Overview
overview
4Static
static
1META-INF/c...binary
ubuntu-18.04-amd64
META-INF/c...binary
debian-9-armhf
META-INF/c...binary
debian-9-mips
META-INF/c...binary
debian-9-mipsel
anykernel.sh
windows7-x64
3anykernel.sh
windows10-2004-x64
3tools/ak3-core.sh
windows7-x64
3tools/ak3-core.sh
windows10-2004-x64
3tools/busybox
debian-9-armhf
3tools/fec
debian-9-armhf
tools/httools_static
debian-9-armhf
4tools/lptools_static
debian-9-armhf
4tools/magiskboot
debian-9-armhf
1tools/magiskpolicy
debian-9-armhf
tools/snap...static
debian-9-armhf
4Static task
static1
Behavioral task
behavioral1
Sample
META-INF/com/google/android/update-binary
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
META-INF/com/google/android/update-binary
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
META-INF/com/google/android/update-binary
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
META-INF/com/google/android/update-binary
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral5
Sample
anykernel.sh
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
anykernel.sh
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
tools/ak3-core.sh
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
tools/ak3-core.sh
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
tools/busybox
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral10
Sample
tools/fec
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral11
Sample
tools/httools_static
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral12
Sample
tools/lptools_static
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral13
Sample
tools/magiskboot
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral14
Sample
tools/magiskpolicy
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral15
Sample
tools/snapshotupdater_static
Resource
debian9-armhf-20240729-en
General
-
Target
clover-SouthWest-v3.11.4-dynamic-4.19.320-2024-09-03-2045.zip
-
Size
14.7MB
-
MD5
fc0d9743d0e3097b98b618c98d35c9a1
-
SHA1
6cbe38fe0bf665a0a37a6be8b6854c69f772d7cd
-
SHA256
316cb16b58f38db8538276e34dc54d1669c3f270594614ff6c109892455b170f
-
SHA512
4c2d167b1de3e9fd0b328aeb195dc4ca4e6fb86729b6914fc848792333b3003dbec2f41785786e03e6f2755d744283e1d499f2b91edfc8253e36641fb07bf45d
-
SSDEEP
393216:zRlfBrHLzqIzGoZRriZXkumkFA0I5x/3SAwAA0KSVzsdmYqjqsEVmNdkO:zRlBrLOICoZIXox/3SWA0ZzvY2AQ
Malware Config
Signatures
Files
-
clover-SouthWest-v3.11.4-dynamic-4.19.320-2024-09-03-2045.zip.zip
Password: infected
-
Image.gz-dtb.gz
-
Image.gz-dtb
-
LICENSE
-
META-INF/com/google/android/update-binary.sh .js linux polyglot
-
META-INF/com/google/android/updater-script
-
anykernel.sh
-
tools/ak3-core.sh
-
tools/busybox.elf linux arm
-
tools/fec.elf linux arm
-
tools/httools_static.elf linux arm
-
tools/lptools_static.elf linux arm
-
tools/magiskboot.elf linux arm
-
tools/magiskpolicy.elf linux arm
-
tools/snapshotupdater_static.elf linux arm