Overview
overview
9Static
static
jycms/捷�...pk.dll
windows7-x64
9jycms/捷�...pk.dll
windows10-2004-x64
9lpk.dll
windows7-x64
9lpk.dll
windows10-2004-x64
9sxw/admin/...or.asp
windows7-x64
3sxw/admin/...or.asp
windows10-2004-x64
3sxw/admin/...tor.js
windows7-x64
1sxw/admin/...tor.js
windows10-2004-x64
1sxw/admin/...or.asp
windows7-x64
3sxw/admin/...or.asp
windows10-2004-x64
3sxw/admin/...ut.htm
windows7-x64
1sxw/admin/...ut.htm
windows10-2004-x64
1sxw/admin/...or.htm
windows7-x64
1sxw/admin/...or.htm
windows10-2004-x64
1sxw/admin/...bg.vbs
windows7-x64
1sxw/admin/...bg.vbs
windows10-2004-x64
1sxw/admin/...ig.vbs
windows7-x64
1sxw/admin/...ig.vbs
windows10-2004-x64
1sxw/admin/...ml.vbs
windows7-x64
1sxw/admin/...ml.vbs
windows10-2004-x64
1sxw/admin/...ta.vbs
windows7-x64
1sxw/admin/...ta.vbs
windows10-2004-x64
1sxw/admin/...dj.vbs
windows7-x64
1sxw/admin/...dj.vbs
windows10-2004-x64
1sxw/admin/...il.vbs
windows7-x64
1sxw/admin/...il.vbs
windows10-2004-x64
1sxw/admin/...rm.vbs
windows7-x64
1sxw/admin/...rm.vbs
windows10-2004-x64
1sxw/admin/...ml.vbs
windows7-x64
1sxw/admin/...ml.vbs
windows10-2004-x64
1sxw/admin/...ly.vbs
windows7-x64
1sxw/admin/...ly.vbs
windows10-2004-x64
1Analysis
-
max time kernel
152s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 23:58
Static task
static1
Behavioral task
behavioral1
Sample
jycms/捷扬文章系统0.4.1/程序文件/lpk.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
jycms/捷扬文章系统0.4.1/程序文件/lpk.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
lpk.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
lpk.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
sxw/admin/Editor/Editor.asp
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
sxw/admin/Editor/Editor.asp
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
sxw/admin/Editor/Editor.js
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
sxw/admin/Editor/Editor.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
sxw/admin/Editor/Format_Editor.asp
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
sxw/admin/Editor/Format_Editor.asp
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
sxw/admin/Editor/include/about.htm
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
sxw/admin/Editor/include/about.htm
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
sxw/admin/Editor/include/~$lcolor.htm
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
sxw/admin/Editor/include/~$lcolor.htm
Resource
win10v2004-20220901-en
Behavioral task
behavioral15
Sample
sxw/admin/admin_bg.vbs
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
sxw/admin/admin_bg.vbs
Resource
win10v2004-20220901-en
Behavioral task
behavioral17
Sample
sxw/admin/admin_config.vbs
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
sxw/admin/admin_config.vbs
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
sxw/admin/admin_config.xml.vbs
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
sxw/admin/admin_config.xml.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
sxw/admin/admin_data.vbs
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
sxw/admin/admin_data.vbs
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
sxw/admin/admin_dj.vbs
Resource
win7-20221111-en
Behavioral task
behavioral24
Sample
sxw/admin/admin_dj.vbs
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
sxw/admin/admin_email.vbs
Resource
win7-20221111-en
Behavioral task
behavioral26
Sample
sxw/admin/admin_email.vbs
Resource
win10v2004-20221111-en
Behavioral task
behavioral27
Sample
sxw/admin/admin_form.vbs
Resource
win7-20221111-en
Behavioral task
behavioral28
Sample
sxw/admin/admin_form.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
sxw/admin/admin_html.vbs
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
sxw/admin/admin_html.vbs
Resource
win10v2004-20221111-en
Behavioral task
behavioral31
Sample
sxw/admin/admin_ly.vbs
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
sxw/admin/admin_ly.vbs
Resource
win10v2004-20221111-en
General
-
Target
sxw/admin/Editor/Format_Editor.asp
-
Size
3KB
-
MD5
f7ecd4b9d73b27cbec3d6cb29f011f92
-
SHA1
fbafe18a81732350a5582ae66d42acc467a4da08
-
SHA256
880ddb136b78663965523e937cc7559b5d39f3cf208db23712d8e53def3f7d88
-
SHA512
455880bb85af7d1b87da335cd9ef7a7cd835f9b6f32a6409e01643f2b26056031754dbee6b62a5d818051cc20ad2392e11bfa0463f9c55cb89d87ad2531a112c
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.