General

  • Target

    6cadfe921330e9f0d1929a7268277169

  • Size

    1.7MB

  • MD5

    6cadfe921330e9f0d1929a7268277169

  • SHA1

    868a7fb67fa3c19076ad97a31fd76efc386a555f

  • SHA256

    33d4bf1ba6a5bbc4c07d95a4f257fcbe735e04f03b83aa8df754aba0be6eb64b

  • SHA512

    779ec2dfe5a4d29ad853b31b44439e86617bba78d829011c82ebbc3f67f14de92f8dee08dd49c0eaae9425203951e819a2f8728afb2bab8f2e8b3e34846d32f2

  • SSDEEP

    24576:rAwUCUiRMXqalhxHcvILmluZHm2mwu7pxfWyt7dZ4NGnOVgdTvqBbd4FF6fSSElr:/Ub4Q9DcvuZG+u7ptaonjveJ6F6fyZ5

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 6cadfe921330e9f0d1929a7268277169
    .zip
  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/busybox
    .elf linux arm
  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/su
    .elf linux arm
  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/zergRush
    .elf linux arm
  • DooMLoRD_v1_ROOT-zergRush-busybox-su/runme.bat