General

  • Target

    f76fb853fe9891237e3c7d42afa816cc

  • Size

    10.1MB

  • MD5

    f76fb853fe9891237e3c7d42afa816cc

  • SHA1

    0c6930f0a1ca2c9062acc66c96f3f842f4528dfd

  • SHA256

    91e507d0e1f5fb12ccf041621b669a848934830dbef2041869dd58561bf3287c

  • SHA512

    631c9dd79ee4cb51fea203c0e34dc02ae1eee5b041911fcb4f24ebbd75287400b5b5de4b429d847196cb32b259903cdb4ec2c2553136db3c5977e4d6a41e8583

  • SSDEEP

    196608:B1y/J6oQ7q5ZHxilncaWoZ49LZk286LHXpdmIN0KMZ17IXwVKln592p//xBKRhhW:B1y/Jm7q5ZRunYk2zHXpYg0nEgun592t

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • f76fb853fe9891237e3c7d42afa816cc
    .rar
  • KingRoot PC 1.5Beta/AdbTools.dll
    .dll windows:5 windows x86 arch:x86

    6a1608215225a7ef1b5ec25d759b81f7


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC 1.5Beta/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC 1.5Beta/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC 1.5Beta/adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Headers

    Imports

    Sections

  • KingRoot PC 1.5Beta/block
    .gz
  • block
    .elf linux arm
  • KingRoot PC 1.5Beta/boot.img
  • KingRoot PC 1.5Beta/boot.insecure.img
  • KingRoot PC 1.5Beta/busybox
    .elf linux arm
  • KingRoot PC 1.5Beta/evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • KingRoot PC 1.5Beta/extapp.xml
  • KingRoot PC 1.5Beta/exynos-abuse
    .elf linux arm
  • KingRoot PC 1.5Beta/fakebackup.ab