General

  • Target

    821bb69c570510b1b47a236806c379ce

  • Size

    1.5MB

  • MD5

    821bb69c570510b1b47a236806c379ce

  • SHA1

    b8c44ca9b18cae9a08c280aa97dc846281d58996

  • SHA256

    8c8432da762840661253cbc3b9f2d398ea106c4126fbc9fef0053eb5fa618b50

  • SHA512

    ed4469f92c8f53f4e805f0c2b0d15bb7cee15d521b50989897ecaa438ed30d2c805f8aa4c1f26b98279e2318c2cc7c20145407a2172f0a9b2b86e685ec3d73a3

  • SSDEEP

    24576:sqT9At6roOAgHcyrqvJTyGBq0gEmfWaQ/A0SmWbPIRs1NW1M0/16UND5Y0a:Jk6rqNTN/BA7k21Nk164D5Y0a

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 821bb69c570510b1b47a236806c379ce
    .zip
  • AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • adb.exe
    .exe windows:4 windows x86 arch:x86

    a76314a1de551ff40a8189637efb37ea


    Headers

    Imports

    Sections

  • busybox
    .elf linux arm
  • fastboot.exe
    .exe windows:4 windows x86 arch:x86

    2fd389c7d2e20aee613c2d9cd974e530


    Headers

    Imports

    Sections

  • su
    .elf linux arm
  • zergRush
    .elf linux arm
  • 下载说明.txt
  • 新云软件园.url
    .url
  • 运行.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections