General

  • Target

    412e23459f733b4bb0e5a173624457c632e04397e364ea5a503e71e93526efe7.bin

  • Size

    2.6MB

  • MD5

    11a00096901c5ed14f17a7fe9ba557ec

  • SHA1

    69e2536f36d1a93ee60d2abec3302c27a07f9d9d

  • SHA256

    412e23459f733b4bb0e5a173624457c632e04397e364ea5a503e71e93526efe7

  • SHA512

    15c93c2aab90fed667140e346a1d6fc701ea4b44c1f32297d9af02786d927c6845058c283d412bc065ce830b635f1b3ce7769f3c861411afba9f2de89d705a07

  • SSDEEP

    24576:sr4m51+WtE0+gDdgm8xrroKlyAkbrIGhWUlEcsQVfCdLZ:9JWu0ddgm8xx2dWcEcJCdt

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 412e23459f733b4bb0e5a173624457c632e04397e364ea5a503e71e93526efe7.bin
    .apk android arch:arm64

    redkg.weogfivre.wefo

    redkg.weogfivre.wefo.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

412e23459f733b4bb0e5a173624457c632e04397e364ea5a503e71e93526efe7.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK