General

  • Target

    72281a505e398d2e667bbfbcded9de2fd9c456c082c33b2ae2c0711161d0d9b3.bin

  • Size

    2.6MB

  • MD5

    da860b788133f16ad5c46015b443b7e5

  • SHA1

    aaabd414d62492a279dad6a80ea7ef224d2b575b

  • SHA256

    72281a505e398d2e667bbfbcded9de2fd9c456c082c33b2ae2c0711161d0d9b3

  • SHA512

    ef3f90d20f5e3de816e80c01a92af4a64a226a4f3c66b5a9dd01801f797c61f301e4908c667eb3e64e1218c4b337255825f01230cd0c1f28ea7916577a407171

  • SSDEEP

    24576:kqwT4m51+WtE0LGbVU0/rCqt+h4QEophH1TpJmFHE0xMUuCFazmv:RJWu0L8+mQbphVKeUuC7v

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 72281a505e398d2e667bbfbcded9de2fd9c456c082c33b2ae2c0711161d0d9b3.bin
    .apk android arch:arm64

    drgke.rpgor.ewlgfv

    drgke.rpgor.ewlgfv.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

72281a505e398d2e667bbfbcded9de2fd9c456c082c33b2ae2c0711161d0d9b3.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED