General

  • Target

    2b6b66b261f42f386c6123af6f2e0716ed74a67585276456726fea154ff3d4e1.bin

  • Size

    2.1MB

  • MD5

    f5fecc427458a829e51a860c8adcc7d1

  • SHA1

    bc622170b14c15d7418f81829acbbcd6e9f1d010

  • SHA256

    2b6b66b261f42f386c6123af6f2e0716ed74a67585276456726fea154ff3d4e1

  • SHA512

    d3636e0f981b794aa7ed03a5aea898c520b1a365d989cfcf9855c93b9a6f72f0640cdf56c83d6cf3dd51e116b416ba9bf79592032ee941ce46dea59409305e33

  • SSDEEP

    49152:4Fgy7gciEb+X/aAfC2r7p0OvnYtNKV4MZUdzWPgSdb:fy7Fik+X/aWCY7p0OvneKV8JWZb

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Requests dangerous framework permissions 14 IoCs

Files

  • 2b6b66b261f42f386c6123af6f2e0716ed74a67585276456726fea154ff3d4e1.bin
    .apk android arch:arm64

    l3ku_.b_c3t.z2wyc

    l3ku_.b_c3t.z2wyc.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

2b6b66b261f42f386c6123af6f2e0716ed74a67585276456726fea154ff3d4e1.bin

Permissions

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.DISABLE_KEYGUARD

android.permission.DEVICE_POWER

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE_DATA_SYNC

com.kero.slimming.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.REORDER_TASKS

android.permission.BIND_VPN_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES

l3ku_.b_c3t.z2wyc.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION