General

  • Target

    25b46ac2947491d6df6af106e65d28e2e999e38acf6e0b5b13c7cafbfda4147a.bin

  • Size

    4.6MB

  • MD5

    bd542418210e8661c4b33e93d8f2d222

  • SHA1

    fdad8d7601dcdb2064ffd2a92d7ea1b85a1ed544

  • SHA256

    25b46ac2947491d6df6af106e65d28e2e999e38acf6e0b5b13c7cafbfda4147a

  • SHA512

    e726c91daa9b814360e0e1df2f9a2548a0b199d499892431de6a0ba01c78cb509ca8f93d433b276746c9a572d45d2c8a35a620efaf4bb9eee45280f283455330

  • SSDEEP

    24576:kBP4m51+WtE02qQ/kiKl08btTMbYtSi9IwiWlsOCCcabUZXlujJg4CgpTVxoK1Tn:rJWu02cswaJabUZXl6CgxbDsBFt4Aohh

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 25b46ac2947491d6df6af106e65d28e2e999e38acf6e0b5b13c7cafbfda4147a.bin
    .apk android arch:arm64

    drfgbdrf.wepgfoe.rfeg

    drfgbdrf.wepgfoe.rfeg.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

25b46ac2947491d6df6af106e65d28e2e999e38acf6e0b5b13c7cafbfda4147a.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED