General

  • Target

    b7f5e0f2a7a70d10cdb4cf65d4e242d67ca5c6c06df23745016fcf4cc1a7554f.bin

  • Size

    2.6MB

  • MD5

    122d31cf6875873070c62d94db756d42

  • SHA1

    83511218655c8faf3665156a3c3d7f80d4fa3cb0

  • SHA256

    b7f5e0f2a7a70d10cdb4cf65d4e242d67ca5c6c06df23745016fcf4cc1a7554f

  • SHA512

    13612775851f168099c2ce63951c9720f2325ae05b262d53be98ef1dbf2c4412da7216ed90bd7db705183f10772340e4fc2d7a2ad30486bbdddcf7fcd9c860c3

  • SSDEEP

    49152:XZxIBcHiuOVHCluKTpQ4mDjrB90EjaXi2fz5DMv2dHi4UtpHsnzPFc6wFAFyZgd6:XZxIBI5OViMDjrBmEj52fz5C2dC46szk

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Requests dangerous framework permissions 9 IoCs

Files

  • b7f5e0f2a7a70d10cdb4cf65d4e242d67ca5c6c06df23745016fcf4cc1a7554f.bin
    .apk android arch:arm

    nssgz.wtqd.rp

    nssgz.wtqd.rp.main.mainActivity


Android Permissions

b7f5e0f2a7a70d10cdb4cf65d4e242d67ca5c6c06df23745016fcf4cc1a7554f.bin

Permissions

com.google.android.providers.gsf.permission.WRITE_GSERVICES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.WRITE_CONTACTS

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE