Overview
overview
3Static
static
3ICS_rootin...pi.dll
windows7-x64
3ICS_rootin...pi.dll
windows10-2004-x64
3ICS_rootin...pi.dll
windows7-x64
1ICS_rootin...pi.dll
windows10-2004-x64
3ICS_rooting/adb
ubuntu-18.04-amd64
ICS_rooting/adb.exe
windows7-x64
1ICS_rooting/adb.exe
windows10-2004-x64
1ICS_rooting/fastboot
ubuntu-18.04-amd64
ICS_rootin...ot.exe
windows7-x64
1ICS_rootin...ot.exe
windows10-2004-x64
1ICS_rootin...nux.sh
ubuntu-18.04-amd64
1ICS_rootin...nux.sh
debian-9-armhf
1ICS_rootin...nux.sh
debian-9-mips
1ICS_rootin...nux.sh
debian-9-mipsel
1ICS_rootin...in.bat
windows7-x64
1ICS_rootin...in.bat
windows10-2004-x64
1ICS_rootin...usybox
debian-9-armhf
1ICS_rootin...box.sh
ubuntu-18.04-amd64
ICS_rootin...box.sh
debian-9-armhf
ICS_rootin...box.sh
debian-9-mips
ICS_rootin...box.sh
debian-9-mipsel
ICS_rootin...oot.sh
windows7-x64
3ICS_rootin...oot.sh
windows10-2004-x64
3ICS_rootin...oot.sh
windows7-x64
3ICS_rootin...oot.sh
windows10-2004-x64
3ICS_rootin...odroid
debian-9-armhf
ICS_rootin...unt.sh
ubuntu-18.04-amd64
ICS_rootin...unt.sh
debian-9-armhf
ICS_rootin...unt.sh
debian-9-mips
ICS_rootin...unt.sh
debian-9-mipsel
ICS_rootin...nit.sh
windows7-x64
3ICS_rootin...nit.sh
windows10-2004-x64
3Analysis
-
max time kernel
6s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
22-12-2023 16:08
Static task
static1
Behavioral task
behavioral1
Sample
ICS_rooting/AdbWinApi.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ICS_rooting/AdbWinApi.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
ICS_rooting/AdbWinUsbApi.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
ICS_rooting/AdbWinUsbApi.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
ICS_rooting/adb
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral6
Sample
ICS_rooting/adb.exe
Resource
win7-20231215-en
Behavioral task
behavioral7
Sample
ICS_rooting/adb.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral8
Sample
ICS_rooting/fastboot
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral9
Sample
ICS_rooting/fastboot.exe
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
ICS_rooting/fastboot.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
ICS_rooting/runit-linux.sh
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral12
Sample
ICS_rooting/runit-linux.sh
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral13
Sample
ICS_rooting/runit-linux.sh
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral14
Sample
ICS_rooting/runit-linux.sh
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral15
Sample
ICS_rooting/runit-win.bat
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
ICS_rooting/runit-win.bat
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
ICS_rooting/tools/busybox
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral18
Sample
ICS_rooting/tools/busybox.sh
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral19
Sample
ICS_rooting/tools/busybox.sh
Resource
debian9-armhf-20231222-en
Behavioral task
behavioral20
Sample
ICS_rooting/tools/busybox.sh
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral21
Sample
ICS_rooting/tools/busybox.sh
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral22
Sample
ICS_rooting/tools/delroot.sh
Resource
win7-20231215-en
Behavioral task
behavioral23
Sample
ICS_rooting/tools/delroot.sh
Resource
win10v2004-20231215-en
Behavioral task
behavioral24
Sample
ICS_rooting/tools/getroot.sh
Resource
win7-20231215-en
Behavioral task
behavioral25
Sample
ICS_rooting/tools/getroot.sh
Resource
win10v2004-20231215-en
Behavioral task
behavioral26
Sample
ICS_rooting/tools/mempodroid
Resource
debian9-armhf-20231222-en
Behavioral task
behavioral27
Sample
ICS_rooting/tools/mount.sh
Resource
ubuntu1804-amd64-20231222-en
Behavioral task
behavioral28
Sample
ICS_rooting/tools/mount.sh
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral29
Sample
ICS_rooting/tools/mount.sh
Resource
debian9-mipsbe-20231222-en
Behavioral task
behavioral30
Sample
ICS_rooting/tools/mount.sh
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral31
Sample
ICS_rooting/tools/runit.sh
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
ICS_rooting/tools/runit.sh
Resource
win10v2004-20231215-en
General
-
Target
ICS_rooting/runit-linux.sh
-
Size
1KB
-
MD5
39151a4030eade1471fd5ab0dbf7f659
-
SHA1
a2a2a579f3229669123621437d48c98dc8cd8f36
-
SHA256
b99debf3e406bcb2140d2e3e6a9c5428b5bfae34679fd688b215faa96e947381
-
SHA512
7666394a4171595ccc459dea1dd72d41170759618dd789c49cb3ae5ef08eff1fc0f9339a277c470cf085da643bbbfb4d8e33e9b2ce2bb1f562ba9ebe5dc0b72b
Malware Config
Signatures
Processes
-
/tmp/ICS_rooting/runit-linux.sh/tmp/ICS_rooting/runit-linux.sh1⤵PID:683
-
/usr/bin/clearclear2⤵PID:688
-
-
/tmp/ICS_rooting/adb./adb wait-for-device2⤵PID:691
-
-
/tmp/ICS_rooting/adb./adb shell mkdir /data/local/tools2⤵PID:692
-
-
/tmp/ICS_rooting/adb./adb push tools /data/local/tools2⤵PID:693
-
-
/tmp/ICS_rooting/adb./adb shell chmod 0755 "/data/local/tools/*"2⤵PID:695
-
-
/tmp/ICS_rooting/adb./adb pull /data/local/tools/mempodroid2⤵PID:696
-
-
/usr/bin/clearclear2⤵PID:697
-