General

  • Target

    ccd31f860bfab27799c0ccb0c859c008

  • Size

    1.7MB

  • MD5

    ccd31f860bfab27799c0ccb0c859c008

  • SHA1

    7f9e5469411b20e0b967069a12d92ddd766790b0

  • SHA256

    2555166b03b72426f7a89dbd709aee59062a6a33b185a3d24280b623c20b351c

  • SHA512

    0029888d6aac04486b68208d878071589038075b4c9875b8a618e39e2fdb1d43649e8f5b06469554688044c11de8a1ab8dfe1e1390921849d955a885ff9e5fa3

  • SSDEEP

    24576:1AwUCUiRMXqalhxHcvIr6luZHm2mwu7pxfWyt7dZ4NH7JP+IgUe1B5iyHrE/2hQD:pUb4Q9DcvqZG+u7ptax1WBUByLE/2he

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ccd31f860bfab27799c0ccb0c859c008
    .zip
  • zergrush/files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • zergrush/files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • zergrush/files/SuperSU.apk
    .apk android

    eu.chainfire.supersu

    .MainActivity


  • zergrush/files/SuperSUPro.apk
    .apk android

    eu.chainfire.supersu.pro


  • zergrush/files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • zergrush/files/busybox
    .elf linux arm
  • zergrush/files/makespace
  • zergrush/files/su
    .elf linux arm
  • zergrush/files/zergRush
    .elf linux arm
  • zergrush/runme.bat