General

  • Target

    f9edfeb888b82088bd627dbb30d79b5b0d2e2d91b8b80df2e8e68fd1f44ecf3d.bin

  • Size

    2.6MB

  • MD5

    0f25ab915a7e39ead12d2d8881b98086

  • SHA1

    d916f34d43f32d101cbc82f3e86878a5c53fe9b6

  • SHA256

    f9edfeb888b82088bd627dbb30d79b5b0d2e2d91b8b80df2e8e68fd1f44ecf3d

  • SHA512

    c91d997596990f75b4ff6bbff0e42c0dea2a6b0d8956717c508375842b6312e17fbdb3759b292e2e99023efcfc56f440dc30c9c3c9942b00c56a34ac167f3568

  • SSDEEP

    24576:m1b4m51+WtE0mbzIemQZ088sJcA470ieA45RqTbpOjPprmpT83Dyqdn0Ab3Xbi9E:m6JWu0tQZL0Hs4pPGwCw6

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • f9edfeb888b82088bd627dbb30d79b5b0d2e2d91b8b80df2e8e68fd1f44ecf3d.bin
    .apk android arch:arm64

    reger.ewgpero.ewflv

    reger.ewgpero.ewflv.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

f9edfeb888b82088bd627dbb30d79b5b0d2e2d91b8b80df2e8e68fd1f44ecf3d.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED