General

  • Target

    4ce976ca41a16d8650d0063b75518a11617fe4854238c3893346edec68650dc8.bin

  • Size

    2.6MB

  • MD5

    24b1d9f75e257c26d4adff6cbc35ee49

  • SHA1

    3c5c35aea96d50f8665afb755b07a156b78e53a5

  • SHA256

    4ce976ca41a16d8650d0063b75518a11617fe4854238c3893346edec68650dc8

  • SHA512

    32de1fde1314cdc039f8244d21b73c141f8bad2f72bec88169a5ab05de7424614cdff919ab30c1fdae0e9f2efd405a3fce930f5509f8a14bd4316d09fe6f5ce1

  • SSDEEP

    24576:d4m51+WtE0Tmv8iZ32NNl4jo29SD/mzONPJrpjhDpvVq5rKKPqXbl9FpGPg69nfI:+JWu0To2NI9SDjPHj3ONCrj

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 4ce976ca41a16d8650d0063b75518a11617fe4854238c3893346edec68650dc8.bin
    .apk android arch:arm64

    rgvk.ewpfver.welfdv

    rgvk.ewpfver.welfdv.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

4ce976ca41a16d8650d0063b75518a11617fe4854238c3893346edec68650dc8.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED