Analysis
-
max time kernel
149s -
max time network
150s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
-
submitted
03/04/2025, 22:09
General
-
Target
116e89a276ed2ea060146a0b737c90666d4a64a71cc4369bcc427ee5d86c39e8.apk
-
Size
4.5MB
-
MD5
04fd1eea3da308190c90db6605e27f41
-
SHA1
a2d3244120aab2a12247d3930679ea45db16f80e
-
SHA256
116e89a276ed2ea060146a0b737c90666d4a64a71cc4369bcc427ee5d86c39e8
-
SHA512
c8e40b4b3a3c1a02c55de62f167a2c5e3b5197f3daf403158356ad6cb41510348b7e20777f3de110746ffcbe4b15aa2632f4d5f898467a0c05948d6a63a3a8d8
-
SSDEEP
49152:0JWu0kCiSbSjQC3G3FbERkk8EWo8Q3mXX:0c6S+QZERkktiX
Malware Config
Signatures
-
Android SoumniBot payload 2 IoCs
-
SoumniBot
SoumniBot is an Android banking trojan first seen in April 2024.
-
Soumnibot family
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes
-
rekvgre.wepfcoewd.rvldes1⤵
- Loads dropped Dex/Jar
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD59722de19868c4cd42ae277a7630a139e
SHA1feef47d0634a406a178f504951bf719b7f325028
SHA25638dc7b97b7efddadc5ded086383b92e8ca10fc6cd27adf50250d7060f1ccb0b7
SHA51295d0a9ed2105195eb054571cb67762f6247639667ae9533d5f33f5f94b87b9ba776a21096082eeabeb91946109701bac9dab8c271a4baba2ca83c2e41ec64d32
-
Filesize
1.8MB
MD556d704e5b6d06f64194f58d7d551af98
SHA19eea5661eb411cd786e8f603bb12ad64925ea38f
SHA25681f47fce2642304aa761a5ea1cb044a85380b9302401890312c477545c635a4f
SHA5127e6e5fd6cb43b65712e0764191af7a7cc39e10eea47ac2951dbe39444e71c40f1fa4189afc85abaa43e1c5bd13cd6943bc48217172834e0d07d345683f7fe9cf