General

  • Target

    bb5e59af94b021986fc32cf69ff2d269

  • Size

    1.8MB

  • MD5

    bb5e59af94b021986fc32cf69ff2d269

  • SHA1

    e766950186a2a34478ecc2d6135370d0ca9186ea

  • SHA256

    631feabe824c9cdd0906ba23ba868cfe6dd8a426846904227c81a60d2eb4751c

  • SHA512

    c8d560eb6b97a3407a628245393385705c58027dad5b85c2784ee6800ea8fb43a6bf511f6912b5440ccb908d73870d573f0b6ce8aefe5409ffb99ecf715dfb73

  • SSDEEP

    49152:Ih1nzphoYNtTO99Kjzw5QEwPYa7cHGToTu5o0edTXLI:IhFXzBz/Ewh7cHG8TPTM

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • bb5e59af94b021986fc32cf69ff2d269
    .zip
  • ʹ˵.txt
  • һroot/files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • һroot/files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • һroot/files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • һroot/files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • һroot/files/busybox
    .elf linux arm
  • һroot/files/su
    .elf linux arm
  • һroot/files/zergRush
    .elf linux arm
  • һroot/runme.bat
  • һroot ɫ_ - pc6վ.url
    .url