General

  • Target

    d9adef6e177d054e145e388c639680fd

  • Size

    1.8MB

  • MD5

    d9adef6e177d054e145e388c639680fd

  • SHA1

    b876599da0ecba1c0637dbd86335f707ff1a4d60

  • SHA256

    857895af8b0020045e68c5e6317734022ee6012bcb85231e8f5a2b338f767f95

  • SHA512

    359a3d14bea08390697bc3101915ff9cf9b2bed65959828f21f1a6c170a1ceec2cead83e5cfc2f60369cc10098f6cadcc4e7aacd568111f56c39b081f248546f

  • SSDEEP

    49152:gICqOO5cNSFGDejC75Vioo1HaZFgiQOarI+tuAfqZTP:gYHiPDeyT2aZF9n+oNR

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d9adef6e177d054e145e388c639680fd
    .gz
  • sample
    .zip
  • files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • files/busybox
    .elf linux arm
  • files/su
    .elf linux arm
  • files/zergRush
    .elf linux arm
  • runme.bat