General

  • Target

    b073785698d730f8c7f021980d451c76

  • Size

    4.0MB

  • MD5

    b073785698d730f8c7f021980d451c76

  • SHA1

    2e539da99e54f8e52cf213f48128632b6164331e

  • SHA256

    7cc0c78e7d9a4f9af134dd27e7c06d44198fb341cb70fe35c77b21ca6e07d65d

  • SHA512

    0f91d17b3b038a692fbf6bbda72f176c02e6546686c3f7d4a2124b149358596eda76177617c4005e8a7720d53b40a3e222cfcb5abf529f3b8e335210c56f4ed0

  • SSDEEP

    98304:QVx1PoeaJZ02M/YPDDnYH+M73oivPPjHcu8RxaDxqiTm58iYwbM0KX9:QVcecqF/Y7DYeeLvXj8dxaYCWtS9

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • b073785698d730f8c7f021980d451c76
    .zip
  • AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot.exe
    .exe windows:5 windows x86 arch:x86

    60bc78837b6a8562bb73cf67e99a13bb


    Headers

    Imports

    Sections

  • PluginInfo.xml
    .xml
  • PluginKingRoot.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    a4587e74f709451276f80500f5980bc2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Code Sign

    Headers

    Imports

    Sections

  • block
    .gz
  • block
    .elf linux arm
  • busybox
    .elf linux arm
  • evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • extapp.xml
  • exynos-abuse
    .elf linux arm
  • flood
    .gz
  • flood
    .elf linux arm
  • libboy.so
    .apk android
  • libsu.so
    .elf linux arm
  • libxy.so
    .elf linux arm
  • motofail
    .gz
  • motofail
    .elf linux arm
  • rageagainstthecage
    .gz
  • rageagainstthecage
    .elf linux arm
  • root
    .elf linux arm
  • root.sh
  • roottool
    .elf linux arm
  • su
    .elf linux arm
  • superuser.apk
    .apk android arch:arm

    com.kingroot.kinguser

    com.kingroot.kinguser.Activitys.SlideMainActivity


  • thinkpwn
    .gz
  • thinkpwn
    .elf linux arm
  • xyz
    .gz
  • xyz
    .elf linux arm
  • zerg
    .gz
  • zerg
    .elf linux arm
  • zergRush
    .gz
  • zergRush.bak
    .elf linux arm