General

  • Target

    7009c71ec73a4aa463459690d9d10b07

  • Size

    4.0MB

  • Sample

    231222-fwh27shagq

  • MD5

    7009c71ec73a4aa463459690d9d10b07

  • SHA1

    1e014feb585bbc2fc5bdd3d159d598209eba81d0

  • SHA256

    214d4769d5859e7f3ea12c98f00aee573c03700bd46661da0af9bd6a5b41f93a

  • SHA512

    84fd36906533e88e2d6ee57600b620925b808b9e96a07f6d17f7f777b8a876a991a08ca4ae85a480d77a48f444f318e104f680dbb379eced00d1367bf78a4f0c

  • SSDEEP

    98304:5eDWuQPosUMaCXQNZcg9QrLtA0YYAVFEQ84oevP/USvMK2:UD/Ml82QNZcgWrZAmWW+Vv1MK2

Score
6/10

Malware Config

Targets

    • Target

      KingRoot v1.3 2012.12.21.1805/AdbWinApi.dll

    • Size

      94KB

    • MD5

      47a6ee3f186b2c2f5057028906bac0c6

    • SHA1

      fde9c22a2cfcd5e566cec2e987d942b78a4eeae8

    • SHA256

      14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b

    • SHA512

      6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584

    • SSDEEP

      1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG

    Score
    3/10
    • Target

      KingRoot v1.3 2012.12.21.1805/AdbWinUsbApi.dll

    • Size

      59KB

    • MD5

      5f23f2f936bdfac90bb0a4970ad365cf

    • SHA1

      12e14244b1a5d04a261759547c3d930547f52fa3

    • SHA256

      041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407

    • SHA512

      49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048

    • SSDEEP

      768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI

    Score
    3/10
    • Target

      KingRoot v1.3 2012.12.21.1805/KingRoot.exe

    • Size

      5.3MB

    • MD5

      80e6a330bd476e97bc0bb74a3a7ba514

    • SHA1

      449425ac434c18104f18264c0f8821346f3f7953

    • SHA256

      879ac3fa339baeaa77aec0795d20da8d40f93d81f067480f500d4f05ba5d5a18

    • SHA512

      87f34a00c05dbc7ada766b3d40c9296bf425ec248b9d26ea6b0cf7678be0392f07832e53289fb816a49b9bd1015b5f48a24e0f528560b7e1615256f40b189f6f

    • SSDEEP

      98304:I8aimlPSMaz6uf+xg+Rci2wRi2HeC1KDuy3L1JIC7vE:umM5cmPeC1KCy5SM

    Score
    3/10
    • Target

      KingRoot v1.3 2012.12.21.1805/adb.exe

    • Size

      495KB

    • MD5

      1644bd882fdef7385f4368face64d544

    • SHA1

      dc12f98e8deb21d6b8479954412a526dd8bc2154

    • SHA256

      3dab34f46ee4625d772b48f8856646689ded2472b72464000a312eace7469a22

    • SHA512

      30cb1e7db53e2111236e96a9b26cded69eb8b3f2de09f887ed7efabd9cf47db00cad41384e99e14bbe63dd5dbd75561dbed03f55102514d7fd0263480f274a14

    • SSDEEP

      12288:dxFodGaaAO2fapUGpu/Th9gZ1W4amgWr4j6jxoaLvNOJwnsp/:dPT5MThiZbjmaNu/

    Score
    1/10
    • Target

      block

    • Size

      4KB

    • MD5

      46a72d094d1547e888947fccad7d8164

    • SHA1

      ec56f0788f5481f4930c9dbbecc3d8cba9250775

    • SHA256

      04929f940440ba3b03535afc6a098fd57fa42f3a7f7d2c8cb6337209b953cee2

    • SHA512

      7978c70126b7bbcfb09aeb60c85ed581944ad8d4d5af40800c39dde60984a8e1c646b72798210b04fb49d605069abf54a08c5b2ac3235d88344091730d981c80

    • SSDEEP

      48:oGVtlmPfsgoneeNQFnaUvUbNryiNG72cwlpi8B/m3J/cM3gjEqb61zUIz/PB1iKR:oGVGR8Q9UbNrEMjO5/cM3+Lbyld1iu

    Score
    1/10
    • Target

      KingRoot v1.3 2012.12.21.1805/busybox

    • Size

      1.8MB

    • MD5

      5ea6873c7887cf31aac0bcafb10d7680

    • SHA1

      2c379b0f373f55fd44e1c8c4802a8d1b049fe2e8

    • SHA256

      7c88dcbc170c966c8fa763c8996ad3e6f92316794f2e260454c3cec517482922

    • SHA512

      25ee92284812284abcb6fb1bb0a71c3b942bdc2f863fe727b3aa4fa211bb2ddb3c95a929a44d3b5c101e91e8317e2c40867cd87483af787aa0117773f6589c15

    • SSDEEP

      24576:8kJJEb/l5CH6s0S5+qls8FVDgSOA1RSLakp2mNsh0xAJLhtwN5oOOKSYt7e7uUBG:1WWk2NqaK2y75divByRhkb

    Score
    1/10
    • Target

      KingRoot v1.3 2012.12.21.1805/evil.apk

    • Size

      551KB

    • MD5

      f38634c37af098caddc224903d58ba6f

    • SHA1

      e0dcbdb9ac880acd66652650a2a35633a9ff43f4

    • SHA256

      fd765db39a15909291348f02d046fe6499abb049061ef9103b03fd70ad5ece50

    • SHA512

      09d5d9f811e33c0e870c522c312c17759456a86bf1466698cc5c0eb3c660308282667fb5ffeab08db44121953cb3b61bb7c427ad6cb26e89ca7f7b6a78cf2445

    • SSDEEP

      12288:Ign4rIU6Q/S+3f7ddm7uFMYIBLsdGtreILDw4UwawRUC6y/Y3KqrsDO6A:rn4rIU6Q/nzPmOMYKwdaqILDwGZ36yzw

    Score
    1/10
    • Target

      KingRoot v1.3 2012.12.21.1805/exynos-abuse

    • Size

      5KB

    • MD5

      8ba3889bf5d4420e945e0ad463bb78ff

    • SHA1

      8e9582af040be8f9e6bbd3802459b57885f71a37

    • SHA256

      90500eb7e9d31816f5295dcff54c417cd029919e6c09ca4764ca664218aac435

    • SHA512

      6aea2a3b6fb35fe16423bafc04f9f154bba102977aa82012a3d9db874ef5024fd4b74eac48483ae42e775e6ecb4ad9e36cfc7e990e477b4c9de512a6a0d453cb

    • SSDEEP

      48:/Fw8WqtLjJ5o9uXk/HMnHYGKiigl0jfHuy0gQjqZHrNO9EUaj6zMS/j1+bU:Mo0crXipR0gxpKg6gS/j1+bU

    Score
    1/10
    • Target

      flood

    • Size

      5KB

    • MD5

      6c415a45061ee66a15dc2e2eec242875

    • SHA1

      ffd9f511c13d17af97e7eea551d90a8d08bf014c

    • SHA256

      2a333864c57b03610f0243ba8795e50bd17736feb0515e5eaeefe1d660370c7e

    • SHA512

      9461448d82560ef49ac85fba8ec8a1ea42abbde7ca18481a515176449a85def590c412239203d86a8c2dc16766fbf7f388843dc7b9e6dd36c9489c406822ce74

    • SSDEEP

      96:hGsXW50GOsFqys+kK90261wGNnOJ/qEUiHfrZYgx:nXvi9anOzrZYy

    Score
    1/10
    • Target

      KingRoot v1.3 2012.12.21.1805/libboy.so

    • Size

      8KB

    • MD5

      52e5d1447c57ddce469d5dee1069b2b2

    • SHA1

      fbd3d53eb783a8008593012e38e6db0e8547b7f2

    • SHA256

      7029edee881977bbad28ccd413e600e1966372c5e3a51823bf02cb197f060b82

    • SHA512

      782d297a08fffaf43c80cf008a7b1026342ae62d5e540754941fdac6821db02e1a77976423d1460214b98c3fcc73b8a2077b73302a2c224219cae75fe56b4631

    • SSDEEP

      192:9dmfyqcJNNoRsb7/7dNHipk9quEyedou2E7TkY8CA5u:HU6JksP/RMe9qnnSutN

    Score
    1/10
    • Target

      KingRoot v1.3 2012.12.21.1805/libsu.so

    • Size

      15KB

    • MD5

      f235a5abd671762da0de2ffd739c342f

    • SHA1

      ec7c9dfd460297a9c5a30293b76ff88a82d2ea0a

    • SHA256

      feb7d776ff829d2c4bb7a9cf9b53f64a14f3fa75a94d726c56dda0ab7d3077a5

    • SHA512

      ac8aee7df2f8bf8745d84f29a2284d798572526aa49913bcb8452720eb63a896d8c4e5ffc190644d75fb6bac5f3b763b6ae16fbc1fe0c19000d5df021deda96c

    • SSDEEP

      192:LnXOtntn6gzN5d0Ek8nnhRcHWvhWP4ES3DhjkiODB6TLUZ+D7Q+U9U30:LXU6g5UYnhhEOD9kiODBP+D7NB

    Score
    1/10
    • Target

      KingRoot v1.3 2012.12.21.1805/libxy.so

    • Size

      30KB

    • MD5

      3f6a79f2d20dc909e5d8fc6ec652f4e7

    • SHA1

      2c1893a499e59ca5449508e7543d3b7906fb2eda

    • SHA256

      17ab1ab9d5592fdb0b8c2abd8e5d45a8f577be2b6a7d5bd06303678512a50a6d

    • SHA512

      80cbacda048e4b8394e8b8da66419a95cce4bce26b1b9b381d4ac7d04f39ab9a01749dba4fa80edc0fe62c3b311eb57addf53b473a55fe8a35a35f06b0443981

    • SSDEEP

      768:fdp9mHbdm8jTfrOUHGWuOBKYWAjrajkr+V1u0I3LjK0H4:BmHbdm8jTfrOUHGWuOBKYWAKXQ3nK0H4

    Score
    1/10
    • Target

      motofail

    • Size

      489KB

    • MD5

      5285afb7f3d5cbefe2e3249d69d746ba

    • SHA1

      272fa14b0865c97ad51935766dec086ced0c6a19

    • SHA256

      4298f55d7e24b22061515f02e8856e8a8e9b724ed68ad97aba3172220d64932b

    • SHA512

      cab2f3170e99505b75025810051ab1fdb8f2a4b749aa51683c6e9e9428fd8f699f6222d480842cf5e1e32bc49770ad4852d3b992ec9d4fb5f29110ee91e07bd0

    • SSDEEP

      1536:zYQHLbI5jjnHH/EbNtTmesZDRW9e/RHsMaXv14oeX:SfEcR9/ZsQ

    Score
    1/10
    • Target

      rageagainstthecage

    • Size

      572KB

    • MD5

      861f1925ee367c5d7b95610fee2c4969

    • SHA1

      ca5fbaefe7f0923a65ca47b86013d7ed9aebbf2f

    • SHA256

      90a81fa2c7998566bd4de70d92e9bda1a03cb385f46a528ba6a64557406036bc

    • SHA512

      5cea72be9f7230a8da84a528a04952ded2570137cc7a3e04839f7b5b8dec0a29bc950c2c16276376e07c9136ad1b8496a3c2863033b9824b9540f4983f02da46

    • SSDEEP

      12288:9TLtOTp+6vul9lKTpxo0SP0J5Sp2hvfa4N2ghoLRDzk/qkh6kV:St+6nT1nrfRzoLRs/qo6m

    Score
    1/10
    • Target

      KingRoot v1.3 2012.12.21.1805/root

    • Size

      6KB

    • MD5

      34af8db3194bb2e2b60c2ab20fcbeff2

    • SHA1

      ca7fdfc7e99e766f51fc057582ffc191d8910f50

    • SHA256

      9107d65daa0bcc81fe6eb9409322dc650d5e6f95c67245a5fba9547c5437ce26

    • SHA512

      1fdcafb7eb3a4e7dbae567723776c8341ee10253b641c69a87b2e1d4e6bdcdd436d0a63b2ea73fa773f6d745395bda1154a745faf25f6b24cf34680f82bc5ef1

    • SSDEEP

      96:z1zWeMiLK4DMSMJa96iaMDN29Ak1xUPUCV:dxMoPgagiDN2GGxU

    Score
    1/10
    • Target

      KingRoot v1.3 2012.12.21.1805/root.sh

    • Size

      20B

    • MD5

      e9e8127c8fc08b5bb2de1cfda092033d

    • SHA1

      88682ed625b3d45f905098a14ec3867e21ea8beb

    • SHA256

      e0f4d86b3a2ee22d7ead0efe7bbe5ead669ba368bd5c9029e3ce01ffadcd2274

    • SHA512

      59e2e6a006c68f0ea16ff4bd3f0e800f83090621a4a605e1ddbda19b93fff3d250a1ceda87079c51caecc6a0ecaba22136cf3b3606be42488f180c76117be55b

    Score
    3/10
    • Target

      KingRoot v1.3 2012.12.21.1805/roottool

    • Size

      5KB

    • MD5

      054c421b963d1810d7037f637a4dcfc4

    • SHA1

      4c0c89cf8fa58eb7acfef70b373199db6e3b97b5

    • SHA256

      4a57319b3bb708c17660a5d288599248122ae99373893c008e9930c2229325d2

    • SHA512

      44242f1a0074497310c8ca8c1371223170cf2b3f5c0fc96024d0f659c8f5cb41d328790b65f72c7da1c3a479c3bcca054f4bd6ac0075766703ccf151ce7ac3ff

    • SSDEEP

      96:2XuQGSHnAdJIsr5e9g+kLACRWKKb9rS8UkuqWV:WuQGSHnsNcTUAK2hXU

    Score
    1/10
    • Target

      KingRoot v1.3 2012.12.21.1805/su

    • Size

      15KB

    • MD5

      f235a5abd671762da0de2ffd739c342f

    • SHA1

      ec7c9dfd460297a9c5a30293b76ff88a82d2ea0a

    • SHA256

      feb7d776ff829d2c4bb7a9cf9b53f64a14f3fa75a94d726c56dda0ab7d3077a5

    • SHA512

      ac8aee7df2f8bf8745d84f29a2284d798572526aa49913bcb8452720eb63a896d8c4e5ffc190644d75fb6bac5f3b763b6ae16fbc1fe0c19000d5df021deda96c

    • SSDEEP

      192:LnXOtntn6gzN5d0Ek8nnhRcHWvhWP4ES3DhjkiODB6TLUZ+D7Q+U9U30:LXU6g5UYnhhEOD9kiODBP+D7NB

    Score
    1/10
    • Target

      KingRoot v1.3 2012.12.21.1805/superuser.apk

    • Size

      357KB

    • MD5

      83d9fe370d0d9ff4ba9c365e07f6d02d

    • SHA1

      19e4a3e5546ad1ffa7669566830bf4cc310a7cc2

    • SHA256

      9cae0d3ad839fbe68f81743af4f8f15178cab0a00601ca59e02e325cf8f6b3c8

    • SHA512

      f7922cf89c83ccf1fd4fa5197862a048d661bf18aa093bf6deef2ccd764be03db3ca754d87dfcee755920c20a4a084b722171f17f33cb72012655fd469fee3e8

    • SSDEEP

      6144:aQNL2sZ9qm4vALabhAmMi3ngnDDFyMcU00iEj097KdxBBxKj/HzZ4vI8falRcD8K:aQNlNglnngnDDAM70xEdxBEL4R

    Score
    N/A
    • Target

      thinkpwn

    • Size

      5KB

    • MD5

      c61e495459305535462d050512003437

    • SHA1

      fdae769bf7f06e7d78223596bf040a2724591554

    • SHA256

      ea4afcc7de55006c00a3190d2d133a31a6734adffddac766f7b6b8d86d9e90a6

    • SHA512

      534899c3b797faba790ea4a8953e3a42d391c8e234b491dfa0f9b230a0b4c72ed7ec6fb6c50eb4f8c5ca4a2a7a53f55cbfc48a9699890e42abf447e9d9b0678d

    • SSDEEP

      96:FGa381Bq/RBERh5Z3zBJk+3l21/GzGOH/nxsim4:181M/RBEB5zcM+GSOf+4

    Score
    1/10
    • Target

      xyz

    • Size

      527KB

    • MD5

      4361eba11e700f395a552575e5c832e5

    • SHA1

      6e732d4f66a9d162eb8f95a2d91efef6c2fe7834

    • SHA256

      02cab5c14964b19ca7a5181bc201a32be11cc30578c5363d82e3d05a2843bf2e

    • SHA512

      4303d181cdb8c843897b7d6ced3e9b47c18f169b5b27aedcc10cf74a1765cf8e1b406c656517ef76b9b8399022d856d02d9a87cf4d6fa1e15b82bd99daf93e12

    • SSDEEP

      1536:kpi3Xt7+zM0IsZF/7/abSkrIOxWiAnoUyLoFP75im6ezJ38vrQZu7Wo5ALPT4gkv:Ai3Xt7+YIj/DabDZAnfycC

    Score
    1/10
    • Target

      zerg

    • Size

      22KB

    • MD5

      d2d9d63db6e149be06ce685f20df0e3e

    • SHA1

      2511ba87abe66bb6c066c7f11f85eeeac35ee342

    • SHA256

      fa105307764c2406c4f8141e08e439c22c86f1b48778a9e08a21f9bdab7aa8a3

    • SHA512

      b76e9877b0b600177b03fbaef9468d8bc2e01fc00efb1f8539d6eb1468a7bc5bc5b2b4cfb7f40c253a299cdc54a21d7746bf7480509dd6359f51b631cfa47798

    • SSDEEP

      384:uQz3X9O1XDOlRu6gpJztEhVN7mXMcq0ClymeU8rTZrdbAX:uK96C/u6gpJpEhVN7mX1qDlymB8rTViX

    Score
    1/10
    • Target

      zergRush.bak

    • Size

      22KB

    • MD5

      4a32187446c284c2b975845f3ab9ffc4

    • SHA1

      2483ed987a0c85b80495bb0082bc33b03f76d64f

    • SHA256

      77ecc4687dc521032a9626925ac22f10cc585d6705706e7e4e173d3bb5dc3f63

    • SHA512

      753b975f3ed7252db2f74dc110a3fb4f1d52c6bab8bb1485f3657cada30c0c260f302e3b72d5fcc600405e491edf6fda2a6ee7d6b12cdd2fb9df9b91b4be5359

    • SSDEEP

      192:+zXMMeAYh3ApF8egUkWAgRcWhak6MnZL3NUtBn0LmA5YJ8DP+94s1c4p/IM7hFFp:+QD3gae3kLubNUL0LmAmjfc9sjDII

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks