Overview
overview
6Static
static
6SuperOneCl...pi.dll
windows7-x64
3SuperOneCl...pi.dll
windows10-2004-x64
3SuperOneCl...pi.dll
windows7-x64
1SuperOneCl...pi.dll
windows10-2004-x64
3SuperOneCl...db.exe
windows7-x64
1SuperOneCl...db.exe
windows10-2004-x64
1SuperOneCl...blinux
ubuntu-18.04-amd64
SuperOneCl...adbmac
macos-10.15-amd64
1SuperOneCl...ce.dll
windows7-x64
1SuperOneCl...ce.dll
windows10-2004-x64
1SuperOneCl...usybox
debian-9-armhf
1SuperOneCl...qlite3
debian-9-armhf
SuperOneCl...er.dll
windows7-x64
1SuperOneCl...er.dll
windows10-2004-x64
1SuperOneCl...09.dll
windows7-x64
1SuperOneCl...09.dll
windows10-2004-x64
1SuperOneCl...09.dll
windows7-x64
1SuperOneCl...09.dll
windows10-2004-x64
1SuperOneCl...r2.dll
windows7-x64
1SuperOneCl...r2.dll
windows10-2004-x64
1SuperOneCl...09.dll
windows7-x64
1SuperOneCl...09.dll
windows10-2004-x64
1SuperOneCl...09.dll
windows7-x64
1SuperOneCl...09.dll
windows10-2004-x64
1SuperOneCl...r2.dll
windows7-x64
4SuperOneCl...r2.dll
windows10-2004-x64
3SuperOneCl...neuter
debian-9-armhf
1SuperOneCl...rgRush
debian-9-armhf
SuperOneCl...er.apk
SuperOneCl...er.apk
android-10-x64
SuperOneCl...er.apk
android-11-x64
SuperOneCl.../su-v1
debian-9-armhf
Analysis
-
max time kernel
130s -
max time network
141s -
platform
macos-10.15_amd64 -
resource
macos-20231201-en -
resource tags
arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
22/12/2023, 05:00
Static task
static1
Behavioral task
behavioral1
Sample
SuperOneClickv2.3.1/ADB/AdbWinApi.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SuperOneClickv2.3.1/ADB/AdbWinApi.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
SuperOneClickv2.3.1/ADB/AdbWinUsbApi.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
SuperOneClickv2.3.1/ADB/AdbWinUsbApi.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
SuperOneClickv2.3.1/ADB/adb.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
SuperOneClickv2.3.1/ADB/adb.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
SuperOneClickv2.3.1/ADB/adblinux
Resource
ubuntu1804-amd64-20231222-en
Behavioral task
behavioral8
Sample
SuperOneClickv2.3.1/ADB/adbmac
Resource
macos-20231201-en
Behavioral task
behavioral9
Sample
SuperOneClickv2.3.1/AdbInterface.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
SuperOneClickv2.3.1/AdbInterface.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
SuperOneClickv2.3.1/Dependencies/busybox
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral12
Sample
SuperOneClickv2.3.1/Dependencies/sqlite3
Resource
debian9-armhf-20231222-en
Behavioral task
behavioral13
Sample
SuperOneClickv2.3.1/DriverInstaller.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
SuperOneClickv2.3.1/DriverInstaller.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
SuperOneClickv2.3.1/Drivers/amd64/WUDFUpdate_01009.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
SuperOneClickv2.3.1/Drivers/amd64/WUDFUpdate_01009.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
SuperOneClickv2.3.1/Drivers/amd64/WdfCoInstaller01009.dll
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
SuperOneClickv2.3.1/Drivers/amd64/WdfCoInstaller01009.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
SuperOneClickv2.3.1/Drivers/amd64/winusbcoinstaller2.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
SuperOneClickv2.3.1/Drivers/amd64/winusbcoinstaller2.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
SuperOneClickv2.3.1/Drivers/i386/WUDFUpdate_01009.dll
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
SuperOneClickv2.3.1/Drivers/i386/WUDFUpdate_01009.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
SuperOneClickv2.3.1/Drivers/i386/WdfCoInstaller01009.dll
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
SuperOneClickv2.3.1/Drivers/i386/WdfCoInstaller01009.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
SuperOneClickv2.3.1/Drivers/i386/winusbcoinstaller2.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
SuperOneClickv2.3.1/Drivers/i386/winusbcoinstaller2.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
SuperOneClickv2.3.1/Exploits/psneuter
Resource
debian9-armhf-20231222-en
Behavioral task
behavioral28
Sample
SuperOneClickv2.3.1/Exploits/zergRush
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral29
Sample
SuperOneClickv2.3.1/Root/Superuser.apk
Behavioral task
behavioral30
Sample
SuperOneClickv2.3.1/Root/Superuser.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral31
Sample
SuperOneClickv2.3.1/Root/Superuser.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral32
Sample
SuperOneClickv2.3.1/Root/su-v1
Resource
debian9-armhf-20231215-en
General
-
Target
SuperOneClickv2.3.1/ADB/adbmac
-
Size
167KB
-
MD5
959bf85533c2e8135985513f711b05d6
-
SHA1
80e65cc8ee68d16ee0f8ea6eec99d3699c2d6ed5
-
SHA256
c1508edcdf64d7c910528a01dd2b699eb6b6a6624375d0bd944b95536907c9bb
-
SHA512
3d0a6dcf42d5db4ce638a3a4e741c41da268530d18ba784fc4d9c069a5dc95c0d3bf7c37c2c26f5e7ae17b5b6a504190652f7b8329d703c9527a47f75e217b8d
-
SSDEEP
3072:w44L/Jubf+oNQokZUrW+kCan4KxDspTBftf+uoTV7sFTTDuCN7sF29w:EYT+oQokZUrPKxDyTB1fnoZ7sFPDl7sh
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/SuperOneClickv2.3.1/ADB/adbmac\""1⤵PID:517
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/SuperOneClickv2.3.1/ADB/adbmac\""1⤵PID:517
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/SuperOneClickv2.3.1/ADB/adbmac\""1⤵PID:517
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/SuperOneClickv2.3.1/ADB/adbmac1⤵PID:517
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/SuperOneClickv2.3.1/ADB/adbmac1⤵PID:517
-
/bin/zsh/bin/zsh -c /Users/run/SuperOneClickv2.3.1/ADB/adbmac2⤵PID:518
-
-
/bin/zsh/bin/zsh -c /Users/run/SuperOneClickv2.3.1/ADB/adbmac2⤵PID:518
-
-
/Users/run/SuperOneClickv2.3.1/ADB/adbmac/Users/run/SuperOneClickv2.3.1/ADB/adbmac2⤵PID:518
-
-
/Users/run/SuperOneClickv2.3.1/ADB/adbmac/Users/run/SuperOneClickv2.3.1/ADB/adbmac2⤵PID:518
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:554
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:554