General

  • Target

    5fe381e404210621b03a64d587b18e37f9c8ef0b1c55336633b5ce2ac9767ae7.bin

  • Size

    2.6MB

  • MD5

    9dcfb7f4bbf9445e264cd91be9a473bd

  • SHA1

    9c0cacab69c66f2250296b1553d9098171e2dc77

  • SHA256

    5fe381e404210621b03a64d587b18e37f9c8ef0b1c55336633b5ce2ac9767ae7

  • SHA512

    1058f751c85c3ffc1d298a4c897d0b9be77ba8f3f1e178fc8cbbb5a21b0ab8a562aa77ef8f77239678484475ef4b3b482a6f563c5b5453dc2d8bcfbec2d04158

  • SSDEEP

    24576:c4m51+WtE0l7YXH94otRdb8hDlXKYP5FOFZWlsnYgfoCMOY:rJWu0l7I/YPWWinYpCMz

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 5fe381e404210621b03a64d587b18e37f9c8ef0b1c55336633b5ce2ac9767ae7.bin
    .apk android arch:arm64

    remg.qwpfoewssd.vksdkf

    remg.qwpfoewssd.vksdkf.rekghtrmhr.rothbortoer.fthknyktkre


Android Permissions

5fe381e404210621b03a64d587b18e37f9c8ef0b1c55336633b5ce2ac9767ae7.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK