Overview

overview

6

Static

static

6

AdbWinApi.dll

windows7-x64

3

AdbWinApi.dll

windows10-2004-x64

3

AdbWinUsbApi.dll

windows7-x64

1

AdbWinUsbApi.dll

windows10-2004-x64

3

KingRoot.exe

windows7-x64

3

KingRoot.exe

windows10-2004-x64

3

PluginKingRoot.dll

windows7-x64

1

PluginKingRoot.dll

windows10-2004-x64

1

adb.exe

windows7-x64

1

adb.exe

windows10-2004-x64

1

block

debian-9-armhf

busybox

debian-9-armhf

1

evil.apk

 

evil.apk

android-10-x64

1

evil.apk

android-11-x64

1

exynos-abuse

debian-9-armhf

flood

debian-9-armhf

libboy.apk

 

libboy.apk

android-10-x64

libboy.apk

android-11-x64

libsu.so

debian-9-armhf

libxy.so

debian-9-armhf

1

motofail

debian-9-armhf

rageagainstthecage

debian-9-armhf

1

root

debian-9-armhf

root.sh

windows7-x64

3

root.sh

windows10-2004-x64

3

roottool

debian-9-armhf

su

debian-9-armhf

superuser.apk

 

thinkpwn

debian-9-armhf

xyz

debian-9-armhf

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b073785698d730f8c7f021980d451c76

  • Size

    4.0MB

  • Sample

    231222-q63jpsdbap

  • MD5

    b073785698d730f8c7f021980d451c76

  • SHA1

    2e539da99e54f8e52cf213f48128632b6164331e

  • SHA256

    7cc0c78e7d9a4f9af134dd27e7c06d44198fb341cb70fe35c77b21ca6e07d65d

  • SHA512

    0f91d17b3b038a692fbf6bbda72f176c02e6546686c3f7d4a2124b149358596eda76177617c4005e8a7720d53b40a3e222cfcb5abf529f3b8e335210c56f4ed0

  • SSDEEP

    98304:QVx1PoeaJZ02M/YPDDnYH+M73oivPPjHcu8RxaDxqiTm58iYwbM0KX9:QVcecqF/Y7DYeeLvXj8dxaYCWtS9

Score
6/10
android

Malware Config

Targets

    • Target

      AdbWinApi.dll

    • Size

      94KB

    • MD5

      47a6ee3f186b2c2f5057028906bac0c6

    • SHA1

      fde9c22a2cfcd5e566cec2e987d942b78a4eeae8

    • SHA256

      14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b

    • SHA512

      6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584

    • SSDEEP

      1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG

    Score
    3/10
    behavioral1behavioral2

    • Target

      AdbWinUsbApi.dll

    • Size

      59KB

    • MD5

      5f23f2f936bdfac90bb0a4970ad365cf

    • SHA1

      12e14244b1a5d04a261759547c3d930547f52fa3

    • SHA256

      041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407

    • SHA512

      49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048

    • SSDEEP

      768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI

    Score
    3/10
    behavioral3behavioral4

    • Target

      KingRoot.exe

    • Size

      5.3MB

    • MD5

      172eba2d91a4fe5a8af9ba23cd214077

    • SHA1

      8c719e2da207c467ffaf9b411475d569a1a93ba7

    • SHA256

      4abe1da2757d3e005356f2de2742b948d4f6f24ff4ee908526a227fa26a5ef38

    • SHA512

      c3cb3c1f37a9c1fe54903aeab88ef735070c06935ec40d04fb370722766fdd60f95dbff01cc8c705d5a2784d42cbf690879e6ad472a5e3a7d8d9d851b9f520a7

    • SSDEEP

      98304:KaJJXIgehv9jlwJFMIVwojrJFA91bX4wLuy3L1JI:hJWsVbY1bX4Ny5S

    Score
    3/10
    behavioral5behavioral6

    • Target

      PluginKingRoot.dll

    • Size

      52KB

    • MD5

      7626188f6bac3e6a9baeef15f69db6e6

    • SHA1

      8fa450eafd2b772a968d764b3d6017d59d4c2683

    • SHA256

      80b45c6f25e55fb6616738348e6c591b7fa2648c5d709fe415aa2bd6c924d576

    • SHA512

      7209c9c9ae2da9dbab2d290fa6f4e463d200ec3b0e769ff5f2f3a726da95daefa223a735b42eed57823a60cd1bd12e2a1efebd8cae6b7e746e733a41b6aca18d

    • SSDEEP

      768:DCuK9puCmLe9Bl7OZ9STehRFFR0kkXqEDWwnXoNPN5TwgkQbKIILWHbCn:BuppmSfITRPOk2qfTwrGGa7Cn

    Score
    1/10
    behavioral7behavioral8

    • Target

      adb.exe

    • Size

      495KB

    • MD5

      1644bd882fdef7385f4368face64d544

    • SHA1

      dc12f98e8deb21d6b8479954412a526dd8bc2154

    • SHA256

      3dab34f46ee4625d772b48f8856646689ded2472b72464000a312eace7469a22

    • SHA512

      30cb1e7db53e2111236e96a9b26cded69eb8b3f2de09f887ed7efabd9cf47db00cad41384e99e14bbe63dd5dbd75561dbed03f55102514d7fd0263480f274a14

    • SSDEEP

      12288:dxFodGaaAO2fapUGpu/Th9gZ1W4amgWr4j6jxoaLvNOJwnsp/:dPT5MThiZbjmaNu/

    Score
    1/10
    behavioral10behavioral9

    • Target

      block

    • Size

      4KB

    • MD5

      46a72d094d1547e888947fccad7d8164

    • SHA1

      ec56f0788f5481f4930c9dbbecc3d8cba9250775

    • SHA256

      04929f940440ba3b03535afc6a098fd57fa42f3a7f7d2c8cb6337209b953cee2

    • SHA512

      7978c70126b7bbcfb09aeb60c85ed581944ad8d4d5af40800c39dde60984a8e1c646b72798210b04fb49d605069abf54a08c5b2ac3235d88344091730d981c80

    • SSDEEP

      48:oGVtlmPfsgoneeNQFnaUvUbNryiNG72cwlpi8B/m3J/cM3gjEqb61zUIz/PB1iKR:oGVGR8Q9UbNrEMjO5/cM3+Lbyld1iu

    Score
    1/10
    behavioral11

    • Target

      busybox

    • Size

      1.8MB

    • MD5

      5ea6873c7887cf31aac0bcafb10d7680

    • SHA1

      2c379b0f373f55fd44e1c8c4802a8d1b049fe2e8

    • SHA256

      7c88dcbc170c966c8fa763c8996ad3e6f92316794f2e260454c3cec517482922

    • SHA512

      25ee92284812284abcb6fb1bb0a71c3b942bdc2f863fe727b3aa4fa211bb2ddb3c95a929a44d3b5c101e91e8317e2c40867cd87483af787aa0117773f6589c15

    • SSDEEP

      24576:8kJJEb/l5CH6s0S5+qls8FVDgSOA1RSLakp2mNsh0xAJLhtwN5oOOKSYt7e7uUBG:1WWk2NqaK2y75divByRhkb

    Score
    1/10
    behavioral12

    • Target

      evil.apk

    • Size

      551KB

    • MD5

      f38634c37af098caddc224903d58ba6f

    • SHA1

      e0dcbdb9ac880acd66652650a2a35633a9ff43f4

    • SHA256

      fd765db39a15909291348f02d046fe6499abb049061ef9103b03fd70ad5ece50

    • SHA512

      09d5d9f811e33c0e870c522c312c17759456a86bf1466698cc5c0eb3c660308282667fb5ffeab08db44121953cb3b61bb7c427ad6cb26e89ca7f7b6a78cf2445

    • SSDEEP

      12288:Ign4rIU6Q/S+3f7ddm7uFMYIBLsdGtreILDw4UwawRUC6y/Y3KqrsDO6A:rn4rIU6Q/nzPmOMYKwdaqILDwGZ36yzw

    Score
    1/10
    behavioral13behavioral14behavioral15

    • Target

      exynos-abuse

    • Size

      5KB

    • MD5

      8ba3889bf5d4420e945e0ad463bb78ff

    • SHA1

      8e9582af040be8f9e6bbd3802459b57885f71a37

    • SHA256

      90500eb7e9d31816f5295dcff54c417cd029919e6c09ca4764ca664218aac435

    • SHA512

      6aea2a3b6fb35fe16423bafc04f9f154bba102977aa82012a3d9db874ef5024fd4b74eac48483ae42e775e6ecb4ad9e36cfc7e990e477b4c9de512a6a0d453cb

    • SSDEEP

      48:/Fw8WqtLjJ5o9uXk/HMnHYGKiigl0jfHuy0gQjqZHrNO9EUaj6zMS/j1+bU:Mo0crXipR0gxpKg6gS/j1+bU

    Score
    1/10
    behavioral16

    • Target

      flood

    • Size

      5KB

    • MD5

      6c415a45061ee66a15dc2e2eec242875

    • SHA1

      ffd9f511c13d17af97e7eea551d90a8d08bf014c

    • SHA256

      2a333864c57b03610f0243ba8795e50bd17736feb0515e5eaeefe1d660370c7e

    • SHA512

      9461448d82560ef49ac85fba8ec8a1ea42abbde7ca18481a515176449a85def590c412239203d86a8c2dc16766fbf7f388843dc7b9e6dd36c9489c406822ce74

    • SSDEEP

      96:hGsXW50GOsFqys+kK90261wGNnOJ/qEUiHfrZYgx:nXvi9anOzrZYy

    Score
    1/10
    behavioral17

    • Target

      libboy.so

    • Size

      8KB

    • MD5

      52e5d1447c57ddce469d5dee1069b2b2

    • SHA1

      fbd3d53eb783a8008593012e38e6db0e8547b7f2

    • SHA256

      7029edee881977bbad28ccd413e600e1966372c5e3a51823bf02cb197f060b82

    • SHA512

      782d297a08fffaf43c80cf008a7b1026342ae62d5e540754941fdac6821db02e1a77976423d1460214b98c3fcc73b8a2077b73302a2c224219cae75fe56b4631

    • SSDEEP

      192:9dmfyqcJNNoRsb7/7dNHipk9quEyedou2E7TkY8CA5u:HU6JksP/RMe9qnnSutN

    Score
    1/10
    behavioral18behavioral19behavioral20

    • Target

      libsu.so

    • Size

      15KB

    • MD5

      f235a5abd671762da0de2ffd739c342f

    • SHA1

      ec7c9dfd460297a9c5a30293b76ff88a82d2ea0a

    • SHA256

      feb7d776ff829d2c4bb7a9cf9b53f64a14f3fa75a94d726c56dda0ab7d3077a5

    • SHA512

      ac8aee7df2f8bf8745d84f29a2284d798572526aa49913bcb8452720eb63a896d8c4e5ffc190644d75fb6bac5f3b763b6ae16fbc1fe0c19000d5df021deda96c

    • SSDEEP

      192:LnXOtntn6gzN5d0Ek8nnhRcHWvhWP4ES3DhjkiODB6TLUZ+D7Q+U9U30:LXU6g5UYnhhEOD9kiODBP+D7NB

    Score
    1/10
    behavioral21

    • Target

      libxy.so

    • Size

      30KB

    • MD5

      3f6a79f2d20dc909e5d8fc6ec652f4e7

    • SHA1

      2c1893a499e59ca5449508e7543d3b7906fb2eda

    • SHA256

      17ab1ab9d5592fdb0b8c2abd8e5d45a8f577be2b6a7d5bd06303678512a50a6d

    • SHA512

      80cbacda048e4b8394e8b8da66419a95cce4bce26b1b9b381d4ac7d04f39ab9a01749dba4fa80edc0fe62c3b311eb57addf53b473a55fe8a35a35f06b0443981

    • SSDEEP

      768:fdp9mHbdm8jTfrOUHGWuOBKYWAjrajkr+V1u0I3LjK0H4:BmHbdm8jTfrOUHGWuOBKYWAKXQ3nK0H4

    Score
    1/10
    behavioral22

    • Target

      motofail

    • Size

      489KB

    • MD5

      5285afb7f3d5cbefe2e3249d69d746ba

    • SHA1

      272fa14b0865c97ad51935766dec086ced0c6a19

    • SHA256

      4298f55d7e24b22061515f02e8856e8a8e9b724ed68ad97aba3172220d64932b

    • SHA512

      cab2f3170e99505b75025810051ab1fdb8f2a4b749aa51683c6e9e9428fd8f699f6222d480842cf5e1e32bc49770ad4852d3b992ec9d4fb5f29110ee91e07bd0

    • SSDEEP

      1536:zYQHLbI5jjnHH/EbNtTmesZDRW9e/RHsMaXv14oeX:SfEcR9/ZsQ

    Score
    1/10
    behavioral23

    • Target

      rageagainstthecage

    • Size

      572KB

    • MD5

      861f1925ee367c5d7b95610fee2c4969

    • SHA1

      ca5fbaefe7f0923a65ca47b86013d7ed9aebbf2f

    • SHA256

      90a81fa2c7998566bd4de70d92e9bda1a03cb385f46a528ba6a64557406036bc

    • SHA512

      5cea72be9f7230a8da84a528a04952ded2570137cc7a3e04839f7b5b8dec0a29bc950c2c16276376e07c9136ad1b8496a3c2863033b9824b9540f4983f02da46

    • SSDEEP

      12288:9TLtOTp+6vul9lKTpxo0SP0J5Sp2hvfa4N2ghoLRDzk/qkh6kV:St+6nT1nrfRzoLRs/qo6m

    Score
    1/10
    behavioral24

    • Target

      root

    • Size

      6KB

    • MD5

      34af8db3194bb2e2b60c2ab20fcbeff2

    • SHA1

      ca7fdfc7e99e766f51fc057582ffc191d8910f50

    • SHA256

      9107d65daa0bcc81fe6eb9409322dc650d5e6f95c67245a5fba9547c5437ce26

    • SHA512

      1fdcafb7eb3a4e7dbae567723776c8341ee10253b641c69a87b2e1d4e6bdcdd436d0a63b2ea73fa773f6d745395bda1154a745faf25f6b24cf34680f82bc5ef1

    • SSDEEP

      96:z1zWeMiLK4DMSMJa96iaMDN29Ak1xUPUCV:dxMoPgagiDN2GGxU

    Score
    1/10
    behavioral25

    • Target

      root.sh

    • Size

      20B

    • MD5

      e9e8127c8fc08b5bb2de1cfda092033d

    • SHA1

      88682ed625b3d45f905098a14ec3867e21ea8beb

    • SHA256

      e0f4d86b3a2ee22d7ead0efe7bbe5ead669ba368bd5c9029e3ce01ffadcd2274

    • SHA512

      59e2e6a006c68f0ea16ff4bd3f0e800f83090621a4a605e1ddbda19b93fff3d250a1ceda87079c51caecc6a0ecaba22136cf3b3606be42488f180c76117be55b

    Score
    3/10
    behavioral26behavioral27

    • Target

      roottool

    • Size

      5KB

    • MD5

      054c421b963d1810d7037f637a4dcfc4

    • SHA1

      4c0c89cf8fa58eb7acfef70b373199db6e3b97b5

    • SHA256

      4a57319b3bb708c17660a5d288599248122ae99373893c008e9930c2229325d2

    • SHA512

      44242f1a0074497310c8ca8c1371223170cf2b3f5c0fc96024d0f659c8f5cb41d328790b65f72c7da1c3a479c3bcca054f4bd6ac0075766703ccf151ce7ac3ff

    • SSDEEP

      96:2XuQGSHnAdJIsr5e9g+kLACRWKKb9rS8UkuqWV:WuQGSHnsNcTUAK2hXU

    Score
    1/10
    behavioral28

    • Target

      su

    • Size

      15KB

    • MD5

      f235a5abd671762da0de2ffd739c342f

    • SHA1

      ec7c9dfd460297a9c5a30293b76ff88a82d2ea0a

    • SHA256

      feb7d776ff829d2c4bb7a9cf9b53f64a14f3fa75a94d726c56dda0ab7d3077a5

    • SHA512

      ac8aee7df2f8bf8745d84f29a2284d798572526aa49913bcb8452720eb63a896d8c4e5ffc190644d75fb6bac5f3b763b6ae16fbc1fe0c19000d5df021deda96c

    • SSDEEP

      192:LnXOtntn6gzN5d0Ek8nnhRcHWvhWP4ES3DhjkiODB6TLUZ+D7Q+U9U30:LXU6g5UYnhhEOD9kiODBP+D7NB

    Score
    1/10
    behavioral29

    • Target

      superuser.apk

    • Size

      357KB

    • MD5

      0bb4c164c8b79707d7c67526f18c3953

    • SHA1

      4b0f9ae523cf8848cca6e68300529364ef8793eb

    • SHA256

      12b4b4a1bc2939babd865a2f4a2343c3c3aafc30613b37bc40ef797a0f89b82e

    • SHA512

      62181cb84c20f355d2067933e9f1186a7627fa88057a3c09b70da67969a007895697dfc071d5402cecd82045fc1cfe7aa06d1430a5e0f48cc11a8260eeff9de6

    • SSDEEP

      6144:ONLusB9qmwvoLabhNMKXngnDbFqME000iEjslzqdxBhZqr/HzZ4vI8falRcbH:ONtlQl/ngnDbYMz0J0dxBELgH

    Score
    N/A
    behavioral30

    • Target

      thinkpwn

    • Size

      5KB

    • MD5

      c61e495459305535462d050512003437

    • SHA1

      fdae769bf7f06e7d78223596bf040a2724591554

    • SHA256

      ea4afcc7de55006c00a3190d2d133a31a6734adffddac766f7b6b8d86d9e90a6

    • SHA512

      534899c3b797faba790ea4a8953e3a42d391c8e234b491dfa0f9b230a0b4c72ed7ec6fb6c50eb4f8c5ca4a2a7a53f55cbfc48a9699890e42abf447e9d9b0678d

    • SSDEEP

      96:FGa381Bq/RBERh5Z3zBJk+3l21/GzGOH/nxsim4:181M/RBEB5zcM+GSOf+4

    Score
    1/10
    behavioral31

    • Target

      xyz

    • Size

      527KB

    • MD5

      4361eba11e700f395a552575e5c832e5

    • SHA1

      6e732d4f66a9d162eb8f95a2d91efef6c2fe7834

    • SHA256

      02cab5c14964b19ca7a5181bc201a32be11cc30578c5363d82e3d05a2843bf2e

    • SHA512

      4303d181cdb8c843897b7d6ced3e9b47c18f169b5b27aedcc10cf74a1765cf8e1b406c656517ef76b9b8399022d856d02d9a87cf4d6fa1e15b82bd99daf93e12

    • SSDEEP

      1536:kpi3Xt7+zM0IsZF/7/abSkrIOxWiAnoUyLoFP75im6ezJ38vrQZu7Wo5ALPT4gkv:Ai3Xt7+YIj/DabDZAnfycC

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks