Analysis
- user interaction
yes - max time kernel
282s - max time network
284s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
07/11/2026, 19:32
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
SuperSU-2.82.apk
Resource
android-x86-arm-20260325-en
1 signatures
900 seconds
General
- Target SuperSU-2.82.apk
- Size 5.9MB
- Sample261107-x88basft8l
- SHA256 00406941d35d8b980dca95bd3aa6f07d857f4bc1c908328146d7552e35cd5003
- MD5 6475e8ec2b286be78ab1d10cae466e40
- SHA1 213fba03f447048583869df6236b78c8887a5c12
- SHA512 6aa660344d07682497cee8e48167aa648c5a35133e03f385035c117f5e4f3eb8636016607039c244597c6a29283c4fa97af6028687edc99f188959a09e191f6c
- SSDEEP 98304:Kc6cdTmOI0a6OitKQnGmnYy/M+T+LmsxyHZpDTBmEXv9rtP8JuIclEg2polD:CxFitVGmtvpfZ
- TLSH T1F056AE01F7C96EB2C0B3CD324A9B8233662CEC195212976775087EA8397F9D84F1B795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver eu.chainfire.supersu
Processes
-
eu.chainfire.supersu1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4264 -
su -v2⤵PID:4312
-
-
sh2⤵PID:4358
-
getprop ro.cm.version3⤵PID:4400
-
-
-
sh2⤵PID:4443
-
ls -lZ /system/bin/toolbox3⤵PID:4460
-
-
-
su -v2⤵PID:4616
-
-
sh2⤵PID:4685
-
ls -lZ /system/bin/toolbox3⤵PID:4701
-
-