General

  • Target

    957a905e1fd2315611e74e8cd742d9d4

  • Size

    10.1MB

  • MD5

    957a905e1fd2315611e74e8cd742d9d4

  • SHA1

    b30e0f523458caef9874faf07aa74ff262cbcaa9

  • SHA256

    439e3ba351d33f5fc8374efebdbec03d76b4fbe1525b0162aa55b647050500b7

  • SHA512

    fb132be3f9dbc23b9f5881abff5292df4350c22ad50a4fe2d3c5fb89a0da91485d8b69065554f0e3965486010c8da11ea19da98b6eb143eadacb03f413723ccc

  • SSDEEP

    196608:B1y/J6oQ7q5ZHxilncaWoZ49LZk286LHXpdmIN0KMZ17IXwVKln592p//xBKRhhC:B1y/Jm7q5ZRunYk2zHXpYg0nEgun5921

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 957a905e1fd2315611e74e8cd742d9d4
    .rar
  • KingRoot PC 1.5Beta/AdbTools.dll
    .dll windows:5 windows x86 arch:x86

    6a1608215225a7ef1b5ec25d759b81f7


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC 1.5Beta/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC 1.5Beta/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC 1.5Beta/adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Headers

    Imports

    Sections

  • KingRoot PC 1.5Beta/block
    .gz
  • block
    .elf linux arm
  • KingRoot PC 1.5Beta/boot.img
  • KingRoot PC 1.5Beta/boot.insecure.img
  • KingRoot PC 1.5Beta/busybox
    .elf linux arm
  • KingRoot PC 1.5Beta/evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • KingRoot PC 1.5Beta/extapp.xml
  • KingRoot PC 1.5Beta/exynos-abuse
    .elf linux arm
  • KingRoot PC 1.5Beta/fakebackup.ab