General

  • Target

    41e6a34e85a40cbe8036c3e3d94ad4211113bf46b8198d13cc0a8068b66046b4.bin

  • Size

    4.6MB

  • MD5

    f5d0d03ae1b183be41325a4e30780ad0

  • SHA1

    4334bca23ab1c692889863017ae9d893d4e55974

  • SHA256

    41e6a34e85a40cbe8036c3e3d94ad4211113bf46b8198d13cc0a8068b66046b4

  • SHA512

    97375e3d0c20fb3ff27286fa8870d8ee8a557e3ff3191639474cc8293049b7ad64e76bcfccae84264bb03859f9f87f491bf3daebccb80b99920f0b9c413616fb

  • SSDEEP

    49152:JJWu0JGQRxTV3AnRpJM34m2CnByf+9rusvQW4zFG:JcJGS+XQyf+9pH

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 41e6a34e85a40cbe8036c3e3d94ad4211113bf46b8198d13cc0a8068b66046b4.bin
    .apk android arch:arm64

    regblt.ewlgvlrfe.ewdf

    regblt.ewlgvlrfe.ewdf.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

41e6a34e85a40cbe8036c3e3d94ad4211113bf46b8198d13cc0a8068b66046b4.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED