Analysis

  • user interaction
    yes
  • max time kernel
    282s
  • max time network
    284s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    07/11/2026, 19:32

General

  • Target
    SuperSU-2.82.apk
  • Size 5.9MB
  • Sample261107-x88basft8l
  • SHA256 00406941d35d8b980dca95bd3aa6f07d857f4bc1c908328146d7552e35cd5003
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • eu.chainfire.supersu
    1⤵
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4264
    • su -v
      2⤵
        PID:4312
      • sh
        2⤵
          PID:4358
          • getprop ro.cm.version
            3⤵
              PID:4400
          • sh
            2⤵
              PID:4443
              • ls -lZ /system/bin/toolbox
                3⤵
                  PID:4460
              • su -v
                2⤵
                  PID:4616
                • sh
                  2⤵
                    PID:4685
                    • ls -lZ /system/bin/toolbox
                      3⤵
                        PID:4701

                  Network

                        MITRE ATT&CK Mobile v16

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads