Overview

overview

7

Static

static

7

ADB/AdbWinApi.dll

windows7-x64

3

ADB/AdbWinApi.dll

windows10-2004-x64

3

ADB/AdbWinUsbApi.dll

windows7-x64

1

ADB/AdbWinUsbApi.dll

windows10-2004-x64

1

ADB/adb.exe

windows7-x64

1

ADB/adb.exe

windows10-2004-x64

1

ADB/adblinux

ubuntu-18.04-amd64

AdbInterface.dll

windows7-x64

1

AdbInterface.dll

windows10-2004-x64

1

Dependencies/busybox

debian-9-armhf

1

Dependencies/sqlite3

debian-9-armhf

DriverInstaller.dll

windows7-x64

1

DriverInstaller.dll

windows10-2004-x64

1

Drivers/am...09.dll

windows7-x64

1

Drivers/am...09.dll

windows10-2004-x64

1

Drivers/am...09.dll

windows7-x64

1

Drivers/am...09.dll

windows10-2004-x64

1

Drivers/am...r2.dll

windows7-x64

3

Drivers/am...r2.dll

windows10-2004-x64

3

Drivers/i3...09.dll

windows7-x64

1

Drivers/i3...09.dll

windows10-2004-x64

1

Drivers/i3...09.dll

windows7-x64

1

Drivers/i3...09.dll

windows10-2004-x64

1

Drivers/i3...r2.dll

windows7-x64

3

Drivers/i3...r2.dll

windows10-2004-x64

3

Exploits/psneuter

debian-9-armhf

1

Exploits/zergRush

debian-9-armhf

Root/Superuser.apk

android-9-x86

Root/Superuser.apk

android-10-x64

Root/Superuser.apk

android-11-x64

Root/su-v1

debian-9-armhf

Root/su-v2

debian-9-armhf

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f4ecbc5374e9f0aaa009153cf4a81f34d11a05085583de4ba522aafbd57e7c7

  • Size

    10.1MB

  • Sample

    221127-angxaaag5x

  • MD5

    f362f1c9ca2f583ec17a6309f2996699

  • SHA1

    d3595d74f9543bab4f1fe35cc76a8901e5bf8a35

  • SHA256

    9f4ecbc5374e9f0aaa009153cf4a81f34d11a05085583de4ba522aafbd57e7c7

  • SHA512

    315b380c450eff254a1afd76094d8f2523c78d0d0d14840e09b75a9903b7fb769fdde87557df39c765af2fa1c4526f0e4b7b7f57826b3d07eb846db7a3122283

  • SSDEEP

    196608:PC5EDzR6GSXWhSFpJGaYU9fjkwiOo4JFznYrDQUSCifMnym9Gek/SMzWMFIdJoP:ak2XY8pJ99+4rYr0US7MyFvqMqMw+P

Score
7/10
androidlinux

Malware Config

Targets

    • Target

      ADB/AdbWinApi.dll

    • Size

      94KB

    • MD5

      47a6ee3f186b2c2f5057028906bac0c6

    • SHA1

      fde9c22a2cfcd5e566cec2e987d942b78a4eeae8

    • SHA256

      14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b

    • SHA512

      6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584

    • SSDEEP

      1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG

    Score
    3/10
    behavioral1behavioral2

    • Target

      ADB/AdbWinUsbApi.dll

    • Size

      59KB

    • MD5

      5f23f2f936bdfac90bb0a4970ad365cf

    • SHA1

      12e14244b1a5d04a261759547c3d930547f52fa3

    • SHA256

      041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407

    • SHA512

      49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048

    • SSDEEP

      768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI

    Score
    1/10
    behavioral3behavioral4

    • Target

      ADB/adb.exe

    • Size

      158KB

    • MD5

      5feac52dcc12aac39568660c8299b0f9

    • SHA1

      2e7df3e89fe0779d37b6daef19544e8bec20f1b3

    • SHA256

      8f4c36131c1a75506e0ac0e9528ee084425b4039027e81a778d057496050cb5b

    • SHA512

      fe90f2678b9a53f4c2ca809f262412eb6817530b55683fe92bfeb461ed8988fdb948d2d49f62e0ee02133e5df17ab3397daf60e3bf03b1f88db6684fbb641b5b

    • SSDEEP

      3072:XxR6RERIILUWM/yegPQ3uxY8ebRTR1aHaWO2fapUGpURnTBfL:GyRIOeg4+Tw/GNO2fapUGpSnTBD

    Score
    1/10
    behavioral5behavioral6

    • Target

      ADB/adblinux

    • Size

      331KB

    • MD5

      d00ab6f0b6426369bbb360ccd9fd763a

    • SHA1

      979c6a1035bbb40d2ad4ac9a62775bd25b01ab8c

    • SHA256

      be6548b69b398e7b63453fc7ae5c68018717ce10e077436506ddae28ef4097cf

    • SHA512

      89de5d6702533efd8321556cfb7bbdecc77dd339b9644ec61a5d8069fbe2df702b01390d6f38f219249c0540cdbefe9036792e5446ecc49c7c23d07e35374685

    • SSDEEP

      6144:Hv75L7YdA2z8sqDSTBbjL3IAvxmVSNMmDJsc++WsX01pkGL6/:HVLkB8sqDSTZffrMmDJVkpkGL6/

    Score
    1/10
    behavioral7

    • Target

      AdbInterface.dll

    • Size

      18KB

    • MD5

      7f72c816edfda7d0bb75f70f16516127

    • SHA1

      58513383d830ca7f0be41a4210680abaf450e5c9

    • SHA256

      193022ad432249e809f42be670930c80b771977171f77a3a17143f671b0e6e5f

    • SHA512

      535bdcd3b928b4099260f95477f087f950232ddd79d7d198970de03a4e80cc4577b0d4cb10b0c8d3418f533c38d9bef83c3812234a40912874ae2b73f37bc92f

    • SSDEEP

      384:d/JLpcZgsBGhXKwSOkHuxQMpeXysZcyAcC/gVhJpTBXB8My:rmuCXIMB89

    Score
    1/10
    behavioral8behavioral9

    • Target

      Dependencies/busybox

    • Size

      1.0MB

    • MD5

      94e5efab5f0115baab91376ebfb3ad98

    • SHA1

      cdd4bed059430b078d0dd645314ef3e6d033127e

    • SHA256

      10b4cf8acca6c32cc4ab376795b7aedefd0c43ae6446b628bee98aaee04e2c69

    • SHA512

      46ad5e490cf9d42a0372532970a6742ae96d71f06532affd8c0a6398ea12adac819f8631c7638b83e584fb42c9f119265abbb5eede5fd854a330f890fd5145ef

    • SSDEEP

      24576:m4HwDJXr2RekRaXmtxL6NH7VAXIjw0AYobjdn0P5i1ELW:aJXbkEKHYoXN0P5+

    Score
    1/10
    behavioral10

    • Target

      Dependencies/sqlite3

    • Size

      23KB

    • MD5

      402e66f894a431263d5deac22c88f3f5

    • SHA1

      a4a2ec06b903130c60d7bddaba3f598055520dd1

    • SHA256

      d389680ffc4e6741b821e112837a41c536ea759a2c5774ba0dac0a2a81a7d01b

    • SHA512

      0ba996ea46454f3322360e7840fcef6254eae435ffa83ce018be5d32d6425d3ed855a4699e40a8e819c7a7051253e841fdada0700ca90df191cf24373d2ef4f7

    • SSDEEP

      384:cuSC9i1ZQKrIx8lDqVKdl7VRW2kUfq+XWXaWedHqCVsUjAyWDeg9ra1:Jv5K+8ISBRfkoq+XcJNbRd

    Score
    1/10
    behavioral11

    • Target

      DriverInstaller.dll

    • Size

      14KB

    • MD5

      84067761074cf0444c684799941f4fc8

    • SHA1

      f049718f232758872571cab8c0f0ce9667cde1e8

    • SHA256

      57b239cb98a15de66b8aed04e14302bcfce351ff14cdc579283fb41634f72b8c

    • SHA512

      5d96b430d06d02993ba205e73ea47830dede7485a24ae12f7e4450d9f80581bc369f71c06ba41ff518953ec18d221cc05e0c3ac9d2bce669a91125e13f5c2e77

    • SSDEEP

      192:7fg494ZRUffgJ78m4kzb3Uyw+Ssnzko848Aa4B7k7Ovwvvja/:l988gb6szkR4k4BYlXja/

    Score
    1/10
    behavioral12behavioral13

    • Target

      Drivers/amd64/WUDFUpdate_01009.dll

    • Size

      2.1MB

    • MD5

      ebf9ee8a7671f3b260ed9b08fcee0cc5

    • SHA1

      d9688d1849a86dd209732529375c6ada272ff8fd

    • SHA256

      015f26bbcd619a0b67b5eaa985b69582bac27d5cbca99ce747a76532fcde4aff

    • SHA512

      ea869026b73b4c3d0249beb1fe81efc8b2686d66c5ddf916d314c21989e68a12191efc2a32ef13caf2676327159e95fc4e69100fc09df5a7bbf5c019ea383dd8

    • SSDEEP

      49152:nFSDIHkg+yf6+ZsYx6h8hL8RWVtma96U1wrfjKClR4:FvHkWpsYxQgttBJ1wLXli

    Score
    1/10
    behavioral14behavioral15

    • Target

      Drivers/amd64/WdfCoInstaller01009.dll

    • Size

      1.6MB

    • MD5

      4da5da193e0e4f86f6f8fd43ef25329a

    • SHA1

      68a44d37ff535a2c454f2440e1429833a1c6d810

    • SHA256

      18487b4ff94edccc98ed59d9fca662d4a1331c5f1e14df8db3093256dd9f1c3e

    • SHA512

      b3d73ed5e45d6f2908b2f3086390dd28c1631e298756cee9bdf26b185f0b77d1b8c03ad55e0495dba982c5bed4a03337b130c76f7112f3e19821127d2cf36853

    • SSDEEP

      24576:oU4MsColC6Je/ZgY7OOfcEpiRLH87SyVXGe38uKUj+NFVov1PJLfVKZ8F5mEeZWF:BFCsfZRZA6Xn388avVovfLd+Mo4iEF

    Score
    1/10
    behavioral16behavioral17

    • Target

      Drivers/amd64/winusbcoinstaller2.dll

    • Size

      979KB

    • MD5

      246900ce6474718730ecd4f873234cf5

    • SHA1

      0c84b56c82e4624824154d27926ded1c45f4b331

    • SHA256

      981a17effddbc20377512ddaec9f22c2b7067e17a3e2a8ccf82bb7bb7b2420b6

    • SHA512

      6a9e305bfbfb57d8f8fd16edabef9291a8a97e4b9c2ae90622f6c056e518a0a731fbb3e33a2591d87c8e4293d0f983ec515e6a241792962257b82401a8811d5c

    • SSDEEP

      24576:aAEBXzGJ7fW6hHv62VYeL7WCE3wixdLZWQzMjp:uBXQz/hPzxRwPdcO

    Score
    3/10
    behavioral18behavioral19

    • Target

      Drivers/i386/WUDFUpdate_01009.dll

    • Size

      1.8MB

    • MD5

      e1bbe9e3568cf54598e9a8d23697b67e

    • SHA1

      92e15dcab8dda0d4bf9cc9ae98e273567d3ecd57

    • SHA256

      a902bb3bff785faaeb6432be76f798627a80b2cc45441e16440e46e6d7340f2c

    • SHA512

      01a04dda0ee36196054d2cc45c9aea7c9467d9f46ee9cf354d8f93260519bd1968b340dc2be3e4ce966bbb6e332f5aa72f29edc1bfb8e8d19decba7c2df3106e

    • SSDEEP

      49152:qHAPbyCYhUJodNcmvwwoaehBUfrQHtmr8UQm3:OWyCYhUJ0cYoa0+TQHYr6m3

    Score
    1/10
    behavioral20behavioral21

    • Target

      Drivers/i386/WdfCoInstaller01009.dll

    • Size

      1.4MB

    • MD5

      a9970042be512c7981b36e689c5f3f9f

    • SHA1

      b0ba0de22ade0ee5324eaa82e179f41d2c67b63e

    • SHA256

      7a6bf1f950684381205c717a51af2d9c81b203cb1f3db0006a4602e2df675c77

    • SHA512

      8377049f0aaef7ffcb86d40e22ce8aa16e24cad78da1fb9b24edfbc7561e3d4fd220d19414fa06964692c54e5cbc47ec87b1f3e2e63440c6986cb985a65ce27d

    • SSDEEP

      24576:GjG90oN2lj11mk/22yYzGrarZRm4X5Uh6rVh5LdfBwOyCSQM1fFhSWRA2+:iGtN2h1120R7m4XShYVxfBwrC21fXSz

    Score
    1/10
    behavioral22behavioral23

    • Target

      Drivers/i386/winusbcoinstaller2.dll

    • Size

      831KB

    • MD5

      8e7b9f81e8823fee2d82f7de3a44300b

    • SHA1

      1633b3715014c90d1c552cd757ef5de33c161dee

    • SHA256

      ebe3b7708dd974ee87efed3113028d266af87ca8dbae77c47c6f7612824d3d6c

    • SHA512

      9ae37b2747589a0eb312473d895ef87404f4a395a27e15855826a75b4711ea934ca9a2b289df0abe0a8825dec2d5654a0b1603cf0b039fe25662359b730ce1a9

    • SSDEEP

      12288:cZq3DFVAZjj5h7OqGDqY66s32+0SLqfhA50yWI7yBoM1oGloLwtxJYnPXrmQlT:cZwoP7MYG+pX501zBoC+wtxuPXrmQlT

    Score
    3/10
    behavioral24behavioral25

    • Target

      Exploits/psneuter

    • Size

      572KB

    • MD5

      861f1925ee367c5d7b95610fee2c4969

    • SHA1

      ca5fbaefe7f0923a65ca47b86013d7ed9aebbf2f

    • SHA256

      90a81fa2c7998566bd4de70d92e9bda1a03cb385f46a528ba6a64557406036bc

    • SHA512

      5cea72be9f7230a8da84a528a04952ded2570137cc7a3e04839f7b5b8dec0a29bc950c2c16276376e07c9136ad1b8496a3c2863033b9824b9540f4983f02da46

    • SSDEEP

      12288:9TLtOTp+6vul9lKTpxo0SP0J5Sp2hvfa4N2ghoLRDzk/qkh6kV:St+6nT1nrfRzoLRs/qo6m

    Score
    1/10
    behavioral26

    • Target

      Exploits/zergRush

    • Size

      22KB

    • MD5

      4a32187446c284c2b975845f3ab9ffc4

    • SHA1

      2483ed987a0c85b80495bb0082bc33b03f76d64f

    • SHA256

      77ecc4687dc521032a9626925ac22f10cc585d6705706e7e4e173d3bb5dc3f63

    • SHA512

      753b975f3ed7252db2f74dc110a3fb4f1d52c6bab8bb1485f3657cada30c0c260f302e3b72d5fcc600405e491edf6fda2a6ee7d6b12cdd2fb9df9b91b4be5359

    • SSDEEP

      192:+zXMMeAYh3ApF8egUkWAgRcWhak6MnZL3NUtBn0LmA5YJ8DP+94s1c4p/IM7hFFp:+QD3gae3kLubNUL0LmAmjfc9sjDII

    Score
    1/10
    behavioral27

    • Target

      Root/Superuser.apk

    • Size

      823KB

    • MD5

      65bd72996c68f289c5fa0b81f0874127

    • SHA1

      ee246d6e91017768e82b2d17e22e4044e4b7da2f

    • SHA256

      8135f47bab91a26adfd563ed4dd22e25f454dfae02a076b6f3cd05604f2068a8

    • SHA512

      713468d5bce2d42d7d914077a4edc9e2b6d5fef0b657dce302750bb99b4dee3b0859c7722b4ad5b4dc125680f6690c9ee9ecd6baae1bdd21fe927a155765305a

    • SSDEEP

      12288:vwox9LddQ050PS59VJo1yOjLLfLHNm41awK4OhioC08pYAj4X5yXDn:Iox9XKyOL/tiXoDn

    Score
    1/10
    behavioral28behavioral29behavioral30

    • Target

      Root/su-v1

    • Size

      21KB

    • MD5

      c105789316957237f5fd14a114c11259

    • SHA1

      f188c64314b22e0e372463825674970d6dabe2cf

    • SHA256

      5901487ce2f64fd6519a07fc9756cac246628a2d7114512fed1ee3f1ed43e578

    • SHA512

      ac0fd0589133024219e4b996b8c71e8eff88390b5a94e60320f4409b94e798221112b93c7941d6c747738e22ed9a9643eb70ef9175d2fd8bab32324c965b2942

    • SSDEEP

      192:yVSKxAk1xCnzs5wkBkTPkgXI54NVnMeMkf/zPNA6rA8n61U:yUCD1wfPRXn3MC/zuK961U

    Score
    1/10
    behavioral31

    • Target

      Root/su-v2

    • Size

      21KB

    • MD5

      c4fbd6312adc20f067cfa35cd262bca7

    • SHA1

      3fd7e0bee4e41d7549246a7e814ea50eddd3147b

    • SHA256

      b959a48976e2cd318678bbfa009aa842426ee90799dacd34885d59052949cdb7

    • SHA512

      11457ac81faa6c93c3e56e95325dc2eb22439a2663e97547a1a24c05e15971fde85e7ac57e6667c65ba90ab58c08be93f06ac2ff311f5e06a12e52774596b2d7

    • SSDEEP

      192:WIHIsWM35kbnaPmiQ9V/efoizwKkfqp7sOqq8ho1KKKKKKKKKKKKKKKKKKKKKKKb:lWrUmd9QYq7tqrhofS

    Score
    1/10
    behavioral32

MITRE ATT&CK Matrix

Tasks