Static task
static1
Behavioral task
behavioral1
Sample
fukj00.html
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fukj00.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
misc.vbs
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
misc.vbs
Resource
win10v2004-20230220-en
General
-
Target
fukj00.rar
-
Size
213KB
-
MD5
be9041ce8838fd8cc3fa19c9231307b4
-
SHA1
14e4b2bbf24468af3272001c640d987f72b1feda
-
SHA256
6880cdef118d37d4e948d85387955f8b4305e20c0f0037dd482e1c46b78b5dee
-
SHA512
26733dcd528933ed267c6e77b56ab0bf4e6aa103e0c4ebe97da00dfdd75738a0e1cf67d382be75d025e70ebc82ddfc3f656ac98434843aab6980c663437eea77
-
SSDEEP
6144:nd51H9145nOrNSlDlGzJzegDbNvUNpVOeg/gBQkmbD1Sboy1u:nd51H92JcNvkwF/guku4u
Malware Config
Signatures
Files
-
fukj00.rar.rar
Password: infected
-
advscan.cpp
-
advscan.h
-
aliaslog.cpp
-
aliaslog.h
-
asn.cpp
-
asn.h
-
autostart.cpp
-
autostart.h
-
avirus.cpp
-
avirus.h
-
backdoor.cpp
-
backdoor.h
-
capture.cpp
-
capture.h
-
cdkeys.cpp
-
cdkeys.h
-
clones.o
-
configs.h
-
connback.cpp
-
connback.h
-
crc32.cpp
-
crc32.h
-
crypt.cpp
-
crypt.h
-
dcc.cpp
-
dcc.h
-
defines.h
-
download.cpp
-
download.h
-
driveinfo.cpp
-
driveinfo.h
-
ehandler.cpp
-
ehandler.h
-
externs.h
-
findfile.cpp
-
findfile.h
-
fphost.cpp
-
fphost.h
-
ftpd.cpp
-
ftpd.h
-
fukj00.cpp
-
fukj00.dsp
-
fukj00.dsw
-
fukj00.h
-
fukj00.ncb
-
fukj00.opt
-
fukj00.plg.html
-
functions.h
-
globals.h
-
httpd.cpp
-
httpd.h
-
ident.cpp
-
ident.h
-
includes.h
-
irc_send.cpp
-
irc_send.h
-
keylogger.cpp
-
keylogger.h
-
loaddlls.cpp
-
loaddlls.h
-
misc.cpp.vbs
-
misc.h
-
myshellcode.asm
-
net.cpp
-
net.h
-
netutils.cpp
-
netutils.h
-
nicklist.h
-
passwd.h
-
patcher.cpp
-
patcher.h
-
processes.cpp
-
processes.h
-
psniff.cpp
-
psniff.h
-
redirect.cpp
-
redirect.h
-
remotecmd.cpp
-
remotecmd.h
-
reqbuf.bin
-
rfb.h
-
rndnick.cpp
-
rndnick.h
-
scan.cpp
-
scan.h
-
secure.cpp
-
secure.h
-
session.cpp
-
session.h
-
shellcode.cpp
-
shellcode.h
-
sniffer.cpp
-
sniffer.h
-
sysinfo.cpp
-
sysinfo.h
-
tcpip.h
-
tftpd.cpp
-
tftpd.h
-
threads.cpp
-
threads.h
-
version.c
-
version.h
-
visit.cpp
-
visit.h
-
wildcard.cpp
-
wildcard.h