General

  • Target

    cb7a2402f90379920f27865396fc2b2b

  • Size

    1.4MB

  • MD5

    cb7a2402f90379920f27865396fc2b2b

  • SHA1

    f29739f022d4cd0bcc04c6e479ad6a3cdfe9b284

  • SHA256

    1567f7a145eafded82a80aca6ed67d2ec1ab446947c11104d61b100e4b3597c5

  • SHA512

    0a2b205bc63e68c0530782d406f18bbf55df17d7d8fe06ac0ecb9434cd47c9dc5cbe455aa88de77191aa01c0fc1047b835a687d2f9e2eeb67f3088f4db26f120

  • SSDEEP

    24576:Glc0f8n15MxA8hHD/NB+02VxdRglySnklmf7zK917ETariIStqMrq:D0f8n1Om0D/NB+02VNg0e9fXKrpa8Sq

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • cb7a2402f90379920f27865396fc2b2b
    .rar
  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/busybox
    .elf linux arm
  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/su
    .elf linux arm
  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/zergRush
    .elf linux arm
  • DooMLoRD_v2_ROOT-zergRush-busybox-su/runme.bat