General

  • Target

    67cc301643507639f40d7b827e615ce181b58b706e40f3fa32363a3ea73f924f.bin

  • Size

    2.6MB

  • MD5

    2cf5d0e30ada7faf1e6d850ece62e44c

  • SHA1

    20e547eadc7e8a6fe11b109a8da39bdc2d4f35c8

  • SHA256

    67cc301643507639f40d7b827e615ce181b58b706e40f3fa32363a3ea73f924f

  • SHA512

    9c729fd987a39d42962d93b391bb77962639eb8b1acb3c7dd988ea0811cd69b86651c9e71e682843cd4aed9bfec909bf38680cda5aa3706284f51309b653c103

  • SSDEEP

    24576:kqwT4m51+WtE0LGbVU0/rCqt+h4QEophH1TpJmFHE0xMUuCjaUx9:RJWu0L8+mQbphVKeUuCl9

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 67cc301643507639f40d7b827e615ce181b58b706e40f3fa32363a3ea73f924f.bin
    .apk android arch:arm64

    drgke.rpgor.ewlgfv

    drgke.rpgor.ewlgfv.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

67cc301643507639f40d7b827e615ce181b58b706e40f3fa32363a3ea73f924f.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED