Overview
overview
3Static
static
fonts/boot...ar.xml
windows7-x64
1fonts/boot...ar.xml
windows10-2004-x64
1js/bootstrap.min.js
windows7-x64
1js/bootstrap.min.js
windows10-2004-x64
1js/jquery-...min.js
windows7-x64
1js/jquery-...min.js
windows10-2004-x64
1js/jquery....1.3.js
windows7-x64
1js/jquery....1.3.js
windows10-2004-x64
1js/jquery....min.js
windows7-x64
1js/jquery....min.js
windows10-2004-x64
1js/jquery.min.js
windows7-x64
1js/jquery.min.js
windows10-2004-x64
1js/jquery....min.js
windows7-x64
1js/jquery....min.js
windows10-2004-x64
1js/main.js
windows7-x64
1js/main.js
windows10-2004-x64
1js/moderni...min.js
windows7-x64
1js/moderni...min.js
windows10-2004-x64
1js/pluploa...min.js
windows7-x64
1js/pluploa...min.js
windows10-2004-x64
1js/respond.min.js
windows7-x64
1js/respond.min.js
windows10-2004-x64
1js/salvattore.min.js
windows7-x64
1js/salvattore.min.js
windows10-2004-x64
1plupload/Moxie.swf
windows7-x64
3plupload/Moxie.swf
windows10-2004-x64
3Moxie.dll
windows7-x64
1Moxie.dll
windows10-2004-x64
1upload.js
windows7-x64
1upload.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
fonts/bootstrap/glyphicons-halflings-regular.xml
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fonts/bootstrap/glyphicons-halflings-regular.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
js/bootstrap.min.js
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
js/bootstrap.min.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
js/jquery-2.1.4.min.js
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
js/jquery-2.1.4.min.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
js/jquery.easing.1.3.js
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
js/jquery.easing.1.3.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
js/jquery.magnific-popup.min.js
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
js/jquery.magnific-popup.min.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
js/jquery.min.js
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
js/jquery.min.js
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
js/jquery.waypoints.min.js
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
js/jquery.waypoints.min.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
js/main.js
Resource
win7-20220901-en
Behavioral task
behavioral16
Sample
js/main.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
js/modernizr-2.6.2.min.js
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
js/modernizr-2.6.2.min.js
Resource
win10v2004-20220901-en
Behavioral task
behavioral19
Sample
js/plupload.full.min.js
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
js/plupload.full.min.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
js/respond.min.js
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
js/respond.min.js
Resource
win10v2004-20220901-en
Behavioral task
behavioral23
Sample
js/salvattore.min.js
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
js/salvattore.min.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
plupload/Moxie.swf
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
plupload/Moxie.swf
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
Moxie.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
Moxie.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
upload.js
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
upload.js
Resource
win10v2004-20220812-en
General
-
Target
ed171b50d790ac84090306f47032a4d7eaea8f33f822e51a590aee19c946136d
-
Size
381KB
-
MD5
05885ad9fdb0b13403183f46dc4d1ce0
-
SHA1
89d1d8e754c0b03f5e753b3760696d5e37475399
-
SHA256
ed171b50d790ac84090306f47032a4d7eaea8f33f822e51a590aee19c946136d
-
SHA512
090ee3acbd199aa1eca8293a9b6ccdd8cc99e199960a1910611b0af42b5eb8d16f6644880e2cd0c5b1090a0222f2d6560cd0c147838cc856bb2c63058528067f
-
SSDEEP
6144:vTs3ShwahH598LgIiBVMPaoUXNuc244Pf/mNv4UNBwDUC3TZ4Jsk2rsbd0YQrkjv:vuShwMH58vaoUU44PfuGB3TZ4JsrsbdL
Malware Config
Signatures
Files
-
ed171b50d790ac84090306f47032a4d7eaea8f33f822e51a590aee19c946136d.rar
-
ajax.php
-
config.php
-
css/animate.css
-
css/common.css
-
css/icomoon.css
-
css/magnific-popup.css
-
css/salvattore.css
-
css/style.css
-
css/style.css.map
-
css/upload.css
-
fonts/bootstrap/glyphicons-halflings-regular.eot
-
fonts/bootstrap/glyphicons-halflings-regular.svg.xml
-
fonts/bootstrap/glyphicons-halflings-regular.ttf
-
fonts/bootstrap/glyphicons-halflings-regular.woff
-
fonts/bootstrap/glyphicons-halflings-regular.woff2
-
images/error.jpg
-
index.php
-
install.sql
-
js/bootstrap.min.js.js
-
js/jquery-2.1.4.min.js.js
-
js/jquery.easing.1.3.js.js
-
js/jquery.magnific-popup.min.js.js
-
js/jquery.min.js.js
-
js/jquery.waypoints.min.js.js
-
js/main.js.js
-
js/modernizr-2.6.2.min.js.js
-
js/plupload.full.min.js.js
-
js/respond.min.js.js
-
js/salvattore.min.js.js
-
plupload/Moxie.swf
-
plupload/Moxie.xap.zip
-
AppManifest.xaml
-
FJCore\IJG.txt
-
FJCore\JAI.txt
-
FJCore\License.txt
-
FJCore\README.txt
-
Moxie.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
upload.php.js
-
使用说明.txt