Analysis
-
max time kernel
149s -
max time network
152s -
platform
android-13_x64 -
resource
android-33-x64-arm64-20240910-en -
resource tags
-
submitted
28/03/2025, 22:11
General
-
Target
0840c9c814632bc4f108190976182f5eb64ad895b1dd2309ad88a94f7056fb6e.apk
-
Size
4.6MB
-
MD5
94b4133b7af37607288c8297dc51f0a0
-
SHA1
9647fb28abe3e0b4280c7c0c3619ec0efde28d09
-
SHA256
0840c9c814632bc4f108190976182f5eb64ad895b1dd2309ad88a94f7056fb6e
-
SHA512
e71518a4dc0c19125152c56d733a3a94edaaf061b11748cbacc41eed1eade0e636d862efac1c000ef7f3f72d8891e52f0ecbfbd753ff3f91616b1c66c928ec26
-
SSDEEP
49152:JJWu0JGQRxTV3AnRpJM34m2Cxj7f+9rusvQW4zFw:JcJGS+XY7f+9p/
Malware Config
Signatures
-
Android SoumniBot payload 2 IoCs
-
SoumniBot
SoumniBot is an Android banking trojan first seen in April 2024.
-
Soumnibot family
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes
-
regblt.ewlgvlrfe.ewdf1⤵
- Loads dropped Dex/Jar
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD55eba302fbc9fa1302f18a7d9718b1b2d
SHA1cbb5e86115804d78352f565cf5d829e238cfa598
SHA256df28507bfcfd95b164fecd28f54cb3766d9eacb49990bdcb54ac365da8774feb
SHA512b7c75d6caaecff1bd1af1eb24ba2e47dd0dec8d495b985e2ef50422f53cf9a728c83c33c4ad4fcfdda0d2966efcbe2aa1608924f4aa24600a62b17c2539d7cb7
-
Filesize
1.8MB
MD56883071e10a4eeacaaa40b21ade236ea
SHA1d38ab99b48cfcb3bb153f0a0493989615411238a
SHA256dfe7d9322f19c3d469fb5666250cc3dc1898f71fb6a278f724ef93201d343025
SHA512262e3562dcac18269940d1f6f8cc08f5cda73f0864e1f78362094435d76b547093f6965d8930decc7cafa0ca8c6538e1cbb2c9099cdc9b7e3d42011ff28569c7