Overview

overview

3

Static

static

3

post-install.sh

windows7-x64

3

post-install.sh

windows10-2004-x64

3

pre-uninstall.sh

ubuntu-18.04-amd64

1

pre-uninstall.sh

debian-9-armhf

1

pre-uninstall.sh

debian-9-mips

pre-uninstall.sh

debian-9-mipsel

start-stop.sh

ubuntu-18.04-amd64

1

start-stop.sh

debian-9-armhf

1

start-stop.sh

debian-9-mips

start-stop.sh

debian-9-mipsel

ASUSWebSto...ge.exe

windows7-x64

1

ASUSWebSto...ge.exe

windows10-2004-x64

1

ASUSWebSto...RL.vbs

windows7-x64

1

ASUSWebSto...RL.vbs

windows10-2004-x64

1

ASUSWebSto...de.vbs

windows7-x64

1

ASUSWebSto...de.vbs

windows10-2004-x64

1

ASUSWebSto...us.vbs

windows7-x64

1

ASUSWebSto...us.vbs

windows10-2004-x64

1

ASUSWebSto...es.vbs

windows7-x64

1

ASUSWebSto...es.vbs

windows10-2004-x64

1

ASUSWebSto...fr.vbs

windows7-x64

1

ASUSWebSto...fr.vbs

windows10-2004-x64

1

ASUSWebSto...it.vbs

windows7-x64

1

ASUSWebSto...it.vbs

windows10-2004-x64

1

ASUSWebSto...jp.vbs

windows7-x64

1

ASUSWebSto...jp.vbs

windows10-2004-x64

1

ASUSWebSto...kr.vbs

windows7-x64

1

ASUSWebSto...kr.vbs

windows10-2004-x64

1

ASUSWebSto...pt.vbs

windows7-x64

1

ASUSWebSto...pt.vbs

windows10-2004-x64

1

ASUSWebSto...ru.vbs

windows7-x64

1

ASUSWebSto...ru.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0010_999_1456903032_asus-sync-agent_0.9.3.r1407_arm.apk

  • Size

    2.1MB

  • MD5

    7fbc062f2f3634a5332e3caedceb45bb

  • SHA1

    febd497f2283e74b4fbe954a7679df04cf58a576

  • SHA256

    de7b6303bf14ebe6b8d7a4f38928b76fab22286c309e754c0cf0b897c2f9e264

  • SHA512

    160b582cde19832992eb10e22d14603a10b9bdeaa87a18ef3ee073bfc16e64f62cb2b9a2179e4b3c1fd043c4f1598502693236bbeb9a130da4a4aced11e5a632

  • SSDEEP

    49152:46MMFn6c+qAiRJ6KGPiyGzpNaWqYRrZQKPKkYv:Hd1+qnKKGPcXZRlQKP3Y

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0010_999_1456903032_asus-sync-agent_0.9.3.r1407_arm.apk
    .zip
  • apkg-version
  • control.tar.gz
    .gz
  • control.tar
    .tar
  • config.json
  • description.txt
  • icon.png
    .png
  • post-install.sh
  • pre-uninstall.sh
    .sh linux
  • start-stop.sh
    .sh linux
  • data.tar.gz
    .gz
  • data.tar
    .tar .vbs polyglot
  • ASUSWebStorage-0.9.1/ASUSWebStorage.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ASUSWebStorage-0.9.1/Image/MySyncFolder.icns
  • ASUSWebStorage-0.9.1/Image/bg00.png
    .png
  • ASUSWebStorage-0.9.1/Image/bg01.png
    .png
  • ASUSWebStorage-0.9.1/Image/bg03.png
    .png
  • ASUSWebStorage-0.9.1/Image/desktop_hard.icns
  • ASUSWebStorage-0.9.1/Image/desktop_icon.icns
  • ASUSWebStorage-0.9.1/Image/icon-idle.icns
  • ASUSWebStorage-0.9.1/Image/icon-init.icns
  • ASUSWebStorage-0.9.1/Image/icon-nonetwork.icns
  • ASUSWebStorage-0.9.1/Image/icon-syncing.icns
  • ASUSWebStorage-0.9.1/Image/icon-syncing2.icns
  • ASUSWebStorage-0.9.1/Image/icon-syncing3.icns
  • ASUSWebStorage-0.9.1/Image/icon-syncing4.icns
  • ASUSWebStorage-0.9.1/Image/icon.png
    .png
  • ASUSWebStorage-0.9.1/Image/logo.icns
  • ASUSWebStorage-0.9.1/Image/logout.ico
  • ASUSWebStorage-0.9.1/Image/nowifi.icns
  • ASUSWebStorage-0.9.1/Image/oobe_pic01.png
    .png
  • ASUSWebStorage-0.9.1/Image/oobe_pic02.png
    .png
  • ASUSWebStorage-0.9.1/Language/URL.resx
    .vbs
  • ASUSWebStorage-0.9.1/Language/de-de.resx
    .vbs
  • ASUSWebStorage-0.9.1/Language/en-us.resx
    .vbs
  • ASUSWebStorage-0.9.1/Language/es-es.resx
    .vbs
  • ASUSWebStorage-0.9.1/Language/fr-fr.resx
    .vbs
  • ASUSWebStorage-0.9.1/Language/it-it.resx
    .vbs
  • ASUSWebStorage-0.9.1/Language/ja-jp.resx
    .vbs
  • ASUSWebStorage-0.9.1/Language/ko-kr.resx
    .vbs
  • ASUSWebStorage-0.9.1/Language/pt-pt.resx
    .vbs
  • ASUSWebStorage-0.9.1/Language/ru-ru.resx
    .vbs
  • ASUSWebStorage-0.9.1/Language/zh-cn.resx
    .vbs
  • ASUSWebStorage-0.9.1/Language/zh-tw.resx
    .vbs
  • ASUSWebStorage-0.9.1/MySyncFolder Share.sh
    .sh linux
  • ASUSWebStorage-0.9.1/Setting.conf
  • ASUSWebStorage-0.9.1/Thumbs.db
  • ASUSWebStorage-0.9.1/icon.png
    .png
  • bin/asussyncctl
    .elf linux arm
  • webman/asusSyncAgent.js
    .js
  • webman/images/advance.png
    .png
  • webman/images/asus_webstorge 256.png
    .png
  • webman/images/asus_webstorge512.png
    .png
  • webman/images/back.png
    .png
  • webman/images/back_line.png
    .png
  • webman/images/icon-app-task.png
    .png
  • webman/images/icon-title.png
    .png
  • webman/images/id.png
    .png
  • webman/images/left_border.png
    .png
  • webman/images/login1.png
    .png
  • webman/images/pwd.png
    .png
  • webman/langs/lang-cs.js
  • webman/langs/lang-da.js
  • webman/langs/lang-de-DE.js
  • webman/langs/lang-en-US.js
  • webman/langs/lang-es.js
  • webman/langs/lang-fi.js
  • webman/langs/lang-fr-FR.js
  • webman/langs/lang-hu.js
  • webman/langs/lang-it-IT.js
  • webman/langs/lang-ja-JP.js
  • webman/langs/lang-ko-KR.js
  • webman/langs/lang-nl-NL.js
  • webman/langs/lang-no.js
  • webman/langs/lang-pl.js
  • webman/langs/lang-pt.js
  • webman/langs/lang-ru-RU.js
  • webman/langs/lang-sv.js
  • webman/langs/lang-tr.js
  • webman/langs/lang-zh-CN.js
  • webman/langs/lang-zh-TW.js
  • webman/syncagent.cgi
    .elf linux arm