Overview
overview
10Static
static
107.32...nt.ps1
windows7-x64
17.32...nt.ps1
windows10-2004-x64
17.32...ew.ps1
windows7-x64
17.32...ew.ps1
windows10-2004-x64
17.32...up.ps1
windows7-x64
17.32...up.ps1
windows10-2004-x64
17.32...he.ps1
windows7-x64
17.32...he.ps1
windows10-2004-x64
17.32...tm.ps1
windows7-x64
17.32...tm.ps1
windows10-2004-x64
17.32...ge.ps1
windows7-x64
17.32...ge.ps1
windows10-2004-x64
17.32...og.ps1
windows7-x64
17.32...og.ps1
windows10-2004-x64
17.32...te.ps1
windows7-x64
17.32...te.ps1
windows10-2004-x64
17.32...lp.ps1
windows7-x64
17.32...lp.ps1
windows10-2004-x64
17.32...x.html
windows7-x64
17.32...x.html
windows10-2004-x64
17.32...ch.ps1
windows7-x64
17.32...ch.ps1
windows10-2004-x64
17.32...el.ps1
windows7-x64
17.32...el.ps1
windows10-2004-x64
17.32...et.ps1
windows7-x64
17.32...et.ps1
windows10-2004-x64
17.32...ce.ps1
windows7-x64
17.32...ce.ps1
windows10-2004-x64
17.32...ze.ps1
windows7-x64
17.32...ze.ps1
windows10-2004-x64
17.32...ck.ps1
windows7-x64
17.32...ck.ps1
windows10-2004-x64
1General
-
Target
d1567088ef227fa65659956d6a71f5af4c17ce52097b9b63074f3a21a6f61d71
-
Size
5.7MB
-
Sample
221028-3yjg3sceg9
-
MD5
45340169c58557bf730b6cd17802ac49
-
SHA1
5c43255dbf2dfde538242d81f909444add917541
-
SHA256
d1567088ef227fa65659956d6a71f5af4c17ce52097b9b63074f3a21a6f61d71
-
SHA512
bbcf0052749954ad89d6b3bfa0662685551030aaefed98c7106b6c4006dc54087c4afbc6f6e1e1c9b3e9b19ac4f5b6777f68c076258cf652bfd66bbcb19e974c
-
SSDEEP
98304:0RiIUx3F0BeucppOzAwKtCf1qC2p5OnoI2IndHKgVP2z2V:0RNmWBeVpMzf48X2PwPr
Static task
static1
Behavioral task
behavioral1
Sample
7.32ֻ̨ģ/admin/announcement.ps1
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7.32ֻ̨ģ/admin/announcement.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
7.32ֻ̨ģ/admin/attachrenew.ps1
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
7.32ֻ̨ģ/admin/attachrenew.ps1
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
7.32ֻ̨ģ/admin/bakup.ps1
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
7.32ֻ̨ģ/admin/bakup.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
7.32ֻ̨ģ/admin/cache.ps1
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
7.32ֻ̨ģ/admin/cache.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
7.32ֻ̨ģ/admin/creathtm.ps1
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
7.32ֻ̨ģ/admin/creathtm.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
7.32ֻ̨ģ/admin/creditchange.ps1
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
7.32ֻ̨ģ/admin/creditchange.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
7.32ֻ̨ģ/admin/creditlog.ps1
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
7.32ֻ̨ģ/admin/creditlog.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
7.32ֻ̨ģ/admin/datastate.ps1
Resource
win7-20220901-en
Behavioral task
behavioral16
Sample
7.32ֻ̨ģ/admin/datastate.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
7.32ֻ̨ģ/admin/help.ps1
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
7.32ֻ̨ģ/admin/help.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
7.32ֻ̨ģ/admin/index.html
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
7.32ֻ̨ģ/admin/index.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
7.32ֻ̨ģ/admin/ipsearch.ps1
Resource
win7-20220901-en
Behavioral task
behavioral22
Sample
7.32ֻ̨ģ/admin/ipsearch.ps1
Resource
win10v2004-20220901-en
Behavioral task
behavioral23
Sample
7.32ֻ̨ģ/admin/level.ps1
Resource
win7-20220901-en
Behavioral task
behavioral24
Sample
7.32ֻ̨ģ/admin/level.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
7.32ֻ̨ģ/admin/modeset.ps1
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
7.32ֻ̨ģ/admin/modeset.ps1
Resource
win10v2004-20220901-en
Behavioral task
behavioral27
Sample
7.32ֻ̨ģ/admin/notice.ps1
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
7.32ֻ̨ģ/admin/notice.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
7.32ֻ̨ģ/admin/optimize.ps1
Resource
win7-20220901-en
Behavioral task
behavioral30
Sample
7.32ֻ̨ģ/admin/optimize.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
7.32ֻ̨ģ/admin/postcheck.ps1
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
7.32ֻ̨ģ/admin/postcheck.ps1
Resource
win10v2004-20220812-en
Malware Config
Extracted
http://v3.tongji.cn.yahoo.com/export/phpwind
Targets
-
-
Target
7.32ֻ̨ģ/admin/announcement.php
-
Size
9KB
-
MD5
c5b9cc9be2cdc6da4bedcfe8804a7d87
-
SHA1
87e84ff5ba08739bec3fde39602c39195af40111
-
SHA256
bbddb11418fbb6a0e0cda0f92ca6260cd14c8d398e515a33b643045039570318
-
SHA512
62c550a8efe474cbe0e32996525a76c0f7fdd09291d612564458b279f419699131196a8ea34e408cb9818345409ded5c5cd4ff531d4b17ebaec6127f996d63fc
-
SSDEEP
192:Cv9ujWe46+55I2rVcsC8a4Sc05DIPC2luwWShM5tSmD3KMAESS7ZBEeZNJ:gujWjIGGIPbu8atxKMnSS7Zq4T
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/attachrenew.php
-
Size
5KB
-
MD5
94d552070b8484ad9c8df7e24c977268
-
SHA1
45f6e2820d3207743d3cbf0d75c62aa5b949357d
-
SHA256
101d6f0e13333150df53ccee05086f746e50f4b19bb674d56788c7756b3e3345
-
SHA512
39f6e9462d320caaec7187711e67b06bf53dc92a5ca3047112d38179d00853f29385eecc1faed6c8c54a8ca15c0ed762f4d38749060d1950c1b8d28908fe459a
-
SSDEEP
96:CvnbvItJ7CS8Fm6cQ+YDSgVLEqTk9N/j6KRLEqTkY/wN:CvnbvIzZc8UVRI9AiRIz
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/bakup.php
-
Size
5KB
-
MD5
eeef55864f4a7ad73941d91d1b74bc99
-
SHA1
03a32c174440360f07e84e9d7a8a647b52ccd053
-
SHA256
981492c24a80c21727db65b382bcabc5ef86e2d81133f561b688e900d1245693
-
SHA512
8a85c0bab88bc06f2d7cfd35e5ac6a9b0890d514accabeab0b6e842b067c20509de5b50accbcf51f0566e0dcd802e29c48c7ef1d6984916b4d8b110d74649ded
-
SSDEEP
96:Cv0WKxbzXUE83+LjViJf4KvZK9p0yBfzN5BdlBUMeP4yIGCctNEQT0VcOC5E4m0r:Cv0WKVKTJfDyBfpjBOwypTbm5SHqWzT1
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/cache.php
-
Size
36KB
-
MD5
8fc9a0dd36652b5361f40bce9e4cc6fb
-
SHA1
368ab5bffce4d6a64a46932cd533c6183588870b
-
SHA256
bf907accb4b558958001cbf68621a873153c3e988ac2187f7a793f9c12af4135
-
SHA512
4df51e31a4fc91d9164fba893bb5eded21694f89e2f9c752687fac808c58f4bee3568c17171554fe9ceee3cc832eb75d7b1fd8940dec3b89e6ba2998b373fa5b
-
SSDEEP
768:nesgtLaS4jGVq6YdL23ULvzB+kH9StA8A81egyxijtW:nehLadGVOzLvzBbMXo
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/creathtm.php
-
Size
11KB
-
MD5
ac47e044749e8ed124defe213cfc383e
-
SHA1
cb81779702509b4b6f51fc251033277cf7a4d834
-
SHA256
2995ab6ab4944ad59feac495d41807c3f7a919bb39455cdc20fbb77aa552acdb
-
SHA512
c41c8d8a0650bee62384d8eabbd8de82297bef4111593a3b1eeb5da667bd50c92b87cef3402765d58b3bb2317475281093784b214f4104b485ca3a7ca1b2f211
-
SSDEEP
192:CkjdwyFI0uS1m4LeW/M7spA0zyB42d7XgcS6/PDnEsnkv6gQs7pvY0:IyFkJ4qZ7oyB1JXgl6njE0s7pX
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/creditchange.php
-
Size
1KB
-
MD5
6731e6194329b5f535fa78c5855a3736
-
SHA1
9329e22df569142ae3ae87ff96bbf41100494944
-
SHA256
b5d31525d6a72d7497ce2228f88f0aa36d75b83985f7cb35e49817fb59be0be4
-
SHA512
751e87252ce871bb6dce8309e48ffbf63461b8c5d61163953035ea86e16c9fdc4eb9c0042bcc95d833be11af85b0db8a2cc740c0e056b60cd1a34519b58d0bfd
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/creditlog.php
-
Size
5KB
-
MD5
f862af6cebef0a29afa9dc2c984a8177
-
SHA1
c86cca903aa3cf4bb9acf4302a47c4555f525afa
-
SHA256
f1ec244f498666143d34013fddb2fee060419d5dd02722beb2b2d3c95c9a2b06
-
SHA512
e8ab69f3fb36218dde5f04e2c7581c2de5333faac02ea277b3d40822f9bf3edbe40634ae521bd38f6923cbc6abd29e117ac72304998506180e771df122c2ea3c
-
SSDEEP
96:Cl/OFVqYVxe69NMKtztneFV5FdnVM3FaxEdU4su3DSB2Yo0h5WESBpSk0cvkZSBq:ClUneKNMK052OAN3B061TMmi
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/datastate.php
-
Size
7KB
-
MD5
ffcabc04752e55c425676a82acd6ab5a
-
SHA1
70c954ce2c74ef4cf8b257e385a6401b5f119c09
-
SHA256
5288c6f9c06480bda3a2bfa685df56e125dd3dc3e4c93b66965c8d8632d50c7f
-
SHA512
f7cc20321c1010a1c7318379ba613f3bf64ce0ba4af4c9cad959be67e1def828a805ccbb8971c6b2be9b5ff2a45083dc911f7f242afa05654030f828e7c9b1e7
-
SSDEEP
96:COj7D/AqDGnIsh95O7STSZXs95QJzgQcQBAQkQQKds8gQp4kAcaySxIFQruSa+kC:COj7kIA87SkK+1qu9riAq96Hit
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/help.php
-
Size
3KB
-
MD5
25c026e2ef4731fa1a468fc114426166
-
SHA1
fb510682d6ec2aad20993c727fa3ee717d118a34
-
SHA256
8cc186a486f089be8712b75b3329d523e86c17ae86f0fab47e6aea2ed803e56b
-
SHA512
7e382adc8dbdb5045233b8c7a7c80054fb59eb2bf32c03c727fec4cc55ca0fc357d4bb807deda94d3f8fcda782acfd0d56d13e0e8f56df7b53249e4ce7bb2f82
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/index.html
-
Size
1B
-
MD5
7215ee9c7d9dc229d2921a40e899ec5f
-
SHA1
b858cb282617fb0956d960215c8e84d1ccf909c6
-
SHA256
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
-
SHA512
f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/ipsearch.php
-
Size
4KB
-
MD5
4c7f349b3d947834235145acb70f3751
-
SHA1
5c53f2ca9c6221c99cb70a925f03b772a8ff6f7c
-
SHA256
8109360d4d6bcf941dae081af1c546c2039badf3994cefa2a4cc9ae6f688dc3d
-
SHA512
2de2c02d16cac3b291130539707ef5fc81a75ab7bbf7fe4dd3233c40e10389d5901a2e59212c1a6bdaa369064890296a813b8c33672c26f276929e62f4f975f0
-
SSDEEP
96:CnblwglVJ77bQZiAJIiJU9hNNzbIpFCX0zFMYDSjaKYHv/:CnbLlf0jChNNbIasMPPC
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/level.php
-
Size
20KB
-
MD5
0b3c4f538499c9ccf991214a6d455b82
-
SHA1
8a17efe74fcd399a5c4cae47c712665f5f4e2501
-
SHA256
3d99b7255dd80d5b958725ba7e9eb4d670819079b366eb6729269be073a05708
-
SHA512
0ca56546a0fe4d8908c335de1160a49b22546d02d715fa0896949c36e3a215c8e4365529a94e15c3949c0591ae4d5b52b27d700f69f59573c4222ec53c3a9a1c
-
SSDEEP
384:VVwnzIISnIlBnIlEFcQlBm8VCQiB90ee7dm5CRAqnLj2K+oFJdOdgos+rnuQD:VinEFudy0ee7BR7qoFaJr5D
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/modeset.php
-
Size
9KB
-
MD5
ca719c9260366f99a5e8fbfdafe926e0
-
SHA1
fee6e34c2a8f4027a61ac5aa743b1078d2a6e78a
-
SHA256
57ba69a11d37d4b3cc2821fc4ac80a54d007da09b4bd2a8fe0064df10558ca30
-
SHA512
10dbb213ecf2cfdffaf05b7b4cce2c50c8de6b910c49ac5a5826bf1de91114e638fb0e97c1f10a350d77067181a488e1243819b1326945ab94f53a264e7155da
-
SSDEEP
192:an96QmQlMqK+NoHGLMGD0h3MB4LrOFiCd3M4R8MgFMKBMiA+NyxL4:odFQhskIxL4
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/notice.php
-
Size
2KB
-
MD5
93a657d912c5ee8b8b34036756dc8727
-
SHA1
eb9731bcc94555df2fbd44994fa246fb6caac5af
-
SHA256
44d54bbe7f8fe200f73e221870aae377da07a7df0b9fa3623427b5e9ca1bc9eb
-
SHA512
aed601df48835267d9d78309d5c5871bd366914e49e5050385d53ec827fe7505502d6e4cdf7054fbbabdb453b6ac371e2152d3afaf055c10e68c7a383b4a9ff2
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/optimize.php
-
Size
9KB
-
MD5
5989cfb1a66acc6837801d54b7ebf3dd
-
SHA1
4f7f11103b39e51df041c6c5d3ec25e5b4e664fb
-
SHA256
4a6756dc9c9ebba30e4bd80f867534e0710f0ee9a2e1c0a69ac90ea3664dfb87
-
SHA512
305890d6447a41eb6fa3f6f7cf37b30556f3e54b8be8cac7d2e3175d0a05f19262a86bcc10dcb63bb5a18d85ca8e228049c4973865fbb9a06542f0522fdf0311
-
SSDEEP
192:CnBctN3jWNtUMMuM7H/MlYCoss1rDENuIMNtxtkH/M9T3xnMe2bxYMfdk:wSNzQjAss5JlO1k
Score1/10 -
-
-
Target
7.32ֻ̨ģ/admin/postcheck.php
-
Size
3KB
-
MD5
91e70171a377eb9cc55817fe4acc37aa
-
SHA1
6219608370d7fb1a4f49622fe36252c30bd3ad1d
-
SHA256
157a53a16dc89e1183123bd8ccc1e54e77e7d71d78a6e4c0bdb00625b35c651d
-
SHA512
bf9ee095ce6e69c0d0cf16e1f2ad47c598e3c6751608d4ac23546494cbfa990112f31f67acc9243f92bf4e10aa0ff625bb95aeed89bf45d7261df8ab377fedda
Score1/10 -