Overview
overview
1Static
static
1admin.vbs
windows7-x64
1admin.vbs
windows10-2004-x64
1conn.vbs
windows7-x64
1conn.vbs
windows10-2004-x64
1images/alt_note.js
windows7-x64
1images/alt_note.js
windows10-2004-x64
1images/changedate.js
windows7-x64
1images/changedate.js
windows10-2004-x64
1images/editor.js
windows7-x64
1images/editor.js
windows10-2004-x64
1images/index.js
windows7-x64
1images/index.js
windows10-2004-x64
1images/pop...t.html
windows7-x64
1images/pop...t.html
windows10-2004-x64
1images/pop...k.html
windows7-x64
1images/pop...k.html
windows10-2004-x64
1images/pop...2.html
windows7-x64
1images/pop...2.html
windows10-2004-x64
1images/pop...p.html
windows7-x64
1images/pop...p.html
windows10-2004-x64
1images/pop...ad.htm
windows7-x64
1images/pop...ad.htm
windows10-2004-x64
1images/pop...n.html
windows7-x64
1images/pop...n.html
windows10-2004-x64
1images/pop...dit.js
windows7-x64
1images/pop...dit.js
windows10-2004-x64
1images/pop...dit.js
windows7-x64
1images/pop...dit.js
windows10-2004-x64
1images/pop...d.html
windows7-x64
1images/pop...d.html
windows10-2004-x64
1images/pop...e.html
windows7-x64
1images/pop...e.html
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
admin.vbs
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
admin.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
conn.vbs
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
conn.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
images/alt_note.js
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
images/alt_note.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
images/changedate.js
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
images/changedate.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
images/editor.js
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
images/editor.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
images/index.js
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
images/index.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
images/popups/about.html
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
images/popups/about.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
images/popups/blank.html
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
images/popups/blank.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
images/popups/custom2.html
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
images/popups/custom2.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
images/popups/editor_help.html
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
images/popups/editor_help.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
images/popups/flash_upload.htm
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
images/popups/flash_upload.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
images/popups/fullscreen.html
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
images/popups/fullscreen.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
images/popups/gledit.js
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
images/popups/gledit.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
images/popups/gledit.js
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
images/popups/gledit.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
images/popups/img_upload.html
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
images/popups/img_upload.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
images/popups/insert_image.html
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
images/popups/insert_image.html
Resource
win10v2004-20231215-en
General
-
Target
07df7849c6c8147e9e3d55e762c0631b
-
Size
531KB
-
MD5
07df7849c6c8147e9e3d55e762c0631b
-
SHA1
1237a6ce6094fc921a27c6320ab49740526cdc59
-
SHA256
a32fbdcfdb0bdcf85461e28877734085490b0ae60d23d3046eee9b95d55cb381
-
SHA512
ca031eb2b95ab57cd3e56f677870f6b790b978a35cf9e49ab47e4ab19fe8904d834c880123c5ea198b6b11cc28d480023cffc4ee1c53c3a61b49435c76617a32
-
SSDEEP
12288:Zpjioh0LefkrMOgviNRhYSK+EHvkhw25yvZp3PLiRgd25dJGYG:Zpj9CkmRhY1+E0w2cX32qdl
Malware Config
Signatures
Files
-
07df7849c6c8147e9e3d55e762c0631b.rar
-
admin.asp.vbs
-
conn.asp.vbs
-
db.mdb
-
images/Thumbs.db
-
images/alt_note.js.js
-
images/announce.gif.gif
-
images/bg1.gif.gif
-
images/bodybg.gif.gif
-
images/bt.gif.gif
-
images/changedate.js.js
-
images/css.css
-
images/down_button.gif.gif
-
images/ed_about.gif.gif
-
images/ed_align_center.gif.gif
-
images/ed_align_left.gif.gif
-
images/ed_align_right.gif.gif
-
images/ed_blank.gif.gif
-
images/ed_charmap.gif.gif
-
images/ed_color_bg.gif.gif
-
images/ed_color_fg.gif.gif
-
images/ed_copy.gif.gif
-
images/ed_custom.gif.gif
-
images/ed_cut.gif.gif
-
images/ed_delete.gif.gif
-
images/ed_format_bold.gif.gif
-
images/ed_format_italic.gif.gif
-
images/ed_format_strike.gif.gif
-
images/ed_format_sub.gif.gif
-
images/ed_format_sup.gif.gif
-
images/ed_format_underline.gif.gif
-
images/ed_help.gif.gif
-
images/ed_hr.gif.gif
-
images/ed_html.gif.gif
-
images/ed_image.gif.gif
-
images/ed_indent_less.gif.gif
-
images/ed_indent_more.gif.gif
-
images/ed_link.gif.gif
-
images/ed_list_bullet.gif.gif
-
images/ed_list_num.gif.gif
-
images/ed_redo.gif.gif
-
images/ed_undo.gif.gif
-
images/edit.gif.gif
-
images/editor.js.js
-
images/folder_close.gif.gif
-
images/folder_open.gif.gif
-
images/fullscreen_maximize.gif.gif
-
images/fullscreen_minimize.gif.gif
-
images/guide-tab.gif.gif
-
images/guideB.gif.gif
-
images/guideli.gif.gif
-
images/h5bg.gif.gif
-
images/help.gif.gif
-
images/img.gif.gif
-
images/img/2.gif.gif
-
images/img/22.gif.gif
-
images/img/3.gif.gif
-
images/img/33.gif.gif
-
images/img/44.gif.gif
-
images/img/6.gif.gif
-
images/img/Thumbs.db
-
images/img2.gif.gif
-
images/index.js.js
-
images/insert_table.gif.gif
-
images/isvote.gif.gif
-
images/isvote2.gif.gif
-
images/login-name-bj.gif.gif
-
images/loginsure.gif.gif
-
images/logo.gif.gif
-
images/logo.jpg.jpg
-
images/menu_bg.gif.gif
-
images/more.gif.gif
-
images/nav.gif.gif
-
images/pic1.jpg.jpg
-
images/pic2.jpg.jpg
-
images/pic3.jpg.jpg
-
images/pic4.jpg.jpg
-
images/pic5.jpg.jpg
-
images/popups/Thumbs.db
-
images/popups/about.html.html
-
images/popups/blank.html.html
-
images/popups/custom2.html.html .js polyglot
-
images/popups/editor_help.html.html
-
images/popups/flash_upload.htm.html
-
images/popups/fullscreen.html.html .js polyglot
-
images/popups/gledit.gif.gif
-
images/popups/gledit.htm.js
-
images/popups/gledit.js
-
images/popups/img_upload.html.html
-
images/popups/insert_image.html.js
-
images/popups/insert_table.html.html .js polyglot
-
images/popups/select_color.html
-
images/referer.gif.gif
-
images/regbg.jpg.jpg
-
images/register-ftbg.jpg.jpg
-
images/style.css
-
images/tabA1.gif.gif
-
images/title2_bg.gif.gif
-
images/title_bg.gif.gif
-
images/txt.gif.gif
-
images/unlink.gif.gif
-
images/up_button.gif.gif
-
images/v_del.gif.gif
-
images/yue.gif.gif
-
images/新云软件.url.url
-
inc/savetofile.asp.vbs
-
inc/upfile_class.asp.vbs
-
inc/upfiletofile.asp.vbs
-
index.asp
-
login.asp.asp .vbs polyglot
-
main.asp.html .vbs polyglot
-
show.asp.asp .vbs polyglot
-
skin/2/Thumbs.db
-
skin/2/comment.gif.gif
-
skin/2/em01.gif.gif
-
skin/2/em02.gif.gif
-
skin/2/em03.gif.gif
-
skin/2/em04.gif.gif
-
skin/2/em05.gif.gif
-
skin/2/em06.gif.gif
-
skin/2/em07.gif.gif
-
skin/2/em08.gif.gif
-
skin/2/em09.gif.gif
-
skin/2/em10.gif.gif
-
skin/2/em11.gif.gif
-
skin/2/em12.gif.gif
-
skin/2/head.jpg.jpg
-
skin/2/item_centerimg.gif.gif
-
skin/2/item_downimg.gif.gif
-
skin/2/item_upimg.gif.gif
-
skin/2/m.gif.gif
-
skin/2/pic.jpg.jpg
-
skin/2/style.css
-
skin/2/vote.gif.gif
-
skin/2/vote2_1.gif.gif
-
skin/2/vote2_10.jpg.jpg
-
skin/2/vote2_2.jpg.jpg
-
skin/2/vote2_3.jpg.jpg
-
skin/2/vote2_4.jpg.jpg
-
skin/2/vote2_5.jpg.jpg
-
skin/2/vote2_6.jpg.jpg
-
skin/2/vote2_7.jpg.jpg
-
skin/2/vote2_8.jpg.jpg
-
skin/2/vote2_9.jpg.jpg
-
skin/2/vote_bg.gif.gif
-
skin/2/vote_co.gif.gif
-
skin/2/vote_f1.gif.gif
-
skin/2/vote_f2.gif.gif
-
skin/2/vote_f3.gif.gif
-
skin/2/vote_f4.gif.gif
-
skin/2/vote_fb.gif.gif
-
skin/2/vote_fl.gif.gif
-
skin/2/vote_fr.gif.gif
-
skin/2/vote_ft.gif.gif
-
skin/2/vote_icon.gif.gif
-
skin/2/vote_tibg.gif.gif
-
transfer.asp.vbs
-
vote.asp.vbs
-
常用帮助.txt
-
本次更新.txt
-
说明.txt