soumnibot | 47db1877603efa9ff5ca02bba0d717b30c642db5b14346b4115fb7e3db1fdb2f[.]bin

General

Target

47db1877603efa9ff5ca02bba0d717b30c642db5b14346b4115fb7e3db1fdb2f.bin
Size

2.6MB
MD5

1033f8f55c4b53a464ebdcf1ffca0190
SHA1

2aa52592ed476ffae97f1460435287dcb4e3a859
SHA256

47db1877603efa9ff5ca02bba0d717b30c642db5b14346b4115fb7e3db1fdb2f
SHA512

f99851883a97bf1386b7b7d1949a175c2173004baf62d24225e82ec6626c118e68c4d4bf8b4a066a76bdb98f7858e6592c7d852cf8daefed909d58f93186ba2d
SSDEEP

24576:aLB24m51+WtE05casQ8S+B2Wb2rv944tek8G2smMmiqNzOz2rcNNddSWRa1CL0W9:4JWu0Oe9YYcgNNddSvCLt

Score

10^/10

soumnibot

Malware Config

Signatures

Android SoumniBot payload 1 IoCs

resource	yara_rule
sample	family_soumnibot

Soumnibot family
soumnibot
Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

47db1877603efa9ff5ca02bba0d717b30c642db5b14346b4115fb7e3db1fdb2f.bin
.apk android arch:arm64

rekvgr.pedvoer.welfvcsd

rekvgr.pedvoer.welfvcsd.wefreg.erwgler.ssfskdekvgrfd

Activities

rekvgr.pedvoer.welfvcsd.wefreg.erwgler.ssfskdekvgrfd

android.intent.action.MAIN

Permissions

android.permission.ACCESS_WIFI_STATE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.GET_ACCOUNTS
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

rekvgr.pedvoer.welfvcsd.AAkeepaliveZZ.receiver.AABootCompletedReceiverZZ

android.intent.action.PHONE_STATE
android.intent.action.BOOT_COMPLETED

Services

Android Permissions

47db1877603efa9ff5ca02bba0d717b30c642db5b14346b4115fb7e3db1fdb2f.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

Sharing

General

Malware Config

Signatures

Files

rekvgr.pedvoer.welfvcsd

rekvgr.pedvoer.welfvcsd.wefreg.erwgler.ssfskdekvgrfd

Activities

rekvgr.pedvoer.welfvcsd.wefreg.erwgler.ssfskdekvgrfd

Permissions

Receivers

rekvgr.pedvoer.welfvcsd.AAkeepaliveZZ.receiver.AABootCompletedReceiverZZ

Services

Android Permissions

47db1877603efa9ff5ca02bba0d717b30c642db5b14346b4115fb7e3db1fdb2f.bin

We care about your privacy.