Analysis
-
max time kernel
149s -
max time network
152s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
-
submitted
22-12-2024 22:05
General
-
Target
4f7a1cb3091585380534577b614fcb8eb60f4d0d9a20d6badaba8dcdb356b315.apk
-
Size
4.4MB
-
MD5
420c8785707c35dd9ccd0ad194d6efd4
-
SHA1
437c791abab6fae06ec8188a1d494142b02c393a
-
SHA256
4f7a1cb3091585380534577b614fcb8eb60f4d0d9a20d6badaba8dcdb356b315
-
SHA512
7756a1f557da055a0d77c40b11e6e115e0fcb62707067e4ee8409e7354980dc11630f05dd2bac799e4d48bfbdc8af4547927edfa0bc051568a28c86020128566
-
SSDEEP
98304:OcSEGiIH9Q6ZB/cVicj3ab2BQlmLDOLqS73nE4J6jrrV:OcPGj9N/c3imLDOLqCdJu
Malware Config
Signatures
-
Android SoumniBot payload 1 IoCs
-
SoumniBot
SoumniBot is an Android banking trojan first seen in April 2024.
-
Soumnibot family
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
bai.shan.shui1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
222KB
MD5e0cdfe09bad49823017b8df7dc1e8f13
SHA1e94f612851dd5114c6609189aa3c985893bc5c41
SHA2565bf5f10931feefdabb6dbf9e39208c99225237b97cab7d278f6f2fecef81ae35
SHA512d1258bb156caebbdabc0feb8676ffee86dcc4c5b2a0c1b728b485422feec2c4a167ba702af47783d6affb018c95b533a45c8642b730de0cc84994077219e3b2d
-
Filesize
4KB
MD5620f0b67a91f7f74151bc5be745b7110
SHA11ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d
SHA256ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7
SHA5122d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d
-
Filesize
1.8MB
MD5dc4eb6b2e4b7c4c25d8badddd60ed3c0
SHA10dca2a4b0ba49145d5f319e7e43ba02c14760fb9
SHA256e77f2ab5e5e73f0c7ecfb62a8181c8e004bf6b68b4826f588cae23b1a172912c
SHA512f6813c82188acbbadde1ff473632cf2f62063a5c9357a1a80ad66664d7157e63a95fc8fb1fade18a812a75b0b3056760d89e10dcf2ef8f406c890313989a753d