soumnibot | d688de72107049017ff8d65f750877d442780814a644b07678447253e654a368 | Triage

Sharing

General

Target

d688de72107049017ff8d65f750877d442780814a644b07678447253e654a368.bin
Size

3.0MB
Sample

250328-12f51sste1
MD5

5ef4efedef2dde96db6a4ffa0474b396
SHA1

5a7207911f6b19f46b2b7b2e6e0476e1195be686
SHA256

d688de72107049017ff8d65f750877d442780814a644b07678447253e654a368
SHA512

e7f077c0f2d9b36c216a0aaa278ba6ffb756a454eca55a172356109af8ac7d0ea2a67935fd63958fb9fecd37c31e8d5645515ccab85fe95f298714c63bade189
SSDEEP

49152:AdwB+sXbQ/fZhlJ02ge3rDOGpesLNc2HSsqg1wHP2Zr9KIz:AxMbQHZhz02gCrle8C3HP2Zr99

Score

10^/10

soumnibot android banker evasion infostealer trojan

Malware Config

Targets

- Target
  
  d688de72107049017ff8d65f750877d442780814a644b07678447253e654a368.bin
- Size
  
  3.0MB
- MD5
  
  5ef4efedef2dde96db6a4ffa0474b396
- SHA1
  
  5a7207911f6b19f46b2b7b2e6e0476e1195be686
- SHA256
  
  d688de72107049017ff8d65f750877d442780814a644b07678447253e654a368
- SHA512
  
  e7f077c0f2d9b36c216a0aaa278ba6ffb756a454eca55a172356109af8ac7d0ea2a67935fd63958fb9fecd37c31e8d5645515ccab85fe95f298714c63bade189
- SSDEEP
  
  49152:AdwB+sXbQ/fZhlJ02ge3rDOGpesLNc2HSsqg1wHP2Zr9KIz:AxMbQHZhz02gCrle8C3HP2Zr99
Score

10^/10

soumnibot banker evasion infostealer trojan
- Android SoumniBot payload
- SoumniBot
  SoumniBot is an Android banking trojan first seen in April 2024.
  trojan infostealer banker soumnibot
- Soumnibot family
  soumnibot
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

soumnibotbankerevasioninfostealertrojan