Overview
overview
6Static
static
6KingRoot v...pi.dll
windows7-x64
3KingRoot v...pi.dll
windows10-2004-x64
3KingRoot v...pi.dll
windows7-x64
1KingRoot v...pi.dll
windows10-2004-x64
3KingRoot v...ot.exe
windows7-x64
3KingRoot v...ot.exe
windows10-2004-x64
3KingRoot v...db.exe
windows7-x64
1KingRoot v...db.exe
windows10-2004-x64
1block
debian-9-armhf
KingRoot v...usybox
debian-9-armhf
1KingRoot v...il.apk
KingRoot v...il.apk
android-10-x64
KingRoot v...il.apk
android-11-x64
KingRoot v...-abuse
debian-9-armhf
flood
debian-9-armhf
KingRoot v...oy.apk
KingRoot v...oy.apk
android-10-x64
KingRoot v...oy.apk
android-11-x64
KingRoot v...bsu.so
debian-9-armhf
KingRoot v...bxy.so
debian-9-armhf
1motofail
debian-9-armhf
rageagainstthecage
debian-9-armhf
1KingRoot v...5/root
debian-9-armhf
KingRoot v...oot.sh
windows7-x64
3KingRoot v...oot.sh
windows10-2004-x64
3KingRoot v...ottool
debian-9-armhf
KingRoot v...805/su
debian-9-armhf
KingRoot v...er.apk
thinkpwn
debian-9-armhf
xyz
debian-9-armhf
zerg
debian-9-armhf
zergRush.bak
debian-9-armhf
General
-
Target
7009c71ec73a4aa463459690d9d10b07
-
Size
4.0MB
-
Sample
231222-fwh27shagq
-
MD5
7009c71ec73a4aa463459690d9d10b07
-
SHA1
1e014feb585bbc2fc5bdd3d159d598209eba81d0
-
SHA256
214d4769d5859e7f3ea12c98f00aee573c03700bd46661da0af9bd6a5b41f93a
-
SHA512
84fd36906533e88e2d6ee57600b620925b808b9e96a07f6d17f7f777b8a876a991a08ca4ae85a480d77a48f444f318e104f680dbb379eced00d1367bf78a4f0c
-
SSDEEP
98304:5eDWuQPosUMaCXQNZcg9QrLtA0YYAVFEQ84oevP/USvMK2:UD/Ml82QNZcgWrZAmWW+Vv1MK2
Static task
static1
Behavioral task
behavioral1
Sample
KingRoot v1.3 2012.12.21.1805/AdbWinApi.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
KingRoot v1.3 2012.12.21.1805/AdbWinApi.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
KingRoot v1.3 2012.12.21.1805/AdbWinUsbApi.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
KingRoot v1.3 2012.12.21.1805/AdbWinUsbApi.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
KingRoot v1.3 2012.12.21.1805/KingRoot.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
KingRoot v1.3 2012.12.21.1805/KingRoot.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
KingRoot v1.3 2012.12.21.1805/adb.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
KingRoot v1.3 2012.12.21.1805/adb.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
block
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral10
Sample
KingRoot v1.3 2012.12.21.1805/busybox
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral11
Sample
KingRoot v1.3 2012.12.21.1805/evil.apk
Behavioral task
behavioral12
Sample
KingRoot v1.3 2012.12.21.1805/evil.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral13
Sample
KingRoot v1.3 2012.12.21.1805/evil.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral14
Sample
KingRoot v1.3 2012.12.21.1805/exynos-abuse
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral15
Sample
flood
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral16
Sample
KingRoot v1.3 2012.12.21.1805/libboy.apk
Behavioral task
behavioral17
Sample
KingRoot v1.3 2012.12.21.1805/libboy.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral18
Sample
KingRoot v1.3 2012.12.21.1805/libboy.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral19
Sample
KingRoot v1.3 2012.12.21.1805/libsu.so
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral20
Sample
KingRoot v1.3 2012.12.21.1805/libxy.so
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral21
Sample
motofail
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral22
Sample
rageagainstthecage
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral23
Sample
KingRoot v1.3 2012.12.21.1805/root
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral24
Sample
KingRoot v1.3 2012.12.21.1805/root.sh
Resource
win7-20231215-en
Behavioral task
behavioral25
Sample
KingRoot v1.3 2012.12.21.1805/root.sh
Resource
win10v2004-20231215-en
Behavioral task
behavioral26
Sample
KingRoot v1.3 2012.12.21.1805/roottool
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral27
Sample
KingRoot v1.3 2012.12.21.1805/su
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral28
Sample
KingRoot v1.3 2012.12.21.1805/superuser.apk
Behavioral task
behavioral29
Sample
thinkpwn
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral30
Sample
xyz
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral31
Sample
zerg
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral32
Sample
zergRush.bak
Resource
debian9-armhf-20231215-en
Malware Config
Targets
-
-
Target
KingRoot v1.3 2012.12.21.1805/AdbWinApi.dll
-
Size
94KB
-
MD5
47a6ee3f186b2c2f5057028906bac0c6
-
SHA1
fde9c22a2cfcd5e566cec2e987d942b78a4eeae8
-
SHA256
14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b
-
SHA512
6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584
-
SSDEEP
1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG
Score3/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/AdbWinUsbApi.dll
-
Size
59KB
-
MD5
5f23f2f936bdfac90bb0a4970ad365cf
-
SHA1
12e14244b1a5d04a261759547c3d930547f52fa3
-
SHA256
041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407
-
SHA512
49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048
-
SSDEEP
768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI
Score3/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/KingRoot.exe
-
Size
5.3MB
-
MD5
80e6a330bd476e97bc0bb74a3a7ba514
-
SHA1
449425ac434c18104f18264c0f8821346f3f7953
-
SHA256
879ac3fa339baeaa77aec0795d20da8d40f93d81f067480f500d4f05ba5d5a18
-
SHA512
87f34a00c05dbc7ada766b3d40c9296bf425ec248b9d26ea6b0cf7678be0392f07832e53289fb816a49b9bd1015b5f48a24e0f528560b7e1615256f40b189f6f
-
SSDEEP
98304:I8aimlPSMaz6uf+xg+Rci2wRi2HeC1KDuy3L1JIC7vE:umM5cmPeC1KCy5SM
Score3/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/adb.exe
-
Size
495KB
-
MD5
1644bd882fdef7385f4368face64d544
-
SHA1
dc12f98e8deb21d6b8479954412a526dd8bc2154
-
SHA256
3dab34f46ee4625d772b48f8856646689ded2472b72464000a312eace7469a22
-
SHA512
30cb1e7db53e2111236e96a9b26cded69eb8b3f2de09f887ed7efabd9cf47db00cad41384e99e14bbe63dd5dbd75561dbed03f55102514d7fd0263480f274a14
-
SSDEEP
12288:dxFodGaaAO2fapUGpu/Th9gZ1W4amgWr4j6jxoaLvNOJwnsp/:dPT5MThiZbjmaNu/
Score1/10 -
-
-
Target
block
-
Size
4KB
-
MD5
46a72d094d1547e888947fccad7d8164
-
SHA1
ec56f0788f5481f4930c9dbbecc3d8cba9250775
-
SHA256
04929f940440ba3b03535afc6a098fd57fa42f3a7f7d2c8cb6337209b953cee2
-
SHA512
7978c70126b7bbcfb09aeb60c85ed581944ad8d4d5af40800c39dde60984a8e1c646b72798210b04fb49d605069abf54a08c5b2ac3235d88344091730d981c80
-
SSDEEP
48:oGVtlmPfsgoneeNQFnaUvUbNryiNG72cwlpi8B/m3J/cM3gjEqb61zUIz/PB1iKR:oGVGR8Q9UbNrEMjO5/cM3+Lbyld1iu
Score1/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/busybox
-
Size
1.8MB
-
MD5
5ea6873c7887cf31aac0bcafb10d7680
-
SHA1
2c379b0f373f55fd44e1c8c4802a8d1b049fe2e8
-
SHA256
7c88dcbc170c966c8fa763c8996ad3e6f92316794f2e260454c3cec517482922
-
SHA512
25ee92284812284abcb6fb1bb0a71c3b942bdc2f863fe727b3aa4fa211bb2ddb3c95a929a44d3b5c101e91e8317e2c40867cd87483af787aa0117773f6589c15
-
SSDEEP
24576:8kJJEb/l5CH6s0S5+qls8FVDgSOA1RSLakp2mNsh0xAJLhtwN5oOOKSYt7e7uUBG:1WWk2NqaK2y75divByRhkb
Score1/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/evil.apk
-
Size
551KB
-
MD5
f38634c37af098caddc224903d58ba6f
-
SHA1
e0dcbdb9ac880acd66652650a2a35633a9ff43f4
-
SHA256
fd765db39a15909291348f02d046fe6499abb049061ef9103b03fd70ad5ece50
-
SHA512
09d5d9f811e33c0e870c522c312c17759456a86bf1466698cc5c0eb3c660308282667fb5ffeab08db44121953cb3b61bb7c427ad6cb26e89ca7f7b6a78cf2445
-
SSDEEP
12288:Ign4rIU6Q/S+3f7ddm7uFMYIBLsdGtreILDw4UwawRUC6y/Y3KqrsDO6A:rn4rIU6Q/nzPmOMYKwdaqILDwGZ36yzw
Score1/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/exynos-abuse
-
Size
5KB
-
MD5
8ba3889bf5d4420e945e0ad463bb78ff
-
SHA1
8e9582af040be8f9e6bbd3802459b57885f71a37
-
SHA256
90500eb7e9d31816f5295dcff54c417cd029919e6c09ca4764ca664218aac435
-
SHA512
6aea2a3b6fb35fe16423bafc04f9f154bba102977aa82012a3d9db874ef5024fd4b74eac48483ae42e775e6ecb4ad9e36cfc7e990e477b4c9de512a6a0d453cb
-
SSDEEP
48:/Fw8WqtLjJ5o9uXk/HMnHYGKiigl0jfHuy0gQjqZHrNO9EUaj6zMS/j1+bU:Mo0crXipR0gxpKg6gS/j1+bU
Score1/10 -
-
-
Target
flood
-
Size
5KB
-
MD5
6c415a45061ee66a15dc2e2eec242875
-
SHA1
ffd9f511c13d17af97e7eea551d90a8d08bf014c
-
SHA256
2a333864c57b03610f0243ba8795e50bd17736feb0515e5eaeefe1d660370c7e
-
SHA512
9461448d82560ef49ac85fba8ec8a1ea42abbde7ca18481a515176449a85def590c412239203d86a8c2dc16766fbf7f388843dc7b9e6dd36c9489c406822ce74
-
SSDEEP
96:hGsXW50GOsFqys+kK90261wGNnOJ/qEUiHfrZYgx:nXvi9anOzrZYy
Score1/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/libboy.so
-
Size
8KB
-
MD5
52e5d1447c57ddce469d5dee1069b2b2
-
SHA1
fbd3d53eb783a8008593012e38e6db0e8547b7f2
-
SHA256
7029edee881977bbad28ccd413e600e1966372c5e3a51823bf02cb197f060b82
-
SHA512
782d297a08fffaf43c80cf008a7b1026342ae62d5e540754941fdac6821db02e1a77976423d1460214b98c3fcc73b8a2077b73302a2c224219cae75fe56b4631
