General

  • Target

    d8090c15f379ce3de5ce6391d73078ef

  • Size

    1.4MB

  • MD5

    d8090c15f379ce3de5ce6391d73078ef

  • SHA1

    78e3eadce9e354ff91ded782220cb3983e8835a2

  • SHA256

    c695e7db13f9f30cdcfb3a66c33e886af4fcd4c76e87cf736fcaac9e3ca3d684

  • SHA512

    4499ff71ce69b6e9a677319894292f33ed6bd3431752f46b7d5c357c78711042faf7af6dae25a7983b726dbaebf6e8b02612ed029c41d5e271ad424afda16427

  • SSDEEP

    24576:ilc0f8n15MxA8hHD/NB8FeVxdRglySnklmf7zK917DgSHSIFt5unuj2OjwM/imWw:n0f8n1Om0D/NB8FeVNg0e9fXKrnSIF9V

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d8090c15f379ce3de5ce6391d73078ef
    .rar
  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/busybox
    .elf linux arm
  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/su
    .elf linux arm
  • DooMLoRD_v1_ROOT-zergRush-busybox-su/files/zergRush
    .elf linux arm
  • DooMLoRD_v1_ROOT-zergRush-busybox-su/runme.bat