General

  • Target

    8e6da91c04ff548b645a82fdc3d1351b

  • Size

    1.8MB

  • MD5

    8e6da91c04ff548b645a82fdc3d1351b

  • SHA1

    505071b8ac2036536c8a52d5ae43fc6eb2915caa

  • SHA256

    b2eaf73f68d88f78918bad3ba1109a172da77620d7ee672f2e91a9a650fe0200

  • SHA512

    7a9ec80f2643150cba15c6a5e4dc2d07a10ac4514e6fabac89b490dde60651470f1b249059bd6028ea442c3044186b5143b056cc65a1930275eef2b4d14069c1

  • SSDEEP

    49152:IJVKtChgrMeaZwDue5o5jC9RGlRxXuBOHkZ/sdw5ZI+D44Dqt72:IJVKtHrW2D5o5+RadCOEDZU5Q

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e6da91c04ff548b645a82fdc3d1351b
    .zip
  • files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • files/busybox
    .elf linux arm
  • files/makespace
  • files/su
    .elf linux arm
  • files/zergRush
    .elf linux arm
  • runme.bat