General

  • Target

    c49efe99a17bebdb3d5f228aeaca702a2fe1c91977008e31dc665f7a019cf19b.bin

  • Size

    4.3MB

  • MD5

    c89c7c179b7b839cc95490ef48d518bb

  • SHA1

    1d212eb3689aa8e8040c51f6271ff155b201702e

  • SHA256

    c49efe99a17bebdb3d5f228aeaca702a2fe1c91977008e31dc665f7a019cf19b

  • SHA512

    ceceefe754df2ca8475f256c1f51e6e0d095394c6d0cb139d82fb2ea46564ebde7b7fc0a4beeb6d0419b5fd5dc61d97491b29f5392ca780e037431c9ea0f658f

  • SSDEEP

    98304:ELwliXqbZ2EKi0uv8QYK8Ph/HrIVhpXfb25BDTajrrFjMr:ELkiqsHi09QY9hohkTOU

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 12 IoCs

Files

  • c49efe99a17bebdb3d5f228aeaca702a2fe1c91977008e31dc665f7a019cf19b.bin
    .apk android arch:arm

    com.kero.ilogisticsko

    com.kero.ilogisticsko.ui.ac.SplashActivity


Android Permissions

c49efe99a17bebdb3d5f228aeaca702a2fe1c91977008e31dc665f7a019cf19b.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.call_phone

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE