General

  • Target

    fa751461296763dbf35c8c9cba790b3a

  • Size

    3.3MB

  • MD5

    fa751461296763dbf35c8c9cba790b3a

  • SHA1

    1fd903d6e0572b98828b769f82ee827f904cb3ea

  • SHA256

    7aa0f33cae812fa6d364adf593d24e672f8179f5e941cb49df0d6701335c7447

  • SHA512

    c9cd43d89dd508063e38cc57dd30838bc18cb68e89758a13691f65bba5f7d19fd6b1d1211153ae5580ef5a13e8d6893d52c132aee65644d28b3c47fef6650ff8

  • SSDEEP

    98304:DkDRhwotyQgeeG2qXwIz8/y8cAlGlnkp2DnzQim9S:wDDdgQge1HAF/KpDn0vk

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • fa751461296763dbf35c8c9cba790b3a
    .zip
  • KingRoot PC v1.1/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC v1.1/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • KingRoot PC v1.1/KingRoot.exe
    .exe windows:5 windows x86 arch:x86

    c85c8ca77b6ba07fc1d88911cc38cba2


    Headers

    Imports

    Sections

  • KingRoot PC v1.1/adb.exe
    .exe windows:4 windows x86 arch:x86

    39f5cbfe41ec1c7dd9d1a61792bd4add


    Headers

    Imports

    Sections

  • KingRoot PC v1.1/block
    .elf linux arm
  • KingRoot PC v1.1/busybox
    .elf linux arm
  • KingRoot PC v1.1/evil.apk
    .apk android

    com.ti.fmrxapp

    .aSudoku


  • KingRoot PC v1.1/flood
    .elf linux arm
  • KingRoot PC v1.1/flood.c
  • KingRoot PC v1.1/libboy.so
    .apk android
  • KingRoot PC v1.1/librootmgr-jni.so
    .elf linux arm
  • KingRoot PC v1.1/libxy.so
    .elf linux arm
  • KingRoot PC v1.1/motofail
    .elf linux arm
  • KingRoot PC v1.1/rageagainstthecage
    .elf linux arm
  • KingRoot PC v1.1/su
    .elf linux arm
  • KingRoot PC v1.1/superuser.apk
    .apk android arch:arm

    com.kingroot.kinguser

    com.kingroot.kinguser.Activitys.SlideMainActivity


  • KingRoot PC v1.1/thinkpwn
    .elf linux arm
  • KingRoot PC v1.1/xyz
    .elf linux arm
  • KingRoot PC v1.1/zerg
    .elf linux arm
  • KingRoot PC v1.1/zergRush
    .elf linux arm