General

  • Target

    5aea4bb66efea9b123ad5f1df651fb16

  • Size

    3.0MB

  • MD5

    5aea4bb66efea9b123ad5f1df651fb16

  • SHA1

    4be47e6cadbb60e565d845b4961bef541ff93391

  • SHA256

    d93a5d7fcba4795f78a3c09aeca640f2849b2ecfa19911ee052ded5969b496cf

  • SHA512

    7ff7651411eb8a4d4d7fa0119f37a93c2c30f0ffc9450a43cb1c4a7a7a60e6aed912be792ebe04dd559f29efdf5f9012f4838baaf27a541caa005f4a33ecec9e

  • SSDEEP

    49152:/Fu4d5JlWjEP0G3fg3I18I9nVZpjXurjgNOiUS4bODD/sUmRS9BICPXgf:/4YSEzPucP9nPZXJzUlSXkNS9WCPX6

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 5aea4bb66efea9b123ad5f1df651fb16
    .rar
  • AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot.exe
    .exe windows:5 windows x86 arch:x86

    9e70a52d1bd9ce053c17b914156cdfb3


    Headers

    Imports

    Sections

  • adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Headers

    Imports

    Sections

  • block
    .gz
  • block
    .elf linux arm
  • busybox
    .elf linux arm
  • evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • flood
    .gz
  • flood
    .elf linux arm
  • libboy.so
    .apk android
  • libsuc.so
    .elf linux arm
  • libxy.so
    .elf linux arm
  • motofail
    .gz
  • motofail
    .elf linux arm
  • rageagainstthecage
    .gz
  • rageagainstthecage
    .elf linux arm
  • su
    .elf linux arm
  • superuser.apk
    .apk android arch:arm

    com.kingroot.kinguser

    com.kingroot.kinguser.Activitys.SlideMainActivity


  • thinkpwn
    .gz
  • thinkpwn
    .elf linux arm
  • xyz
    .gz
  • xyz
    .elf linux arm
  • zerg
    .gz
  • zerg
    .elf linux arm
  • zergRush
    .gz
  • zergRush.bak
    .elf linux arm
  • 河源下载站-cngr.cn.url
    .url
  • 淘宝热卖.url
    .url
  • ?!必读说明.txt