Overview
overview
4Static
static
1Hvv2023-ma...OC.pdf
windows7-x64
1Hvv2023-ma...OC.pdf
windows10-2004-x64
1Hvv2023-ma...300.js
windows7-x64
1Hvv2023-ma...300.js
windows10-2004-x64
1Hvv2023-ma...�.docx
windows7-x64
4Hvv2023-ma...�.docx
windows10-2004-x64
1FineReport...DME.js
windows7-x64
1FineReport...DME.js
windows10-2004-x64
1Hvv2023-ma...��.ps1
windows7-x64
1Hvv2023-ma...��.ps1
windows10-2004-x64
1Hvv2023-ma...C.docx
windows7-x64
4Hvv2023-ma...C.docx
windows10-2004-x64
1Hvv2023-ma...POC.js
windows7-x64
1Hvv2023-ma...POC.js
windows10-2004-x64
1Hvv2023-ma...�.docx
windows7-x64
4Hvv2023-ma...�.docx
windows10-2004-x64
1Hvv2023-ma...�.docx
windows7-x64
4Hvv2023-ma...�.docx
windows10-2004-x64
1Hvv2023-ma...�.docx
windows7-x64
4Hvv2023-ma...�.docx
windows10-2004-x64
1Hvv2023-ma...l.docx
windows7-x64
4Hvv2023-ma...l.docx
windows10-2004-x64
1Hvv2023-ma...0.docx
windows7-x64
4Hvv2023-ma...0.docx
windows10-2004-x64
1Hvv2023-ma...CE .js
windows7-x64
1Hvv2023-ma...CE .js
windows10-2004-x64
1poc/1.html
windows7-x64
1poc/1.html
windows10-2004-x64
1poc/poc.docx
windows7-x64
4poc/poc.docx
windows10-2004-x64
1poc/wps漏...�.docx
windows7-x64
4poc/wps漏...�.docx
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Hvv2023-main/2023国护漏洞POC.pdf
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Hvv2023-main/2023国护漏洞POC.pdf
Resource
win10v2004-20230824-en
Behavioral task
behavioral3
Sample
Hvv2023-main/Adobe ColdFusion 反序列化漏洞CVE-2023-29300.js
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
Hvv2023-main/Adobe ColdFusion 反序列化漏洞CVE-2023-29300.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
Hvv2023-main/CVE-2023-3450 锐捷Ruijie路由器命令执行漏洞.docx
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
Hvv2023-main/CVE-2023-3450 锐捷Ruijie路由器命令执行漏洞.docx
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
FineReport_channel_Deserialization_Vulnerabilities_RCE-0.1/README.js
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
FineReport_channel_Deserialization_Vulnerabilities_RCE-0.1/README.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
Hvv2023-main/OfficeWeb365 远程代码执行漏洞.ps1
Resource
win7-20230824-en
Behavioral task
behavioral10
Sample
Hvv2023-main/OfficeWeb365 远程代码执行漏洞.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
Hvv2023-main/亿赛通 -UploadFileFromC.docx
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
Hvv2023-main/亿赛通 -UploadFileFromC.docx
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
Hvv2023-main/广联达oa 后台文件上传漏洞 POC.js
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
Hvv2023-main/广联达oa 后台文件上传漏洞 POC.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
Hvv2023-main/普元 EOS default jmx 远.docx
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
Hvv2023-main/普元 EOS default jmx 远.docx
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
Hvv2023-main/用友 NC Cloud jsinvoke 任意文件上传漏洞.docx
Resource
win7-20230824-en
Behavioral task
behavioral18
Sample
Hvv2023-main/用友 NC Cloud jsinvoke 任意文件上传漏洞.docx
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
Hvv2023-main/百卓 Smart S85F 后台文件上传.docx
Resource
win7-20230712-en
Behavioral task
behavioral20
Sample
Hvv2023-main/百卓 Smart S85F 后台文件上传.docx
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
Hvv2023-main/致远 OA 协同管理软件无需登录getshell.docx
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
Hvv2023-main/致远 OA 协同管理软件无需登录getshell.docx
Resource
win10v2004-20230824-en
Behavioral task
behavioral23
Sample
Hvv2023-main/苹果RCE(CVE-2021-30860.docx
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
Hvv2023-main/苹果RCE(CVE-2021-30860.docx
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
Hvv2023-main/金山WPS RCE .js
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
Hvv2023-main/金山WPS RCE .js
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
poc/1.html
Resource
win7-20230712-en
Behavioral task
behavioral28
Sample
poc/1.html
Resource
win10v2004-20230824-en
Behavioral task
behavioral29
Sample
poc/poc.docx
Resource
win7-20230712-en
Behavioral task
behavioral30
Sample
poc/poc.docx
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
poc/wps漏洞说明.docx
Resource
win7-20230712-en
Behavioral task
behavioral32
Sample
poc/wps漏洞说明.docx
Resource
win10v2004-20230703-en
General
-
Target
80e57b3ac3988f1325a77f0ca6fb72d17083243d7f0f16bd630d227a3da4c98b
-
Size
2.9MB
-
MD5
32b69714ead112c5a8b2d1edb62fcc9a
-
SHA1
2fb08c627ac8d3232eff695afae7de9e502f0eb0
-
SHA256
80e57b3ac3988f1325a77f0ca6fb72d17083243d7f0f16bd630d227a3da4c98b
-
SHA512
42626311bad40861dfc5908b3560c083168903864006cd974d11f5127acf7c846c388f56fb840c50af6c1ae9f9c3e7c12feac975536795896d7ed4a307b490de
-
SSDEEP
49152:gdE+XG3RRauCbdXfHb8pl9MV10YI2N6d2pWdtOi7P2mG346ZQlxWvrFczNFIUYIm:gdESGhR8bd/4p3MVCVpd2p8iVLIWvrFn
Malware Config
Signatures
-
Office document contains embedded OLE objects 1 IoCs
Detected embedded OLE objects in Office documents.
resource yara_rule static1/unpack004/poc/poc.docx office_ole_embedded
Files
-
80e57b3ac3988f1325a77f0ca6fb72d17083243d7f0f16bd630d227a3da4c98b.zip
-
Hvv2023-main/2023国护漏洞POC.pdf.pdf
-
Hvv2023-main/360 新天擎终端安全管理系统信息泄露漏洞.txt
-
Hvv2023-main/Adobe ColdFusion 反序列化漏洞CVE-2023-29300.txt.js
-
Hvv2023-main/CVE-2023-27372 SPIP CMS远程代码执行漏洞.txt
-
Hvv2023-main/CVE-2023-28432 MinIO集群模式信息泄露漏洞复现.txt
-
Hvv2023-main/CVE-2023-3450 锐捷Ruijie路由器命令执行漏洞.docx.docx office2007
-
Hvv2023-main/Coremail 邮件系统未授权访问获取管理员账密POC.txt
-
Hvv2023-main/Eramba任意代码执行漏洞.txt
-
Hvv2023-main/FineReport_channel_Deserialization_Vulnerabilities_RCE-0.1.zip.zip
-
FineReport_channel_Deserialization_Vulnerabilities_RCE-0.1/README.md.js
-
Hvv2023-main/GDidees CMS任意文件上传漏洞复现与利用分析.txt
-
Hvv2023-main/HIKVISION iSecure Center综合安防管理平台文件上传.txt
-
Hvv2023-main/HIKVISION视频编码设备接入网关showFile.php任意文件下载.txt
-
Hvv2023-main/HiKVISION 综合安防管理平台 files 任意文件上传漏洞 POC.txt
-
Hvv2023-main/HiKVISION 综合安防管理平台 report 任意文件上传漏洞.txt
-
Hvv2023-main/HiKVISION综合安防管理平台env信息泄漏.txt
-
Hvv2023-main/Jeecg-Boot Freemarker 模版注入漏洞(疑似).txt
-
Hvv2023-main/KubePi JwtSigKey 登陆绕过漏洞CVE-2023-22463.txt
-
Hvv2023-main/Kuboard默认口令.txt
-
Hvv2023-main/Metabase validate 远程命令执行漏洞CVE-2023-38646.txt
-
Hvv2023-main/Milesight VPN server.js 任意文件读取漏洞.txt
-
Hvv2023-main/Nacos-Sync未授权漏洞.txt
-
Hvv2023-main/OfficeWeb365 远程代码执行漏洞.txt.ps1
-
Hvv2023-main/Openfire身份认证绕过漏洞(CVE-2023-32315).txt
-
Hvv2023-main/Panabit iXCache网关RCE漏洞CVE-2023-38646.txt
-
Hvv2023-main/Panel loadfile 后台文件读取漏洞.txt
-
Hvv2023-main/PigCMS action_flashUpload 任意文件上传漏洞.txt
-
Hvv2023-main/QAX-Vpn存在x遍历及任意账号密码修改漏洞.txt
-
Hvv2023-main/README.md
-
Hvv2023-main/Yakit任意文件读取.txt
-
Hvv2023-main/gitlab路径遍历读取任意文件漏洞.txt
-
Hvv2023-main/中远麒麟堡垒机SQL注入.txt
-
Hvv2023-main/云终端安全管理系统 login SQL注入漏洞.txt
-
Hvv2023-main/亿赛通 -UploadFileFromC.docx.docx office2007
-
Hvv2023-main/任我行 CRM SmsDataList SQL注入漏洞.txt
-
Hvv2023-main/任我行CRM系统SQL注入漏洞.txt
-
Hvv2023-main/企业微信0day.jpg.jpg
-
Hvv2023-main/企业微信0dayAgentinfo接口Secret信息泄露.txt
-
Hvv2023-main/华天动力oa SQL注入.txt
-
Hvv2023-main/各厂家产品默认密码汇总.txt
-
Hvv2023-main/启明天钥安全网关前台sql注入.txt
-
Hvv2023-main/启明星辰-4A 统一安全管控平台 getMater 信息泄漏.txt
-
Hvv2023-main/大华智慧园区任意密码读取攻击.txt
-
Hvv2023-main/大华智慧园区综合管理平台 searchJson SQL注入漏洞.txt
-
Hvv2023-main/大华智慧园区综合管理平台 文件上传漏洞.txt
-
Hvv2023-main/大华智慧园区综合管理平台getFaceCaptureSQL注入漏洞.txt
-
Hvv2023-main/大华智慧园区综合管理平台video任意文件上传漏洞.txt
-
Hvv2023-main/契约锁电子签章系统 RCE.txt
-
Hvv2023-main/安恒明御运维审计与风险控制系统堡垒机任意用户注册.txt
-
Hvv2023-main/安恒蜜罐2.0.11 提权漏洞 .txt
-
Hvv2023-main/宏景 HCM codesettree SQL 注入漏洞.txt
-
Hvv2023-main/宏景OA文件上传.txt
-
Hvv2023-main/广联达 Linkworks GetIMDictionarySQL 注入漏洞.txt
-
Hvv2023-main/广联达oa sql注入漏洞 POC.txt
-
Hvv2023-main/广联达oa 后台文件上传漏洞 POC.txt.js
-
Hvv2023-main/新开普智慧校园系统代码执行漏洞.txt
-
Hvv2023-main/明御运维审计与风险控制系统堡垒机任意用户注册.txt
-
Hvv2023-main/明源云 ERP ApiUpdate.ashx 文件上传漏洞.txt
-
Hvv2023-main/普元 EOS default jmx 远.docx.docx office2007
-
Hvv2023-main/汉得SRM tomcat.jsp 登录绕过漏洞 POC.txt
-
Hvv2023-main/泛微 E-Cology 某版本 SQL注入漏洞 POC.txt
-
Hvv2023-main/泛微 HrmCareerApplyPerView S Q L 注入漏洞.txt
-
Hvv2023-main/泛微 ShowDocsImagesql注入漏洞.txt
-
Hvv2023-main/泛微 Weaver E-Office9 前台文件包含.txt
-
Hvv2023-main/泛微E-Office uploadify.php后台文件上传漏洞.txt
-
Hvv2023-main/泛微E-Office9文件上传漏洞 CVE-2023-2523 POC.txt
-
Hvv2023-main/泛微E-Office9文件上传漏洞 CVE-2023-2648 POC.txt
-
Hvv2023-main/泛微Weaver E-Office9.0文件上传.txt
-
Hvv2023-main/深信服 sxf-报表系统 任意命令执行漏洞版本有限制.txt
-
Hvv2023-main/深信服应用交付系统命令执行漏洞.txt
-
Hvv2023-main/深信服应用交付系统敏感信息泄露.txt
-
Hvv2023-main/深信服报表 任意读取.txt
-
Hvv2023-main/深信服数据中心管理系统 XML 实体注入漏洞.txt
-
Hvv2023-main/用友 NC Cloud jsinvoke 任意文件上传漏洞.docx.docx office2007
-
Hvv2023-main/用友 NC Cloud jsinvoke 任意文件上传漏洞.txt
-
Hvv2023-main/用友 移动管理系统 uploadApk.do 任意文件上传漏洞.txt
-
Hvv2023-main/用友GRP-U8存在信息泄露.txt
-
Hvv2023-main/用友nc-cloudRCE.txt
-
Hvv2023-main/用友文件服务器认证绕过.txt
-
Hvv2023-main/用友时空 KSOA servletimagefield 文件 sKeyvalue 参数SQL 注入.txt
-
Hvv2023-main/用友时空 KSOATaskRequestServlet sql注入漏洞.txt
-
Hvv2023-main/用友时空KSOA PayBill SQL注入漏洞 .txt
-
Hvv2023-main/用友畅捷通 T注入.txt
-
Hvv2023-main/用有畅捷通T+GetStoreWarehouseByStore RCE漏洞.txt
-
Hvv2023-main/百卓 Smart S85F 后台文件上传.docx.docx office2007
-
Hvv2023-main/禅道 16.5 router.class.php SQL注入漏洞.txt
-
Hvv2023-main/禅道v18.0-v18.3后台命令执行.txt
-
Hvv2023-main/移动管理系 统 uploadApk.do 任意文件上传漏洞.txt
-
Hvv2023-main/红帆 oa 注入.txt
-
Hvv2023-main/红帆OA zyy_AttFile.asmx SQL注入漏洞.txt
-
Hvv2023-main/绿盟 NF 下一代防火墙 任意文件上传漏洞.txt
-
Hvv2023-main/绿盟 SAS堡垒机 Exec 远程命令执行漏洞.txt
-
Hvv2023-main/绿盟 SAS堡垒机 GetFile 任意文件读取漏洞.txt
-
Hvv2023-main/绿盟 SAS堡垒机 local_user.php 任意用户登录漏洞.txt
-
Hvv2023-main/绿盟 sas 安全审计系统任意文件读取.txt
-
Hvv2023-main/网御 ACM 上网行为管理系统bottomframe.cgi SQL 注入漏洞.txt
-
Hvv2023-main/网神 SecGate 3600 防火墙 obj_app_upfile 任意文件上传漏洞 POC.txt
-
Hvv2023-main/网神 SecSSL 3600安全接入网关系统 任意密码修改漏洞 POC.txt
-
Hvv2023-main/致远 OA 协同管理软件无需登录getshell.docx.docx office2007
-
Hvv2023-main/致远OA_V8.1SP2文件上传漏洞.txt
-
Hvv2023-main/致远OA任意管理员登录.txt
-
Hvv2023-main/苹果RCE(CVE-2021-30860.docx.docx office2007
-
Hvv2023-main/蓝凌EKP远程代码执行漏洞.txt
-
Hvv2023-main/蓝凌OA前台代码执行.txt
-
Hvv2023-main/辰信景云终端安全管理系统 login SQL 注入漏洞 .txt
-
Hvv2023-main/远秋医学技能考试系统SQL注入.txt
-
Hvv2023-main/通达OA sql注入漏洞 CVE-2023-4165 POC.txt
-
Hvv2023-main/通达OA sql注入漏洞 CVE-2023-4166 POC.txt
-
Hvv2023-main/金和OA C6-GetSgIData.aspx SQL注入漏洞.txt
-
Hvv2023-main/金和OA 未授权.txt
-
Hvv2023-main/金山EDR RCE漏洞.txt
-
Hvv2023-main/金山WPS RCE .txt.js
-
Hvv2023-main/金山WPS RCE/WPS漏洞利用poc.zip.zip
-
__MACOSX/poc/._wps漏洞说明.docx
-
poc/1.html.html .js
-
poc/poc.docx.docx office2007
-
poc/wps漏洞说明.docx.docx office2007
-
Hvv2023-main/金山WPS RCE/金山WPS RCE.txt.js
-
Hvv2023-main/金山终端安全系统V9任意文件上传漏洞.txt
-
Hvv2023-main/金盘 微信管理平台 getsysteminfo 未授权访问漏洞.txt
-
Hvv2023-main/金盘图书馆微信管理后台 getsysteminfo 未授权访问漏洞.txt
-
Hvv2023-main/金蝶云星空 CommonFileserver 任意文件读取漏洞.txt
-
Hvv2023-main/锐捷 NBR 路由器 fileupload.php 任意文件上传漏洞.txt
-
Hvv2023-main/锐捷交换机 WEB 管理系统 EXCU_SHELL 信息泄露.txt
-
Hvv2023-main/飞企互联 FE 业务协作平台 magePath 参数文件读取漏洞.txt