General

  • Target

    64992e5193d55d9ecce58e27a69548fa

  • Size

    2.6MB

  • MD5

    64992e5193d55d9ecce58e27a69548fa

  • SHA1

    263a3189d67d593718a9a9a6678db59668cec493

  • SHA256

    03febb1d325650a1845a4b12fb9aa2c88bd0e3157416da48e75705d7d387f1ab

  • SHA512

    809fd4ac023846e19cc70f275ced1a5e55b074b52333defc3a2dee1279758b9fc49dc9bf8743a91c271f13ca3e2656d3f1334a5c93c396c402e133b6993c3a28

  • SSDEEP

    49152:+50X8EWo/lnvH6B6+TYGI4kt7EgGd2UrzDlhGmkSkDrgSF/hn3:DBB6NkGIRtov2Urntbsrgopn3

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 64992e5193d55d9ecce58e27a69548fa
    .rar
  • KingRoot v1.3.1/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • KingRoot v1.3.1/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot v1.3.1/adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Code Sign

    Headers

    Imports

    Sections

  • KingRoot v1.3.1/block
    .gz
  • block
    .elf linux arm
  • KingRoot v1.3.1/busybox
    .elf linux arm
  • KingRoot v1.3.1/evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • KingRoot v1.3.1/extapp.xml
  • KingRoot v1.3.1/exynos-abuse
    .elf linux arm
  • KingRoot v1.3.1/flood
    .gz
  • flood
    .elf linux arm