General

  • Target

    c3358fd673d90eee5c21404ec8d1a0d7

  • Size

    7.2MB

  • MD5

    c3358fd673d90eee5c21404ec8d1a0d7

  • SHA1

    d8245b607a31009d2292d170053968f83a6a6b5a

  • SHA256

    4f9e926e446b5011495352e22dc861b05e7758d20e228785cb069fb113032ef0

  • SHA512

    20cc3495ea05e065b9680b690b24c796e7d9e5fbd38911c6b0c37b0dd1ec963f47eb4a8fc12a0ad6d0088eea2e6b6d71d5fc2abb1f6ed9326ac45c8df5327450

  • SSDEEP

    196608:L1ImwZRhhCseHmGqhrHiXe2r6x26TwrQkz:LKZRhhFeHm6uJ2/H

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • c3358fd673d90eee5c21404ec8d1a0d7
    .rar
  • AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot.exe
    .exe windows:5 windows x86 arch:x86

    60bc78837b6a8562bb73cf67e99a13bb


    Headers

    Imports

    Sections

  • KingRoot.pdb
  • adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Code Sign

    Headers

    Imports

    Sections

  • block
    .gz
  • block
    .elf linux arm
  • busybox
    .elf linux arm
  • evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • extapp.xml
  • exynos-abuse
    .elf linux arm
  • flood
    .gz
  • flood
    .elf linux arm
  • libboy.so
    .apk android
  • libsu.so
    .elf linux arm
  • libxy.so
    .elf linux arm
  • motofail
    .gz
  • motofail
    .elf linux arm
  • rageagainstthecage
    .gz
  • rageagainstthecage
    .elf linux arm
  • root
    .elf linux arm
  • root.sh
  • roottool
    .elf linux arm
  • su
    .elf linux arm
  • superuser.apk
    .apk android arch:arm

    com.kingroot.kinguser

    com.kingroot.kinguser.Activitys.SlideMainActivity


  • thinkpwn
    .gz
  • thinkpwn
    .elf linux arm
  • xyz
    .gz
  • xyz
    .elf linux arm
  • zerg
    .gz
  • zerg
    .elf linux arm
  • zergRush
    .gz
  • zergRush.bak
    .elf linux arm
  • 安卓模拟器.url
    .url
  • 服务器软件.url
  • 脚本之家.url