General

  • Target

    59c4283f872cf4a3f9e932ea6520092138e3af0a3d470012bca51f9f302ad000.bin

  • Size

    245KB

  • MD5

    f93db51d13a9c677765af515412ba000

  • SHA1

    74606694ac84bdcf25634d0a0f49302cb7aa4e34

  • SHA256

    59c4283f872cf4a3f9e932ea6520092138e3af0a3d470012bca51f9f302ad000

  • SHA512

    5938371449c1a0363071f16edbe546ba605fb305b8a034b1f970a42b04826ca11555ca20ae2e4420725d7b016cfee161833ff0b1a3a9745380c71d389df9f582

  • SSDEEP

    6144:xT0u0KxGszY/yCfp1qUOkF3tP09x6Rg0Hrut/EuGB:ZqKcszkjjPRg0LuFnY

Score
10/10

Malware Config

Extracted

Family

octo

C2

https://saykodeli22.xyz/NWVlMGFhYTdlMTg0/

https://mmawwe253.xyz/NWVlMGFhYTdlMTg0/

https://altayturk53.xyz/NWVlMGFhYTdlMTg0/

https://unicorntintin.xyz/NWVlMGFhYTdlMTg0/

https://secal12.xyz/NWVlMGFhYTdlMTg0/

https://cihanisbasindatinke.xyz/NWVlMGFhYTdlMTg0/

https://ilerisaat773.xyz/NWVlMGFhYTdlMTg0/

https://patroncildirdiah.xyz/NWVlMGFhYTdlMTg0/

https://hatasizkulolmazlo3.xyz/NWVlMGFhYTdlMTg0/

https://korfezsamtatlisi353.xyz/NWVlMGFhYTdlMTg0/

https://patatescuvalikeke.xyz/NWVlMGFhYTdlMTg0/

https://sezarbabaloneyapisen.xyz/NWVlMGFhYTdlMTg0/

rc4.plain

Signatures

  • Octo family
  • Octo payload 1 IoCs
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • 59c4283f872cf4a3f9e932ea6520092138e3af0a3d470012bca51f9f302ad000.bin
    .apk android arch:arm64 arch:arm

    com.sgakagak.agakagabs

    com.nameown12.p045l


Android Permissions

59c4283f872cf4a3f9e932ea6520092138e3af0a3d470012bca51f9f302ad000.bin

Permissions

android.permission.CLEAR_APP_CACHE

android.permission.USE_FINGERPRINT

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ADD_VOICEMAIL

android.permission.INSTALL_SHORTCUT

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS