General

  • Target

    be5950c7492f3ce92bf293afed0f907d

  • Size

    712KB

  • MD5

    be5950c7492f3ce92bf293afed0f907d

  • SHA1

    814c86b6eb5bb08d0eff7c08f98ff0ba322a71c8

  • SHA256

    8b277d205b685186f7534a9982d00f60dc0fb25f4605024a483603850fd3f8a2

  • SHA512

    7281c50fd91a81e6e8b18fa1658f1a8e4fda3e82c62a6df29f39bbd914599be0adf0b8f8cf8f93fd16822e9b825aceebd3dd2b42db18371b3535afb88129d276

  • SSDEEP

    12288:OrMH2ZKBOK5D0pWEaA06rg9Fz8bPI3DF36SST1hQ6fZev1b:Oa2YOKF0c/A0SmWbPIRs1NW1b

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • be5950c7492f3ce92bf293afed0f907d
    .zip
  • root/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • root/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • root/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • root/adb.exe
    .exe windows:4 windows x86 arch:x86

    fef6cee9d0e4eec527f09da74363e32f


    Code Sign

    Headers

    Imports

    Sections

  • root/root.bat
  • root/su
    .elf linux arm
  • root/zergRush
    .elf linux arm