General

  • Target

    13a24ae4d26c47e747a66effdfef6f6ec8782f94b303942b2eecf6d93c6e5a8b.bin

  • Size

    2.6MB

  • MD5

    6bcc5cbe5a284b23357e09d2e7d78ff2

  • SHA1

    fef5667a573c8b33719eb36ce24fbfb0f2cc630a

  • SHA256

    13a24ae4d26c47e747a66effdfef6f6ec8782f94b303942b2eecf6d93c6e5a8b

  • SHA512

    ed4226c0a19fabc5f4633fac6389175b72ca066ad7d29df28ffd2aeb03e4a934b31ad68e76c72c5510bc4c2e3898c0100ac07651328b71faebc9dffc9f96e122

  • SSDEEP

    24576:aLB24m51+WtE05casQ8S+B2Wb2rv944tek8G2smMmiqNzOz2rcNNddSWRa1CVha:4JWu0Oe9YYcgNNddSvCVY

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 13a24ae4d26c47e747a66effdfef6f6ec8782f94b303942b2eecf6d93c6e5a8b.bin
    .apk android arch:arm64

    rekvgr.pedvoer.welfvcsd

    rekvgr.pedvoer.welfvcsd.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

13a24ae4d26c47e747a66effdfef6f6ec8782f94b303942b2eecf6d93c6e5a8b.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED