General

  • Target

    6db2818224754ef464ec822736309d70

  • Size

    2.3MB

  • MD5

    6db2818224754ef464ec822736309d70

  • SHA1

    fbf47375d29f46fff5ae60810438d20039e30271

  • SHA256

    7dbc1913984df587b719deb24919b7dc98509aed378d020be343cc238e51ca19

  • SHA512

    a87683bfda1604e31905ac7c8cee9751cc8a3bc0afd223c49c01e30adac0876704c48050eefe761af660e0c60ce6f65bc843a5a46900b84ab2481244ef802df3

  • SSDEEP

    49152:siVnNraZNrT/+XzDnTq7cDqeZURUflLDq7EGMcHfAnfB1woIC:DVnNsN3kzqWXtLDqoGoUK

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 6db2818224754ef464ec822736309d70
    .rar
  • AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Headers

    Imports

    Sections

  • block
    .gz
  • block
    .elf linux arm
  • busybox
    .elf linux arm
  • evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • flood
    .gz
  • flood
    .elf linux arm
  • motofail
    .gz
  • motofail
    .elf linux arm
  • rageagainstthecage
    .gz
  • rageagainstthecage
    .elf linux arm
  • su
    .elf linux arm
  • superuser.apk
    .apk android arch:arm

    com.kingroot.kinguser

    com.kingroot.kinguser.Activitys.SlideMainActivity


  • thinkpwn
    .gz
  • thinkpwn
    .elf linux arm
  • xyz
    .gz
  • xyz
    .elf linux arm
  • zerg
    .gz
  • zerg
    .elf linux arm
  • zergRush
    .gz
  • zergRush.bak
    .elf linux arm