Analysis
-
max time kernel
149s -
max time network
161s -
platform
android-13_x64 -
resource
android-33-x64-arm64-20240910-en -
resource tags
-
submitted
27/03/2025, 22:10
General
-
Target
5103554fd6b85ca5c1e54434d7a889aa17fb7d5f4afa38f92a2d728aabdcff76.apk
-
Size
4.6MB
-
MD5
ada9135130e3480d95903a6635fa7a6a
-
SHA1
5ef05858efc4a876204758279712b693a7d8eaaa
-
SHA256
5103554fd6b85ca5c1e54434d7a889aa17fb7d5f4afa38f92a2d728aabdcff76
-
SHA512
6f97323198f5f68cb29f3a837a727e3edeeb9c85d1e1cd18911796241e14af8b27ba77a14b774722d9335f94e32ffb5219fad5507175bdc52f794e95c6101a94
-
SSDEEP
24576:kBP4m51+WtE02qQ/kiKl08btTMbYtSi9IwiWlsOCCcabUZXlujJg4Cpl2VxoK1TL:rJWu02cswaJabUZXl6CpqbDsBFt4Aot1
Malware Config
Signatures
-
Android SoumniBot payload 2 IoCs
-
SoumniBot
SoumniBot is an Android banking trojan first seen in April 2024.
-
Soumnibot family
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes
-
drfgbdrf.wepgfoe.rfeg1⤵
- Loads dropped Dex/Jar
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD56cb8e2556168f48636faf688a3150fd3
SHA13da227553d703f8dad1dedd1628814851cbcf62f
SHA256ad5e48e75ffcc701147fc13166b553b38445dfa61649fcae652ee88672ff9725
SHA5121677ac6be2cbfc04eacebd73e8dd511540e871829221dee7357a5d5437cf47259ee8e9fc54ec486fcb114b837770e0b0410d2b6717387cdd99ba1b5138a60b4b
-
Filesize
1.8MB
MD542e37e8592c869b99c0d716969ab897c
SHA1fc4631ebd1a04437ab909c2b8b1d6990fe5cf0da
SHA256859608c88605d20ad6863e59fbb98271a3c561de9db7b980e86aeae217d12447
SHA512b66bfd7bf796eb0f1d3eb4d2ccf193342421ca9b8a0002e8d6dc059e7d9ae403453669c12d47d1ee512673612b4ef95c7b8bd5f1ae20ba2a3be1011d3d51f368