General

  • Target

    1fd54bad315642808de0b246fe681fd1a874bde924e0dc23ad0be1ec4334fadf.bin

  • Size

    2.6MB

  • MD5

    d7554e77d6172f2a58f6a8d7437689a6

  • SHA1

    ef0b2fd728e3d96f55e4e1a962dc77d23282d7b2

  • SHA256

    1fd54bad315642808de0b246fe681fd1a874bde924e0dc23ad0be1ec4334fadf

  • SHA512

    68d5ff0a729acc8a8536a5d6b6674602e7ba654f6c7b54d5ffdf27ef5f0ca84a3d473897f63dc5c1f64bb1bfdd0b68c4f03433e4cbbb1b0c8fc81cce19b7c100

  • SSDEEP

    24576:Ylu4m51+WtE00JJc3VpCKHA+MwBHk5qXtYuYUJWZ7vJPycPybSo1qqE+hPJCXb5f:SJWu00WDM0RYUsZYmlcuCCoCAw

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 1fd54bad315642808de0b246fe681fd1a874bde924e0dc23ad0be1ec4334fadf.bin
    .apk android arch:arm64

    rgvkdkf.epfvsode.gsrldvf

    rgvkdkf.epfvsode.gsrldvf.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

1fd54bad315642808de0b246fe681fd1a874bde924e0dc23ad0be1ec4334fadf.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED