Overview

overview

3

Static

static

1

100/index.asp

windows7-x64

3

100/index.asp

windows10-2004-x64

3

100/新云软件.url

windows7-x64

1

100/新云软件.url

windows10-2004-x64

1

DataBase/xinhua.asp

windows7-x64

3

DataBase/xinhua.asp

windows10-2004-x64

3

Include/Function.vbs

windows7-x64

1

Include/Function.vbs

windows10-2004-x64

1

Include/SQL.vbs

windows7-x64

1

Include/SQL.vbs

windows10-2004-x64

1

Include/as...te.vbs

windows7-x64

1

Include/as...te.vbs

windows10-2004-x64

1

Include/conn.vbs

windows7-x64

1

Include/conn.vbs

windows10-2004-x64

1

Include/vars.asp

windows7-x64

3

Include/vars.asp

windows10-2004-x64

3

Include/vars_bak.asp

windows7-x64

3

Include/vars_bak.asp

windows10-2004-x64

3

Manage/About_Add.vbs

windows7-x64

1

Manage/About_Add.vbs

windows10-2004-x64

1

Manage/About_Del.vbs

windows7-x64

1

Manage/About_Del.vbs

windows10-2004-x64

1

Manage/About_Edit.vbs

windows7-x64

1

Manage/About_Edit.vbs

windows10-2004-x64

1

Manage/Abo...ge.vbs

windows7-x64

1

Manage/Abo...ge.vbs

windows10-2004-x64

1

Manage/Adm...on.vbs

windows7-x64

1

Manage/Adm...on.vbs

windows10-2004-x64

1

Manage/Admin_Add.vbs

windows7-x64

1

Manage/Admin_Add.vbs

windows10-2004-x64

1

Manage/Admin_Conn.vbs

windows7-x64

1

Manage/Admin_Conn.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    143s
  • max time network
    218s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2023, 02:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Include/vars_bak.asp

  • Size

    263B

  • MD5

    ccdbd043242b6f5905d0c57db189465e

  • SHA1

    ee6405d40d12d8fe6908285ef60c14a661358d1b

  • SHA256

    17be3c339ca6490d35105d864fc78ec19217b0222370f7ab335ce6ee4d488375

  • SHA512

    012d99d7b1b7a48f34ace0dd74479df700327b12785a403b4f205bc33be05b709db7e90596ea07dc35364d86a9c41cc58e0a5b83f6522e870bb4ace6dae4002a

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Include\vars_bak.asp
    1⤵
      PID:3680

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads