General

  • Target

    a17899de71eb61ace73db59a931d1704

  • Size

    2.1MB

  • MD5

    a17899de71eb61ace73db59a931d1704

  • SHA1

    433f6b7c8b99d13794627689270653877ad2b936

  • SHA256

    121482bca7297455aa65aa9f6498adee739fc3d9787177110ec21fb68ac0901d

  • SHA512

    d375770eef8460a6587a96b63e7f36d27a2a61270ae30cff6860a6b56f3ba274b8498bb1524711db9ad3db605280a96f21a7a18904341725c4e59fac8e0a359c

  • SSDEEP

    49152:ZdE1ynS1+Im9mXxI4kh1RCgCtYBUudofn3dnVv/8:cKS0Im9GIRhfpCtSoNBk

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a17899de71eb61ace73db59a931d1704
    .rar
  • KingRoot v1.3.1 2012.12.24.1824/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • KingRoot v1.3.1 2012.12.24.1824/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot v1.3.1 2012.12.24.1824/adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Code Sign

    Headers

    Imports

    Sections

  • KingRoot v1.3.1 2012.12.24.1824/block
    .gz
  • block
    .elf linux arm
  • KingRoot v1.3.1 2012.12.24.1824/busybox
    .elf linux arm
  • KingRoot v1.3.1 2012.12.24.1824/evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • KingRoot v1.3.1 2012.12.24.1824/extapp.xml
  • KingRoot v1.3.1 2012.12.24.1824/exynos-abuse
    .elf linux arm
  • KingRoot v1.3.1 2012.12.24.1824/flood
    .gz
  • flood
    .elf linux arm