General

  • Target

    Setup.exe

  • Size

    21.1MB

  • MD5

    8590fe236125720105f3a0b2a811f591

  • SHA1

    d53577c9013e5dec18ca6f6d1fe15c66193fa388

  • SHA256

    c86509300ff6bc0291dee451aa8ef05103d6af5cb04e2c81a96310b830507d55

  • SHA512

    e113288b94d6aa46c7976410745cab145776cbeb4d5eb184eb966f1670d313455be42dcc5e989730719f56b97e153af1ac20598484c5508e5005bac7ac92279c

  • SSDEEP

    393216:8dnK7qG82BujRw12gV4+VrTmvu0BaSEejQam1b+fnNSQDsKmVcck:8dK7qTauq1NVrqv5saZnNSRK/ck

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 13 IoCs
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/license.txt
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ddbd50fe6279559edf7d1f1d89b42c2c


    Headers

    Imports

    Exports

    Sections

  • ApplicationManifest.json
  • Bin/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    776334619bd19ec23e3a7a275473b5a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    72b8c869f01047191838df5f58e88dd8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/AndroidAssistServer.exe
    .exe windows:5 windows x86 arch:x86

    0af72f35f7fe6b0c962e164041ae2398


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/AndroidAssistService.exe
    .exe windows:5 windows x86 arch:x86

    0eb96f582680b30040ec5b556c7a7edb


    Code Sign

    Headers

    Imports

    Sections

  • Bin/InstallDriver.exe
    .exe windows:5 windows x86 arch:x86

    7086b4daeaffac45a0cdd5cac969407a


    Code Sign

    Headers

    Imports

    Sections

  • Bin/InstallDriver64.exe
    .exe windows:5 windows x64 arch:x64

    5723d8048e266e9148cd437eba024fe0


    Code Sign

    Headers

    Imports

    Sections

  • Bin/MobiKin Backup Manager for Android.exe
    .exe windows:5 windows x86 arch:x86

    8a1c4f937814fba09751e84b5c186087


    Code Sign

    Headers

    Imports

    Sections

  • Bin/QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    6358e610c91c9433aa9e2a812ffb94cd


    Headers

    Imports

    Exports

    Sections

  • Bin/adb.exe
    .exe windows:4 windows x86 arch:x86

    6123430d6e6f1558d998011e8f5fb0f5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/com.mobikin.androidassistant.PhoneConnActivity.apk
    .apk android

    com.mobikin.androidassistant

    com.androidassistant.ui.FullscreenActivity


  • Bin/curl-ca-bundle.crt
  • Bin/groceryc.dll
    .dll windows:5 windows x86 arch:x86

    566d7680b4d106ae1070f2a3b9a9e642


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libBasic.dll
    .dll windows:5 windows x86 arch:x86

    f20a3b53849e6e21f5801d065f7ad1b8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libHelper.dll
    .dll windows:5 windows x86 arch:x86

    c0923fcb882802b795b07efc5cd2f226


    Headers

    Imports

    Exports

    Sections

  • Bin/libI18n.dll
    .dll windows:5 windows x86 arch:x86

    0d11425a5b27f709c901868720363109


    Headers

    Imports

    Exports

    Sections

  • Bin/libIPC.dll
    .dll windows:5 windows x86 arch:x86

    d71f0966f988509d1c8d4b27667ff991


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libRG.dll
    .dll windows:5 windows x86 arch:x86

    256d476759dab8a9a6b4ffb082439258


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libUpdate.dll
    .dll windows:5 windows x86 arch:x86

    830339ba01799b78842d677f69e870b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libcrypto-1_1.dll
    .dll windows:4 windows x86 arch:x86

    9c3d43842eff50541bc3ee3405238868


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libcurl.dll
    .dll windows:4 windows x86 arch:x86

    f5dca50695d12e3d38611a36a6f83d38


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libexpat.dll
    .dll windows:5 windows x86 arch:x86

    3e8feaacb321fb79a0d7d06b5b650752


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libgccfree.dll
    .dll windows:4 windows x86 arch:x86

    f6a2c4c0f0781c620790a0c5c240e232


    Headers

    Imports

    Exports

    Sections

  • Bin/libglog.dll
    .dll windows:5 windows x86 arch:x86

    ddf6b71ab67bcd7fe1da4397fdd3a8ce


    Headers

    Imports

    Exports

    Sections

  • Bin/libpng14.dll
    .dll windows:5 windows x86 arch:x86

    996387468c8269d2da2d661fcb461dab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libssl-1_1.dll
    .dll windows:4 windows x86 arch:x86

    8a6299512038577b8910fa9c4d32b3b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libxml2-2.dll
    .dll windows:4 windows x86 arch:x86

    e0b36b92da76a22f3727f03f309ceed5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libzvc125.dll
    .dll windows:5 windows x86 arch:x86

    e9259f0c385beba8f4571d5a4179bee7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/parsedb.dll
    .dll windows:5 windows x86 arch:x86

    3394868e91295c5119a6a6c1d372341a


    Headers

    Imports

    Exports

    Sections

  • Bin/pthreadVC2.dll
    .dll windows:5 windows x86 arch:x86

    3d28e92b0bebd9f8009f50b52dae8d77


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    923aa130c21002b50b462e446b3be0d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/xp/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • Bin/xp/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • Bin/xp/adb.exe
    .exe windows:4 windows x86 arch:x86

    d6fa718ae14a9ef034f7559d83c5b8c6


    Code Sign

    Headers

    Imports

    Sections

  • Driver/google_usb_driver.zip
    .zip
  • amd64/NOTICE.txt
  • amd64/WUDFUpdate_01009.dll
    .dll windows:6 windows x64 arch:x64

    2d556b4fd0343868b288619b2a5c9d8b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • amd64/WdfCoInstaller01009.dll
    .dll windows:6 windows x64 arch:x64

    70497fec79daa5f71de3b34faee686a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • amd64/winusbcoinstaller2.dll
    .dll windows:6 windows x64 arch:x64

    8248dad30db39242289209dc3ff9aa66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • android_winusb.inf
  • androidwinusb86.cat
  • androidwinusba64.cat
  • i386/NOTICE.txt
  • i386/WUDFUpdate_01009.dll
    .dll windows:6 windows x86 arch:x86

    30448524ab936448298b5c1294b1bbbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • i386/WdfCoInstaller01009.dll
    .dll windows:6 windows x86 arch:x86

    a17af54bf9d379152b9c377204b35eb9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • i386/winusbcoinstaller2.dll
    .dll windows:6 windows x86 arch:x86

    8346f3fd2848988fb391cc309c0dbe66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • source.properties
  • I18n/ja/Language.mo
  • I18n/zh_CN/Language.mo
  • I18n/zh_TW/Language.mo
  • Option.json
  • Plugins/Android/1.0.2/libAndroid.dll
    .dll windows:5 windows x86 arch:x86

    db7dd223e8cca3b764d274adff5cf77b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/Android/1.0.2/plugin.load
  • Plugins/Backup/1.0.2/Resources/Backup.json
  • Plugins/Backup/1.0.2/Resources/UsbDebug.json
  • Plugins/Backup/1.0.2/Resources/alert.png
    .png
  • Plugins/Backup/1.0.2/Resources/ask-normal.png
    .png
  • Plugins/Backup/1.0.2/Resources/ask-pressed.png
    .png
  • Plugins/Backup/1.0.2/Resources/backup-to-phone.png
    .png
  • Plugins/Backup/1.0.2/Resources/close-normal.png
    .png
  • Plugins/Backup/1.0.2/Resources/close-pressed.png
    .png
  • Plugins/Backup/1.0.2/Resources/computer.png
    .png
  • Plugins/Backup/1.0.2/Resources/connect-failed.png
    .png
  • Plugins/Backup/1.0.2/Resources/connect-via-wifi-normal.png
    .png
  • Plugins/Backup/1.0.2/Resources/connect-via-wifi-pressed.png
    .png
  • Plugins/Backup/1.0.2/Resources/connect/loading.gif
    .gif
  • Plugins/Backup/1.0.2/Resources/connected.png
    .png
  • Plugins/Backup/1.0.2/Resources/content-apps-table.png
    .png
  • Plugins/Backup/1.0.2/Resources/content-check-no.png
    .png
  • Plugins/Backup/1.0.2/Resources/content-check-yes.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/advance-disable.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/advance-normal.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/advance-pressed.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/allow-mtp-access.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/android-2.3-debug.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/android-4.1-debug.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/android-5.0-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/android-5.0-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/android-6.0-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/android-6.0-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/back-disable.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/back-normal.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/back-pressed.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/debug-sucessed.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/google-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/google-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/htc-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/htc-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/huawei-honor-series-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/huawei-honor-series-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/huawie-mate-series-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/huawie-mate-series-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/lg-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/lg-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/motorola-debug.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/oneplus-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/oneplus-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/oppo-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/oppo-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/samsung-galaxy-s7-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/samsung-galaxy-s7-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/samsung-galaxy-s9-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/samsung-galaxy-s9-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/vivo-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/vivo-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/xiaomi-mi5-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/xiaomi-mi5-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/xiaomi-redmi-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/xiaomi-redmi-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/zte-debug-1.png
    .png
  • Plugins/Backup/1.0.2/Resources/debug/zte-debug-2.png
    .png
  • Plugins/Backup/1.0.2/Resources/deriver-verify-signed.png
    .png
  • Plugins/Backup/1.0.2/Resources/deriver-verify-unsigned.png
    .png
  • Plugins/Backup/1.0.2/Resources/detail.png
    .png
  • Plugins/Backup/1.0.2/Resources/device-connect.png
    .png
  • Plugins/Backup/1.0.2/Resources/driver-installation.png
    .png
  • Plugins/Backup/1.0.2/Resources/fail.png
    .png
  • Plugins/Backup/1.0.2/Resources/finish-tick.png
    .png
  • Plugins/Backup/1.0.2/Resources/install-app-tip.png
    .png
  • Plugins/Backup/1.0.2/Resources/install-failed.png
    .png
  • Plugins/Backup/1.0.2/Resources/loading-wait.gif
    .gif
  • Plugins/Backup/1.0.2/Resources/loading.gif
    .gif
  • Plugins/Backup/1.0.2/Resources/phone-select-disable.png
    .png
  • Plugins/Backup/1.0.2/Resources/phone-select-normal.png
    .png
  • Plugins/Backup/1.0.2/Resources/phone-to-pc.png
    .png
  • Plugins/Backup/1.0.2/Resources/phone.png
    .png
  • Plugins/Backup/1.0.2/Resources/prompt.png
    .png
  • Plugins/Backup/1.0.2/Resources/question.png
    .png
  • Plugins/Backup/1.0.2/Resources/radio-check-no.png
    .png
  • Plugins/Backup/1.0.2/Resources/radio-check-yes.png
    .png
  • Plugins/Backup/1.0.2/Resources/round-cancel.png
    .png
  • Plugins/Backup/1.0.2/Resources/successful.png
    .png
  • Plugins/Backup/1.0.2/Resources/usb.png
    .png
  • Plugins/Backup/1.0.2/Resources/wifi-connect-firewall-block.png
    .png
  • Plugins/Backup/1.0.2/libBackup.dll
    .dll windows:5 windows x86 arch:x86

    11b487b4bca1db84aae4d4b361fb5da0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/Backup/1.0.2/plugin.load
  • Plugins/Title/1.0.2/Resources/Title.json
  • Plugins/Title/1.0.2/Resources/close-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/close-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-buy-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-buy-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-help-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-help-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-home-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-home-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-maximize-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-maximize-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-register-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-register-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-reset-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-reset-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-setting-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-setting-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/min-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/min-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/phone-select.png
    .png
  • Plugins/Title/1.0.2/Resources/phone.png
    .png
  • Plugins/Title/1.0.2/libTitle.dll
    .dll windows:5 windows x86 arch:x86

    003cecc5dae1b76996e69a705e7a8b6d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/Title/1.0.2/plugin.load
  • Plugins/Toolkit/1.0.2/Resources/Toolkit.json
  • Plugins/Toolkit/1.0.2/Resources/android-assistant.png
    .png
  • Plugins/Toolkit/1.0.2/Resources/android-eraser.png
    .png
  • Plugins/Toolkit/1.0.2/Resources/android-recovery.png
    .png
  • Plugins/Toolkit/1.0.2/Resources/ios-assistant.png
    .png
  • Plugins/Toolkit/1.0.2/Resources/ios-eraser.png
    .png
  • Plugins/Toolkit/1.0.2/Resources/ios-recovery.png
    .png
  • Plugins/Toolkit/1.0.2/Resources/mobile-transfer.png
    .png
  • Plugins/Toolkit/1.0.2/Resources/new-bottom.png
    .png
  • Plugins/Toolkit/1.0.2/Resources/new-center.bmp
  • Plugins/Toolkit/1.0.2/Resources/new-top.png
    .png
  • Plugins/Toolkit/1.0.2/libToolkit.dll
    .dll windows:5 windows x86 arch:x86

    19b66b9d611dfb5943b991f40d300eb4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/Toolkit/1.0.2/plugin.load
  • Resources/alert.png
    .png
  • Resources/application128x128.png
    .png
  • Resources/application32x32.png
    .png
  • Resources/backup-restore.png
    .png
  • Resources/close-normal.png
    .png
  • Resources/close-pressed.png
    .png
  • Resources/preview-edit.png
    .png
  • Resources/register/buy-now.png
    .png
  • Resources/register/dropdown.png
    .png
  • Resources/register/dropup.png
    .png
  • Resources/register/edit.png
    .png
  • Resources/register/email.png
    .png
  • Resources/register/key.png
    .png
  • Resources/register/no.png
    .png
  • Resources/register/register.png
    .png
  • Resources/register/registered.png
    .png
  • Resources/register/tip-register.png
    .png
  • Resources/register/unregistered.png
    .png
  • Resources/register/yes.png
    .png
  • Resources/super-toolkit.png
    .png
  • license.txt
  • template.html
    .html
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp