General

  • Target

    5252bb4647e37b6414d63d7bc26106b703452bc9802582f87374015cfaf2a310.bin

  • Size

    2.4MB

  • MD5

    f7b278910e1445a9e56124921806890a

  • SHA1

    4e44661d5ab1d00b367a38d343663378e3b4fa9c

  • SHA256

    5252bb4647e37b6414d63d7bc26106b703452bc9802582f87374015cfaf2a310

  • SHA512

    d3a444588a53813b2f0ce8582fdfda954282ad7ff1bdb7d9bbb71812f1f71bce737818e9f1fe3913f2b41d9579bc1ef9b2aaefec56a80d4ba64d186bae620280

  • SSDEEP

    49152:iR5waP26nYccaYAzrrLKqyhHw5m0gciEbcgSdGfCQevD:QaaP26TYAzr/KqyJwjFikWGfCd

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Requests dangerous framework permissions 14 IoCs

Files

  • 5252bb4647e37b6414d63d7bc26106b703452bc9802582f87374015cfaf2a310.bin
    .apk android arch:arm64

    c4twq.gq5r4.mms95

    c4twq.gq5r4.mms95.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

5252bb4647e37b6414d63d7bc26106b703452bc9802582f87374015cfaf2a310.bin

Permissions

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.DISABLE_KEYGUARD

android.permission.DEVICE_POWER

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE_DATA_SYNC

com.kero.slimming.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.REORDER_TASKS

android.permission.BIND_VPN_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES

c4twq.gq5r4.mms95.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION