Analysis
-
max time kernel
149s -
max time network
150s -
platform
android-13_x64 -
resource
android-33-x64-arm64-20240910-en -
resource tags
-
submitted
27/03/2025, 22:11
General
-
Target
49862484acfecb504b2f59bbf307e0371bb8b74a976aa8fc63532f12fe537ad7.apk
-
Size
4.6MB
-
MD5
77fef0ab5f02e79366e1beb02beb66f1
-
SHA1
ab335423d7fdee6cb075145f8e6f253f5714aabb
-
SHA256
49862484acfecb504b2f59bbf307e0371bb8b74a976aa8fc63532f12fe537ad7
-
SHA512
1134f37ee881125ba7f08e19207d29befb288f1298f5e066f53ae5adf63a62c1b60c9a7de5f72e1fa64238bc19761f4fe6a3c54b23c8d515f57d5e7a5401bfc5
-
SSDEEP
49152:JJWu0JGQRxTV3AnRpJM34m2CaMcf+9rusvQW4zFI:JcJGS+Xccf+9p7
Malware Config
Signatures
-
Android SoumniBot payload 2 IoCs
-
SoumniBot
SoumniBot is an Android banking trojan first seen in April 2024.
-
Soumnibot family
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes
-
regblt.ewlgvlrfe.ewdf1⤵
- Loads dropped Dex/Jar
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD55eba302fbc9fa1302f18a7d9718b1b2d
SHA1cbb5e86115804d78352f565cf5d829e238cfa598
SHA256df28507bfcfd95b164fecd28f54cb3766d9eacb49990bdcb54ac365da8774feb
SHA512b7c75d6caaecff1bd1af1eb24ba2e47dd0dec8d495b985e2ef50422f53cf9a728c83c33c4ad4fcfdda0d2966efcbe2aa1608924f4aa24600a62b17c2539d7cb7
-
Filesize
1.8MB
MD56883071e10a4eeacaaa40b21ade236ea
SHA1d38ab99b48cfcb3bb153f0a0493989615411238a
SHA256dfe7d9322f19c3d469fb5666250cc3dc1898f71fb6a278f724ef93201d343025
SHA512262e3562dcac18269940d1f6f8cc08f5cda73f0864e1f78362094435d76b547093f6965d8930decc7cafa0ca8c6538e1cbb2c9099cdc9b7e3d42011ff28569c7