Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5960f7f5d3ab50942cdcbfab76ee321dde49da7d6d5477648af50c0cc2a8a39c.bin

  • Size

    2.6MB

  • MD5

    8fce33e41b393200c78e488b13ae51e8

  • SHA1

    fff7179776e324d8487ebd270cf29f86a59dba5f

  • SHA256

    5960f7f5d3ab50942cdcbfab76ee321dde49da7d6d5477648af50c0cc2a8a39c

  • SHA512

    4d09607ab4110d3e127a05773bc19335d29670bb1136e698f31d87b6ef75a4ddd1d9da335426f2540eedd02509ebf553a3e76905dc5c6f90fca890ec371aa45d

  • SSDEEP

    24576:PN4m51+WtE0FmHvFqfE6T73A69zpzmu5njRhVMZleCE/h:PuJWu0FUi73AUCu5nRjCEZ

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 5960f7f5d3ab50942cdcbfab76ee321dde49da7d6d5477648af50c0cc2a8a39c.bin
    .apk android arch:arm64

    edwglvle.pwegdover.flbdr

    edwglvle.pwegdover.flbdr.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

5960f7f5d3ab50942cdcbfab76ee321dde49da7d6d5477648af50c0cc2a8a39c.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED