Overview

overview

10

Static

static

10

f369ed5ebd...6f.apk

android-13-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f369ed5ebd9ad3a79f84b0103bfdc1cd6b1e01928cabf6d3d7e6f3d5e276b26f.bin

  • Size

    2.6MB

  • MD5

    d2b196e1e993a5543e30e30a10ca2629

  • SHA1

    a64967c5e2b5f5ed5f65dce95b4db968385fa7ea

  • SHA256

    f369ed5ebd9ad3a79f84b0103bfdc1cd6b1e01928cabf6d3d7e6f3d5e276b26f

  • SHA512

    a3e477d2d6a8b80908e04043db804c7202b952002e52eecdfdeb75ceb121f94db1c1ee0188c25295c016b7f239d71d1b08926078ee9727df1a29b68e0f54b589

  • SSDEEP

    24576:d4m51+WtE0Tmv8iZ32NNl4jo29SD/mzONPJrpjhDpvVq5rKKPqXbl9FpGPg69nfw:+JWu0To2NI9SDjPHj3ONCSy

Score
10/10
soumnibot

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
    soumnibot
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • f369ed5ebd9ad3a79f84b0103bfdc1cd6b1e01928cabf6d3d7e6f3d5e276b26f.bin
    .apk android arch:arm64

    rgvk.ewpfver.welfdv

    rgvk.ewpfver.welfdv.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

f369ed5ebd9ad3a79f84b0103bfdc1cd6b1e01928cabf6d3d7e6f3d5e276b26f.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED