Overview

overview

10

Static

static

10

c4045907a7...e3.apk

android-9-x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c4045907a799785bf2a5e0ae4b8037190cfcd456460a38a619a54da38febb6e3.bin

  • Size

    980KB

  • MD5

    b5391b171220a68f63ff7fd95dbba78c

  • SHA1

    c1077b9f0414bac3d3657bda6d7811e37eddc57e

  • SHA256

    c4045907a799785bf2a5e0ae4b8037190cfcd456460a38a619a54da38febb6e3

  • SHA512

    f5e89e76d2643210293471c9d9acb5a69709374a09b8d840ab161b3750d4163e934a957959a362acab3d511eb49c9a9309e79d2bac4bd0b2baef7f0384c9efcb

  • SSDEEP

    12288:GMuq+CoqedaTWwXKVEUwwSIE3CA2zOH61MH25FHyOfxU/OBunD3++UjwuDrhL0d8:yM325F3fs/UjwuD5b

Score
10/10
octo

Malware Config

Extracted

Family

octo

C2

https://brightnest42.sbs/YzhjOGJlMmZkNzNi/

https://swifthorizon19.sbs/YzhjOGJlMmZkNzNi/

https://blueecho77.sbs/YzhjOGJlMmZkNzNi/

https://shadowglide85.sbs/YzhjOGJlMmZkNzNi/

https://crystalpulse23.sbs/YzhjOGJlMmZkNzNi/

https://lunarflame66.sbs/YzhjOGJlMmZkNzNi/

https://stormvortex12.sbs/YzhjOGJlMmZkNzNi/

https://frozenblaze90.sbs/YzhjOGJlMmZkNzNi/

https://solardrift48.sbs/YzhjOGJlMmZkNzNi/

https://thunderquest37.sbs/YzhjOGJlMmZkNzNi/

https://echoridge55.sbs/YzhjOGJlMmZkNzNi/

https://rapidfusion21.sbs/YzhjOGJlMmZkNzNi/

https://cyberwave88.sbs/YzhjOGJlMmZkNzNi/

https://neonhawk33.sbs/YzhjOGJlMmZkNzNi/

https://aquasurge29.sbs/YzhjOGJlMmZkNzNi/

https://firenova75.sbs/YzhjOGJlMmZkNzNi/

https://zenithstorm95.sbs/YzhjOGJlMmZkNzNi/

https://silverorbit63.sbs/YzhjOGJlMmZkNzNi/

https://epicfrost82.sbs/YzhjOGJlMmZkNzNi/

https://goldenbolt14.sbs/YzhjOGJlMmZkNzNi/
rc4.plain

Signatures

  • Octo family
    octo
  • Octo payload 2 IoCs
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • c4045907a799785bf2a5e0ae4b8037190cfcd456460a38a619a54da38febb6e3.bin
    .apk android arch:arm64 arch:arm

    com.sgakagak.agakagabs

    com.nameown12.p045l


Android Permissions

c4045907a799785bf2a5e0ae4b8037190cfcd456460a38a619a54da38febb6e3.bin

Permissions

android.permission.CLEAR_APP_CACHE

android.permission.USE_FINGERPRINT

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ADD_VOICEMAIL

android.permission.INSTALL_SHORTCUT

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS