General

  • Target

    9abbb2e284ce9b63e8147738002c07fc

  • Size

    4.9MB

  • MD5

    9abbb2e284ce9b63e8147738002c07fc

  • SHA1

    fed55036b62499df91d26fae115144aa1012cc66

  • SHA256

    8414c147b4ffb3f5c9fda868047b4fe4cfd4070f01b909e0bcf86c0ff16ad122

  • SHA512

    7fd1579c9d67c5592e0fe0c7d513887e8df77ee8386093e73d00d6588b6d2d8b43e8a663aa54cc1b70481c3f7d231e37dece7b5df2adb81e5f47cf849c2e5d40

  • SSDEEP

    98304:5x17/ARxhDxn7BCaspPinvllLvtOyQr9wHeUDcxHrJUMKihR4iBo:58Rx9x7IXpPinvllDs9q7YtrhRVo

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 9abbb2e284ce9b63e8147738002c07fc
    .rar
  • BOOTMENU/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • BOOTMENU/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • BOOTMENU/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • BOOTMENU/adb.exe
    .exe windows:4 windows x86 arch:x86

    9434bcb74195f7025a393fa105630d98


    Headers

    Imports

    Sections

  • BOOTMENU/bootmenu.tar.gz
    .gz
  • bootmenu.tar
    .tar
  • system/bootmenu/2nd-boot/init
    .elf linux arm
  • system/bootmenu/2nd-boot/init.mapphone_umts.rc
  • system/bootmenu/2nd-boot/init.rc
  • system/bootmenu/2nd-boot/sbin/ueventd
    .elf linux arm
  • system/bootmenu/2nd-boot/ueventd.rc
  • system/bootmenu/2nd-init/init
    .elf linux arm
  • system/bootmenu/2nd-init/init.mapphone_umts.rc
  • system/bootmenu/2nd-init/init.rc
  • system/bootmenu/2nd-init/ueventd.rc
  • system/bootmenu/binary/2nd-boot
    .elf linux arm
  • system/bootmenu/binary/2nd-init
    .elf linux arm
  • system/bootmenu/binary/adbd
    .elf linux arm
  • system/bootmenu/binary/adbd.root
    .elf linux arm
  • system/bootmenu/binary/bootmenu
    .elf linux arm
  • system/bootmenu/binary/busybox
    .elf linux arm
  • system/bootmenu/binary/logwrapper.bin
    .elf linux arm
  • system/bootmenu/binary/lsof
    .elf linux arm
  • system/bootmenu/config/bootmenu_bypass
  • system/bootmenu/config/bootmode.conf
  • system/bootmenu/config/default.prop
  • system/bootmenu/config/default_bootmode.conf
  • system/bootmenu/config/extendedcommand
  • system/bootmenu/config/overclock.conf
  • system/bootmenu/ext/Superuser.apk
    .apk android

    com.noshufou.android.su

    Su


  • system/bootmenu/ext/modules/cpufreq_conservative.ko
    .elf linux arm
  • system/bootmenu/ext/modules/cpufreq_interactive.ko
    .elf linux arm
  • system/bootmenu/ext/modules/cpufreq_ondemand.ko
    .elf linux arm
  • system/bootmenu/ext/modules/cpufreq_performance.ko
    .elf linux arm
  • system/bootmenu/ext/modules/cpufreq_powersave.ko
    .elf linux arm
  • system/bootmenu/ext/modules/cpufreq_smartass.ko
    .elf linux arm
  • system/bootmenu/ext/modules/cpufreq_userspace.ko
    .elf linux arm
  • system/bootmenu/ext/modules/overclock_defy.ko
    .elf linux arm
  • system/bootmenu/ext/modules/symsearch.ko
    .elf linux arm
  • system/bootmenu/ext/su
    .elf linux arm
  • system/bootmenu/froyo/init.mapphone_umts.rc
  • system/bootmenu/froyo/init.rc
  • system/bootmenu/images/background.png
    .png
  • system/bootmenu/images/icon_error.png
    .png
  • system/bootmenu/images/icon_installing.png
    .png
  • system/bootmenu/images/indeterminate1.png
    .png
  • system/bootmenu/images/indeterminate2.png
    .png
  • system/bootmenu/images/indeterminate3.png
    .png
  • system/bootmenu/images/indeterminate4.png
    .png
  • system/bootmenu/images/indeterminate5.png
    .png
  • system/bootmenu/images/indeterminate6.png
    .png
  • system/bootmenu/images/progress_empty.png
    .png
  • system/bootmenu/images/progress_fill.png
    .png
  • system/bootmenu/init.d/01sysctl
    .sh linux
  • system/bootmenu/recovery/recovery.fstab
  • system/bootmenu/recovery/res/images/icon_bootmenu.png
    .png
  • system/bootmenu/recovery/res/images/icon_clockwork.png
    .png
  • system/bootmenu/recovery/res/images/icon_done.png
    .png
  • system/bootmenu/recovery/res/images/icon_error.png
    .png
  • system/bootmenu/recovery/res/images/icon_firmware_error.png
    .png
  • system/bootmenu/recovery/res/images/icon_firmware_install.png
    .png
  • system/bootmenu/recovery/res/images/icon_installing.png
    .png
  • system/bootmenu/recovery/res/images/indeterminate1.png
    .png
  • system/bootmenu/recovery/res/images/indeterminate2.png
    .png
  • system/bootmenu/recovery/res/images/indeterminate3.png
    .png
  • system/bootmenu/recovery/res/images/indeterminate4.png
    .png
  • system/bootmenu/recovery/res/images/indeterminate5.png
    .png
  • system/bootmenu/recovery/res/images/indeterminate6.png
    .png
  • system/bootmenu/recovery/res/images/progress_empty.png
    .png
  • system/bootmenu/recovery/res/images/progress_fill.png
    .png
  • system/bootmenu/recovery/res/keys
  • system/bootmenu/recovery/sbin/badblocks
    .elf linux arm
  • system/bootmenu/recovery/sbin/dedupe
    .elf linux arm
  • system/bootmenu/recovery/sbin/dump_image
    .elf linux arm
  • system/bootmenu/recovery/sbin/e2fsck
    .elf linux arm
  • system/bootmenu/recovery/sbin/fix_permissions
  • system/bootmenu/recovery/sbin/killrecovery.sh
    .sh linux
  • system/bootmenu/recovery/sbin/mke2fs
    .sh linux
  • system/bootmenu/recovery/sbin/mke2fs.bin
    .elf linux arm
  • system/bootmenu/recovery/sbin/nandroid-md5.sh
    .sh linux
  • system/bootmenu/recovery/sbin/parted
    .elf linux arm
  • system/bootmenu/recovery/sbin/postrecoveryboot.sh
    .sh linux
  • system/bootmenu/recovery/sbin/recovery
    .elf linux arm
  • system/bootmenu/recovery/sbin/recovery_stable
    .elf linux arm
  • system/bootmenu/recovery/sbin/resize2fs
    .elf linux arm
  • system/bootmenu/recovery/sbin/sdparted
    .sh linux
  • system/bootmenu/recovery/sbin/tune2fs
    .elf linux arm
  • system/bootmenu/script/2nd-boot.sh
    .sh linux
  • system/bootmenu/script/2nd-init.sh
    .sh linux
  • system/bootmenu/script/_config.sh
  • system/bootmenu/script/adbd.sh
    .sh linux
  • system/bootmenu/script/bootmode_clean.sh
    .sh linux
  • system/bootmenu/script/cdrom.sh
    .sh linux
  • system/bootmenu/script/data.sh
    .sh linux
  • system/bootmenu/script/media_fixup.sh
    .sh linux
  • system/bootmenu/script/overclock.sh
    .sh linux
  • system/bootmenu/script/post_bootmenu.sh
    .sh linux
  • system/bootmenu/script/pre_bootmenu.sh
    .sh linux
  • system/bootmenu/script/reboot_command.sh
    .sh linux
  • system/bootmenu/script/recovery.sh
    .sh linux
  • system/bootmenu/script/recovery_stable.sh
    .sh linux
  • system/bootmenu/script/recoveryexit.sh
    .sh linux
  • system/bootmenu/script/sdcard.sh
    .sh linux
  • system/bootmenu/script/stock.sh
    .sh linux
  • system/bootmenu/script/system.sh
    .sh linux
  • system/bootmenu/script/uninstall.sh
    .sh linux
  • system/bootmenu/script/unroot.sh
    .sh linux
  • BOOTMENU/busybox
    .elf linux arm
  • BOOTMENU/expolit
    .elf linux arm
  • BOOTMENU/install.sh
    .sh linux
  • BOOTMENU/runme.bat
  • BOOTMENU/su
    .elf linux arm