General

  • Target

    6b16fafa8b2cc7ce01c63ea258f54913fb13cd066e3d5269621b7c1792c53b6d.bin

  • Size

    2.6MB

  • MD5

    aaaaef6f82914104381a25997c8b3aa3

  • SHA1

    2deb806008e8fe728b78e7fc6eebba6793f1a09d

  • SHA256

    6b16fafa8b2cc7ce01c63ea258f54913fb13cd066e3d5269621b7c1792c53b6d

  • SHA512

    4d3be5445c8420abe583a1360ae3192b3eb745815bf49f8fb1c2dd557c81e95639e8d66ebf6e1f0400706f1d5b02d686b3cc7cb427b76e46be179a17547ab35f

  • SSDEEP

    24576:kqwT4m51+WtE0LGbVU0/rCqt+h4QEophH1TpJmFHE0xMUuCCaWQ:RJWu0L8+mQbphVKeUuCr

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 6b16fafa8b2cc7ce01c63ea258f54913fb13cd066e3d5269621b7c1792c53b6d.bin
    .apk android arch:arm64

    drgke.rpgor.ewlgfv

    drgke.rpgor.ewlgfv.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

6b16fafa8b2cc7ce01c63ea258f54913fb13cd066e3d5269621b7c1792c53b6d.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED