Overview

overview

6

Static

static

6

P990Root/A...pi.dll

windows7-x64

3

P990Root/A...pi.dll

windows10-2004-x64

3

P990Root/A...pi.dll

windows7-x64

1

P990Root/A...pi.dll

windows10-2004-x64

3

P990Root/ADB/adb.exe

windows7-x64

1

P990Root/ADB/adb.exe

windows10-2004-x64

1

P990Root/ADB/adblinux

ubuntu-18.04-amd64

P990Root/ADB/adbmac

macos-10.15-amd64

1

P990Root/D...usybox

debian-9-armhf

1

P990Root/D...qlite3

debian-9-armhf

P990Root/E...rBreak

debian-9-armhf

P990Root/E...neuter

debian-9-armhf

1

P990Root/R...er.apk

 

P990Root/R...er.apk

android-10-x64

P990Root/R...er.apk

android-11-x64

P990Root/Root/su-v1

debian-9-armhf

P990Root/Root/su-v2

debian-9-armhf

P990Root/Root/su-v3

debian-9-armhf

P990Root/S...ck.exe

windows7-x64

1

P990Root/S...ck.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1ec91d6999fd4519089af4b04ecfbd1

  • Size

    1.6MB

  • Sample

    231222-rsagfacfe9

  • MD5

    c1ec91d6999fd4519089af4b04ecfbd1

  • SHA1

    6fab3d33c0098fe0a3984b7b72197b215b9495a7

  • SHA256

    2b331be4130f12ddef18b2b66f3e809b7feabb669ab90d01099ff0c8d0b60b56

  • SHA512

    bafb19e9dd385ea8e0e13d60dbdc7f8f384312b9e2e8dc3419b1785a21fb703fd07ca4dcf308337fed7f9c973c0bf393718936095f4f051f85594f7b556b1414

  • SSDEEP

    24576:86nUrFrZxwNlq6KsaV1vXbWfmh69rK09EiJxkclJUsQGiYJcH7b1cr9Uq/s3G5:86Sx4qJ31vXbUmhDYEiQYw7YJAfSru+j

Score
6/10
androidlinuxmacos

Malware Config

Targets

    • Target

      P990Root/ADB/AdbWinApi.dll

    • Size

      94KB

    • MD5

      47a6ee3f186b2c2f5057028906bac0c6

    • SHA1

      fde9c22a2cfcd5e566cec2e987d942b78a4eeae8

    • SHA256

      14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b

    • SHA512

      6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584

    • SSDEEP

      1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG

    Score
    3/10
    behavioral1behavioral2

    • Target

      P990Root/ADB/AdbWinUsbApi.dll

    • Size

      59KB

    • MD5

      5f23f2f936bdfac90bb0a4970ad365cf

    • SHA1

      12e14244b1a5d04a261759547c3d930547f52fa3

    • SHA256

      041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407

    • SHA512

      49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048

    • SSDEEP

      768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI

    Score
    3/10
    behavioral3behavioral4

    • Target

      P990Root/ADB/adb.exe

    • Size

      401KB

    • MD5

      8a1c5cd46f8662f6162e4ec7ba4b13b8

    • SHA1

      e9bf7c498652fdaa6ebb58d71c285f516c7755ee

    • SHA256

      0b89527131de66e764ff2da13ab12b32fd12bef6e3bc49a31991884a024e1c95

    • SHA512

      d2ff1b02e7db4bd49cafec24935db85b29a1e4dfcfeab20fb9079b95b3adf3db813b8985ae06a2f29b70d3b2286335eb258909bfadf38e9b610a4107ddc4cbc2

    • SSDEEP

      12288:soDXf45z9j0rThv8aZ/FFSoytCAhL/sGsrU:nwaTh3Q

    Score
    1/10
    behavioral5behavioral6

    • Target

      P990Root/ADB/adblinux

    • Size

      331KB

    • MD5

      d00ab6f0b6426369bbb360ccd9fd763a

    • SHA1

      979c6a1035bbb40d2ad4ac9a62775bd25b01ab8c

    • SHA256

      be6548b69b398e7b63453fc7ae5c68018717ce10e077436506ddae28ef4097cf

    • SHA512

      89de5d6702533efd8321556cfb7bbdecc77dd339b9644ec61a5d8069fbe2df702b01390d6f38f219249c0540cdbefe9036792e5446ecc49c7c23d07e35374685

    • SSDEEP

      6144:Hv75L7YdA2z8sqDSTBbjL3IAvxmVSNMmDJsc++WsX01pkGL6/:HVLkB8sqDSTZffrMmDJVkpkGL6/

    Score
    1/10
    behavioral7

    • Target

      P990Root/ADB/adbmac

    • Size

      167KB

    • MD5

      959bf85533c2e8135985513f711b05d6

    • SHA1

      80e65cc8ee68d16ee0f8ea6eec99d3699c2d6ed5

    • SHA256

      c1508edcdf64d7c910528a01dd2b699eb6b6a6624375d0bd944b95536907c9bb

    • SHA512

      3d0a6dcf42d5db4ce638a3a4e741c41da268530d18ba784fc4d9c069a5dc95c0d3bf7c37c2c26f5e7ae17b5b6a504190652f7b8329d703c9527a47f75e217b8d

    • SSDEEP

      3072:w44L/Jubf+oNQokZUrW+kCan4KxDspTBftf+uoTV7sFTTDuCN7sF29w:EYT+oQokZUrPKxDyTB1fnoZ7sFPDl7sh

    Score
    1/10
    behavioral8

    • Target

      P990Root/Dependencies/busybox

    • Size

      1.0MB

    • MD5

      bc6c1234f315b50a7883cbc9f8041a22

    • SHA1

      f57c5db795dfb323c157bad2517199ffe3c9f135

    • SHA256

      f765c41eae0a56c67574ee191371fe95de287d5edb3e527d465fd973c351b4cf

    • SHA512

      71a645ca0f0322fe657328f7352614c55cc4f42583337129d15cf23987f460ecec927b31869b287dd4137bdbf6bb25cc7cb6780095c7712bf1f19c41061ad01c

    • SSDEEP

      24576:l8ejPzOvWzzcv7RZC8aHm7ilpkFTzVaf0PHn1EV+:JlzIn2cTzQ0PHP

    Score
    1/10
    behavioral9

    • Target

      P990Root/Dependencies/sqlite3

    • Size

      23KB

    • MD5

      402e66f894a431263d5deac22c88f3f5

    • SHA1

      a4a2ec06b903130c60d7bddaba3f598055520dd1

    • SHA256

      d389680ffc4e6741b821e112837a41c536ea759a2c5774ba0dac0a2a81a7d01b

    • SHA512

      0ba996ea46454f3322360e7840fcef6254eae435ffa83ce018be5d32d6425d3ed855a4699e40a8e819c7a7051253e841fdada0700ca90df191cf24373d2ef4f7

    • SSDEEP

      384:cuSC9i1ZQKrIx8lDqVKdl7VRW2kUfq+XWXaWedHqCVsUjAyWDeg9ra1:Jv5K+8ISBRfkoq+XcJNbRd

    Score
    1/10
    behavioral10

    • Target

      P990Root/Exploits/GingerBreak

    • Size

      16KB

    • MD5

      3bbbf2f7d6c13de5ab00d2d02b495824

    • SHA1

      00dc0c37553368c3448e91ef793f5f15843f4477

    • SHA256

      7581a02da41e5761c65ae27922e689e1e0a7b3a5a0ff1c188455dc2d8648485b

    • SHA512

      f146be18f24a979fac439946b586dc2955e37a4ce5a56adc373eb8e754f514121207205647652e55a105f54fcc402b89760029366bf324ac7df4620dbd46cff3

    • SSDEEP

      192:CnFh8d2BrbCnfbVAFmg7AYtL2o63xYvUauLGT+PpHNTs0mcx+TsDaRZZjZu:4wUrmRSLxzvURLGTiHNQtZtu

    Score
    1/10
    behavioral11

    • Target

      P990Root/Exploits/psneuter

    • Size

      572KB

    • MD5

      861f1925ee367c5d7b95610fee2c4969

    • SHA1

      ca5fbaefe7f0923a65ca47b86013d7ed9aebbf2f

    • SHA256

      90a81fa2c7998566bd4de70d92e9bda1a03cb385f46a528ba6a64557406036bc

    • SHA512

      5cea72be9f7230a8da84a528a04952ded2570137cc7a3e04839f7b5b8dec0a29bc950c2c16276376e07c9136ad1b8496a3c2863033b9824b9540f4983f02da46

    • SSDEEP

      12288:9TLtOTp+6vul9lKTpxo0SP0J5Sp2hvfa4N2ghoLRDzk/qkh6kV:St+6nT1nrfRzoLRs/qo6m

    Score
    1/10
    behavioral12

    • Target

      P990Root/Root/Superuser.apk

    • Size

      191KB

    • MD5

      4ec9e96986478cb000f9d58f374f39f5

    • SHA1

      7479e11f4df198c743bd430ef54f94999690c73b

    • SHA256

      df3c4cbe2b41398bf8e1e807f5ca1b8a6ca2ebe3f1686f95bc36ea83bbea694e

    • SHA512

      66014107235633919b12ec22437d95651b9f00ea6a0eee5e90ee957b6a4e12b05cecd6a217d4b92e206d8e38442a9e10a754c4275a50fcf19c984b41edaf32f9

    • SSDEEP

      3072:ysF8CMXMGIIFzrdQ5023X9phSTt6rUKaJ/O4OroXB2Nda6B5Hpb2/:dFsXoIxrdQ502JUpNTOsxgBpc/

    Score
    1/10
    behavioral13behavioral14behavioral15

    • Target

      P990Root/Root/su-v1

    • Size

      25KB

    • MD5

      6a64d2ed128b3229d66cd0b075e721ff

    • SHA1

      6f1c70772d2f81cdaf6062c92dfd50121cd99e2b

    • SHA256

      3c8505a3452d1045f33e0a2bcd1d8650056493229b501bfed46b54ef0d7f5f66

    • SHA512

      f3ee2310417112b280af97292cb7ff54905e95c1a81cc1a6132ce8a48728964e7499abc1b6b48f8c53eb2fed4d7cd82a3609434971d71e6aa48764043118b3fc

    • SSDEEP

      192:Nak21ufrlyK7rsasnRqeC8oToQy3CheXz7VHHUu6SLt:augu4RJBoX0SeXz7KSLt

    Score
    1/10
    behavioral16

    • Target

      P990Root/Root/su-v2

    • Size

      25KB

    • MD5

      6a64d2ed128b3229d66cd0b075e721ff

    • SHA1

      6f1c70772d2f81cdaf6062c92dfd50121cd99e2b

    • SHA256

      3c8505a3452d1045f33e0a2bcd1d8650056493229b501bfed46b54ef0d7f5f66

    • SHA512

      f3ee2310417112b280af97292cb7ff54905e95c1a81cc1a6132ce8a48728964e7499abc1b6b48f8c53eb2fed4d7cd82a3609434971d71e6aa48764043118b3fc

    • SSDEEP

      192:Nak21ufrlyK7rsasnRqeC8oToQy3CheXz7VHHUu6SLt:augu4RJBoX0SeXz7KSLt

    Score
    1/10
    behavioral17

    • Target

      P990Root/Root/su-v3

    • Size

      25KB

    • MD5

      6a64d2ed128b3229d66cd0b075e721ff

    • SHA1

      6f1c70772d2f81cdaf6062c92dfd50121cd99e2b

    • SHA256

      3c8505a3452d1045f33e0a2bcd1d8650056493229b501bfed46b54ef0d7f5f66

    • SHA512

      f3ee2310417112b280af97292cb7ff54905e95c1a81cc1a6132ce8a48728964e7499abc1b6b48f8c53eb2fed4d7cd82a3609434971d71e6aa48764043118b3fc

    • SSDEEP

      192:Nak21ufrlyK7rsasnRqeC8oToQy3CheXz7VHHUu6SLt:augu4RJBoX0SeXz7KSLt

    Score
    1/10
    behavioral18

    • Target

      P990Root/SuperOneClick.exe

    • Size

      387KB

    • MD5

      2909765d2ff65013bc3c2d5519b9ee91

    • SHA1

      4b714ca12c7be420adec41fc2d109410865e2b71

    • SHA256

      b2774a073a590c6a0912bf1af05ac62ad1285ed24ca1cf62b3c915657774d1fb

    • SHA512

      5f9829083c2315e4a5cd467a17f6c56f629f5e5622d8f440054a031eaf4b05cebbec5ee0bcdd5f623d9591bbd2947d0f364c40d7ab5cc84fe738e89d536bdb34

    • SSDEEP

      6144:vvhuiudMoi9r3bU+6PJbLQuiudMoi9r3bU+6jJbLcb:vvhRuiz9LbUPVLQRuiz9LbUjVLI

    Score
    1/10
    behavioral19behavioral20

MITRE ATT&CK Matrix

Tasks