General

  • Target

    a649c3b55c5b8e4f5c8914702f020ce4

  • Size

    1.4MB

  • MD5

    a649c3b55c5b8e4f5c8914702f020ce4

  • SHA1

    d827f89df00e8d9b2e45bff946a91d82034b8d07

  • SHA256

    52a587d01fe196d378b9346824c9032a44321609a81395dd4573974416930cb8

  • SHA512

    40a9228d4c8e65ccc1a0bcea0d93979ec76a354c7f99272510b7c33871288f093c0256158b1a582c7685405d5955abd5ba090a5dfea1f4e486beae069f9aeea2

  • SSDEEP

    24576:llc0f8n15MxA8hHD/NBSghVxdRglySnklmf7zK917mTariIStqMrN:M0f8n1Om0D/NBSghVNg0e9fXKrja8SN

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • a649c3b55c5b8e4f5c8914702f020ce4
    .rar
  • DooMLoRD_v4_ROOT-zergRush-busybox-su/files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • DooMLoRD_v4_ROOT-zergRush-busybox-su/files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • DooMLoRD_v4_ROOT-zergRush-busybox-su/files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • DooMLoRD_v4_ROOT-zergRush-busybox-su/files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • DooMLoRD_v4_ROOT-zergRush-busybox-su/files/busybox
    .elf linux arm
  • DooMLoRD_v4_ROOT-zergRush-busybox-su/files/makespace
  • DooMLoRD_v4_ROOT-zergRush-busybox-su/files/su
    .elf linux arm
  • DooMLoRD_v4_ROOT-zergRush-busybox-su/files/zergRush
    .elf linux arm
  • DooMLoRD_v4_ROOT-zergRush-busybox-su/runme.bat