General

  • Target

    bba492befa30a6378c2b6954b9f614d7

  • Size

    1.9MB

  • MD5

    bba492befa30a6378c2b6954b9f614d7

  • SHA1

    30c15ae2b436b2d65542cf22febcc5f9e2bfd3f5

  • SHA256

    edb3597cae5a04915bfb022977612f16b75aa09487ba9cfbf3b134e5b3517a2b

  • SHA512

    6984f6e9ff92651ceaefc815dc2309a42d3001fa16ce9289888520a3b8764a0626fb4800f90ac510087cfbc0e320562539b63bfd265aec1ad1305122fb67ff32

  • SSDEEP

    49152:+50X8EWo/lnvH6B6+TYGI4kt7EgGd2UrzDlhGo:DBB6NkGIRtov2UrnT

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bba492befa30a6378c2b6954b9f614d7
    .rar
  • KingRoot v1.3.1/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • KingRoot v1.3.1/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot v1.3.1/adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Code Sign

    Headers

    Imports

    Sections

  • KingRoot v1.3.1/block
    .gz
  • block
    .elf linux arm
  • KingRoot v1.3.1/busybox
    .elf linux arm
  • KingRoot v1.3.1/evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • KingRoot v1.3.1/extapp.xml
  • KingRoot v1.3.1/exynos-abuse
    .elf linux arm
  • KingRoot v1.3.1/flood
    .gz
  • flood
    .elf linux arm