General

  • Target

    849cf04f604b397ac7c63d1c91a44c60

  • Size

    3.3MB

  • MD5

    849cf04f604b397ac7c63d1c91a44c60

  • SHA1

    56aff88a2473dd3ab2bc127ffb2eed56d8c10740

  • SHA256

    7c55404e70afb7c3462b504df83c18dbfa2f0ed6ea7365a246619c34a39ee754

  • SHA512

    d43c32aab5cbeb0365c158facceba71fcb4cfc898a23d9a16b8f8cf34478f6a10839453b22686274b1a9ce5c97690507068bf5c1ed5ed2aaa4151dde432feaee

  • SSDEEP

    98304:DkDRhwotyQgeeG2qXwIz8/y8cAlGlnkp2DnzQim90:wDDdgQge1HAF/KpDn0vm

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 849cf04f604b397ac7c63d1c91a44c60
    .zip
  • KingRoot PC v1.1/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC v1.1/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC v1.1/KingRoot.exe
    .exe windows:5 windows x86 arch:x86

    c85c8ca77b6ba07fc1d88911cc38cba2


    Headers

    Imports

    Sections

  • KingRoot PC v1.1/adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Headers

    Imports

    Sections

  • KingRoot PC v1.1/block
    .elf linux arm
  • KingRoot PC v1.1/busybox
    .elf linux arm
  • KingRoot PC v1.1/evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • KingRoot PC v1.1/flood
    .elf linux arm
  • KingRoot PC v1.1/flood.c
  • KingRoot PC v1.1/libboy.so
    .apk android
  • KingRoot PC v1.1/librootmgr-jni.so
    .elf linux arm
  • KingRoot PC v1.1/libxy.so
    .elf linux arm
  • KingRoot PC v1.1/motofail
    .elf linux arm
  • KingRoot PC v1.1/rageagainstthecage
    .elf linux arm
  • KingRoot PC v1.1/su
    .elf linux arm
  • KingRoot PC v1.1/superuser.apk
    .apk android arch:arm

    com.kingroot.kinguser

    com.kingroot.kinguser.Activitys.SlideMainActivity


  • KingRoot PC v1.1/thinkpwn
    .elf linux arm
  • KingRoot PC v1.1/xyz
    .elf linux arm
  • KingRoot PC v1.1/zerg
    .elf linux arm
  • KingRoot PC v1.1/zergRush
    .elf linux arm