General

  • Target

    d2511a80ee7ff4d1427bf18c9709e977be64162d66a4f4018ad2cbb7820d3f1f.bin

  • Size

    2.6MB

  • MD5

    d7628e9146c4061f919e3c4fba167cb1

  • SHA1

    e5f656a217af2fd07c6599e80f7216eaa2319364

  • SHA256

    d2511a80ee7ff4d1427bf18c9709e977be64162d66a4f4018ad2cbb7820d3f1f

  • SHA512

    6b893475acfcdad42a36eb85d00144b0fe2ef784fc26aede7bb5a628f67252bd38117380ce444415c5999f2942eb37162251d2f1c96733cf5fe8ffaa6af07ab5

  • SSDEEP

    24576:r6lk4m51+WtE0P057IPeK1lhFdzlt7vGgOwvoqWFwRGer0GuMokDnuApvgkCua/n:mJWu0EQ1vJ4Ao8Cj

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • d2511a80ee7ff4d1427bf18c9709e977be64162d66a4f4018ad2cbb7820d3f1f.bin
    .apk android arch:arm64

    ewkgvkrf.ewlgvled.fewldw

    ewkgvkrf.ewlgvled.fewldw.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

d2511a80ee7ff4d1427bf18c9709e977be64162d66a4f4018ad2cbb7820d3f1f.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED