Overview
overview
3Static
static
101_index.html
windows7-x64
101_index.html
windows10-2004-x64
1Up_BookPic.asp
windows7-x64
3Up_BookPic.asp
windows10-2004-x64
3Up_BookPicPro.vbs
windows7-x64
1Up_BookPicPro.vbs
windows10-2004-x64
1addsave.vbs
windows7-x64
1addsave.vbs
windows10-2004-x64
1admin/789.vbs
windows7-x64
1admin/789.vbs
windows10-2004-x64
1admin/DEFAULT.asp
windows7-x64
3admin/DEFAULT.asp
windows10-2004-x64
3admin/addchanpin.vbs
windows7-x64
1admin/addchanpin.vbs
windows10-2004-x64
1admin/admin.html
windows7-x64
1admin/admin.html
windows10-2004-x64
1admin/adminlogin.vbs
windows7-x64
1admin/adminlogin.vbs
windows10-2004-x64
1admin/cha.vbs
windows7-x64
1admin/cha.vbs
windows10-2004-x64
1admin/chanpin.asp
windows7-x64
3admin/chanpin.asp
windows10-2004-x64
3admin/checkpass.vbs
windows7-x64
1admin/checkpass.vbs
windows10-2004-x64
1admin/conn.vbs
windows7-x64
1admin/conn.vbs
windows10-2004-x64
1admin/del.vbs
windows7-x64
1admin/del.vbs
windows10-2004-x64
1admin/guanli.vbs
windows7-x64
1admin/guanli.vbs
windows10-2004-x64
1admin/hzadd1.vbs
windows7-x64
1admin/hzadd1.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
01_index.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01_index.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Up_BookPic.asp
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Up_BookPic.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
Up_BookPicPro.vbs
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Up_BookPicPro.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
addsave.vbs
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
addsave.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
admin/789.vbs
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
admin/789.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
admin/DEFAULT.asp
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
admin/DEFAULT.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
admin/addchanpin.vbs
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
admin/addchanpin.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
admin/admin.html
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
admin/admin.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
admin/adminlogin.vbs
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
admin/adminlogin.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
admin/cha.vbs
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
admin/cha.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
admin/chanpin.asp
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
admin/chanpin.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
admin/checkpass.vbs
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
admin/checkpass.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
admin/conn.vbs
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
admin/conn.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
admin/del.vbs
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
admin/del.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
admin/guanli.vbs
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
admin/guanli.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
admin/hzadd1.vbs
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
admin/hzadd1.vbs
Resource
win10v2004-20231215-en
General
-
Target
0adc208389c2096b09d353d70a877288
-
Size
851KB
-
MD5
0adc208389c2096b09d353d70a877288
-
SHA1
5af05561674ab3bed7a30afd0cb4e40b1c1efa70
-
SHA256
b2112196f53d1289745a87825c6d75e5665d1a1e881343777fafa74ca81dcbc2
-
SHA512
c7d0b9b686fd5cdd17d689cd8cb056a39ab097e64c8b7b441cd3e5ab845efaf5bfedbecdf8295c4eb05163118c346f1f6775d51ffc8745491a147d03d905b2f6
-
SSDEEP
24576:j14qhkEw3uigzdgCT/ebbfauF5brigclT/ZPw:h4queRtT/ebbiuFhCTh4
Malware Config
Signatures
Files
-
0adc208389c2096b09d353d70a877288.rar
-
01_index.html.html .js polyglot
-
Up_BookPic.asp
-
Up_BookPicPro.asp.vbs
-
addsave.asp.vbs
-
admin/789.asp.vbs
-
admin/DEFAULT.ASP
-
admin/SOUTHDNS.CSS
-
admin/addchanpin.asp.vbs
-
admin/admin.asp.html
-
admin/adminlogin.asp.vbs
-
admin/cha.asp.vbs
-
admin/chanpin.asp
-
admin/checkpass.asp.vbs
-
admin/conn.asp.vbs
-
admin/del.asp.vbs
-
admin/guanli.ASP.vbs
-
admin/hzadd1.asp.vbs
-
admin/hzdeal.asp.vbs
-
admin/hzmana1.asp.vbs
-
admin/jiameng.asp.vbs
-
admin/jianjie.asp.vbs
-
admin/left.asp.html .js polyglot
-
admin/lianxi.asp.vbs
-
admin/manadmin.asp.vbs
-
admin/modifynewchanpin.asp.vbs
-
admin/modifynewjiameng.asp.vbs
-
admin/modifynewjianjie.asp.vbs
-
admin/modifynewjob.asp.vbs
-
admin/modifynewlianxi.asp.vbs
-
admin/modifynewzhici.asp.vbs
-
admin/news_add.asp
-
admin/rencai.asp.vbs
-
admin/tui.asp
-
admin/xinjian/Global.asa.html
-
admin/xinjian/Search.asp
-
admin/xinjian/manage/Inc/Conndb.asp.vbs
-
admin/xinjian/manage/Inc/Foot.asp
-
admin/xinjian/manage/Inc/Function.asp.vbs
-
admin/xinjian/manage/Inc/Head.asp
-
admin/xinjian/manage/Inc/ManageMent.css
-
admin/xinjian/manage/ProductAdd.asp.asp .vbs polyglot
-
admin/xinjian/manage/ProductDel.asp.asp .vbs polyglot
-
admin/xinjian/manage/ProductList.asp.vbs
-
admin/xinjian/manage/ProductModify.asp.js
-
admin/xinjian/manage/ProductSave.asp.asp .vbs polyglot
-
admin/xinjian/manage/jianjie.asp.asp .js polyglot
-
admin/zhici.asp.vbs
-
admin/新云软件.url.url
-
bookpic/200661915432620024.jpg.jpg
-
bookpic/200661917155054361.jpg.jpg
-
bookpic/200771312305174380.jpg.jpg
-
chanpin.asp.js
-
conn.asp.vbs
-
conn1.asp.vbs
-
css.css
-
css/gm.css
-
css/openwindow.js.js
-
data/123.mdb
-
data/data.asp
-
delliuyan.asp.vbs
-
dispjingqing.asp.js
-
guanliliuyan.asp.vbs
-
htmleditor/Cell.html.html .js polyglot
-
htmleditor/FlashUp.asp.vbs
-
htmleditor/HtmlEdit.asp.js
-
htmleditor/UpFile.asp.vbs
-
htmleditor/UpLoad.asp
-
htmleditor/_vti_cnf/Cell.html
-
htmleditor/_vti_cnf/FlashUp.asp
-
htmleditor/_vti_cnf/UpFile.asp
-
htmleditor/_vti_cnf/UpLoad.asp
-
htmleditor/_vti_cnf/abc.js
-
htmleditor/_vti_cnf/composition.js
-
htmleditor/_vti_cnf/edit.asp
-
htmleditor/_vti_cnf/edit.htm
-
htmleditor/_vti_cnf/editor.asp
-
htmleditor/_vti_cnf/editor.js
-
htmleditor/_vti_cnf/flash.html
-
htmleditor/_vti_cnf/flash_upload.html
-
htmleditor/_vti_cnf/forEdit.js
-
htmleditor/_vti_cnf/getSwfSize.asp
-
htmleditor/_vti_cnf/help.htm
-
htmleditor/_vti_cnf/htmlediter.css
-
htmleditor/_vti_cnf/img_save.asp
-
htmleditor/_vti_cnf/img_upload.html
-
htmleditor/_vti_cnf/palette.html
-
htmleditor/_vti_cnf/palette2.html
-
htmleditor/_vti_cnf/sImgProp.html
-
htmleditor/_vti_cnf/selcolor.html
-
htmleditor/_vti_cnf/sn.css
-
htmleditor/_vti_cnf/table.html
-
htmleditor/_vti_cnf/tablemod.html
-
htmleditor/_vti_cnf/upload.inc
-
htmleditor/abc.js.js
-
htmleditor/admin/789.asp.vbs
-
htmleditor/admin/DEFAULT.ASP
-
htmleditor/admin/SOUTHDNS.CSS
-
htmleditor/admin/addchanpin.asp.vbs
-
htmleditor/admin/admin.asp.html
-
htmleditor/admin/adminlogin.asp.vbs
-
htmleditor/admin/cha.asp.vbs
-
htmleditor/admin/chanpin.asp
-
htmleditor/admin/checkpass.asp.vbs
-
htmleditor/admin/conn.asp.vbs
-
htmleditor/admin/del.asp.vbs
-
htmleditor/admin/guanli.ASP.vbs
-
htmleditor/admin/hzadd1.asp.vbs
-
htmleditor/admin/hzdeal.asp.vbs
-
htmleditor/admin/hzmana1.asp.vbs
-
htmleditor/admin/images/admin_left_1.gif.gif
-
htmleditor/admin/images/admin_left_12.gif.gif
-
htmleditor/admin/images/admin_left_13.gif.gif
-
htmleditor/admin/images/admin_left_2.gif.gif
-
htmleditor/admin/images/admin_left_3.gif.gif
-
htmleditor/admin/images/admin_left_4.gif.gif
-
htmleditor/admin/images/admin_left_5.gif.gif
-
htmleditor/admin/images/admin_left_6.gif.gif
-
htmleditor/admin/images/admin_left_7.gif.gif
-
htmleditor/admin/images/admin_left_8.gif.gif
-
htmleditor/admin/images/admin_left_9.gif.gif
-
htmleditor/admin/images/admin_top_bg.gif.gif
-
htmleditor/admin/images/title.gif.gif
-
htmleditor/admin/images/title_bg_hide.gif.gif
-
htmleditor/admin/images/title_bg_quit.gif.gif
-
htmleditor/admin/images/title_bg_show.gif.gif
-
htmleditor/admin/jianjie.asp.vbs
-
htmleditor/admin/left.asp.html .js polyglot
-
htmleditor/admin/lianxi.asp.vbs
-
htmleditor/admin/manadmin.asp.vbs
-
htmleditor/admin/modifynewchanpin.asp.vbs
-
htmleditor/admin/modifynewjianjie.asp.vbs
-
htmleditor/admin/modifynewlianxi.asp.vbs
-
htmleditor/admin/modifynewzhici.asp.vbs
-
htmleditor/admin/news_add.asp
-
htmleditor/admin/tui.asp
-
htmleditor/admin/zhici.asp.vbs
-
htmleditor/composition.js.js
-
htmleditor/edit.asp.js
-
htmleditor/edit.htm.js
-
htmleditor/editor.asp.html
-
htmleditor/editor.js.js
-
htmleditor/flash.html.html
-
htmleditor/flash_upload.html.html
-
htmleditor/forEdit.js.js
-
htmleditor/getSwfSize.asp.vbs
-
htmleditor/help.htm.html
-
htmleditor/htmlediter.css
-
htmleditor/images/EXT/BAT.GIF
-
htmleditor/images/EXT/BMP.GIF
-
htmleditor/images/EXT/CAB.GIF
-
htmleditor/images/EXT/COM.GIF
-
htmleditor/images/EXT/CSS.GIF
-
htmleditor/images/EXT/DLL.GIF
-
htmleditor/images/EXT/DOC.GIF
-
htmleditor/images/EXT/DRIVE.GIF
-
htmleditor/images/EXT/EXE.GIF
-
htmleditor/images/EXT/FOLDER.GIF
-
htmleditor/images/EXT/GIF.GIF
-
htmleditor/images/EXT/HLP.GIF
-
htmleditor/images/EXT/HTM.GIF
-
htmleditor/images/EXT/HTML.GIF
-
htmleditor/images/EXT/INF.GIF
-
htmleditor/images/EXT/INI.GIF
-
htmleditor/images/EXT/JPG.GIF
-
htmleditor/images/EXT/JS.GIF
-
htmleditor/images/EXT/MID.GIF
-
htmleditor/images/EXT/MP3.GIF
-
htmleditor/images/EXT/REG.GIF
-
htmleditor/images/EXT/SYS.GIF
-
htmleditor/images/EXT/TXT.GIF
-
htmleditor/images/EXT/Unknown.gif.gif
-
htmleditor/images/EXT/XML.GIF
-
htmleditor/images/EXT/ZIP.GIF
-
htmleditor/images/EXT/_vti_cnf/BAT.GIF
-
htmleditor/images/EXT/_vti_cnf/BMP.GIF
-
htmleditor/images/EXT/_vti_cnf/CAB.GIF
-
htmleditor/images/EXT/_vti_cnf/COM.GIF
-
htmleditor/images/EXT/_vti_cnf/CSS.GIF
-
htmleditor/images/EXT/_vti_cnf/DLL.GIF
-
htmleditor/images/EXT/_vti_cnf/DOC.GIF
-
htmleditor/images/EXT/_vti_cnf/DRIVE.GIF
-
htmleditor/images/EXT/_vti_cnf/EXE.GIF
-
htmleditor/images/EXT/_vti_cnf/FOLDER.GIF
-
htmleditor/images/EXT/_vti_cnf/GIF.GIF
-
htmleditor/images/EXT/_vti_cnf/HLP.GIF
-
htmleditor/images/EXT/_vti_cnf/HTM.GIF
-
htmleditor/images/EXT/_vti_cnf/HTML.GIF
-
htmleditor/images/EXT/_vti_cnf/INF.GIF
-
htmleditor/images/EXT/_vti_cnf/INI.GIF
-
htmleditor/images/EXT/_vti_cnf/JPG.GIF
-
htmleditor/images/EXT/_vti_cnf/JS.GIF
-
htmleditor/images/EXT/_vti_cnf/MID.GIF
-
htmleditor/images/EXT/_vti_cnf/MP3.GIF
-
htmleditor/images/EXT/_vti_cnf/REG.GIF
-
htmleditor/images/EXT/_vti_cnf/SYS.GIF
-
htmleditor/images/EXT/_vti_cnf/TXT.GIF
-
htmleditor/images/EXT/_vti_cnf/Unknown.gif
-
htmleditor/images/EXT/_vti_cnf/XML.GIF
-
htmleditor/images/EXT/_vti_cnf/ZIP.GIF
-
htmleditor/images/EXT/_vti_cnf/asp.gif
-
htmleditor/images/EXT/_vti_cnf/avi.GIF
-
htmleditor/images/EXT/_vti_cnf/mdb.gif
-
htmleditor/images/EXT/_vti_cnf/rar.gif
-
htmleditor/images/EXT/_vti_cnf/rm.GIF
-
htmleditor/images/EXT/_vti_cnf/swf.GIF
-
htmleditor/images/EXT/asp.gif
-
htmleditor/images/EXT/avi.GIF
-
htmleditor/images/EXT/mdb.gif
-
htmleditor/images/EXT/rar.gif.gif
-
htmleditor/images/EXT/rm.GIF
-
htmleditor/images/EXT/swf.GIF
-
htmleditor/images/Flash.gif.gif
-
htmleditor/images/align_left.gif.gif
-
htmleditor/images/align_none.gif.gif
-
htmleditor/images/align_over.gif.gif
-
htmleditor/images/align_right.gif.gif
-
htmleditor/images/bold.gif.gif
-
htmleditor/images/cellpro.gif.gif
-
htmleditor/images/colafter.gif.gif
-
htmleditor/images/colbefore.gif.gif
-
htmleditor/images/colorpen.gif.gif
-
htmleditor/images/copy.gif.gif
-
htmleditor/images/cut.gif.gif
-
htmleditor/images/delcol.gif.gif
-
htmleditor/images/delete.gif.gif
-
htmleditor/images/delrow.gif.gif
-
htmleditor/images/dot.gif.gif
-
htmleditor/images/fontcolor.gif.gif
-
htmleditor/images/guide.gif.gif
-
htmleditor/images/help.gif.gif
-
htmleditor/images/hr.gif.gif
-
htmleditor/images/html.gif.gif
-
htmleditor/images/image.gif.gif
-
htmleditor/images/image2.gif.gif
-
htmleditor/images/indent.gif.gif
-
htmleditor/images/italic.gif.gif
-
htmleditor/images/jcenter.gif.gif
-
htmleditor/images/jleft.gif.gif
-
htmleditor/images/jright.gif.gif
-
htmleditor/images/link.gif.gif
-
htmleditor/images/normal.gif.gif
-
htmleditor/images/ol.gif.gif
-
htmleditor/images/outdent.gif.gif
-
htmleditor/images/paste.gif.gif
-
htmleditor/images/preview.gif.gif
-
htmleditor/images/redo.gif.gif
-
htmleditor/images/rowabove.gif.gif
-
htmleditor/images/rowbellow.gif.gif
-
htmleditor/images/save.gif.gif
-
htmleditor/images/scrolll.gif.gif
-
htmleditor/images/scrollr.gif.gif
-
htmleditor/images/separator.gif.gif
-
htmleditor/images/table.gif.gif
-
htmleditor/images/tbpro.gif.gif
-
htmleditor/images/ul.gif.gif
-
htmleditor/images/underline.gif.gif
-
htmleditor/images/undo.gif.gif
-
htmleditor/images/unformat.gif.gif
-
htmleditor/images/upfiles.gif.gif
-
htmleditor/img/filelist.xml
-
htmleditor/img/image001.gif.gif
-
htmleditor/img/image002.gif.gif
-
htmleditor/img/image003.gif.gif
-
htmleditor/img/image004.gif.gif
-
htmleditor/img/image005.gif.gif
-
htmleditor/img/image006.gif.gif
-
htmleditor/img/image007.gif.gif
-
htmleditor/img/image008.gif.gif
-
htmleditor/img/image009.gif.gif
-
htmleditor/img/image010.gif.gif
-
htmleditor/img/image011.gif.gif
-
htmleditor/img/image012.gif.gif
-
htmleditor/img/image013.png.png
-
htmleditor/img/image014.gif.gif
-
htmleditor/img/image015.gif.gif
-
htmleditor/img/image016.jpg.jpg
-
htmleditor/img/image017.jpg.jpg
-
htmleditor/img/image018.gif.gif
-
htmleditor/img/image019.gif.gif
-
htmleditor/img/image020.gif.gif
-
htmleditor/img/image021.gif.gif
-
htmleditor/img/image022.gif.gif
-
htmleditor/img/image023.gif.gif
-
htmleditor/img/image024.gif.gif
-
htmleditor/img/image025.gif.gif
-
htmleditor/img/image026.gif.gif
-
htmleditor/img/image027.gif.gif
-
htmleditor/img/image028.gif.gif
-
htmleditor/img/image029.gif.gif
-
htmleditor/img/image030.gif.gif
-
htmleditor/img/image031.gif.gif
-
htmleditor/img/image032.gif.gif
-
htmleditor/img/image033.gif.gif
-
htmleditor/img/image034.gif.gif
-
htmleditor/img_save.asp.vbs
-
htmleditor/img_upload.html.html .js polyglot
-
htmleditor/palette.html.html .js polyglot
-
htmleditor/palette2.html.html .js polyglot
-
htmleditor/sImgProp.html.html .js polyglot
-
htmleditor/selcolor.html.html .js polyglot
-
htmleditor/sn.css
-
htmleditor/table.html.html
-
htmleditor/tablemod.html.html .js polyglot
-
htmleditor/upload.inc.html .vbs polyglot
-
image/0001.gif.gif
-
image/0004.gif.gif
-
image/back.jpg.jpg
-
image/ck_ly.gif.gif
-
image/dh0001.jpg.jpg
-
image/dh0002.jpg.jpg
-
image/dh0003.jpg.jpg
-
image/dh0004.jpg.jpg
-
image/dh0005.jpg.jpg
-
image/dh0006.jpg.jpg
-
image/dh0007.jpg.jpg
-
image/email.gif.gif
-
image/gl_ly.gif.gif
-
image/head.gif.gif
-
image/head.swf
-
image/home.gif.gif
-
image/oicq.gif.gif
-
image/pic1.gif.gif
-
image/pic10.gif.gif
-
image/pic11.gif.gif
-
image/pic12.gif.gif
-
image/pic13.gif.gif
-
image/pic14.gif.gif
-
image/pic15.gif.gif
-
image/pic16.gif.gif
-
image/pic17.gif.gif
-
image/pic18.gif.gif
-
image/pic19.gif.gif
-
image/pic2.gif.gif
-
image/pic20.gif.gif
-
image/pic3.gif.gif
-
image/pic4.gif.gif
-
image/pic5.gif.gif
-
image/pic6.gif.gif
-
image/pic7.gif.gif
-
image/pic8.gif.gif
-
image/pic9.gif.gif
-
image/qx_ly.gif.gif
-
images/00_index_13.jpg.jpg
-
images/00_index_14.jpg.jpg
-
images/00_index_3.jpg.jpg
-
images/00_index_4.jpg.jpg
-
images/00_index_5.jpg.jpg
-
images/00_index_6.jpg.jpg
-
images/00_index_7.jpg.jpg
-
images/01_index_1.jpg.jpg
-
images/01_index_10.jpg.jpg
-
images/01_index_11.jpg.jpg
-
images/01_index_12.jpg.jpg
-
images/01_index_13.jpg.jpg
-
images/01_index_14.jpg.jpg
-
images/01_index_15.jpg.jpg
-
images/01_index_16.jpg.jpg
-
images/01_index_17.jpg.jpg
-
images/01_index_18.jpg.jpg
-
images/01_index_19.jpg.jpg
-
images/01_index_2.jpg.jpg
-
images/01_index_20.jpg.jpg
-
images/01_index_21.jpg.jpg
-
images/01_index_22.jpg.jpg
-
images/01_index_23.jpg.jpg
-
images/01_index_24.jpg.jpg
-
images/01_index_25.jpg.jpg
-
images/01_index_26.jpg.jpg
-
images/01_index_3.jpg.jpg
-
images/01_index_4.jpg.jpg
-
images/01_index_5.jpg.jpg
-
images/01_index_6.jpg.jpg
-
images/01_index_7.jpg.jpg
-
images/01_index_8.jpg.jpg
-
images/01_index_9.jpg.jpg
-
images/huodong-point.gif.gif
-
images/spacer.gif.gif
-
index.asp.js
-
index1.asp.vbs
-
index4.asp.js
-
jiamong.asp.js
-
job.asp.js
-
lianxi.asp.js
-
reply.asp.vbs
-
upfile/2006327104929.jpg.jpg
-
upfile/200632711178.jpg.jpg
-
upfile/200632813214.gif.gif
-
upfile/200662117313.gif.gif
-
upload.inc.vbs
-
wenhua.asp.js
-
zixun.asp.js