Overview

overview

6

Static

static

6

ADB/AdbWinApi.dll

windows7-x64

3

ADB/AdbWinApi.dll

windows10-2004-x64

3

ADB/AdbWinUsbApi.dll

windows7-x64

1

ADB/AdbWinUsbApi.dll

windows10-2004-x64

3

ADB/adb.exe

windows7-x64

1

ADB/adb.exe

windows10-2004-x64

1

ADB/adblinux

ubuntu-18.04-amd64

ADB/adbmac

macos-10.15-amd64

1

AdbInterface.dll

windows7-x64

1

AdbInterface.dll

windows10-2004-x64

1

Dependencies/busybox

debian-9-armhf

1

Dependencies/sqlite3

debian-9-armhf

DriverInstaller.dll

windows7-x64

1

DriverInstaller.dll

windows10-2004-x64

1

Exploits/GingerBreak

debian-9-armhf

Exploits/psneuter

debian-9-armhf

1

Exploits/zergRush

debian-9-armhf

Root/Superuser.apk

 

Root/Superuser.apk

android-10-x64

Root/Superuser.apk

android-11-x64

Root/su-v1

debian-9-armhf

Root/su-v2

debian-9-armhf

SuperOneClick.exe

windows7-x64

1

SuperOneClick.exe

windows10-2004-x64

1

UpdateCheck.dll

windows7-x64

1

UpdateCheck.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2029fc6bf31a9153170d7e9f8440ba3

  • Size

    1.6MB

  • Sample

    231222-t1l7bagebp

  • MD5

    f2029fc6bf31a9153170d7e9f8440ba3

  • SHA1

    c78634f806e9954d3d95c5e4c5d89afb5ebdd023

  • SHA256

    f9410cd3fd8b1d105c0609ee148efca621f6514236bfbb49265a4c407d3fe925

  • SHA512

    4d1c3eb22bb95d180bb27df6fb4d7f50c0f8eeb9703222f9062d9ede6138e0141a5b39fc6316a7a8ddc76d9b1f3b58a93e31e77abcd0fefe7abe00cde1bce1af

  • SSDEEP

    49152:7RE2ZvfAGB+xXplEgTkCfjzQri5YQOtrF:7RBvf3B+xXpagTnfjzQG5xOtrF

Score
6/10
androidlinuxmacos

Malware Config

Targets

    • Target

      ADB/AdbWinApi.dll

    • Size

      94KB

    • MD5

      47a6ee3f186b2c2f5057028906bac0c6

    • SHA1

      fde9c22a2cfcd5e566cec2e987d942b78a4eeae8

    • SHA256

      14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b

    • SHA512

      6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584

    • SSDEEP

      1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG

    Score
    3/10
    behavioral1behavioral2

    • Target

      ADB/AdbWinUsbApi.dll

    • Size

      59KB

    • MD5

      5f23f2f936bdfac90bb0a4970ad365cf

    • SHA1

      12e14244b1a5d04a261759547c3d930547f52fa3

    • SHA256

      041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407

    • SHA512

      49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048

    • SSDEEP

      768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI

    Score
    3/10
    behavioral3behavioral4

    • Target

      ADB/adb.exe

    • Size

      158KB

    • MD5

      7d6edef3c81b04b412b258d98aa2952d

    • SHA1

      a5b77b9fc6f1b41062449387ca8ff0b36c8c79d6

    • SHA256

      6ace04f6a42e5d587bed5ea110a9eecbca335e59049da68d367ef3ff396d735d

    • SHA512

      092a3dddd89fcee825d8e8120bb2ba3c3c6f029a673a01df7e679f41ca336ef42ec68e6c5fa4355990a30f999cb40007c066694b6393ef30cc47adc58c02dd4a

    • SSDEEP

      3072:pxR6RERIILUWM/yegPQ3uxY8ebRTR1aHaWO2fapUGpURnTBfL:QyRIOeg4+Tw/GNO2fapUGpSnTBD

    Score
    1/10
    behavioral5behavioral6

    • Target

      ADB/adblinux

    • Size

      331KB

    • MD5

      d00ab6f0b6426369bbb360ccd9fd763a

    • SHA1

      979c6a1035bbb40d2ad4ac9a62775bd25b01ab8c

    • SHA256

      be6548b69b398e7b63453fc7ae5c68018717ce10e077436506ddae28ef4097cf

    • SHA512

      89de5d6702533efd8321556cfb7bbdecc77dd339b9644ec61a5d8069fbe2df702b01390d6f38f219249c0540cdbefe9036792e5446ecc49c7c23d07e35374685

    • SSDEEP

      6144:Hv75L7YdA2z8sqDSTBbjL3IAvxmVSNMmDJsc++WsX01pkGL6/:HVLkB8sqDSTZffrMmDJVkpkGL6/

    Score
    1/10
    behavioral7

    • Target

      ADB/adbmac

    • Size

      167KB

    • MD5

      959bf85533c2e8135985513f711b05d6

    • SHA1

      80e65cc8ee68d16ee0f8ea6eec99d3699c2d6ed5

    • SHA256

      c1508edcdf64d7c910528a01dd2b699eb6b6a6624375d0bd944b95536907c9bb

    • SHA512

      3d0a6dcf42d5db4ce638a3a4e741c41da268530d18ba784fc4d9c069a5dc95c0d3bf7c37c2c26f5e7ae17b5b6a504190652f7b8329d703c9527a47f75e217b8d

    • SSDEEP

      3072:w44L/Jubf+oNQokZUrW+kCan4KxDspTBftf+uoTV7sFTTDuCN7sF29w:EYT+oQokZUrPKxDyTB1fnoZ7sFPDl7sh

    Score
    1/10
    behavioral8

    • Target

      AdbInterface.dll

    • Size

      17KB

    • MD5

      5fa849b0770d77b447538a9e5e92f54d

    • SHA1

      f76440edc029eb5ca82fe5c3f41084a68d0b4db6

    • SHA256

      9421a83924686f86f87bd91deebc638a4823e839615db93ec6c0420ba654fccc

    • SHA512

      48926b19f8acddfeaa689b36d96e01856bb5033852f56a98127f7a5567eab348ad74627b2e0762da1b88bb4df978b1fed2eba0052b321474126665011f456abb

    • SSDEEP

      384:eKcY+aA1b4ZboFpY6tcb/7a72gDWJ3TpoRGCcp:I3bCBza7JRG/p

    Score
    1/10
    behavioral10behavioral9

    • Target

      Dependencies/busybox

    • Size

      1.0MB

    • MD5

      bc6c1234f315b50a7883cbc9f8041a22

    • SHA1

      f57c5db795dfb323c157bad2517199ffe3c9f135

    • SHA256

      f765c41eae0a56c67574ee191371fe95de287d5edb3e527d465fd973c351b4cf

    • SHA512

      71a645ca0f0322fe657328f7352614c55cc4f42583337129d15cf23987f460ecec927b31869b287dd4137bdbf6bb25cc7cb6780095c7712bf1f19c41061ad01c

    • SSDEEP

      24576:l8ejPzOvWzzcv7RZC8aHm7ilpkFTzVaf0PHn1EV+:JlzIn2cTzQ0PHP

    Score
    1/10
    behavioral11

    • Target

      Dependencies/sqlite3

    • Size

      23KB

    • MD5

      402e66f894a431263d5deac22c88f3f5

    • SHA1

      a4a2ec06b903130c60d7bddaba3f598055520dd1

    • SHA256

      d389680ffc4e6741b821e112837a41c536ea759a2c5774ba0dac0a2a81a7d01b

    • SHA512

      0ba996ea46454f3322360e7840fcef6254eae435ffa83ce018be5d32d6425d3ed855a4699e40a8e819c7a7051253e841fdada0700ca90df191cf24373d2ef4f7

    • SSDEEP

      384:cuSC9i1ZQKrIx8lDqVKdl7VRW2kUfq+XWXaWedHqCVsUjAyWDeg9ra1:Jv5K+8ISBRfkoq+XcJNbRd

    Score
    1/10
    behavioral12

    • Target

      DriverInstaller.dll

    • Size

      12KB

    • MD5

      60a39642e456591ed5ceecbc8f62d9bd

    • SHA1

      2d3f2ec83a4b3d92d13f8ba3e8714c149536548f

    • SHA256

      b679a7a115bdd7330dd425354a2f1c3e8d7887868250593fc6de8a9db00030bd

    • SHA512

      6fec69479e47084893410a38c72e88d6a562bb7d887a65335b3babe1491dab8b4809112659aa81572335ce64af1a7bb7d770b45f88da036df6d88b1345fef951

    • SSDEEP

      192:CqV197HkrEDtDV3UaR/BQeK9YSLhbO6C4v/VLozZt:PHD75B5Sdq4Hmt

    Score
    1/10
    behavioral13behavioral14

    • Target

      Exploits/GingerBreak

    • Size

      16KB

    • MD5

      3bbbf2f7d6c13de5ab00d2d02b495824

    • SHA1

      00dc0c37553368c3448e91ef793f5f15843f4477

    • SHA256

      7581a02da41e5761c65ae27922e689e1e0a7b3a5a0ff1c188455dc2d8648485b

    • SHA512

      f146be18f24a979fac439946b586dc2955e37a4ce5a56adc373eb8e754f514121207205647652e55a105f54fcc402b89760029366bf324ac7df4620dbd46cff3

    • SSDEEP

      192:CnFh8d2BrbCnfbVAFmg7AYtL2o63xYvUauLGT+PpHNTs0mcx+TsDaRZZjZu:4wUrmRSLxzvURLGTiHNQtZtu

    Score
    1/10
    behavioral15

    • Target

      Exploits/psneuter

    • Size

      572KB

    • MD5

      861f1925ee367c5d7b95610fee2c4969

    • SHA1

      ca5fbaefe7f0923a65ca47b86013d7ed9aebbf2f

    • SHA256

      90a81fa2c7998566bd4de70d92e9bda1a03cb385f46a528ba6a64557406036bc

    • SHA512

      5cea72be9f7230a8da84a528a04952ded2570137cc7a3e04839f7b5b8dec0a29bc950c2c16276376e07c9136ad1b8496a3c2863033b9824b9540f4983f02da46

    • SSDEEP

      12288:9TLtOTp+6vul9lKTpxo0SP0J5Sp2hvfa4N2ghoLRDzk/qkh6kV:St+6nT1nrfRzoLRs/qo6m

    Score
    1/10
    behavioral16

    • Target

      Exploits/zergRush

    • Size

      22KB

    • MD5

      12ff1996ce6ec5d284f3d739094b5442

    • SHA1

      5b3f53e022f7542055d62498f76f5c682a76f7f9

    • SHA256

      924e16192b4967331def7be3691153fa12c073800b378383d82490d9085fafcb

    • SHA512

      5d929fe286ac7f845357f4effe76383b7b11346f3fa51a06352751f007f320c20e6fa64a6cee559e7c32c2c9ee913d5333c96965ad98f4add4b29670d4df3f4f

    • SSDEEP

      192:LNBzbAQ4lyDzPnHWEWachqqCiEsoKgwX+2X3ShMa4FV1AVxOopRc4p/IM7hyFqCM:LN4lMzFtMge+2XihMpPAV/c9suFjQt

    Score
    1/10
    behavioral17

    • Target

      Root/Superuser.apk

    • Size

      767KB

    • MD5

      70ae4764528b129b98877198e01c2cfe

    • SHA1

      79a6a65c13390cf50577d8f4708e1a95534ded78

    • SHA256

      e5d4b3ad1320b376cda4538abc29b13848a6ed82421fa19f4615fae2e84077f2

    • SHA512

      90926ae527bc28cbb084ab4bcfb89d35246233e4a6a9c91851bd57f0a6c03ab51f8779be7852ff3163e73524f82a02c2de434ab509693c4a7a31bf7b29d2a3b5

    • SSDEEP

      12288:FdQ050ICdBqD+mjd7fLx9W8bgoPiSSyjfohZcvMsWDO:ay+k7PlMsT

    Score
    1/10
    behavioral18behavioral19behavioral20

    • Target

      Root/su-v1

    • Size

      21KB

    • MD5

      c105789316957237f5fd14a114c11259

    • SHA1

      f188c64314b22e0e372463825674970d6dabe2cf

    • SHA256

      5901487ce2f64fd6519a07fc9756cac246628a2d7114512fed1ee3f1ed43e578

    • SHA512

      ac0fd0589133024219e4b996b8c71e8eff88390b5a94e60320f4409b94e798221112b93c7941d6c747738e22ed9a9643eb70ef9175d2fd8bab32324c965b2942

    • SSDEEP

      192:yVSKxAk1xCnzs5wkBkTPkgXI54NVnMeMkf/zPNA6rA8n61U:yUCD1wfPRXn3MC/zuK961U

    Score
    1/10
    behavioral21

    • Target

      Root/su-v2

    • Size

      21KB

    • MD5

      c4fbd6312adc20f067cfa35cd262bca7

    • SHA1

      3fd7e0bee4e41d7549246a7e814ea50eddd3147b

    • SHA256

      b959a48976e2cd318678bbfa009aa842426ee90799dacd34885d59052949cdb7

    • SHA512

      11457ac81faa6c93c3e56e95325dc2eb22439a2663e97547a1a24c05e15971fde85e7ac57e6667c65ba90ab58c08be93f06ac2ff311f5e06a12e52774596b2d7

    • SSDEEP

      192:WIHIsWM35kbnaPmiQ9V/efoizwKkfqp7sOqq8ho1KKKKKKKKKKKKKKKKKKKKKKKb:lWrUmd9QYq7tqrhofS

    Score
    1/10
    behavioral22

    • Target

      SuperOneClick.exe

    • Size

      381KB

    • MD5

      1d13ea5c562cfaded2b8e48daed5186b

    • SHA1

      a85e705125074b54fc17174a94706ca2df1f124f

    • SHA256

      d15c9d125d965a5527ba848f1218682afeab8b9946af24f4727a86219d14f287

    • SHA512

      6e8a481c6ab2bfe2e9b0b1f517a074b4b1bbf3cc1c7e25119cc323e6059298876a9e262d8173d30e31a9e69b80a3531ff93c20342b27214ab146fa75358c8cb1

    • SSDEEP

      6144:cuiudMoi9r3bU+6PJbLca1uyuiudMoi9r3bU+6jJbLMb:cRuiz9LbUPVLjJRuiz9LbUjVL4

    Score
    1/10
    behavioral23behavioral24

    • Target

      UpdateCheck.dll

    • Size

      23KB

    • MD5

      a85c1677c1fcc272c5bd1aec5b12f126

    • SHA1

      249e372441e61387c52b9b1f5ce392e682694c22

    • SHA256

      ba368ab0810b6ab817b5608b2d7b5b4ab8c6bac97c293658367ea65ee5aeaaf1

    • SHA512

      dbd53084c372241459e90d5119bad65543f312593d6806ffde222ac789d51dea49dc61de4a44df527472a5504fc01e0c7e3da69d10f84c652e5dffae88c25444

    • SSDEEP

      384:qf0zg1EAwi2lE4kAPfQUPWqL82aQ25hdVQhvqaBlsG3qlnKyAr:roDwba4kAPBWqFEr0UaBlsyqhKyAr

    Score
    1/10
    behavioral25behavioral26

MITRE ATT&CK Matrix

Tasks