General

  • Target

    9e604070c04d45c466d40c0005877767

  • Size

    3.0MB

  • MD5

    9e604070c04d45c466d40c0005877767

  • SHA1

    d91b25492001fc0e9da0b2582ace70d58b3adc2f

  • SHA256

    375ba9c0fd0df2118ad91d490b0c790bbffd80650b7dccd42a85c801ccc7bda8

  • SHA512

    0649089697a9c8b11b2160a398ff471b527171fa498de8d64b0da305aa6e8d27d83a9ef5527ed2541267fb8aaa099abb6b2e7b08d512afc701cd8f295bea0f00

  • SSDEEP

    49152:T0f8n1Om0D/NBj31VNg0e9fXKrfa8SMa5N1yghumTW0dCu1GXnb6hocFb/a1:Ts8n50pBjb26LBSR5Wgh5PdVgN

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 9e604070c04d45c466d40c0005877767
    .rar
  • 9100G 2.3专用root/files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • 9100G 2.3专用root/files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • 9100G 2.3专用root/files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • 9100G 2.3专用root/files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • 9100G 2.3专用root/files/busybox
    .elf linux arm
  • 9100G 2.3专用root/files/su
    .elf linux arm
  • 9100G 2.3专用root/files/zergRush
    .elf linux arm
  • 9100G 2.3专用root/runme.bat
  • 9100G 2.3专用root/☞【YHB精华帖】I9100G完美ROOT教程+ROM资源(7_5更新)官方正式版4_0_4☜ - 三星i9100G论坛 - dospy安卓智能手机论坛安卓论坛.mht
    .eml
    • http://www.dospy.com/jz/

    • http://www.dospy.com/

    • http://soft.dospy.com/

    • http://wap.dospy.com/

    • http://an.dospy.com/

    • http://bbs.dospy.com/

    • http://wp.dospy.com/

    • http://bbs.dospy.com/?gid=297

    • http://www.dospy.com/judge/soft/

    • Show all
  • attachment-1
    .gif
  • attachment-17
    .gif
  • attachment-18
    .gif
  • attachment-19
    .gif
  • attachment-20
    .gif
  • attachment-21
    .gif
  • attachment-22
    .gif
  • attachment-24
    .gif
  • attachment-25
    .gif
  • attachment-27
    .gif
  • attachment-28
    .gif
  • attachment-29
    .gif
  • attachment-30
    .gif
  • attachment-31
    .gif
  • attachment-32
    .gif
  • attachment-34
    .gif
  • attachment-36
    .gif
  • attachment-37
    .gif
  • attachment-38
    .gif
  • attachment-39
    .gif
  • attachment-40
    .gif
  • attachment-41
    .gif
  • attachment-43
    .gif
  • attachment-44
    .gif
  • attachment-46
    .gif
  • attachment-48
    .gif
  • attachment-49
    .gif
  • attachment-50
    .gif
  • attachment-51
    .gif
  • attachment-53
  • attachment-54
  • attachment-56
    .js
  • attachment-57
    .js
  • attachment-58
    .js
  • attachment-59
    .js
  • attachment-60
    .js
  • attachment-61
    .js
  • attachment-62
    .js
  • attachment-63
    .js
  • attachment-64
    .js
  • attachment-66
    .html .js polyglot
  • attachment-67
    .js
  • attachment-68
    .js
  • attachment-69
    .js
  • attachment-70
    .js
  • attachment-71
    .js
  • attachment-72
    .js
  • attachment-73
    .js
  • attachment-74
    .js
  • attachment-75
  • attachment-76
    .js
  • attachment-77
    .js
  • email-html-55.txt
    .html .js polyglot
  • email-html-65.txt
    .html .js polyglot