General

  • Target

    a5b20646ebb8586c9a8cf445432e59dc

  • Size

    1.1MB

  • MD5

    a5b20646ebb8586c9a8cf445432e59dc

  • SHA1

    4332cdc6a39b366ea61577737761a983135caf7b

  • SHA256

    8457ea945d22d33cab167dd25f47953b6ea18f5e57378f28294901bcf03adeaf

  • SHA512

    e470232d89eca108a2b7111a3396712a3acdd4b6cef729558a4a4fd8770863c4dbeb220e893ec649301e3cb60a12d6a1f440d17c414ec05a9e5617b40b82bcf7

  • SSDEEP

    24576:PoEAKidWwAae7j3jffDvqNvYCCVpd+bXEy7cZbmN3kqUoUNh:SBg7j3jXDOgCCV+bXEzZhNh

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • a5b20646ebb8586c9a8cf445432e59dc
    .zip
  • Root/root Alpha v800.pdf
    .pdf
    • https://play.google.com/store/apps/details?id=com.noshufou.android.su

    • https://play.google.com/store/apps/details?id=com.joeykrim.rootcheck

  • Root/z4mod.apk
    .apk android arch:arm

    com.z4mod.z4root

    z4root