General

  • Target

    657f44293fdff9f158c9a084d3480ad3

  • Size

    2.8MB

  • MD5

    657f44293fdff9f158c9a084d3480ad3

  • SHA1

    a13788108ee6d383f2b0f6adae658da1220354f9

  • SHA256

    f35bd48ad667f034aa2c864d862645aca4b468c11ba6206f3073bb140496ed3e

  • SHA512

    378f05717f3dca483a968b2d87f4df8f31e435416190eda5b9fa9232fcf50894dfd0cf567b9bef7817b0427b70ef07f1482fe27bd977efb7eed424c0a386b5b0

  • SSDEEP

    49152:+50X8EWo/lnvH6B6+TYGI4kt7EgGd2UrzDlhGmkSkDrgSF/hnuBM0bu:DBB6NkGIRtov2UrntbsrgopnqMv

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 657f44293fdff9f158c9a084d3480ad3
    .rar
  • KingRoot v1.3.1/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • KingRoot v1.3.1/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot v1.3.1/adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Code Sign

    Headers

    Imports

    Sections

  • KingRoot v1.3.1/block
    .gz
  • block
    .elf linux arm
  • KingRoot v1.3.1/busybox
    .elf linux arm
  • KingRoot v1.3.1/evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • KingRoot v1.3.1/extapp.xml
  • KingRoot v1.3.1/exynos-abuse
    .elf linux arm
  • KingRoot v1.3.1/flood
    .gz
  • flood
    .elf linux arm