General

  • Target

    ed26494fefc1e2c4f3aac6e9a7dca532

  • Size

    1.8MB

  • MD5

    ed26494fefc1e2c4f3aac6e9a7dca532

  • SHA1

    06d3fef78010ff86c3179b10610ce139ffd7a46a

  • SHA256

    72860037f6357046237e34a2dfa19780bb2fb412af8ca76b94cade3277fe63d9

  • SHA512

    099c69b696abc873b1bbb133f75beca284ec502934d62aad83c80d9b25251b5272430b56d05a108b8ab24e6603311160193b2aae18b3439f22c45e39bfef0658

  • SSDEEP

    49152:Wh1nzphoYNtnK99Kjzw5QEwPYa7JNvMWPJfB:WhFXHpz/Ewh7jEWPJp

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ed26494fefc1e2c4f3aac6e9a7dca532
    .zip
  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/busybox
    .elf linux arm
  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/su
    .elf linux arm
  • DooMLoRD_v2_ROOT-zergRush-busybox-su/files/zergRush
    .elf linux arm
  • DooMLoRD_v2_ROOT-zergRush-busybox-su/runme.bat
  • DooMLoRD_v2_ROOT-zergRush-busybox-su/԰.txt
  • DooMLoRD_v2_ROOT-zergRush-busybox-su/԰.url