Overview
overview
3Static
static
1doodle/2.asp
windows7-x64
3doodle/2.asp
windows10-2004-x64
3doodle/adm...fo.vbs
windows7-x64
1doodle/adm...fo.vbs
windows10-2004-x64
1doodle/adm...nfo.js
windows7-x64
1doodle/adm...nfo.js
windows10-2004-x64
1doodle/admin/reg.vbs
windows7-x64
1doodle/admin/reg.vbs
windows10-2004-x64
1doodle/admin/reg.js
windows7-x64
1doodle/admin/reg.js
windows10-2004-x64
1doodle/adm...e.html
windows7-x64
1doodle/adm...e.html
windows10-2004-x64
1doodle/common/db.vbs
windows7-x64
1doodle/common/db.vbs
windows10-2004-x64
1doodle/common/db2.vbs
windows7-x64
1doodle/common/db2.vbs
windows10-2004-x64
1doodle/com...nc.vbs
windows7-x64
1doodle/com...nc.vbs
windows10-2004-x64
1doodle/com...fo.vbs
windows7-x64
1doodle/com...fo.vbs
windows10-2004-x64
1doodle/common/md5.vbs
windows7-x64
1doodle/common/md5.vbs
windows10-2004-x64
1doodle/common/reg.vbs
windows7-x64
1doodle/common/reg.vbs
windows10-2004-x64
1doodle/com...de.vbs
windows7-x64
1doodle/com...de.vbs
windows10-2004-x64
1doodle/conn_dll.vbs
windows7-x64
1doodle/conn_dll.vbs
windows10-2004-x64
1doodle/del.vbs
windows7-x64
1doodle/del.vbs
windows10-2004-x64
1doodle/footer.asp
windows7-x64
3doodle/footer.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
doodle/2.asp
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
doodle/2.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
doodle/admin/guestinfo.vbs
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
doodle/admin/guestinfo.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
doodle/admin/guestinfo.js
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
doodle/admin/guestinfo.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
doodle/admin/reg.vbs
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
doodle/admin/reg.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
doodle/admin/reg.js
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
doodle/admin/reg.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
doodle/admin/style.html
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
doodle/admin/style.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
doodle/common/db.vbs
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
doodle/common/db.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
doodle/common/db2.vbs
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
doodle/common/db2.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
doodle/common/func.vbs
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
doodle/common/func.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
doodle/common/guestinfo.vbs
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
doodle/common/guestinfo.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
doodle/common/md5.vbs
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
doodle/common/md5.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
doodle/common/reg.vbs
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
doodle/common/reg.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
doodle/common/ubbcode.vbs
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
doodle/common/ubbcode.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
doodle/conn_dll.vbs
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
doodle/conn_dll.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
doodle/del.vbs
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
doodle/del.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
doodle/footer.asp
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
doodle/footer.asp
Resource
win10v2004-20231215-en
General
-
Target
28dbef23a056420ab4fedcb4b542bba8
-
Size
159KB
-
MD5
28dbef23a056420ab4fedcb4b542bba8
-
SHA1
eaf87792a6b67cc51a83feba54c8c6fab5b55468
-
SHA256
aa0b8c12ac22e884beea1948df0188c2d2a0d02bd3a837ac2edd904ba179a15f
-
SHA512
69c25a87a3b85b20bb6870c5a3586f7709793d204ef4c39c11923aa9563fa52e90fd6b12f8ac93dfc3457a5e3e9a4c32adbe47bae94b2e8121b2fe4a311c47f7
-
SSDEEP
3072:EDaZPx7UvlmGTZZ4CqusdrFobyKOldR0aAH+dZpm77RkOSX7:EeZWlmrCq6uVDRve+dDmCZL
Malware Config
Signatures
Files
-
28dbef23a056420ab4fedcb4b542bba8.rar
-
doodle/2.asp.asp .js polyglot
-
doodle/admin/guestinfo.asp.vbs
-
doodle/admin/guestinfo.js
-
doodle/admin/reg.asp.vbs
-
doodle/admin/reg.js
-
doodle/admin/style.css.html
-
doodle/color.ini
-
doodle/common/db.asp.vbs
-
doodle/common/db2.asp.vbs
-
doodle/common/func.asp.vbs
-
doodle/common/guestinfo.asp.vbs
-
doodle/common/md5.asp.vbs
-
doodle/common/reg.asp.vbs
-
doodle/common/ubbcode.asp.vbs
-
doodle/conn_dll.asp.vbs
-
doodle/data/data.mdb
-
doodle/del.asp.vbs
-
doodle/footer.asp
-
doodle/getpic/poo2005123110321.pch.gz
-
poo2005123110321.pch
-
doodle/getpic/poo2005123110321.png.png
-
doodle/getpic/poo2005123112582.pch.gz
-
poo2005123112582.pch
-
doodle/getpic/poo2005123112582.png.png
-
doodle/getpic/poo2005123115253.pch.gz
-
poo2005123115253.pch
-
doodle/getpic/poo2005123115253.png.png
-
doodle/getpic/poo2005123115334.pch.gz
-
poo2005123115334.pch
-
doodle/getpic/poo2005123115334.png.png
-
doodle/getpic/poo2005123117505.pch.gz
-
poo2005123117505.pch
-
doodle/getpic/poo2005123117505.png.png
-
doodle/getpic/poo2005123119505.pch.gz
-
poo2005123119505.pch
-
doodle/getpic/poo2005123119505.png.png
-
doodle/getpic/poo2005123127355.pch.gz
-
poo2005123127355.pch
-
doodle/getpic/poo2005123127355.png.png
-
doodle/getpic/poo2005123131465.pch.gz
-
poo2005123131465.pch
-
doodle/getpic/poo2005123131465.png.png
-
doodle/getpic/poo2005123132455.pch.gz
-
doodle/getpic/poo2005123132455.png.png
-
doodle/getpic/poo2005123147285.pch.gz
-
doodle/getpic/poo2005123147285.png.png
-
doodle/getpic/poo2005123158325.pch.gz
-
doodle/getpic/poo2005123158325.png.png
-
doodle/getpic/poo200512322205.pch.gz
-
doodle/getpic/poo200512322205.png.png
-
doodle/getpic/poo2005123227515.pch.gz
-
doodle/getpic/poo2005123227515.png.png
-
doodle/getpic/poo2005123325185.pch.gz
-
doodle/getpic/poo2005123325185.png.png
-
doodle/getpic/poo20051233615.pch.gz
-
doodle/getpic/poo20051233615.png.png
-
doodle/getpic/poo2005123440295.pch.gz
-
doodle/getpic/poo2005123440295.png.png
-
doodle/getpic/poo2005123441395.pch.gz
-
doodle/getpic/poo2005123441395.png.png
-
doodle/getpic/poo20055301132556.pch.gz
-
doodle/getpic/poo20055301132556.png.png
-
doodle/getpic/poo2005620125546.pch.gz
-
doodle/getpic/poo2005620125546.png.png
-
doodle/head.asp
-
doodle/header.asp.vbs
-
doodle/images/body_bg.gif.gif
-
doodle/images/footer_bg.gif.gif
-
doodle/images/menu_bg.gif.gif
-
doodle/images/menu_bottom.gif.gif
-
doodle/images/menu_left.gif.gif
-
doodle/images/menu_right.gif.gif
-
doodle/images/top1.gif.gif
-
doodle/images/top2.gif.gif
-
doodle/index.asp.vbs
-
doodle/logout.asp
-
doodle/manage.asp.vbs
-
doodle/msg.asp.vbs
-
doodle/p.asp.asp .vbs polyglot
-
doodle/paintchat/MgLine.class
-
doodle/paintchat/paint.class
-
doodle/poobbs.asp.js
-
doodle/re.asp.vbs
-
doodle/reg.asp.vbs
-
doodle/regedit.asp.vbs
-
doodle/reglist.asp.vbs
-
doodle/savepb.asp.vbs
-
doodle/skin/default/forum_old.gif.gif
-
doodle/skin/default/head/1.gif
-
doodle/skin/default/head/10.gif.gif
-
doodle/skin/default/head/11.gif
-
doodle/skin/default/head/12.gif.gif
-
doodle/skin/default/head/13.gif
-
doodle/skin/default/head/14.gif.gif
-
doodle/skin/default/head/15.gif
-
doodle/skin/default/head/16.gif.gif
-
doodle/skin/default/head/17.gif
-
doodle/skin/default/head/18.gif.gif
-
doodle/skin/default/head/19.gif
-
doodle/skin/default/head/2.gif.gif
-
doodle/skin/default/head/20.gif.gif
-
doodle/skin/default/head/3.gif
-
doodle/skin/default/head/4.gif.gif
-
doodle/skin/default/head/5.gif
-
doodle/skin/default/head/6.gif.gif
-
doodle/skin/default/head/7.gif
-
doodle/skin/default/head/8.gif.gif
-
doodle/skin/default/head/9.gif
-
doodle/sort.asp.vbs
-
doodle/style/default.css
-
doodle/下载说明.htm.html .js polyglot
-
doodle/留言本说明.txt
-
doodle/非常世纪资源网.url.url