General

  • Target

    d50cb76e98006fd6aa409f522a04db99

  • Size

    1.8MB

  • MD5

    d50cb76e98006fd6aa409f522a04db99

  • SHA1

    1d768f4b8cd58d466947879102ec85aa0ed38e83

  • SHA256

    2c449c27ffe9194d0e0c5478916fc0d70c0020d7d848e801784b5d99d5acf7a4

  • SHA512

    3890e4190985506ce4f19fb1abb90a3b1a78736ca321fa4de6af8af08cb5a6ba7ece82249bf0f49b2035752e11c21433bd7043d59f8d2558f1c2d0cbc98a0f20

  • SSDEEP

    49152:4JVKtChgrMeaZwDue5o5jC9RGlRxXuBOHkZ/sdw5ZI+D44Dqt7k:4JVKtHrW2D5o5+RadCOEDZU5+

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d50cb76e98006fd6aa409f522a04db99
    .zip
  • DooMLoRD_v4_ROOT-zergRush-busybox-su.zip
    .zip
  • files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • files/busybox
    .elf linux arm
  • files/makespace
  • files/su
    .elf linux arm
  • files/zergRush
    .elf linux arm
  • runme.bat