General

  • Target

    ded41ba84bc46b11899d3c51c03193fb

  • Size

    10.1MB

  • MD5

    ded41ba84bc46b11899d3c51c03193fb

  • SHA1

    fa390acf87cd71abc547609d890872e2c3dd2f10

  • SHA256

    1c7a894be274ff00a6fe63213a205e1a5df7db35a80ed9c022c8d632244fa883

  • SHA512

    b3d947fa1f0f5d683bd6eec43f14a1906786bcb4bc467769b82f0575207bdd4204324f9bfd6d6dd100e7285961b27aa70fd625d4a2fe7a4be0200b8971648d67

  • SSDEEP

    196608:B1y/J6oQ7q5ZHxilncaWoZ49LZk286LHXpdmIN0KMZ17IXwVKln592p//xBKRhhg:B1y/Jm7q5ZRunYk2zHXpYg0nEgun592H

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • ded41ba84bc46b11899d3c51c03193fb
    .rar
  • KingRoot PC 1.5Beta/AdbTools.dll
    .dll windows:5 windows x86 arch:x86

    6a1608215225a7ef1b5ec25d759b81f7


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC 1.5Beta/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC 1.5Beta/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC 1.5Beta/adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Headers

    Imports

    Sections

  • KingRoot PC 1.5Beta/block
    .gz
  • block
    .elf linux arm
  • KingRoot PC 1.5Beta/boot.img
  • KingRoot PC 1.5Beta/boot.insecure.img
  • KingRoot PC 1.5Beta/busybox
    .elf linux arm
  • KingRoot PC 1.5Beta/evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • KingRoot PC 1.5Beta/extapp.xml
  • KingRoot PC 1.5Beta/exynos-abuse
    .elf linux arm
  • KingRoot PC 1.5Beta/fakebackup.ab