Static task
static1
Behavioral task
behavioral1
Sample
升级包/yzrules.tar.gz
Resource
win7-20230703-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
升级包/yzrules.tar.gz
Resource
win10v2004-20230703-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
升级包.zip
-
Size
34KB
-
MD5
cbfa3d7db413099bdbc1bb0a1b509c72
-
SHA1
c8d4c04ac0f1c014b8cb2190605b61abbe64d9c8
-
SHA256
24991c7dcb0495a65b16bec228659c2f5db8a767f040da2a39db83bee2aa476d
-
SHA512
2e07cf081e878fcee4061e1e50d6f955d57ead080d6a1b4ef367e0cc7b1979fce44c02b908a1207daff22741f47472d5df6b40355f986b6127c994065e9124a7
-
SSDEEP
768:1eyyYBwbpEDh7Xg7KKHDOdXDLAR2YWaX7WzXfeHse:UyyYei7w7K8AXDUkkLWzvA
Score
1/10
Malware Config
Signatures
Files
-
升级包.zip.zip
-
升级包/H2_rules.sql
-
升级包/yzrules.tar.gz.gz
-
yzrules.tar.tar
-
yzrules/REQUEST-102-WWW-RULES.conf
-
yzrules/REQUEST-20-APPLICATION-Brute-PASS.conf
-
yzrules/REQUEST-20-APPLICATION-CC-DDOS.conf
-
yzrules/REQUEST-811001-XbrlPersistenceServlet-AttackENT.conf
-
yzrules/REQUEST-811002-BeanShell-AttackENT.conf
-
yzrules/REQUEST-812001-PATH-AttackENT-NC.conf
-
yzrules/REQUEST-913-SCANNER-DETECTION.conf
-
yzrules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf
-
yzrules/REQUEST-921-PROTOCOL-ATTACK.conf
-
yzrules/REQUEST-930-APPLICATION-ATTACK-LFI.conf
-
yzrules/REQUEST-932-APPLICATION-ATTACK-RCE-bak.conf
-
yzrules/REQUEST-932-APPLICATION-ATTACK-RCE.conf
-
yzrules/REQUEST-933-APPLICATION-ATTACK-PHP.conf
-
yzrules/REQUEST-934-APPLICATION-ATTACK-GENERIC.conf
-
yzrules/REQUEST-941-APPLICATION-ATTACK-XSS.conf
-
yzrules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf
-
yzrules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf
-
yzrules/REQUEST-944-APPLICATION-ATTACK-JAVA.conf
-
yzrules/REQUEST-951001-PATH-AttackENT.conf
-
yzrules/REQUEST-952-APPLICATION-ATTACK-LFI.conf
-
yzrules/REQUEST-953-struts-S2-057.conf
-
yzrules/REQUEST-961-VULNERABILITY-RELATED.conf
-
yzrules/black_url.data
-
yzrules/lfi-os-files.data
-
yzrules/scanners-headers.data
-
yzrules/scanners-urls.data
-
yzrules/scanners-user-agents.data
-
yzrules/scripting-user-agents.data
-
yzrules/test.rule
-
yzrules/unix-shell.data
-
yzrules/white_url.data