Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ebc4ac9d6dc1308d259c5d2f8919eb48fa1f765cb047d2d36521b05e9c522324.bin

  • Size

    2.6MB

  • MD5

    4d6a06402921c382251bbfd7df9fbf2d

  • SHA1

    8f58c4ce4b466b0746f33604f934d1c91e7e22b7

  • SHA256

    ebc4ac9d6dc1308d259c5d2f8919eb48fa1f765cb047d2d36521b05e9c522324

  • SHA512

    18b4042fbbb4b4b403e41638301f41cc4c46f7d53d8e9d52ad16836fbf144fdb09c2ee517ed4f37dad40bce350548515e1f6d41678245ebf96bf790bb68b1481

  • SSDEEP

    24576:74m51+WtE0k/Npwh7vWm0efist3Vo7GVjqyrlEsXzfkCyjTqOhKnIRO3Nb2CCyqR:kJWu06WtFCV1+UCCPR

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • ebc4ac9d6dc1308d259c5d2f8919eb48fa1f765cb047d2d36521b05e9c522324.bin
    .apk android arch:arm64

    sewdmvfj.wepvfsrde.bfrddx

    sewdmvfj.wepvfsrde.bfrddx.fdkbkfibid.dfbooedsivdi.rdfbofobgppfr


Android Permissions

ebc4ac9d6dc1308d259c5d2f8919eb48fa1f765cb047d2d36521b05e9c522324.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK