General

  • Target

    5d488d6f28751c51816f791fda20900274df2fbc327e0a225405fc7500f8003d.bin

  • Size

    4.6MB

  • MD5

    6aea4d98efbd6006708cf8aeba3bc352

  • SHA1

    e50626273446cdf49b3ba642eec0320f04e6e49d

  • SHA256

    5d488d6f28751c51816f791fda20900274df2fbc327e0a225405fc7500f8003d

  • SHA512

    2da36ac2b09530dd66ff9d6ed2831a285909256293d7514e4b6f6b95099440f8f2ca1cfecb1174818aa88b1e94cc05ecc6656aad4ff281599a2eb003682da33b

  • SSDEEP

    49152:JJWu0JGQRxTV3AnRpJM34m2CmELf+9rusvQW4zF2:JcJGS+XkLf+9pl

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 5d488d6f28751c51816f791fda20900274df2fbc327e0a225405fc7500f8003d.bin
    .apk android arch:arm64

    regblt.ewlgvlrfe.ewdf

    regblt.ewlgvlrfe.ewdf.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

5d488d6f28751c51816f791fda20900274df2fbc327e0a225405fc7500f8003d.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED