Analysis
-
max time kernel
149s -
max time network
163s -
platform
android-13_x64 -
resource
android-33-x64-arm64-20240910-en -
resource tags
-
submitted
03/04/2025, 22:21
General
-
Target
5d488d6f28751c51816f791fda20900274df2fbc327e0a225405fc7500f8003d.apk
-
Size
4.6MB
-
MD5
6aea4d98efbd6006708cf8aeba3bc352
-
SHA1
e50626273446cdf49b3ba642eec0320f04e6e49d
-
SHA256
5d488d6f28751c51816f791fda20900274df2fbc327e0a225405fc7500f8003d
-
SHA512
2da36ac2b09530dd66ff9d6ed2831a285909256293d7514e4b6f6b95099440f8f2ca1cfecb1174818aa88b1e94cc05ecc6656aad4ff281599a2eb003682da33b
-
SSDEEP
49152:JJWu0JGQRxTV3AnRpJM34m2CmELf+9rusvQW4zF2:JcJGS+XkLf+9pl
Malware Config
Signatures
-
Android SoumniBot payload 2 IoCs
-
SoumniBot
SoumniBot is an Android banking trojan first seen in April 2024.
-
Soumnibot family
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes
-
regblt.ewlgvlrfe.ewdf1⤵
- Loads dropped Dex/Jar
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD55eba302fbc9fa1302f18a7d9718b1b2d
SHA1cbb5e86115804d78352f565cf5d829e238cfa598
SHA256df28507bfcfd95b164fecd28f54cb3766d9eacb49990bdcb54ac365da8774feb
SHA512b7c75d6caaecff1bd1af1eb24ba2e47dd0dec8d495b985e2ef50422f53cf9a728c83c33c4ad4fcfdda0d2966efcbe2aa1608924f4aa24600a62b17c2539d7cb7
-
Filesize
1.8MB
MD56883071e10a4eeacaaa40b21ade236ea
SHA1d38ab99b48cfcb3bb153f0a0493989615411238a
SHA256dfe7d9322f19c3d469fb5666250cc3dc1898f71fb6a278f724ef93201d343025
SHA512262e3562dcac18269940d1f6f8cc08f5cda73f0864e1f78362094435d76b547093f6965d8930decc7cafa0ca8c6538e1cbb2c9099cdc9b7e3d42011ff28569c7