General

  • Target

    56a2d1598ceabd0950b5cb66d603840b

  • Size

    1.3MB

  • MD5

    56a2d1598ceabd0950b5cb66d603840b

  • SHA1

    3a3f4967b50704f3323f773a4a19c2cf0bf6752b

  • SHA256

    6ec915ebdc96e368e9874fb14da9fa4e8a732d23d7ba2fd5eb05c6fd4d91bf66

  • SHA512

    6e6fe1c09b5d22d020d54976590d6fa62c9792248010916e93b00de5cc7f3c99dda82c0878de09878f169680579635b43e0ef5db8559715726b0a878e01a70d2

  • SSDEEP

    24576:eowceC/Rbp/WxIFkFoN+H9D/JsVKaLV+2Y71/+0nS5Isf4nBYHInoOwmtbkEl4cK:eo9xpO+kFBVjaxc7VpS9f4cIoOwmYAhK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 56a2d1598ceabd0950b5cb66d603840b
    .zip
  • DoRootWin_2.1.4/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • DoRootWin_2.1.4/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • DoRootWin_2.1.4/Superuser.apk
    .apk android

    com.noshufou.android.su

    .Su


  • DoRootWin_2.1.4/adb.exe
    .exe windows:4 windows x86 arch:x86

    9434bcb74195f7025a393fa105630d98


    Headers

    Imports

    Sections

  • DoRootWin_2.1.4/busybox
    .elf linux arm
  • DoRootWin_2.1.4/doroot.bat
    .bat .vbs
  • DoRootWin_2.1.4/dounroot.bat
  • DoRootWin_2.1.4/rageagainstthecage-arm5.bin
    .elf linux arm
  • DoRootWin_2.1.4/su
    .elf linux arm