General

  • Target

    6ebce923b99eda2abd5fc27551cea7fd5dc34028144783475754084d080b6cb0.bin

  • Size

    2.6MB

  • MD5

    c8322806aa34ea8c172a9cdeb7329894

  • SHA1

    8f5286e25c001181ad69813f936fb42d739f7729

  • SHA256

    6ebce923b99eda2abd5fc27551cea7fd5dc34028144783475754084d080b6cb0

  • SHA512

    b063839278cc497039c62d654f274e1d673a2ae8d309731e84bef467be42263bf327c5be9abeba07df924c57ff7dd6e64f535a4ee29f97541e382f882174cbd6

  • SSDEEP

    24576:aLB24m51+WtE05casQ8S+B2Wb2rv944tek8G2smMmiqNzOz2rcNNddSWRa1CHLU:4JWu0Oe9YYcgNNddSvCH4

Score
10/10

Malware Config

Signatures

  • Android SoumniBot payload 1 IoCs
  • Soumnibot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 12 IoCs

Files

  • 6ebce923b99eda2abd5fc27551cea7fd5dc34028144783475754084d080b6cb0.bin
    .apk android arch:arm64

    rekvgr.pedvoer.welfvcsd

    rekvgr.pedvoer.welfvcsd.wefreg.erwgler.ssfskdekvgrfd


Android Permissions

6ebce923b99eda2abd5fc27551cea7fd5dc34028144783475754084d080b6cb0.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED