Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    71f3a3da9ba15500d3c82fe11e1f39524a99d61eb26cb36e2a0296d408508d8a.bin

  • Size

    245KB

  • MD5

    c0b7f623ceb6e94aef7c15d4308643a9

  • SHA1

    a18fc76dc3f7ec1d138a10e3464bdbb6fd4c0775

  • SHA256

    71f3a3da9ba15500d3c82fe11e1f39524a99d61eb26cb36e2a0296d408508d8a

  • SHA512

    406d5ab7c2698944c5f14ce6a453d1846628d29176f9f284e92e13cddef4e3229c6ff5bf5ab4fa02ef9978c15f8d1eb96168f062a1276f4a55f14a0e091f0407

  • SSDEEP

    6144:6T4DEMzy6JNzY/yCfp1qA9lvao96Rg00r91/EuGzW:k4DEMzyINzkNEg0Y9tnP

Score
10/10

Malware Config

Extracted

Family

octo

C2

https://crystalhorizon.xyz/YTE5MzQ1ZWRkZjY1/

https://velvetdawn.xyz/YTE5MzQ1ZWRkZjY1/

https://shadowmist.xyz/YTE5MzQ1ZWRkZjY1/

https://whisperingvale.xyz/YTE5MzQ1ZWRkZjY1/

https://stormyclouds.xyz/YTE5MzQ1ZWRkZjY1/

https://sunsetmirage.xyz/YTE5MzQ1ZWRkZjY1/

https://goldenflare.xyz/YTE5MzQ1ZWRkZjY1/

https://frozendreams.xyz/YTE5MzQ1ZWRkZjY1/

https://midnightwhisper.xyz/YTE5MzQ1ZWRkZjY1/

https://seraphiclight.xyz/YTE5MzQ1ZWRkZjY1/

https://twilightstorm.xyz/YTE5MzQ1ZWRkZjY1/

https://azurehaven.xyz/YTE5MzQ1ZWRkZjY1/

https://lunarshade.xyz/YTE5MzQ1ZWRkZjY1/

rc4.plain

Signatures

  • Octo family
  • Octo payload 1 IoCs
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • 71f3a3da9ba15500d3c82fe11e1f39524a99d61eb26cb36e2a0296d408508d8a.bin
    .apk android arch:arm64 arch:arm

    com.sgakagak.agakagabs

    com.nameown12.p045l


Android Permissions

71f3a3da9ba15500d3c82fe11e1f39524a99d61eb26cb36e2a0296d408508d8a.bin

Permissions

android.permission.CLEAR_APP_CACHE

android.permission.USE_FINGERPRINT

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ADD_VOICEMAIL

android.permission.INSTALL_SHORTCUT

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS