General

  • Target

    ee321ac55320bea488abffdd078f083f

  • Size

    1.8MB

  • MD5

    ee321ac55320bea488abffdd078f083f

  • SHA1

    2466737943eace979e8b192f660cb04f2e0bc66d

  • SHA256

    fb94c7ae1b65eba6fd942217ebad8e7f623484575b36fc306bd90348879b6144

  • SHA512

    265af32d51dfe98436e34f9692a2c5e6b051801c890b59e43963db21bacd346e4ab010f8e099aa87d236205363eabd54d72765d0cac21851aacc73fe5b749090

  • SSDEEP

    49152:UfmZWpFZCrimILTegKPdyBnHlShpvxUfrUjn+jP:smeZCrivTegOdyBFSbpUoSjP

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ee321ac55320bea488abffdd078f083f
    .zip
  • ROOT/files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • ROOT/files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • ROOT/files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • ROOT/files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • ROOT/files/busybox
    .elf linux arm
  • ROOT/files/su
    .elf linux arm
  • ROOT/files/zergRush
    .elf linux arm
  • ROOT/runme.bat