General

  • Target

    f1a6f7c65a91cc2e78c75e5eebd10b294ee132795d70e5d5104e5a8812f5acd4.bin

  • Size

    2.6MB

  • MD5

    0ae3f2ff02b4c7c43df449664b54c35a

  • SHA1

    a3b5aa9bd4cb6ee24e956d857807d1e41567791d

  • SHA256

    f1a6f7c65a91cc2e78c75e5eebd10b294ee132795d70e5d5104e5a8812f5acd4

  • SHA512

    6b0919ff838356028957b61dc76bd2cdab6fa688260416ba05ffdb786fc75c144e7590911f83e8e3fda731f29aba3b0156810c6e2d69e17eed206ead515b1eb0

  • SSDEEP

    24576:K2An4m51+WtE0x0J534E7fYOpPseljmkIrPN98m0eCffEDh3nMFl59zYXg7VHLz3:K74JWu0IJSeljo4R9jCIzp

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • f1a6f7c65a91cc2e78c75e5eebd10b294ee132795d70e5d5104e5a8812f5acd4.bin
    .apk android arch:arm64

    rfgbrd.ewsdgvfr.edwksg

    rfgbrd.ewsdgvfr.edwksg.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

f1a6f7c65a91cc2e78c75e5eebd10b294ee132795d70e5d5104e5a8812f5acd4.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED