Overview

overview

10

Static

static

6

4071e34ff0...01.apk

android-9-x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4071e34ff06960e5ab4c5b8ed926c326e42c93fdabb53873339f9070606c9f01.bin

  • Size

    4.3MB

  • Sample

    241011-14c65swhmb

  • MD5

    68106ad6b4a0c1417d2458027ed674f8

  • SHA1

    6e21c3a25ffd0d5d4a40da8d1aab1efd3704b84b

  • SHA256

    4071e34ff06960e5ab4c5b8ed926c326e42c93fdabb53873339f9070606c9f01

  • SHA512

    2cf012e599b9c766a2cfe2c1bc0bf2335027f8850fb85ba5fb96eefed84f8947effa8a02915267525de48a310c670126621b5d0cb29ce6aedc61d3294847b6aa

  • SSDEEP

    98304:lT9xxT5Rx8yDAVVrg7jGYM8UgpVdQnMEWYJcTJfzHbrgwcagUKtk3FuGYDsxdM+:rh8yQrWjGYM3iyMiwJfTHgvYwG5M+

Score
10/10
soumnibotandroidbankerdiscoveryevasioninfostealertrojan

Malware Config

Targets

    • Target

      4071e34ff06960e5ab4c5b8ed926c326e42c93fdabb53873339f9070606c9f01.bin

    • Size

      4.3MB

    • MD5

      68106ad6b4a0c1417d2458027ed674f8

    • SHA1

      6e21c3a25ffd0d5d4a40da8d1aab1efd3704b84b

    • SHA256

      4071e34ff06960e5ab4c5b8ed926c326e42c93fdabb53873339f9070606c9f01

    • SHA512

      2cf012e599b9c766a2cfe2c1bc0bf2335027f8850fb85ba5fb96eefed84f8947effa8a02915267525de48a310c670126621b5d0cb29ce6aedc61d3294847b6aa

    • SSDEEP

      98304:lT9xxT5Rx8yDAVVrg7jGYM8UgpVdQnMEWYJcTJfzHbrgwcagUKtk3FuGYDsxdM+:rh8yQrWjGYM3iyMiwJfTHgvYwG5M+

    Score
    10/10
    soumnibotbankerdiscoveryevasioninfostealertrojan

    • Android SoumniBot payload

    • SoumniBot

      SoumniBot is an Android banking trojan first seen in April 2024.

      trojaninfostealerbankersoumnibot

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Acquires the wake lock

    • Queries information about active data network

      discovery

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1

MITRE ATT&CK Mobile v15

Tasks