Overview

overview

3

Static

static

3

Host/挂载hosts.sh

windows10-2004-x64

3

Host/挂载hosts.sh

windows11-21h2-x64

3

Host/读�...ost.sh

windows10-2004-x64

3

Host/读�...ost.sh

windows11-21h2-x64

3

META-INF/c...binary

ubuntu-18.04-amd64

META-INF/c...binary

debian-9-armhf

META-INF/c...binary

debian-9-mips

META-INF/c...binary

debian-9-mipsel

action.sh

windows10-2004-x64

3

action.sh

windows11-21h2-x64

3

busybox.sh

windows10-2004-x64

3

busybox.sh

windows11-21h2-x64

3

check_bin.sh

windows10-2004-x64

3

check_bin.sh

windows11-21h2-x64

3

customize.sh

windows10-2004-x64

3

customize.sh

windows11-21h2-x64

3

host.sh

ubuntu-18.04-amd64

host.sh

debian-9-armhf

host.sh

debian-9-mips

host.sh

debian-9-mipsel

key.sh

windows10-2004-x64

3

key.sh

windows11-21h2-x64

3

mod/123pan.sh

windows10-2004-x64

3

mod/123pan.sh

windows11-21h2-x64

3

mod/APPOPS.sh

windows10-2004-x64

3

mod/APPOPS.sh

windows11-21h2-x64

3

mod/Host_f...ipt.sh

windows10-2004-x64

3

mod/Host_f...ipt.sh

windows11-21h2-x64

3

mod/QQ_hig...xes.sh

windows10-2004-x64

3

mod/QQ_hig...xes.sh

windows11-21h2-x64

3

mod/a0.app...com.sh

windows10-2004-x64

3

mod/a0.app...com.sh

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    cb4a634cb3fcbd7339eb46af4393fe0528faa4df2c4a9fa291ee7ceb9411d074
  • Size 418KB
  • Sample260527-qfcwcset3p
  • SHA256 cb4a634cb3fcbd7339eb46af4393fe0528faa4df2c4a9fa291ee7ceb9411d074
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • cb4a634cb3fcbd7339eb46af4393fe0528faa4df2c4a9fa291ee7ceb9411d074
    .zip 418KB
  • Host/recovery
    34B
  • Host/挂载hosts.sh
    2KB
  • Host/读取白名单修改Host.sh
    3KB
  • META-INF/com/google/android/update-binary
    .sh 3KB
  • META-INF/com/google/android/updater-script
    12B
  • README.md
    28KB
  • action.sh
    7KB
  • busybox.sh
    677B
  • check_bin.sh
    1KB
  • customize.sh
    774B
  • host.sh
    .sh .bat 8KB
  • hosts
    481KB
  • key.sh
    6KB
  • mod/123pan.sh
    7KB
  • mod/APPOPS.sh
    907B
  • mod/Host_folder_script.sh
    363B
  • mod/QQ_high_version_fixes.sh
    1KB
  • mod/a0.app.xiaomi.com.sh
    629B
  • mod/a0.app.xiaomi.com2.sh
    160B
  • mod/ad.sh
    .sh 4KB
  • mod/ad_reward.sh
    1KB
  • mod/ad_reward_2.sh
    114B
  • mod/ads_file.sh
    .sh 619B
  • mod/ads_monitor.sh
    814B
  • mod/ads_monitor/ads_monitor.prop
    1KB
  • mod/ads_monitor/ads_monitor_arm32
    .elf 14KB
  • mod/ads_monitor/ads_monitor_arm64
    .elf 17KB
  • mod/ads_monitor/ads_monitor_x86
    .elf 15KB
  • mod/ads_monitor/ads_monitor_x86_64
    .elf 17KB
  • mod/ads_monitor_Check.sh
    1KB
  • mod/alicloud.sh
    .sh 737B
  • mod/app_prem_fixes.sh
    1KB
  • mod/apps.conf
    136B
  • mod/aweme.sh
    1KB
  • mod/bilibili.sh
    1KB
  • mod/browser.sh
    1KB
  • mod/chattr_file.sh
    1KB
  • mod/check_disappear_host.sh
    1KB
  • mod/com.UCMobile.sh
    .sh 915B
  • mod/com.baidu.netdisk.sh
    58B
  • mod/com.baidu.tieba.sh
    1KB
  • mod/com.dragon.read.xml
    9KB
  • mod/com.jingdong.app.mall.sh
    1KB
  • mod/com.luna.music.sh
    1KB
  • mod/com.smile.gifmaker.sh
    658B
  • mod/com.ss.android.auto.sh
    1KB
  • mod/com.ss.android.ugc.aweme$.xml
    7KB
  • mod/com.sup.android.superb$.xml
    4KB
  • mod/com.taobao.trip.sh
    533B
  • mod/coolapk.sh
    .sh 2KB
  • mod/ctrip.android.view.sh
    965B
  • mod/disable_app.sh
    907B
  • mod/disable_other_module_hosts.sh
    .sh .bat 2KB
  • mod/disable_other_module_hosts2.sh
    .sh .bat 2KB
  • mod/dragon.sh
    1KB
  • mod/iptables.sh
    1KB
  • mod/kernel_su.sh
    1KB
  • mod/kii_fdkss.sbs.sh
    1KB
  • mod/kill_Analysis.sh
    .sh 1KB
  • mod/killpangle.sh
    3KB
  • mod/kiwi.sh
    239B
  • mod/mi_market.sh
    .sh 1KB
  • mod/miui_ad.sh
    .sh 383B
  • mod/modtify_xml.sh
    923B
  • mod/mount_hosts.sh
    879B
  • mod/mount_hosts/mount_hosts_arm32
    .elf 10KB
  • mod/mount_hosts/mount_hosts_arm64
    .elf 12KB
  • mod/mount_hosts/mount_hosts_x86
    .elf 10KB
  • mod/mount_hosts/mount_hosts_x86_64
    .elf 12KB
  • mod/mount_hosts/配置包名.prop
    948B
  • mod/mount_hosts_Check.sh
    1KB
  • mod/network_limit.sh
    .sh 1KB
  • mod/notification.sh
    .sh 3KB
  • mod/protect_information.sh
    1KB
  • mod/rm_hosts.sh
    .sh 582B
  • mod/sqlite_clean_up.sh
    4KB
  • mod/tencent.sh
    936B
  • mod/util_functions.sh
    6KB
  • mod/webview_clean.sh
    .sh 1KB
  • mod/ximalaya.sh
    .sh 496B
  • mod/zhihu.sh
    .sh 1KB
  • module.prop
    604B
  • mount_bind_update.sh
    1KB
  • mount_hosts_no_reboot.sh
    2KB
  • package_extra.sh
    .sh 3KB
  • post-fs-data.sh
    .sh 1KB
  • service.sh
    .sh 455B
  • system/app/AnalyticsCore/Analytics.apk
    .apk 164KB
  • tools/notification_arm32
    .elf 8KB
  • tools/notification_arm64
    .elf 10KB
  • tools/notification_x86
    .elf 8KB
  • tools/notification_x86_64
    .elf 10KB
  • uninstall.sh
    4KB
  • update.json
    187B
  • update.sh
    2KB
  • verify.sh
    1KB
  • 其他脚本/APPOPS.sh
    529B
  • 其他脚本/IFW规则转PM命令.sh
    .sh 1KB
  • 其他脚本/com.dragon.read.xml
    10KB
  • 其他脚本/com.dragon.read.xml.script.sh
    .sh 7KB
  • 其他脚本/ip.sh
    .sh 1KB
  • 其他脚本/废弃脚本/WeChat.sh
    107B
  • 其他脚本/废弃脚本/file_list.sha256
    5KB
  • 其他脚本/废弃脚本/miui_control.sh
    1006B
  • 其他脚本/源码/ads_monitor.c
    23KB
  • 其他脚本/源码/ads_monitor.cpp
    8KB
  • 其他脚本/源码/mount_bind.c
    11KB
  • 其他脚本/源码/mount_bind.cpp
    5KB
  • 其他脚本/源码/notification.c
    1KB
  • 其他脚本/自定义.sh
    .sh 1KB
  • 广告奖励.prop
    1KB
  • 放行白名单.prop
    617B
  • 自定义.prop
    290B
  • 配置.prop
    2KB

cb4a634cb3fcbd7339eb46af4393fe0528faa4df2c4a9fa291ee7ceb9411d074

  • SHA256 cb4a634cb3fcbd7339eb46af4393fe0528faa4df2c4a9fa291ee7ceb9411d074
  • MD5 SHA1 SHA512 SSDEEP TLSH