General

  • Target

    84b6d16965b50e9e0b4af16d453310e9

  • Size

    1.4MB

  • MD5

    84b6d16965b50e9e0b4af16d453310e9

  • SHA1

    2f574d072a25065e94edd057d902f0ff7277ba84

  • SHA256

    11cad7c34a96ffd73943bc2da564f696a380ba501e23e5a81d171ca7f64a1123

  • SHA512

    ee55fe7ca7a6940522f1b2b9424839bbee235642bf4f94b3b573f0d3f7c908831ab7b4f6f07bd098323bf18ecfe918c92468c7b263d4068b82f961e88847f2fa

  • SSDEEP

    24576:Tlc0f8n15MxA8hHD/NBJH3VxdRglySnklmf7zK917gTariIStqMr0:G0f8n1Om0D/NBJH3VNg0e9fXKr1a8S0

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 84b6d16965b50e9e0b4af16d453310e9
    .rar
  • files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • files/busybox
    .elf linux arm
  • files/su
    .elf linux arm
  • files/zergRush
    .elf linux arm
  • 右键管理员模式运行我.bat