9ce30cf4ec5cc5533095e3d26ac395c36cb08d257756d065170b67c39be0e9e1

General

Target
kingroot-5-1-2.apk
Size 18.5MB
Sample260723-n2fs2aak7s
SHA256 9ce30cf4ec5cc5533095e3d26ac395c36cb08d257756d065170b67c39be0e9e1
MD5 acf6e670a9a6e6df717954dc8fa8e50d
SHA1 7b628e85a58dc503d8247c532d7ed411de894a04
SHA512 92ac998b3f2885bb13cf52fd04d8e77ea3cb35255b38720ca9abe8dcbf70b92b2dc45bc5ce492c9a6daa493ee3d49d39ceb761b993302e4ecbefb69f71bb9fc9
SSDEEP 393216:XiFtk3R/AolyRePdLrpTv9yriFLm86qF8Ym1uL/XEurY7oy2/s1UYMTAzqFkSby:4tk3RLyRe168K/Sh6K28yeY7MczCXW
TLSH
T15B17231AFF58F617C477A032A2B3453771998C687706E6120794B63C29FBDD04B8ADCA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  kingroot-5-1-2.apk
- Size 18.5MB
- SHA256 9ce30cf4ec5cc5533095e3d26ac395c36cb08d257756d065170b67c39be0e9e1
- MD5 acf6e670a9a6e6df717954dc8fa8e50d
- SHA1 7b628e85a58dc503d8247c532d7ed411de894a04
- SHA512 92ac998b3f2885bb13cf52fd04d8e77ea3cb35255b38720ca9abe8dcbf70b92b2dc45bc5ce492c9a6daa493ee3d49d39ceb761b993302e4ecbefb69f71bb9fc9
- SSDEEP 393216:XiFtk3R/AolyRePdLrpTv9yriFLm86qF8Ym1uL/XEurY7oy2/s1UYMTAzqFkSby:4tk3RLyRe168K/Sh6K28yeY7MczCXW
- TLSH
  T15B17231AFF58F617C477A032A2B3453771998C687706E6120794B63C29FBDD04B8ADCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3
- Target
  5001.apk
- Size 2.6MB
- SHA256 340aa62352d6b9e44ea57619cb017b277683b8c5ffdeba28a8f2899edeb679d1
- MD5 98fe1a3d4e88adb48e43266991b90acc
- SHA1 1aa595431aaafd075e533fb029348b1ac44fc63a
- SHA512 ffb308986686a0c7304553ea157c9a8814c282998b01701cb1770bef80b0676df295c6beddcde524dcc9e1d1afd840bb61a45d67b9b8d092fa56849fe8af1b7e
- SSDEEP 49152:6fSFCuKn5Bx2hFZJ7RxYSRv23JmzEe2Sd/gwHmsDUH9KJT:6fSFCuKrxkZxR/O3JoEeL/gwHmdKh
- TLSH
  T134C5232A7EB8E22FE073E035FA7682D3E4550C546E0AB7675742826C0CFBE508756CD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral4
- Target
  hk
- Size 41KB
- SHA256 d6794c77ccdacabdcf5fbca204a59d0376b5ed1f5c4534d7340b8bc602597dde
- MD5 b1a240c34678af2232721f92ecc50de6
- SHA1 5e782369eca54f63b37dd2c61e43102e232db266
- SHA512 448c789be1625b346f339d3c50a8633f1fa615e651d39245037b7c35662008ae2ceec45b05627d5753359a361dc97b71ca283d032cb136d9fd98bba139ebe4c9
- SSDEEP 768:iOcgoNPy6CFxZ0q5TyzINJfVT37Qjl3gd36He52Z+Hmp6:iOwNPy6CF4Q+zINLTrQjl3gEemd6
- TLSH
  T1C013F123767959A4E67FF3FB355490434ADF8A153770A4973D2E73069043BE00E8299B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7