-
SSDEEP
192:9dmfyqcJNNoRsb7/7dNHipk9quEyedou2E7TkY8CA5u:HU6JksP/RMe9qnnSutN
Score1/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/libsu.so
-
Size
15KB
-
MD5
f235a5abd671762da0de2ffd739c342f
-
SHA1
ec7c9dfd460297a9c5a30293b76ff88a82d2ea0a
-
SHA256
feb7d776ff829d2c4bb7a9cf9b53f64a14f3fa75a94d726c56dda0ab7d3077a5
-
SHA512
ac8aee7df2f8bf8745d84f29a2284d798572526aa49913bcb8452720eb63a896d8c4e5ffc190644d75fb6bac5f3b763b6ae16fbc1fe0c19000d5df021deda96c
-
SSDEEP
192:LnXOtntn6gzN5d0Ek8nnhRcHWvhWP4ES3DhjkiODB6TLUZ+D7Q+U9U30:LXU6g5UYnhhEOD9kiODBP+D7NB
Score1/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/libxy.so
-
Size
30KB
-
MD5
3f6a79f2d20dc909e5d8fc6ec652f4e7
-
SHA1
2c1893a499e59ca5449508e7543d3b7906fb2eda
-
SHA256
17ab1ab9d5592fdb0b8c2abd8e5d45a8f577be2b6a7d5bd06303678512a50a6d
-
SHA512
80cbacda048e4b8394e8b8da66419a95cce4bce26b1b9b381d4ac7d04f39ab9a01749dba4fa80edc0fe62c3b311eb57addf53b473a55fe8a35a35f06b0443981
-
SSDEEP
768:fdp9mHbdm8jTfrOUHGWuOBKYWAjrajkr+V1u0I3LjK0H4:BmHbdm8jTfrOUHGWuOBKYWAKXQ3nK0H4
Score1/10 -
-
-
Target
motofail
-
Size
489KB
-
MD5
5285afb7f3d5cbefe2e3249d69d746ba
-
SHA1
272fa14b0865c97ad51935766dec086ced0c6a19
-
SHA256
4298f55d7e24b22061515f02e8856e8a8e9b724ed68ad97aba3172220d64932b
-
SHA512
cab2f3170e99505b75025810051ab1fdb8f2a4b749aa51683c6e9e9428fd8f699f6222d480842cf5e1e32bc49770ad4852d3b992ec9d4fb5f29110ee91e07bd0
-
SSDEEP
1536:zYQHLbI5jjnHH/EbNtTmesZDRW9e/RHsMaXv14oeX:SfEcR9/ZsQ
Score1/10 -
-
-
Target
rageagainstthecage
-
Size
572KB
-
MD5
861f1925ee367c5d7b95610fee2c4969
-
SHA1
ca5fbaefe7f0923a65ca47b86013d7ed9aebbf2f
-
SHA256
90a81fa2c7998566bd4de70d92e9bda1a03cb385f46a528ba6a64557406036bc
-
SHA512
5cea72be9f7230a8da84a528a04952ded2570137cc7a3e04839f7b5b8dec0a29bc950c2c16276376e07c9136ad1b8496a3c2863033b9824b9540f4983f02da46
-
SSDEEP
12288:9TLtOTp+6vul9lKTpxo0SP0J5Sp2hvfa4N2ghoLRDzk/qkh6kV:St+6nT1nrfRzoLRs/qo6m
Score1/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/root
-
Size
6KB
-
MD5
34af8db3194bb2e2b60c2ab20fcbeff2
-
SHA1
ca7fdfc7e99e766f51fc057582ffc191d8910f50
-
SHA256
9107d65daa0bcc81fe6eb9409322dc650d5e6f95c67245a5fba9547c5437ce26
-
SHA512
1fdcafb7eb3a4e7dbae567723776c8341ee10253b641c69a87b2e1d4e6bdcdd436d0a63b2ea73fa773f6d745395bda1154a745faf25f6b24cf34680f82bc5ef1
-
SSDEEP
96:z1zWeMiLK4DMSMJa96iaMDN29Ak1xUPUCV:dxMoPgagiDN2GGxU
Score1/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/root.sh
-
Size
20B
-
MD5
e9e8127c8fc08b5bb2de1cfda092033d
-
SHA1
88682ed625b3d45f905098a14ec3867e21ea8beb
-
SHA256
e0f4d86b3a2ee22d7ead0efe7bbe5ead669ba368bd5c9029e3ce01ffadcd2274
-
SHA512
59e2e6a006c68f0ea16ff4bd3f0e800f83090621a4a605e1ddbda19b93fff3d250a1ceda87079c51caecc6a0ecaba22136cf3b3606be42488f180c76117be55b
Score3/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/roottool
-
Size
5KB
-
MD5
054c421b963d1810d7037f637a4dcfc4
-
SHA1
4c0c89cf8fa58eb7acfef70b373199db6e3b97b5
-
SHA256
4a57319b3bb708c17660a5d288599248122ae99373893c008e9930c2229325d2
-
SHA512
44242f1a0074497310c8ca8c1371223170cf2b3f5c0fc96024d0f659c8f5cb41d328790b65f72c7da1c3a479c3bcca054f4bd6ac0075766703ccf151ce7ac3ff
-
SSDEEP
96:2XuQGSHnAdJIsr5e9g+kLACRWKKb9rS8UkuqWV:WuQGSHnsNcTUAK2hXU
Score1/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/su
-
Size
15KB
-
MD5
f235a5abd671762da0de2ffd739c342f
-
SHA1
ec7c9dfd460297a9c5a30293b76ff88a82d2ea0a
-
SHA256
feb7d776ff829d2c4bb7a9cf9b53f64a14f3fa75a94d726c56dda0ab7d3077a5
-
SHA512
ac8aee7df2f8bf8745d84f29a2284d798572526aa49913bcb8452720eb63a896d8c4e5ffc190644d75fb6bac5f3b763b6ae16fbc1fe0c19000d5df021deda96c
-
SSDEEP
192:LnXOtntn6gzN5d0Ek8nnhRcHWvhWP4ES3DhjkiODB6TLUZ+D7Q+U9U30:LXU6g5UYnhhEOD9kiODBP+D7NB
Score1/10 -
-
-
Target
KingRoot v1.3 2012.12.21.1805/superuser.apk
-
Size
357KB
-
MD5
83d9fe370d0d9ff4ba9c365e07f6d02d
-
SHA1
19e4a3e5546ad1ffa7669566830bf4cc310a7cc2
-
SHA256
9cae0d3ad839fbe68f81743af4f8f15178cab0a00601ca59e02e325cf8f6b3c8
-
SHA512
f7922cf89c83ccf1fd4fa5197862a048d661bf18aa093bf6deef2ccd764be03db3ca754d87dfcee755920c20a4a084b722171f17f33cb72012655fd469fee3e8
-
SSDEEP
6144:aQNL2sZ9qm4vALabhAmMi3ngnDDFyMcU00iEj097KdxBBxKj/HzZ4vI8falRcD8K:aQNlNglnngnDDAM70xEdxBEL4R
ScoreN/A -
-
-
Target
thinkpwn
-
Size
5KB
-
MD5
c61e495459305535462d050512003437
-
SHA1
fdae769bf7f06e7d78223596bf040a2724591554
-
SHA256
ea4afcc7de55006c00a3190d2d133a31a6734adffddac766f7b6b8d86d9e90a6
-
SHA512
534899c3b797faba790ea4a8953e3a42d391c8e234b491dfa0f9b230a0b4c72ed7ec6fb6c50eb4f8c5ca4a2a7a53f55cbfc48a9699890e42abf447e9d9b0678d
-
SSDEEP
96:FGa381Bq/RBERh5Z3zBJk+3l21/GzGOH/nxsim4:181M/RBEB5zcM+GSOf+4
Score1/10 -
-
-
Target
xyz
-
Size
527KB
-
MD5
4361eba11e700f395a552575e5c832e5
-
SHA1
6e732d4f66a9d162eb8f95a2d91efef6c2fe7834
-
SHA256
02cab5c14964b19ca7a5181bc201a32be11cc30578c5363d82e3d05a2843bf2e
-
SHA512
4303d181cdb8c843897b7d6ced3e9b47c18f169b5b27aedcc10cf74a1765cf8e1b406c656517ef76b9b8399022d856d02d9a87cf4d6fa1e15b82bd99daf93e12
-
SSDEEP
1536:kpi3Xt7+zM0IsZF/7/abSkrIOxWiAnoUyLoFP75im6ezJ38vrQZu7Wo5ALPT4gkv:Ai3Xt7+YIj/DabDZAnfycC
Score1/10 -
-
-
Target
zerg
-
Size
22KB
-
MD5
d2d9d63db6e149be06ce685f20df0e3e
-
SHA1
2511ba87abe66bb6c066c7f11f85eeeac35ee342
-
SHA256
fa105307764c2406c4f8141e08e439c22c86f1b48778a9e08a21f9bdab7aa8a3
-
SHA512
b76e9877b0b600177b03fbaef9468d8bc2e01fc00efb1f8539d6eb1468a7bc5bc5b2b4cfb7f40c253a299cdc54a21d7746bf7480509dd6359f51b631cfa47798
-
SSDEEP
384:uQz3X9O1XDOlRu6gpJztEhVN7mXMcq0ClymeU8rTZrdbAX:uK96C/u6gpJpEhVN7mX1qDlymB8rTViX
Score1/10 -
-
-
Target
zergRush.bak
-
Size
22KB
-
MD5
4a32187446c284c2b975845f3ab9ffc4
-
SHA1
2483ed987a0c85b80495bb0082bc33b03f76d64f
-
SHA256
77ecc4687dc521032a9626925ac22f10cc585d6705706e7e4e173d3bb5dc3f63
-
SHA512
753b975f3ed7252db2f74dc110a3fb4f1d52c6bab8bb1485f3657cada30c0c260f302e3b72d5fcc600405e491edf6fda2a6ee7d6b12cdd2fb9df9b91b4be5359
-
SSDEEP
192:+zXMMeAYh3ApF8egUkWAgRcWhak6MnZL3NUtBn0LmA5YJ8DP+94s1c4p/IM7hFFp:+QD3gae3kLubNUL0LmAmjfc9sjDII
Score1/10 -