General

  • Target

    b36a9e05332bdc76692c585d0349f905dc684f6515b55d3e59c397d70f6ef7e2.bin

  • Size

    2.6MB

  • MD5

    36850c62ab613134ee010798f2dabc3d

  • SHA1

    65e8707d73f172044e7e2d0524cb461ed8c97aac

  • SHA256

    b36a9e05332bdc76692c585d0349f905dc684f6515b55d3e59c397d70f6ef7e2

  • SHA512

    5109bfc7d4e96cfb6128605296c86d99a50b103636e2b40779641b70c18a002c2ac7ba5311d4ff47e8c8b8b58d50296349ad8a640f792149938fdbed402d9510

  • SSDEEP

    24576:PN4m51+WtE0FmHvFqfE6T73A69zpzmu5njRhVMZleC1qy:PuJWu0FUi73AUCu5nRjC1z

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • b36a9e05332bdc76692c585d0349f905dc684f6515b55d3e59c397d70f6ef7e2.bin
    .apk android arch:arm64

    edwglvle.pwegdover.flbdr

    edwglvle.pwegdover.flbdr.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

b36a9e05332bdc76692c585d0349f905dc684f6515b55d3e59c397d70f6ef7e2.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED