTI4/
rc4.plain

Signatures

  • Octo family
    octo
  • Octo payload 1 IoCs
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • 47bfb50ceab09ebb9e049067f5ba0b84c6b5fd57e1273ad3d282c59cde4f137e.bin
    .apk android arch:arm64 arch:x86 arch:x64 arch:arm

    com.sgakagak.agakagabs

    com.nameown12.p045l


Android Permissions

47bfb50ceab09ebb9e049067f5ba0b84c6b5fd57e1273ad3d282c59cde4f137e.bin

Permissions

android.permission.CLEAR_APP_CACHE

android.permission.USE_FINGERPRINT

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ADD_VOICEMAIL

android.permission.INSTALL_SHORTCUT

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS