General

  • Target

    ac2c9631fdcc215a07ad45785a732769

  • Size

    2.9MB

  • MD5

    ac2c9631fdcc215a07ad45785a732769

  • SHA1

    f29a5de341d9cef8b6c568ef4ea5a604590f8ac9

  • SHA256

    934a8da7ed3e8ba17ac54357c000b6422fa24e899e4812dc81f84920891c581c

  • SHA512

    cea535b0126e060c64016196e1f8c1862a79d17bc995cdc569aa0063829e2a510417627eafab0dd49e900a1f4ee1ac21d6ddddde58bb4513cddc1673e1ffb122

  • SSDEEP

    49152:fdpT3nS1+Im9mXxn4kh1RCgCATPjHveZJVEzefYfLpeen22MwHS/:HrS0Im9GnRhfpCATPjPeP+zeM9n2xn

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ac2c9631fdcc215a07ad45785a732769
    .rar
  • KingRoot _v1.3/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • KingRoot _v1.3/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot _v1.3/adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Code Sign

    Headers

    Imports

    Sections

  • KingRoot _v1.3/block
    .gz
  • block
    .elf linux arm
  • KingRoot _v1.3/busybox
    .elf linux arm
  • KingRoot _v1.3/evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • KingRoot _v1.3/extapp.xml
  • KingRoot _v1.3/exynos-abuse
    .elf linux arm
  • KingRoot _v1.3/flood
    .gz
  • flood
    .elf linux arm