General

  • Target

    34bac84af1e3e8fbb878b10aaff53b5222d5fa89a0c7e8e1248c1d357a68cc6c.bin

  • Size

    2.6MB

  • MD5

    9a37898745812328541414fe804542b5

  • SHA1

    2bcdf78aa322d5379f3c61fd386f102eb4b4ed14

  • SHA256

    34bac84af1e3e8fbb878b10aaff53b5222d5fa89a0c7e8e1248c1d357a68cc6c

  • SHA512

    24e0dd0db99b5745680afa4fa9f835208c86c17e7af9ffc299d41ff06e7ae60306569e1668e2764c68c8ac797579d6685638b3cbd1974a7f9fc792d8a90ddfe7

  • SSDEEP

    24576:ns4m51+WtE0j05HisjAYVBdeVpn0lWnsz0/volF8XWP+QUZBE+KQqluHYckXbu9G:7JWu0CpjpKIFgLtxxqwOCAu4

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 34bac84af1e3e8fbb878b10aaff53b5222d5fa89a0c7e8e1248c1d357a68cc6c.bin
    .apk android arch:arm64

    krwegf.ewkfkerd.gvref

    krwegf.ewkfkerd.gvref.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

34bac84af1e3e8fbb878b10aaff53b5222d5fa89a0c7e8e1248c1d357a68cc6c.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED