General

  • Target

    f8891e5c5928eb21d2f7c86b549961dd

  • Size

    1.4MB

  • MD5

    f8891e5c5928eb21d2f7c86b549961dd

  • SHA1

    a359d6e1bbab845cf7a11e19c59f4ce1fd9adcfd

  • SHA256

    3dafd60539c8045fc90f03fe29c9e15ea530ed2c01c2951a8a9c37c8a6097191

  • SHA512

    c2cf498a1bc14b56b7a31e0f1e767529a6000272da8052d5e1304e586d952a3d0a70c06d6eaa2048bf4b58145f800c50ff99cca2b041c611e9966c07bcba78ed

  • SSDEEP

    24576:lUlO270OA1KG8yGNkNtXHAvUGumOUAV/6t8F6lcYEdZsCMw4oiD:lO7Uf8yykNZHSUXmOhR88F6lc3GZoG

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • f8891e5c5928eb21d2f7c86b549961dd
    .rar
  • files/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • files/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • files/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • files/adb.exe
    .exe windows:4 windows x86 arch:x86

    a1b17faeedfa5535c9395d057bbbb79a


    Headers

    Imports

    Sections

  • files/busybox
    .elf linux arm
  • files/su
    .elf linux arm
  • files/zergRush
    .elf linux arm
  • runme.bat