Analysis
-
max time kernel
149s -
max time network
161s -
platform
android-13_x64 -
resource
android-33-x64-arm64-20240910-en -
resource tags
-
submitted
03/04/2025, 22:04
General
-
Target
be53fe9013de3d564ff883f7b68121388a1242494f2539f9ebb96424b45c3817.apk
-
Size
4.6MB
-
MD5
37e723ec30d4850e7c05f1d02110215a
-
SHA1
c5bf6a80c30f427164bac6779628605319354156
-
SHA256
be53fe9013de3d564ff883f7b68121388a1242494f2539f9ebb96424b45c3817
-
SHA512
9d15b182720665f08a337c21704a23ed27e1231da79bb32dacae6688ac3af0deda9c1934feea5da22275e2383c561542b67d9dde685df2c66a5bb40d9398aad9
-
SSDEEP
49152:JJWu0JGQRxTV3AnRpJM34m2COPAf+9rusvQW4zFd:JcJGS+XPAf+9p2
Malware Config
Signatures
-
Android SoumniBot payload 2 IoCs
-
SoumniBot
SoumniBot is an Android banking trojan first seen in April 2024.
-
Soumnibot family
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes
-
regblt.ewlgvlrfe.ewdf1⤵
- Loads dropped Dex/Jar
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD55eba302fbc9fa1302f18a7d9718b1b2d
SHA1cbb5e86115804d78352f565cf5d829e238cfa598
SHA256df28507bfcfd95b164fecd28f54cb3766d9eacb49990bdcb54ac365da8774feb
SHA512b7c75d6caaecff1bd1af1eb24ba2e47dd0dec8d495b985e2ef50422f53cf9a728c83c33c4ad4fcfdda0d2966efcbe2aa1608924f4aa24600a62b17c2539d7cb7
-
Filesize
1.8MB
MD56883071e10a4eeacaaa40b21ade236ea
SHA1d38ab99b48cfcb3bb153f0a0493989615411238a
SHA256dfe7d9322f19c3d469fb5666250cc3dc1898f71fb6a278f724ef93201d343025
SHA512262e3562dcac18269940d1f6f8cc08f5cda73f0864e1f78362094435d76b547093f6965d8930decc7cafa0ca8c6538e1cbb2c9099cdc9b7e3d42011ff28569c7