Overview
overview
4Static
static
1META-INF/c...binary
ubuntu-18.04-amd64
META-INF/c...binary
debian-9-armhf
META-INF/c...binary
debian-9-mips
META-INF/c...binary
debian-9-mipsel
anykernel.sh
windows7-x64
3anykernel.sh
windows10-2004-x64
3tools/ak3-core.sh
windows7-x64
3tools/ak3-core.sh
windows10-2004-x64
3tools/busybox
debian-9-armhf
3tools/fec
debian-12-armhf
tools/httools_static
debian-12-armhf
4tools/lptools_static
debian-12-armhf
4tools/magiskboot
debian-9-armhf
1tools/magiskpolicy
debian-12-armhf
tools/snap...static
debian-12-armhf
4Static task
static1
Behavioral task
behavioral1
Sample
META-INF/com/google/android/update-binary
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
META-INF/com/google/android/update-binary
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
META-INF/com/google/android/update-binary
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
META-INF/com/google/android/update-binary
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral5
Sample
anykernel.sh
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
anykernel.sh
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
tools/ak3-core.sh
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
tools/ak3-core.sh
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
tools/busybox
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral10
Sample
tools/fec
Resource
debian12-armhf-20240729-en
Behavioral task
behavioral11
Sample
tools/httools_static
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral12
Sample
tools/lptools_static
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral13
Sample
tools/magiskboot
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral14
Sample
tools/magiskpolicy
Resource
debian12-armhf-20240729-en
Behavioral task
behavioral15
Sample
tools/snapshotupdater_static
Resource
debian12-armhf-20240418-en
General
-
Target
renaissance-nonksu-sweet-20240902-0320.zip
-
Size
17.2MB
-
MD5
bcd453803be72e62ca603631221599c0
-
SHA1
c15beb89dedaa4f18e8740a0edb2e5c4cf75e6ff
-
SHA256
7286fcbf81023ecf75eaaf308a35f87d4a4d51ff73df6913c540bd32a20db7ab
-
SHA512
3474107286ce5550cff5cd2dc64b9b13eb53559ba7aedd2bbe8f08d2ad845821a4cc9f3201803302cc9c02d7ad0f133e7a9a4c640ee8bc6fe8547f4511c057bb
-
SSDEEP
393216:GLP8JRn/JLu75+C6JIb2zQzOmWwe9AyrZUlKDn72/Kz56vtNx0yNvDZomTp:GIJZJCefkzniUlKf2/M2tNx0yNvDqmTp
Malware Config
Signatures
Files
-
renaissance-nonksu-sweet-20240902-0320.zip.zip
Password: infected
-
Image.gz.gz
Password: infected
-
Image
-
LICENSE
-
META-INF/com/google/android/update-binary.sh .js linux polyglot
-
META-INF/com/google/android/updater-script
-
anykernel.sh
-
dtb.img
-
dtbo.img
-
tools/ak3-core.sh
-
tools/busybox.elf linux arm
-
tools/fec.elf linux arm
-
tools/httools_static.elf linux arm
-
tools/lptools_static.elf linux arm
-
tools/magiskboot.elf linux arm
-
tools/magiskpolicy.elf linux arm
-
tools/snapshotupdater_static.elf linux arm