General

  • Target

    91e88a7af53477dbb2b615f2a5cc3591

  • Size

    11.8MB

  • MD5

    91e88a7af53477dbb2b615f2a5cc3591

  • SHA1

    c22af52bc211e070ae18388adb5c8b8091b01058

  • SHA256

    7ae05c4164362a9072cf5c30d13f9f0ef8840aac009d976b05c7b05f2a905e07

  • SHA512

    4a57d1cd81e42ed345463acb669c10ebee08c56cddf1b838220acbb77a30e354df21d8e3e188bf3c772099f38642c22fe1aa1f3c5a7ee87d1cf15e898ff3ba93

  • SSDEEP

    196608:6Bs+9I7OrtZEi81EFtJbLKKUIwIsrG6qNovFRM5vV/pys+9I7OrtZEi81EFtJbLm:pKIQFtJbL9gGZNotRM5tRKIQFtJbLu9z

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 91e88a7af53477dbb2b615f2a5cc3591
    .rar
  • u960_recovery_5.0.2.7_c4_cn/files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • u960_recovery_5.0.2.7_c4_cn/files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • u960_recovery_5.0.2.7_c4_cn/files/adb.exe
    .exe windows:4 windows x86 arch:x86

    fef6cee9d0e4eec527f09da74363e32f


    Headers

    Imports

    Sections

  • u960_recovery_5.0.2.7_c4_cn/files/fastboot.exe
    .exe windows:4 windows x86 arch:x86

    3e55c747ee9f1f3bf976c3c90169c8ba


    Headers

    Imports

    Sections

  • u960_recovery_5.0.2.7_c4_cn/files/recovery_u960_full.img
  • u960_recovery_5.0.2.7_c4_cn/files/recovery_u960_lite.bin
    .tar
  • cache/tmp_897/tmp/recovery/images/charge0001.png
    .png
  • cache/tmp_897/tmp/recovery/images/charge0002.png
    .png
  • cache/tmp_897/tmp/recovery/images/charge0003.png
    .png
  • cache/tmp_897/tmp/recovery/images/charge0004.png
    .png
  • cache/tmp_897/tmp/recovery/images/charge0005.png
    .png
  • cache/tmp_897/tmp/recovery/images/charge0006.png
    .png
  • cache/tmp_897/tmp/recovery/images/charge0007.png
    .png
  • cache/tmp_897/tmp/recovery/images/charge0008.png
    .png
  • cache/tmp_897/tmp/recovery/images/charge0009.png
    .png
  • cache/tmp_897/tmp/recovery/images/charge0010.png
    .png
  • cache/tmp_897/tmp/recovery/images/charge0011.png
    .png
  • cache/tmp_897/tmp/recovery/images/icon_clockwork.png
    .png
  • cache/tmp_897/tmp/recovery/images/icon_error.png
    .png
  • cache/tmp_897/tmp/recovery/images/icon_firmware_error.png
    .png
  • cache/tmp_897/tmp/recovery/images/icon_firmware_install.png
    .png
  • cache/tmp_897/tmp/recovery/images/icon_installing.png
    .png
  • cache/tmp_897/tmp/recovery/images/icon_output.png
  • cache/tmp_897/tmp/recovery/images/indeterminate1.png
    .png
  • cache/tmp_897/tmp/recovery/images/indeterminate2.png
    .png
  • cache/tmp_897/tmp/recovery/images/indeterminate3.png
    .png
  • cache/tmp_897/tmp/recovery/images/indeterminate4.png
    .png
  • cache/tmp_897/tmp/recovery/images/indeterminate5.png
    .png
  • cache/tmp_897/tmp/recovery/images/indeterminate6.png
    .png
  • cache/tmp_897/tmp/recovery/images/nothing.png
    .png
  • cache/tmp_897/tmp/recovery/images/progress_empty.png
    .png
  • cache/tmp_897/tmp/recovery/images/progress_fill.png
    .png
  • cache/tmp_897/tmp/recovery/lib/libc.so
    .elf linux arm
  • cache/tmp_897/tmp/recovery/lib/libcutils.so
    .elf linux arm
  • cache/tmp_897/tmp/recovery/lib/liblog.so
    .elf linux arm
  • cache/tmp_897/tmp/recovery/lib/libm.so
    .elf linux arm
  • cache/tmp_897/tmp/recovery/lib/libstdc++.so
    .elf linux arm
  • cache/tmp_897/tmp/recovery/recovery
    .tar
  • recovery/recovery
    .elf linux arm
  • u960_recovery_5.0.2.7_c4_cn/files/recovery_u960_lite.img
  • u960_recovery_5.0.2.7_c4_cn/files/zergRush
    .elf linux arm
  • u960_recovery_5.0.2.7_c4_cn/安装recovery.bat
  • u960_recovery_5.0.2.7_c4_cn/安装recovery_adb_root.bat
  • u960_recovery_5.0.2.7_c4_cn/截图/01.png
    .png
  • u960_recovery_5.0.2.7_c4_cn/截图/02.png
    .png
  • u960_recovery_5.0.2.7_c4_cn/截图/03.png
    .png
  • u960_recovery_5.0.2.7_c4_cn/截图/04.png
    .png
  • u960_recovery_5.0.2.7_c4_cn/截图/05.png
    .png
  • u960_recovery_5.0.2.7_c4_cn/截图/06.png
    .png
  • u960_recovery_5.0.2.7_c4_cn/截图/不知道为什么截图是红色的.txt
  • u960_recovery_5.0.2.7_c4_cn/直接启动到recovery.bat