General

  • Target

    606a9b2a0d8ebb202ccd5544f7b22650eefb5c1fa66baa3ae2b41f789c272074.bin

  • Size

    2.6MB

  • MD5

    28480f1192b90b00361ae063da13e248

  • SHA1

    9b6c9deff6b3a3281155e057ce0e54e78f225c46

  • SHA256

    606a9b2a0d8ebb202ccd5544f7b22650eefb5c1fa66baa3ae2b41f789c272074

  • SHA512

    8c27ade8fa471bc5ca2394902655bd413f9c4773de3d33f793af12ce79a78b52f10af8c9cf1ca2d62eca1f3c6322ffb136fbdf4d10cc3b34cc76bb605cc02846

  • SSDEEP

    24576:r6lk4m51+WtE0P057IPeK1lhFdzlt7vGgOwvoqWFwRGer0GuMokDnuApvgkCEaOb:mJWu0EQ1vJ4Ao8C6

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 606a9b2a0d8ebb202ccd5544f7b22650eefb5c1fa66baa3ae2b41f789c272074.bin
    .apk android arch:arm64

    ewkgvkrf.ewlgvled.fewldw

    ewkgvkrf.ewlgvled.fewldw.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

606a9b2a0d8ebb202ccd5544f7b22650eefb5c1fa66baa3ae2b41f789c272074.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED