e86224ab93aff0188e5deb93f041cc4ee9d47b65e4d51d61279982901b9800cc

Sharing

Copy URL Twitter E-mail

General

Target
S7_S7E_ROOT_UNROOT_ADB_TOOLS.7z
Size 47.5MB
Sample240615-fxc8cazcqa
SHA256 e86224ab93aff0188e5deb93f041cc4ee9d47b65e4d51d61279982901b9800cc
MD5 c72f8c61a97ca2c0800ddf7119e87a80
SHA1 dfe1bfe548e3c5cbc05df3b0d85c4b426eccce53
SHA512 16565064dd91b462c051eaa076b514c500005a0cb2dc00ed8ff4fbea1ae4cf447a862a67f93e1e2e8c4d5437b275d0b6ebf7a8306060f7336176d97e7851c8f7
SSDEEP 786432:soAoseZ0oS6a1dPEKJwuqDRelu1PLQmpU8gifCaff8OyzndaUSNmoQWAQGxII97x:D3NS6a3nWEutLQmBgiaU5EdaXaEA97nx
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  Tool_Files/ADB Tools.cmd
- Size 10KB
- SHA256 634e2bada6c6b7fb5a1e91342f816fbba994de49f95c98d8f732de0fede4c973
- MD5 668bb0127ca2ace980272070018f730f
- SHA1 7e52565de161efca60d4fad1efa2d684fe0da013
- SHA512 c92938313ca1047f6a96b1e4b8d4534bf5aeb35508cdfd2fdbf3028b233a952d78112a61fb520960db433ef585ce7c411792e1b4ebc2d283f5c855b5d00b6ffb
- SSDEEP 96:Pn3o3o3o3opmy5o8o3o3o3o3pA5kpxL9ef2aVcIxc3wVcd8wPKsFpYO4F8dfvXsG:1a5kpZ9Yf+Iig+d8A4kXsoZ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  Tool_Files/Root.zip
- Size 25.5MB
- SHA256 a8b753bc7f181a44ff5b5a2ea3ab990c57d66d386ff3e669eeafb1aaf43cd5cb
- MD5 db7f2ccd087d72af56a470d27942c176
- SHA1 a68bd80f2964b003545bd5272cad111932c4a859
- SHA512 2a3f1a681c53fc82dd01eb73a1c1ff39c3c55f062251556f77d7a223cb245b11decfe50faaa7bf51280a8bde6b8977a1f849a9ac6cd347106ed0afa89a6d03c9
- SSDEEP 786432:oGA8fVA0JCQwCXZ6QqRFqwmSOS1v+I3jABgPMEw:zJzwCX9KdOKv+I3WgPvw
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral3 behavioral4
- Target
  Tool_Files/Root_System/system/app/Flashfire/Flashfire.apk
- Size 6.9MB
- SHA256 c340b761306a78fbf291f661a3bcf64815d244535b28c3cc26de0e325782ae37
- MD5 0d38831ad37684474f5d5ffbb4052215
- SHA1 b1a24a67948fe1c83351ff1a5bd94bbe7ce82e61
- SHA512 bab28e854486e5f011e0e26e55a44b98d423ef31d0e5d9634d6cacc19a73b593aa978e99b94e04cee30b00c2fa470fa9450290695f8f82b30bc570df2e3764cb
- SSDEEP 98304:uEA7sMPya83xJEEiUsmlDUXiBUV4q5xwwZSaouoJ1wjMgqX/Ie6Gx:uEKsAF8BLuXEU7iwkaouCy4DX+Gx
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  Tool_Files/Root_System/system/app/SEFix/SEFix.apk
- Size 1.7MB
- SHA256 66e0cc68c6f304a45816472efae6d2a69e34fc6622076779448aea6da4edf577
- MD5 6509a6d8c78e66205b9d5397e32621e9
- SHA1 89bbec4e741e0ffc8e84c916cde618811ffef632
- SHA512 c210214f503dd3140f7559b2a236feb3afce349ca755a672bbaf5dd47914324a256034ca77b9f9819bde2076b59d4a7ed582ac80b18d5f104fa484d7d35b678d
- SSDEEP 24576:7LZpVi86p7I7qf0CB5X0PW3j/GZ39MQGoL10JvKb8I3PWFmzWk3La:fRT6KWTQWT/Gpy/I10JY8IuFmzWh
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8 behavioral9
- Target
  Tool_Files/Root_System/system/app/SafetyNet/SafetyNet.apk
- Size 1.6MB
- SHA256 97a8f0f188ce4623d010155110a52cda39d9b1f7f971d57887f5170227ea3bd1
- MD5 6a113bc6d2629fd7fe1187b1bc3dfb49
- SHA1 7a56966c8c851cbde8f774f835cc80274f09d328
- SHA512 a173bb72da4bf2f1b8df2cf8a1398e63d23f62fb8277417d2cc371a829c04a774df50e5e776ee501a4bef35da9c9de8ccd72aed2cb5114c57747d19329928cfd
- SSDEEP 24576:bDc6MOZXf7Bii8t3LyO/HrhR1fiQ1cl/lEeBZO8NgbsnWMv5lBlLTCtXrm:bzxQia7j1bfiQ1YLBZO8mbsnWk3lLmtq
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral11 behavioral12
- Target
  Tool_Files/Root_System/system/app/SuperSU/SuperSU.apk
- Size 3.1MB
- SHA256 71ac44ee65f9062d4df847fab150f068e176fd61daf04c991b0dd67024e053a9
- MD5 f35228e84aef86fa26d4e8b3d5fe9e76
- SHA1 a352948e45c7c0e235b08d9799f0fbbd63d13d4a
- SHA512 aaf0d0da134a3b47cb20e0a66e0368bb73022f8a5e74d7664a475b2a2b89f9b7fb401e0001de1c845dd72860c587815b1fe95c1c23446a170774eb3f4f00807c
- SSDEEP 98304:h7UPQNMIluMTXeFp+T+cC6YcRBWL/c2Pv1K+cE4Z3R4YHNf:V+QNkFFsT+cYiD
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14 behavioral15
- Target
  Tool_Files/Root_System/system/etc/init.qcom.testscripts.sh
- Size 163B
- SHA256 83b5f72be7435cba3390cbc7669d03119c547aed337bde321dab1aa5d8c44485
- MD5 45844c50f64299536cdad89b641565cf
- SHA1 3a8b87565eaa5a97643184f4fbd9784cc93a9df3
- SHA512 7712de10484501215224ba8ea9d034e2b8878cad1c1d8242a00effe01ac256fa69c08d5993afdd7736fa0f33fede0ee1fa866e672d55b808ac7d5943e7d193be
- MD5 SHA1 SHA512
Score

1^/10
behavioral16 behavioral17 behavioral18 behavioral19
- Target
  Tool_Files/Root_System/system/etc/init.sec.boot.sh
- Size 432B
- SHA256 9eec51644127338b0dd2d0072594437603147945517883d64d835286a4af03dd
- MD5 89ab93bd73aa40c6aa984af567d266c3
- SHA1 41bcf128793b4723f9061a8ae762b96c37072f57
- SHA512 5e83ce5f2ecae44ea195fa683fb498bd05e5ce7ab4bc85f716fdb3b8ad2fc0f512920e22ab4df836bb677e7b3a1fea3863898287b660060f58db7ed073a6f788
- MD5 SHA1 SHA512
Score

1^/10
behavioral20 behavioral21 behavioral22 behavioral23
- Target
  Tool_Files/Root_System/system/etc/launch_daemonsu.sh
- Size 1KB
- SHA256 9aaf2dc128a660b59d40bce3b58c0ca31ffb7e5dd9c3dc18710294b3b75a88f0
- MD5 183205fb36bb1bfde31a7172c090598b
- SHA1 ec75fd0a656d7516157ef69476df2bace1a41fa3
- SHA512 47c20739c55b9a03b860c6da3a3407fbcf52bc9b841020874fe4c20d518c5dc269f00edc090d9b9f51fef9dbb9285ee673855ffb9104e273c1fa69d1f183954c
- MD5 SHA1 SHA512
Score

1^/10
behavioral24 behavioral25 behavioral26 behavioral27
- Target
  Tool_Files/Root_System/system/lib/libbootcontrol.so
- Size 9KB
- SHA256 a2bb4a397ef9ccb2c9527dfe26dd5755f669b01efe5077bd5157ec8522b54054
- MD5 aabf55553dbabd1e69bebd07258e3d95
- SHA1 fd82cafa2538b1ee6ce80eea02df05ad45662c2e
- SHA512 407b604d03b407e45b4380868079e95b94261e8af6251d5018aa63b399417f3d5581afaaa7b526ac536c493c1e00920526750d7153ba7c26b824be89caa3d952
- SSDEEP 96:hCG0XXkksSDQnkJctrAK2b0k9V9pMC+8gMxCFwgjvL0rF5hdYeTkbSzyKfn6faWq:hCdXvoiUz2RpMCvgMxCFrL0MBKfn6fa
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral28
- Target
  Tool_Files/Root_System/system/lib/libbusybox.so
- Size 834KB
- SHA256 ca6d4115c1ab840a834a011fbebaf469fc670621b598fe5ec2caa15973a8444e
- MD5 cb07f7e59a8861dd4c37e5b8aea92141
- SHA1 86efbce6b3571a531cca80e6e48e7297f354d573
- SHA512 c0e8cf75947862748306fa2897426752c1eb1ae1df86500a81eb2169c2d23998ff4c44700f64a307a55a204c17ed88632f7fb08d855510ba94a2fedd896226fd
- SSDEEP 24576:bSIWao7NpV/AMt7Q+9nqT6WecHt6fecp6:b5uHVDR9quZcHt6fV0
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29
- Target
  Tool_Files/Root_System/system/lib/libcfsurface.so
- Size 25KB
- SHA256 87fae2efd850e30dfe9f33f8c1a57df002109a2cf70c39f8c3c4a464b92fe93a
- MD5 474f72c30f0f800949f6d968830a65db
- SHA1 389a74ac61a01200eb468ea58dae4de2d784f20f
- SHA512 b521f54d741a7a02a66ca505b086a993ebc119ef95b9b04c8e18f945c5fdc517c15e30ca968af78d9e65ace20e96ecbfdaeb33f8d22421d25e9da5fdc5c46bfc
- SSDEEP 384:X+E+gGJctoblyZoVtraKcO28kpF30uwLFDsQ:XluctoxyZo7raKtZkb0uol
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral30
- Target
  Tool_Files/Root_System/system/lib/libflashfire.so
- Size 91KB
- SHA256 defc51832d3507c4dca39c4aa1b61287f6727581a55343dee84543f405ba4773
- MD5 00f4bb81cb0c234707fe79bde6732a36
- SHA1 7d95bf076a3c71896a3bed8f45391de68f1c045e
- SHA512 8661571a2fea05eabd2754882089eeaa24a1475263681e0689d4f55687f74655de2f54e5868a786dd61e06cb3eeb4f45b7a1ea6eed81809c3878bf62ea8e15f2
- SSDEEP 1536:QCLqMRAM6DxyDBwjDUKwCHvD9i/7Xf7f3jNrBN6r8mLggCJAcBRReMIVF:huQAM6Dxydwj4279gXfT3jN+4/
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31
- Target
  Tool_Files/Root_System/system/lib/libimg2simg.so
- Size 251KB
- SHA256 77f0c963e23c6c21a88a3fbc9bd3522b4ca6331c1eba6ecc61d7988046fef415
- MD5 387f48a0d865c512ff32427cec3ce1e4
- SHA1 e93a1f47e939412b14c293d57217ef847043a8c6
- SHA512 f2cf0f4cdb65a33f691c433efec626188878239a4bb6134056b605b5b8fb84ef9489f71096b3b46f63ed81087d6b26b6d016414c2d2039b4bc8286f5d743086e
- SSDEEP 3072:yJbGWU9oBdT4WfCFYXF8pzAwiFs8VK2j1TXU1R0Haj2W/E9YmI7/FzRjXLb3TBfK:diddf8zMFe2xTXkjjkK7xRjbrTBi
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Modifies file permissions

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32