Overview

overview

3

Static

static

1

100/index.asp

windows7-x64

3

100/index.asp

windows10-2004-x64

3

100/新云软件.url

windows7-x64

1

100/新云软件.url

windows10-2004-x64

1

DataBase/xinhua.asp

windows7-x64

3

DataBase/xinhua.asp

windows10-2004-x64

3

Include/Function.vbs

windows7-x64

1

Include/Function.vbs

windows10-2004-x64

1

Include/SQL.vbs

windows7-x64

1

Include/SQL.vbs

windows10-2004-x64

1

Include/as...te.vbs

windows7-x64

1

Include/as...te.vbs

windows10-2004-x64

1

Include/conn.vbs

windows7-x64

1

Include/conn.vbs

windows10-2004-x64

1

Include/vars.asp

windows7-x64

3

Include/vars.asp

windows10-2004-x64

3

Include/vars_bak.asp

windows7-x64

3

Include/vars_bak.asp

windows10-2004-x64

3

Manage/About_Add.vbs

windows7-x64

1

Manage/About_Add.vbs

windows10-2004-x64

1

Manage/About_Del.vbs

windows7-x64

1

Manage/About_Del.vbs

windows10-2004-x64

1

Manage/About_Edit.vbs

windows7-x64

1

Manage/About_Edit.vbs

windows10-2004-x64

1

Manage/Abo...ge.vbs

windows7-x64

1

Manage/Abo...ge.vbs

windows10-2004-x64

1

Manage/Adm...on.vbs

windows7-x64

1

Manage/Adm...on.vbs

windows10-2004-x64

1

Manage/Admin_Add.vbs

windows7-x64

1

Manage/Admin_Add.vbs

windows10-2004-x64

1

Manage/Admin_Conn.vbs

windows7-x64

1

Manage/Admin_Conn.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 02:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Manage/Admin_Add.vbs

  • Size

    2KB

  • MD5

    a694621b2c7eadae6dc32a5ab5462a36

  • SHA1

    602b3a35ddcbd457ed571c17b5bc67cd722dad73

  • SHA256

    63ca6860aee1d2941e939b262488daa2ca0629747c36981276da499c56940b19

  • SHA512

    c384b2170f73d49b40b1d999294a6820e3c75ff80c37878f6fdd9294a398ecedcc13ea6a2e07c3fb6505942b9146d5be07e368be0d5b11360df832b70e33d24b

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Manage\Admin_Add.vbs"
    1⤵
      PID:1948

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads