General

  • Target

    ea82bda58fd21cfa76ebb024e50ff01a

  • Size

    1.4MB

  • MD5

    ea82bda58fd21cfa76ebb024e50ff01a

  • SHA1

    09e68bda80f283ef7f693094ccd4c7ea3fa7095d

  • SHA256

    f56792b526ee9b316c4488b2e9fe939c54d8732409f4ad7b488bd0e93af93ad7

  • SHA512

    6111cc5be28fe9ec27708ddcc14ee2ca07eae8f04db4d7be57125c4d15c321e4dacaecabfd4a382785ebfa03c85d51815b9b469c027057bd82c16bcdd01781e2

  • SSDEEP

    24576:Rlc0f8n15MxA8hHD/NB31GVxdRglySnklmf7zK917fgSHSIFt5unuj2OjwM/imHf:w0f8n1Om0D/NB31GVNg0e9fXKrDSIF9P

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ea82bda58fd21cfa76ebb024e50ff01a
    .rar
  • files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • files/busybox
    .elf linux arm
  • files/su
    .elf linux arm
  • files/zergRush
    .elf linux arm
  • runme.bat