General

  • Target

    846d30e7cc5438705161e45d9f850b66

  • Size

    1.8MB

  • MD5

    846d30e7cc5438705161e45d9f850b66

  • SHA1

    36b5e8120f979ac7321a73ca1743ff07f1342890

  • SHA256

    71c78d0b987e89abd5ea1964ab056248e49b293e780c967309a035c0961ce9c2

  • SHA512

    7cef59fb1cd3b983fd3b0c9f2d31eecc10040333197c39707e9b414dbe680a426ca37ed3005ada60718fda31c92bd934abb03a0eb0e3e75e12464d4ed1a6e313

  • SSDEEP

    49152:xfmZWpFZCrimIL5egKPdyBnHlShpukVpcCFNOl:1meZCriv5egOdyBFSbbV/2l

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 846d30e7cc5438705161e45d9f850b66
    .zip
  • files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • files/busybox
    .elf linux arm
  • files/su
    .elf linux arm
  • files/zergRush
    .elf linux arm
  • runme.bat