General

  • Target

    f38a1277b1fa0010a7ee25a9350142f9

  • Size

    519KB

  • MD5

    f38a1277b1fa0010a7ee25a9350142f9

  • SHA1

    b6c353de0d3e5775af4a97083bfd138205a17289

  • SHA256

    d6133681de9ccf50fcc420d03498b4ddb14788f26cbceee47476d7ccb31d3d1d

  • SHA512

    e7348bc44e412a19b06ec541bb09b0b183898159b6bf27c269ad2b083891b76d77fe6fba0369bcbc9bbb71ae4efc662c2eb488c61e0c85eff105dbeab1ce75b2

  • SSDEEP

    12288:RKyF38HOfkxdTFsbUt5JTdOyKpEbr2m3la9kZ18d6mM:psHOw3sb07OyKpEbr24gk7s6mM

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • f38a1277b1fa0010a7ee25a9350142f9
    .7z
  • GladRootv4.1/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • GladRootv4.1/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • GladRootv4.1/adb.exe
    .exe windows:4 windows x86 arch:x86

    fef6cee9d0e4eec527f09da74363e32f


    Headers

    Imports

    Sections

  • GladRootv4.1/afterupdate.bat
  • GladRootv4.1/bin/Superuser.apk
    .apk android

    com.noshufou.android.su

    Su


  • GladRootv4.1/bin/backupsu.sh
    .sh linux
  • GladRootv4.1/bin/psneuter
    .elf linux arm
  • GladRootv4.1/bin/restoresu.sh
    .sh linux
  • GladRootv4.1/bin/sqlite3
    .elf linux arm
  • GladRootv4.1/bin/su
    .elf linux arm
  • GladRootv4.1/gladroot.bat
    .bat .vbs