Overview
overview
3Static
static
1wiimsg/#Wi...ta.asp
windows7-x64
3wiimsg/#Wi...ta.asp
windows10-2004-x64
3wiimsg/adm...in.asp
windows7-x64
3wiimsg/adm...in.asp
windows10-2004-x64
3wiimsg/adm...dd.asp
windows7-x64
3wiimsg/adm...dd.asp
windows10-2004-x64
3wiimsg/adm...do.asp
windows7-x64
3wiimsg/adm...do.asp
windows10-2004-x64
3wiimsg/adm...ck.vbs
windows7-x64
1wiimsg/adm...ck.vbs
windows10-2004-x64
1wiimsg/adm...do.asp
windows7-x64
3wiimsg/adm...do.asp
windows10-2004-x64
3wiimsg/adm...PW.asp
windows7-x64
3wiimsg/adm...PW.asp
windows10-2004-x64
3wiimsg/adm...do.asp
windows7-x64
3wiimsg/adm...do.asp
windows10-2004-x64
3wiimsg/adm...it.asp
windows7-x64
3wiimsg/adm...it.asp
windows10-2004-x64
3wiimsg/adm...ue.asp
windows7-x64
3wiimsg/adm...ue.asp
windows10-2004-x64
3wiimsg/adm...do.asp
windows7-x64
3wiimsg/adm...do.asp
windows10-2004-x64
3wiimsg/adm...in.vbs
windows7-x64
1wiimsg/adm...in.vbs
windows10-2004-x64
1wiimsg/adm...or.asp
windows7-x64
3wiimsg/adm...or.asp
windows10-2004-x64
3wiimsg/adm...er.vbs
windows7-x64
1wiimsg/adm...er.vbs
windows10-2004-x64
1wiimsg/admin/info.asp
windows7-x64
3wiimsg/admin/info.asp
windows10-2004-x64
3wiimsg/adm...on.asp
windows7-x64
3wiimsg/adm...on.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
wiimsg/#WiiMsg_data.asp
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
wiimsg/#WiiMsg_data.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
wiimsg/admin/admin.asp
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
wiimsg/admin/admin.asp
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
wiimsg/admin/adminAdd.asp
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
wiimsg/admin/adminAdd.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
wiimsg/admin/adminAdd_do.asp
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
wiimsg/admin/adminAdd_do.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
wiimsg/admin/adminCheck.vbs
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
wiimsg/admin/adminCheck.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
wiimsg/admin/adminDel_do.asp
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
wiimsg/admin/adminDel_do.asp
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
wiimsg/admin/adminPW.asp
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
wiimsg/admin/adminPW.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
wiimsg/admin/adminPW_do.asp
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
wiimsg/admin/adminPW_do.asp
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
wiimsg/admin/adminQuit.asp
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
wiimsg/admin/adminQuit.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
wiimsg/admin/configue.asp
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
wiimsg/admin/configue.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
wiimsg/admin/configue_do.asp
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
wiimsg/admin/configue_do.asp
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
wiimsg/admin/db_conn_admin.vbs
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
wiimsg/admin/db_conn_admin.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
wiimsg/admin/error.asp
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
wiimsg/admin/error.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
wiimsg/admin/getHeader.vbs
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
wiimsg/admin/getHeader.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
wiimsg/admin/info.asp
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
wiimsg/admin/info.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
wiimsg/admin/logon.asp
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
wiimsg/admin/logon.asp
Resource
win10v2004-20231215-en
General
-
Target
188aa84dc2da5b927304e6d28f4b8f2d
-
Size
63KB
-
MD5
188aa84dc2da5b927304e6d28f4b8f2d
-
SHA1
0a22fd0bef73c0c9e303c96aad5ffb1e90028e36
-
SHA256
ba226db9cdbcefc907c624672eb389b3a8dbf90992fc021b6f26138c6688adeb
-
SHA512
064d1a92da44532df3a32cb62897db8fd6b8a6449ebdb3032cbc7cbd8f1c2604469ade26e02c06d9d75bb962c5c79ee6610e31ea91a527c244de6bcd68d73a11
-
SSDEEP
1536:xwzYii9pbL+pQojZEH99+uvItjYN+kuT19N:aUXDb4QD9ijYN+R19N
Malware Config
Signatures
Files
-
188aa84dc2da5b927304e6d28f4b8f2d.rar
-
wiimsg/#WiiMsg_data.asp
-
wiimsg/WiiMsg介绍与安装说明.txt
-
wiimsg/admin/admin.asp.asp .vbs polyglot
-
wiimsg/admin/admin.css
-
wiimsg/admin/adminAdd.asp.asp
-
wiimsg/admin/adminAdd_do.asp.asp .vbs polyglot
-
wiimsg/admin/adminCheck.asp.vbs
-
wiimsg/admin/adminDel_do.asp.asp
-
wiimsg/admin/adminPW.asp.asp
-
wiimsg/admin/adminPW_do.asp.asp .vbs polyglot
-
wiimsg/admin/adminQuit.asp
-
wiimsg/admin/configue.asp.asp .vbs polyglot
-
wiimsg/admin/configue_do.asp.asp .vbs polyglot
-
wiimsg/admin/db_conn_admin.asp.vbs
-
wiimsg/admin/error.asp.asp
-
wiimsg/admin/getHeader.asp.vbs
-
wiimsg/admin/info.asp.asp
-
wiimsg/admin/info.wml.xml
-
wiimsg/admin/logon.asp.asp
-
wiimsg/admin/logon_do.asp.asp .vbs polyglot
-
wiimsg/admin/main.asp.asp
-
wiimsg/admin/md5.asp.vbs
-
wiimsg/admin/message.asp.asp .vbs polyglot
-
wiimsg/admin/messageMove.asp.asp
-
wiimsg/admin/messageMove_do.asp.asp
-
wiimsg/admin/message_del.asp.asp .vbs polyglot
-
wiimsg/admin/message_reply.asp.asp .vbs polyglot
-
wiimsg/admin/picUp.asp.asp
-
wiimsg/admin/picUp_do.asp.asp .vbs polyglot
-
wiimsg/admin/upload.asp.vbs
-
wiimsg/codeImg.asp.vbs
-
wiimsg/db_conn.asp.vbs
-
wiimsg/error.asp.asp
-
wiimsg/func.asp.vbs
-
wiimsg/getHeader.asp.vbs
-
wiimsg/header.asp
-
wiimsg/images/1.gif.gif
-
wiimsg/images/Thumbs.db
-
wiimsg/images/b0.gif.gif
-
wiimsg/images/b1.gif.gif
-
wiimsg/images/b2.gif.gif
-
wiimsg/images/body.Fix
-
wiimsg/images/head.Fix
-
wiimsg/images/li.gif.gif
-
wiimsg/images/li1.gif.gif
-
wiimsg/images/li2.gif.gif
-
wiimsg/images/logo.jpg.jpg
-
wiimsg/images/next.gif.gif
-
wiimsg/images/prev.gif.gif
-
wiimsg/images/top.gif.gif
-
wiimsg/images/write.gif.gif
-
wiimsg/index.asp.asp .vbs polyglot
-
wiimsg/info.asp.asp
-
wiimsg/message.asp.asp
-
wiimsg/message_do.asp.asp .vbs polyglot
-
wiimsg/style.css
-
wiimsg/wmlInfo.wml.xml
-
wiimsg/wordwrap.xml.xml .js polyglot
-
wiimsg/新云软件.url.url