General

  • Target

    5918e2b6e0c7ac00b366247a34f3e5f5a6fb8ceb97b16e468014fbb720155a31.bin

  • Size

    2.6MB

  • MD5

    39f17a1970ac8605277902cbc62456d5

  • SHA1

    c1c7708cf92bc992f374082fb81337ee8edf11e1

  • SHA256

    5918e2b6e0c7ac00b366247a34f3e5f5a6fb8ceb97b16e468014fbb720155a31

  • SHA512

    232f99f6674fd9a7073a19a3e89ab10361c0c7e1e527937259f5fecb5f49b49afd76c44ed10ca5dc9d7877638d09e1643b8bf39a26562a3f97eac0a4a7ef9405

  • SSDEEP

    24576:3HzhW/4m51+WtE09B1FiQHJ/zdsFdoztuM/Pc//Zmmc8I/qfC5W1:XfJWu09VJ/TE//ZmebC5u

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 5918e2b6e0c7ac00b366247a34f3e5f5a6fb8ceb97b16e468014fbb720155a31.bin
    .apk android arch:arm64

    reogo.eswpgfvrd.frdblg

    reogo.eswpgfvrd.frdblg.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

5918e2b6e0c7ac00b366247a34f3e5f5a6fb8ceb97b16e468014fbb720155a31.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED