Analysis
-
max time kernel
149s -
max time network
150s -
platform
android-13_x64 -
resource
android-33-x64-arm64-20240910-en -
resource tags
-
submitted
03/04/2025, 22:06
General
-
Target
54bddf7775773a5c807e37b4039ba04afe82c19a3d14f013696f4fbfe5c3e2c8.apk
-
Size
4.6MB
-
MD5
b7f3680c7e57e9886d0000e8b0043cfd
-
SHA1
bb9d396637f5e9d7eb246a220210956c23d79747
-
SHA256
54bddf7775773a5c807e37b4039ba04afe82c19a3d14f013696f4fbfe5c3e2c8
-
SHA512
5f79a484a2162e122b8bcac9af2418dd8ef7d886f0d4952560ddd656c4fbaa9eee815b449978f273d25a2c55f29bcb89f283eec706727bfd751417add11ede93
-
SSDEEP
49152:JJWu0JGQRxTV3AnRpJM34m2C+ZWf+9rusvQW4zFW:JcJGS+XdWf+9pD
Malware Config
Signatures
-
Android SoumniBot payload 2 IoCs
-
SoumniBot
SoumniBot is an Android banking trojan first seen in April 2024.
-
Soumnibot family
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes
-
regblt.ewlgvlrfe.ewdf1⤵
- Loads dropped Dex/Jar
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD55eba302fbc9fa1302f18a7d9718b1b2d
SHA1cbb5e86115804d78352f565cf5d829e238cfa598
SHA256df28507bfcfd95b164fecd28f54cb3766d9eacb49990bdcb54ac365da8774feb
SHA512b7c75d6caaecff1bd1af1eb24ba2e47dd0dec8d495b985e2ef50422f53cf9a728c83c33c4ad4fcfdda0d2966efcbe2aa1608924f4aa24600a62b17c2539d7cb7
-
Filesize
1.8MB
MD56883071e10a4eeacaaa40b21ade236ea
SHA1d38ab99b48cfcb3bb153f0a0493989615411238a
SHA256dfe7d9322f19c3d469fb5666250cc3dc1898f71fb6a278f724ef93201d343025
SHA512262e3562dcac18269940d1f6f8cc08f5cda73f0864e1f78362094435d76b547093f6965d8930decc7cafa0ca8c6538e1cbb2c9099cdc9b7e3d42011ff28569c7