Overview
overview
6Static
static
6SuperOneCl...pi.dll
windows7-x64
3SuperOneCl...pi.dll
windows10-2004-x64
3SuperOneCl...pi.dll
windows7-x64
1SuperOneCl...pi.dll
windows10-2004-x64
3SuperOneCl...db.exe
windows7-x64
1SuperOneCl...db.exe
windows10-2004-x64
1SuperOneCl...blinux
ubuntu-18.04-amd64
SuperOneCl...adbmac
macos-10.15-amd64
1SuperOneCl...ce.dll
windows7-x64
1SuperOneCl...ce.dll
windows10-2004-x64
1SuperOneCl...usybox
debian-9-armhf
1SuperOneCl...qlite3
debian-9-armhf
SuperOneCl...er.dll
windows7-x64
1SuperOneCl...er.dll
windows10-2004-x64
1SuperOneCl...09.dll
windows7-x64
1SuperOneCl...09.dll
windows10-2004-x64
1SuperOneCl...09.dll
windows7-x64
1SuperOneCl...09.dll
windows10-2004-x64
1SuperOneCl...r2.dll
windows7-x64
1SuperOneCl...r2.dll
windows10-2004-x64
1SuperOneCl...09.dll
windows7-x64
1SuperOneCl...09.dll
windows10-2004-x64
1SuperOneCl...09.dll
windows7-x64
1SuperOneCl...09.dll
windows10-2004-x64
1SuperOneCl...r2.dll
windows7-x64
4SuperOneCl...r2.dll
windows10-2004-x64
3SuperOneCl...neuter
debian-9-armhf
1SuperOneCl...rgRush
debian-9-armhf
SuperOneCl...er.apk
SuperOneCl...er.apk
android-10-x64
SuperOneCl...er.apk
android-11-x64
SuperOneCl.../su-v1
debian-9-armhf
Analysis
-
max time kernel
118s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
22-12-2023 04:31
Static task
static1
Behavioral task
behavioral1
Sample
SuperOneClickv2.3.3-ShortFuse/ADB/AdbWinApi.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral2
Sample
SuperOneClickv2.3.3-ShortFuse/ADB/AdbWinApi.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
SuperOneClickv2.3.3-ShortFuse/ADB/AdbWinUsbApi.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral4
Sample
SuperOneClickv2.3.3-ShortFuse/ADB/AdbWinUsbApi.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
SuperOneClickv2.3.3-ShortFuse/ADB/adb.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral6
Sample
SuperOneClickv2.3.3-ShortFuse/ADB/adb.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
SuperOneClickv2.3.3-ShortFuse/ADB/adblinux
Resource
ubuntu1804-amd64-20231215-en
ubuntu-18.04-amd64
Behavioral task
behavioral8
Sample
SuperOneClickv2.3.3-ShortFuse/ADB/adbmac
Resource
macos-20231201-en
macos-10.15-amd64
Behavioral task
behavioral9
Sample
SuperOneClickv2.3.3-ShortFuse/AdbInterface.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral10
Sample
SuperOneClickv2.3.3-ShortFuse/AdbInterface.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
SuperOneClickv2.3.3-ShortFuse/Dependencies/busybox
Resource
debian9-armhf-20231215-en
debian-9-armhf
Behavioral task
behavioral12
Sample
SuperOneClickv2.3.3-ShortFuse/Dependencies/sqlite3
Resource
debian9-armhf-20231215-en
debian-9-armhf
Behavioral task
behavioral13
Sample
SuperOneClickv2.3.3-ShortFuse/DriverInstaller.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral14
Sample
SuperOneClickv2.3.3-ShortFuse/DriverInstaller.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
SuperOneClickv2.3.3-ShortFuse/Drivers/amd64/WUDFUpdate_01009.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral16
Sample
SuperOneClickv2.3.3-ShortFuse/Drivers/amd64/WUDFUpdate_01009.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
SuperOneClickv2.3.3-ShortFuse/Drivers/amd64/WdfCoInstaller01009.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral18
Sample
SuperOneClickv2.3.3-ShortFuse/Drivers/amd64/WdfCoInstaller01009.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
SuperOneClickv2.3.3-ShortFuse/Drivers/amd64/winusbcoinstaller2.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral20
Sample
SuperOneClickv2.3.3-ShortFuse/Drivers/amd64/winusbcoinstaller2.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
SuperOneClickv2.3.3-ShortFuse/Drivers/i386/WUDFUpdate_01009.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral22
Sample
SuperOneClickv2.3.3-ShortFuse/Drivers/i386/WUDFUpdate_01009.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
SuperOneClickv2.3.3-ShortFuse/Drivers/i386/WdfCoInstaller01009.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral24
Sample
SuperOneClickv2.3.3-ShortFuse/Drivers/i386/WdfCoInstaller01009.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
SuperOneClickv2.3.3-ShortFuse/Drivers/i386/winusbcoinstaller2.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral26
Sample
SuperOneClickv2.3.3-ShortFuse/Drivers/i386/winusbcoinstaller2.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
SuperOneClickv2.3.3-ShortFuse/Exploits/psneuter
Resource
debian9-armhf-20231215-en
debian-9-armhf
Behavioral task
behavioral28
Sample
SuperOneClickv2.3.3-ShortFuse/Exploits/zergRush
Resource
debian9-armhf-20231215-en
debian-9-armhf
Behavioral task
behavioral29
Sample
SuperOneClickv2.3.3-ShortFuse/Root/Superuser.apk
Behavioral task
behavioral30
Sample
SuperOneClickv2.3.3-ShortFuse/Root/Superuser.apk
Resource
android-x64-20231215-en
android-10-x64
Behavioral task
behavioral31
Sample
SuperOneClickv2.3.3-ShortFuse/Root/Superuser.apk
Resource
android-x64-arm64-20231215-en
android-11-x64
Behavioral task
behavioral32
Sample
SuperOneClickv2.3.3-ShortFuse/Root/su-v1
Resource
debian9-armhf-20231215-en
debian-9-armhf
General
-
Target
SuperOneClickv2.3.3-ShortFuse/Drivers/i386/WUDFUpdate_01009.dll
-
Size
1.8MB
-
MD5
e1bbe9e3568cf54598e9a8d23697b67e
-
SHA1
92e15dcab8dda0d4bf9cc9ae98e273567d3ecd57
-
SHA256
a902bb3bff785faaeb6432be76f798627a80b2cc45441e16440e46e6d7340f2c
-
SHA512
01a04dda0ee36196054d2cc45c9aea7c9467d9f46ee9cf354d8f93260519bd1968b340dc2be3e4ce966bbb6e332f5aa72f29edc1bfb8e8d19decba7c2df3106e
-
SSDEEP
49152:qHAPbyCYhUJodNcmvwwoaehBUfrQHtmr8UQm3:OWyCYhUJ0cYoa0+TQHYr6m3
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1852 wrote to memory of 1684 1852 rundll32.exe 28 PID 1852 wrote to memory of 1684 1852 rundll32.exe 28 PID 1852 wrote to memory of 1684 1852 rundll32.exe 28 PID 1852 wrote to memory of 1684 1852 rundll32.exe 28 PID 1852 wrote to memory of 1684 1852 rundll32.exe 28 PID 1852 wrote to memory of 1684 1852 rundll32.exe 28 PID 1852 wrote to memory of 1684 1852 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SuperOneClickv2.3.3-ShortFuse\Drivers\i386\WUDFUpdate_01009.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1852 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SuperOneClickv2.3.3-ShortFuse\Drivers\i386\WUDFUpdate_01009.dll,#12⤵PID:1684
-