General

  • Target

    10d6eb4c1411955d521640d4c70b544fe9fe4b09433f132bc2f4abbc6e098509.bin

  • Size

    2.6MB

  • MD5

    3ea8bc01f668299b4ebeda4c8242e3e2

  • SHA1

    b836281c48b75d6675c2caa2660baa5fa420efba

  • SHA256

    10d6eb4c1411955d521640d4c70b544fe9fe4b09433f132bc2f4abbc6e098509

  • SHA512

    bc380cef800b780bd671b46ab798171154028701e8a4e3bd01ee9cc6c4c18836f8e341e0d709e2c8663f8dc89a4fcf1a29a6a88a4ab365dbec6d9765fd40314c

  • SSDEEP

    24576:kqwT4m51+WtE0LGbVU0/rCqt+h4QEophH1TpJmFHE0xMUuC8aUZ:RJWu0L8+mQbphVKeUuCK

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 10d6eb4c1411955d521640d4c70b544fe9fe4b09433f132bc2f4abbc6e098509.bin
    .apk android arch:arm64

    drgke.rpgor.ewlgfv

    drgke.rpgor.ewlgfv.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

10d6eb4c1411955d521640d4c70b544fe9fe4b09433f132bc2f4abbc6e098509.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED