Overview

overview

3

Static

static

3

ajax.ps1

windows7-x64

1

ajax.ps1

windows10-2004-x64

1

api/index.htm

windows7-x64

1

api/index.htm

windows10-2004-x64

1

api/新云软件.url

windows7-x64

1

api/新云软件.url

windows10-2004-x64

1

attach/index.htm

windows7-x64

1

attach/index.htm

windows10-2004-x64

1

cache/index.htm

windows7-x64

1

cache/index.htm

windows10-2004-x64

1

class/archive.ps1

windows7-x64

1

class/archive.ps1

windows10-2004-x64

1

class/array2xml.js

windows7-x64

1

class/array2xml.js

windows10-2004-x64

1

class/cache.js

windows7-x64

1

class/cache.js

windows10-2004-x64

1

class/calendar.ps1

windows7-x64

1

class/calendar.ps1

windows10-2004-x64

1

class/cart.js

windows7-x64

1

class/cart.js

windows10-2004-x64

1

class/chinese.js

windows7-x64

1

class/chinese.js

windows10-2004-x64

1

class/clas...ler.js

windows7-x64

1

class/clas...ler.js

windows10-2004-x64

1

class/config.vbs

windows7-x64

1

class/config.vbs

windows10-2004-x64

1

class/db.mysql.js

windows7-x64

1

class/db.mysql.js

windows10-2004-x64

1

class/email.js

windows7-x64

1

class/email.js

windows10-2004-x64

1

class/excel.ps1

windows7-x64

1

class/excel.ps1

windows10-2004-x64

1

Analysis

  • max time kernel
    148s
  • max time network
    184s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 02:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    class/db.mysql.js

  • Size

    11KB

  • MD5

    de37f16df2b0eba1dc8e589376f7bdbe

  • SHA1

    459196414d4ce8081a98f360ad0a1e629ad99a4b

  • SHA256

    8bff898517f58b8f3ac71cb181cf3f7f6adb0e1e69277656a5c95eca9562064a

  • SHA512

    fdcb0bbd4c036e5cdd8cac69124d9a8ae9e32085ee374feed1e8bb60907834510bd67ffb13fc5cd31716b16807433673bed92a0b187c22eb45f52795443bb95a

  • SSDEEP

    96:VUPUw8bR8ESb65ROOu+vu6+wh6YntivF+9Z9MxlMj3monpL2T51fJ8Fvfvua/b3:mcw8tabQOr+vu6+Do0Dwj2J8FXma/b3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\class\db.mysql.js
    1⤵
      PID:4532

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads