Overview
overview
3Static
static
1damant/Dam...��.doc
windows7-x64
1damant/Dam...��.doc
windows10-2004-x64
1damant/adm...in.vbs
windows7-x64
1damant/adm...in.vbs
windows10-2004-x64
1damant/adm...le.vbs
windows7-x64
1damant/adm...le.vbs
windows10-2004-x64
1damant/adm...ls.vbs
windows7-x64
1damant/adm...ls.vbs
windows10-2004-x64
1damant/adm...ls.vbs
windows7-x64
1damant/adm...ls.vbs
windows10-2004-x64
1damant/adm...t2.vbs
windows7-x64
1damant/adm...t2.vbs
windows10-2004-x64
1damant/adm...t3.vbs
windows7-x64
1damant/adm...t3.vbs
windows10-2004-x64
1damant/admin/conn.vbs
windows7-x64
1damant/admin/conn.vbs
windows10-2004-x64
1damant/adm...ex.vbs
windows7-x64
1damant/adm...ex.vbs
windows10-2004-x64
1damant/adm...le.vbs
windows7-x64
1damant/adm...le.vbs
windows10-2004-x64
1damant/adm...ls.vbs
windows7-x64
1damant/adm...ls.vbs
windows10-2004-x64
1damant/admin/help.vbs
windows7-x64
1damant/admin/help.vbs
windows10-2004-x64
1damant/admin/left.js
windows7-x64
1damant/admin/left.js
windows10-2004-x64
1damant/admin/login.js
windows7-x64
1damant/admin/login.js
windows10-2004-x64
1damant/admin/main.vbs
windows7-x64
1damant/admin/main.vbs
windows10-2004-x64
1damant/admin/quit.asp
windows7-x64
3damant/admin/quit.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
damant/Damant工作室介绍.doc
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
damant/Damant工作室介绍.doc
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
damant/admin/adminadmin.vbs
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
damant/admin/adminadmin.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
damant/admin/adminarticle.vbs
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
damant/admin/adminarticle.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
damant/admin/adminbigcls.vbs
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
damant/admin/adminbigcls.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
damant/admin/adminsmlcls.vbs
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
damant/admin/adminsmlcls.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
damant/admin/attachment2.vbs
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
damant/admin/attachment2.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
damant/admin/attachment3.vbs
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
damant/admin/attachment3.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
damant/admin/conn.vbs
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
damant/admin/conn.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
damant/admin/edindex.vbs
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
damant/admin/edindex.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
damant/admin/edindex_article.vbs
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
damant/admin/edindex_article.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
damant/admin/edindex_cls.vbs
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
damant/admin/edindex_cls.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
damant/admin/help.vbs
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
damant/admin/help.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
damant/admin/left.js
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
damant/admin/left.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
damant/admin/login.js
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
damant/admin/login.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
damant/admin/main.vbs
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
damant/admin/main.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
damant/admin/quit.asp
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
damant/admin/quit.asp
Resource
win10v2004-20231215-en
General
-
Target
1e4568c3a6c68d9cd928475257f8f469
-
Size
3.7MB
-
MD5
1e4568c3a6c68d9cd928475257f8f469
-
SHA1
27def0c9e69f5495eed0edbe9864d30e91d5f01a
-
SHA256
a372771be2c55cb420ea297f45f62de8eddf9445e488bca66ed256cd9f422785
-
SHA512
6513510dcde737524db945fb0f68b03c58528abeef8a56f35aae7191f1b24225020f740c793481fccf5d9648c07bd29a5b6965ccdd1e7be5baf9a985ed45b6cb
-
SSDEEP
98304:fKJsZrBbY/nNfWxcrdIMCXhdDJ51fHiEC:fx+/nkxSYXn/1fHi3
Malware Config
Signatures
Files
-
1e4568c3a6c68d9cd928475257f8f469.rar
-
damant/Damant工作室介绍.doc.doc windows office2003
-
damant/admin/adminadmin.asp.vbs
-
damant/admin/adminarticle.asp.vbs
-
damant/admin/adminbigcls.asp.vbs
-
damant/admin/adminsmlcls.asp.vbs
-
damant/admin/attachment2.asp.vbs
-
damant/admin/attachment3.asp.vbs
-
damant/admin/conn.asp.vbs
-
damant/admin/edindex.asp.vbs
-
damant/admin/edindex_article.asp.vbs
-
damant/admin/edindex_cls.asp.vbs
-
damant/admin/help.asp.vbs
-
damant/admin/left.asp.js
-
damant/admin/login.asp.js
-
damant/admin/main.asp.vbs
-
damant/admin/quit.asp
-
damant/admin/right.asp.vbs
-
damant/admin/sharticle.asp.vbs
-
damant/admin/sharticle2.asp.vbs
-
damant/admin/shedarticle.asp.vbs
-
damant/admin/shedindex.asp.vbs
-
damant/admin/shedindex_cls.asp.vbs
-
damant/admin/shindex.asp.vbs
-
damant/admin/shindex_cls.asp.vbs
-
damant/admin/upfile.asp.vbs
-
damant/conn.asp.vbs
-
damant/copyright.swf
-
damant/damant.asp.vbs
-
damant/data.asp.vbs
-
damant/db.mdb
-
damant/fla/flashbd/main.fla
-
damant/fla/flashbd/show.fla
-
damant/fla/index.fla
-
damant/fla/intro.fla
-
damant/fla/mail.fla
-
damant/fla/picview.fla
-
damant/flashBD/database/cn.asp.vbs
-
damant/flashBD/database/cn.asp.bak.vbs
-
damant/flashBD/database/db1.mdb
-
damant/flashBD/database/del.asp.asp .vbs polyglot
-
damant/flashBD/database/del.asp.bak.asp .vbs polyglot
-
damant/flashBD/database/login.asp.asp
-
damant/flashBD/database/login.asp.bak.asp
-
damant/flashBD/database/read.asp.asp .vbs polyglot
-
damant/flashBD/database/read.asp.bak.asp .vbs polyglot
-
damant/flashBD/database/send.asp.asp
-
damant/flashBD/database/send.asp.bak.asp
-
damant/flashBD/main.html.html
-
damant/flashBD/main.swf
-
damant/flashBD/show.swf
-
damant/flashBD/xml/list.xml
-
damant/flashBD/xml/list.xml.bak.xml
-
damant/hot.asp.vbs
-
damant/index.html.html
-
damant/index.swf
-
damant/intro.swf
-
damant/mail.swf
-
damant/picview.swf
-
damant/readme.txt
-
damant/showacls.asp.vbs
-
damant/showatc.asp.vbs
-
damant/showcls.asp.vbs
-
damant/style.css
-
damant/下载说明.htm.html .js polyglot
-
damant/非常世纪资源网.url.url