Analysis
-
max time kernel
149s -
max time network
150s -
platform
android-13_x64 -
resource
android-33-x64-arm64-20240910-en -
resource tags
-
submitted
03/04/2025, 22:05
General
-
Target
2d45a49fc086d737d8591e38b924aee407c3a355a5c774a07e3d38fda98ec206.apk
-
Size
4.6MB
-
MD5
b251e3393019c792bab8887753eaeee5
-
SHA1
e3aea509212a774c0d7b67226af5af7e8a9a912c
-
SHA256
2d45a49fc086d737d8591e38b924aee407c3a355a5c774a07e3d38fda98ec206
-
SHA512
491b9a34dada54eae2fe8b60fc2963e96d1c6f8a809f6cde7f35fb65525c8def679a922f75fe5801dbeb6925d170ff3edcce766901d5dfcaa328adbe8c6dbfa6
-
SSDEEP
49152:vAJWu04F3r8PtLxej5aCQ1GuK9wZdR5KmUS1M/:YcHmg1VK9wZ/5KL/
Malware Config
Signatures
-
Android SoumniBot payload 2 IoCs
-
SoumniBot
SoumniBot is an Android banking trojan first seen in April 2024.
-
Soumnibot family
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes
-
edsvfkdsk.awspfvsed.sdefv1⤵
- Loads dropped Dex/Jar
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD525cc6e0380b052d44964f7d7584977ba
SHA19b4e992b4d91dbff9c1b9e038a5a474490f73b03
SHA256c724f6aa08eb4ab74b185451fa750f860b0c7450679159ac4ad243ceb1a839c5
SHA512b1ec21d8d1c57c7a31172260f0a8add1fc3e49e38b4e6bc09c763f67d61c5d89ea78b68ea1c1d751c554c07d0267f4910427492e987d3af587bbe1db298bfee4
-
Filesize
1.8MB
MD574d05fabbe99129f21f25713d312bbe9
SHA1e303db50213d33723df0668131829976ba64a4ca
SHA2561afafc1e209f3982e1dad6732d2c60d124d2c7ba9e2d761c84250ac7726a47d3
SHA512f69121e8d05d0a0d8d953bbbbabc946d8be4874a6f0b1c9eb348f9626fd99ea04e07e8bf38fdd85b481f8f43ebdc391288ceb12c65213387ba0fdfa802d0aeae