General

  • Target

    e5fe336ea5bed0a281e4ee21cf8d59ba450171bfd639b7962aa6c5b7f51ea717.bin

  • Size

    2.6MB

  • MD5

    b27596da50c60b9ae7d30e217ab31fbf

  • SHA1

    6ea5ee006bfffb37fc93fc636c263d577171ce00

  • SHA256

    e5fe336ea5bed0a281e4ee21cf8d59ba450171bfd639b7962aa6c5b7f51ea717

  • SHA512

    34f2adc5fa916c280cb1727a8e96a4a2bd602fa8444314cb56ed7a18d4fa8ce4e7d8aee1b7cf0199f3ded5bd26673dfcda0fdbb8bad4f1f890694e8859674348

  • SSDEEP

    24576:kqwT4m51+WtE0LGbVU0/rCqt+h4QEophH1TpJmFHE0xMUuCVaki:RJWu0L8+mQbphVKeUuC4

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • e5fe336ea5bed0a281e4ee21cf8d59ba450171bfd639b7962aa6c5b7f51ea717.bin
    .apk android arch:arm64

    drgke.rpgor.ewlgfv

    drgke.rpgor.ewlgfv.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

e5fe336ea5bed0a281e4ee21cf8d59ba450171bfd639b7962aa6c5b7f51ea717.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED