General

  • Target

    ab1667e477445b07f7e5789bc4ea195a

  • Size

    1.8MB

  • MD5

    ab1667e477445b07f7e5789bc4ea195a

  • SHA1

    eb21f7e5fdfbb68641ff85ef9b83c1f8ed9af370

  • SHA256

    13d66cd9615600dc9896adaea261c1e6b5ea462eacbc473c0cf9800f929d95f9

  • SHA512

    4233182df06f5efec75cd9623ddb919c42770037b7b112c413b10442736ca8d28f0fd440167eba7cf8ed16d64ead7897455f44c2517aad6399ad68795be40261

  • SSDEEP

    49152:5DX3LNW0CDPilh0ciVurvZPqVVzEacwY8S:ZCHciVurvZyVFEacES

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ab1667e477445b07f7e5789bc4ea195a
    .zip
  • S8600 root/files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • S8600 root/files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • S8600 root/files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • S8600 root/files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • S8600 root/files/busybox
    .elf linux arm
  • S8600 root/files/su
    .elf linux arm
  • S8600 root/files/zergRush
    .elf linux arm
  • S8600 root/runme.bat