Overview

overview

8

Static

static

0909iocp�...ar.bat

windows7-x64

1

0909iocp�...ar.bat

windows10-2004-x64

1

0909iocp�...dow.js

windows7-x64

1

0909iocp�...dow.js

windows10-2004-x64

1

0909iocp�...dow.js

windows7-x64

1

0909iocp�...dow.js

windows10-2004-x64

1

minilzo-2.02.vbs

windows7-x64

1

minilzo-2.02.vbs

windows10-2004-x64

1

0909iocp�...Lib.js

windows7-x64

1

0909iocp�...Lib.js

windows10-2004-x64

1

0909iocp�...ay.exe

windows7-x64

1

0909iocp�...ay.exe

windows10-2004-x64

1

0909iocp�...s8.exe

windows7-x64

8

0909iocp�...s8.exe

windows10-2004-x64

8

0909iocp�...ock.js

windows7-x64

1

0909iocp�...ock.js

windows10-2004-x64

1

0909iocp�...ck2.js

windows7-x64

1

0909iocp�...ck2.js

windows10-2004-x64

1

0909iocp�...vfw.js

windows7-x64

1

0909iocp�...vfw.js

windows10-2004-x64

1

加键盘�...ll.dll

windows7-x64

5

加键盘�...ll.dll

windows10-2004-x64

5

加键盘�...es.bat

windows7-x64

1

加键盘�...es.bat

windows10-2004-x64

1

加键盘�...ar.bat

windows7-x64

1

加键盘�...ar.bat

windows10-2004-x64

1

加键盘�...rv.exe

windows7-x64

3

加键盘�...rv.exe

windows10-2004-x64

3

加键盘�...ys.bat

windows7-x64

1

加键盘�...ys.bat

windows10-2004-x64

1

加键盘�...nit.js

windows7-x64

1

加键盘�...nit.js

windows10-2004-x64

1

Analysis

  • max time kernel
    44s
  • max time network
    50s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    27-11-2022 16:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0909iocp控制端/压缩单元/zlib/XiaoNiuZLib.js

  • Size

    8KB

  • MD5

    7ccc873ee73e7cca5d7432a790d8fb82

  • SHA1

    bfed763596568eb73ca4861148348a71f3702b96

  • SHA256

    69859e4426bc914ec65bc0b73075085cbfac13907de7b7ff4d12af65643a5551

  • SHA512

    be56c51815eb85b7b131669901642baeb97e8002d0a87fba4e065c551e2fc4cf391b14d1c3b29f1a19b3fde712a7263d5634086ef552fd272e62b25e51553b6a

  • SSDEEP

    96:Bg3sBA5w4ZGcs7c3HsXLxoy+IB2axObb6o2cSgiQCn74L0sDHmAmc0pBINc:2CmHqxH+IBzObbrxi9+0ymT

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\0909iocp控制端\压缩单元\zlib\XiaoNiuZLib.js
    1⤵
      PID:1368

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads