General

  • Target

    3a36b482f8e5c8095b578e8fba131ba68f9143c8f7328a3d824295c34e9bea06.bin

  • Size

    2.6MB

  • MD5

    1479701713461763120868530052b08f

  • SHA1

    149ed89fc14e9f0add4eeffdd3623d2d6eb161e7

  • SHA256

    3a36b482f8e5c8095b578e8fba131ba68f9143c8f7328a3d824295c34e9bea06

  • SHA512

    9cddf5e4564a2aeff22efe914ad10c45c19c02f50fe575f1379ba77a99e59f9e592c6ad09385c589742c1b40fdc646836afe329cb83e0fa891f10ddcd13adacb

  • SSDEEP

    24576:Z4m51+WtE0GCCe9NR5QNf2caFEd+hpUS3Zkr/1yaumJ8n0n6J4Yma4x:CJWu0GC3BlC+ky+Jmi

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 3a36b482f8e5c8095b578e8fba131ba68f9143c8f7328a3d824295c34e9bea06.bin
    .apk android arch:arm64

    dfrgker.sedpgvoer.swedgv

    dfrgker.sedpgvoer.swedgv.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

3a36b482f8e5c8095b578e8fba131ba68f9143c8f7328a3d824295c34e9bea06.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED