Overview
overview
3Static
static
1LIUYAN/adm...ist.js
windows7-x64
1LIUYAN/adm...ist.js
windows10-2004-x64
1LIUYAN/adm...rd.vbs
windows7-x64
1LIUYAN/adm...rd.vbs
windows10-2004-x64
1LIUYAN/adm...es.vbs
windows7-x64
1LIUYAN/adm...es.vbs
windows10-2004-x64
1LIUYAN/adm...ig.vbs
windows7-x64
1LIUYAN/adm...ig.vbs
windows10-2004-x64
1LIUYAN/adm...dex.js
windows7-x64
1LIUYAN/adm...dex.js
windows10-2004-x64
1LIUYAN/adm...it.vbs
windows7-x64
1LIUYAN/adm...it.vbs
windows10-2004-x64
1LIUYAN/adm...ve.vbs
windows7-x64
1LIUYAN/adm...ve.vbs
windows10-2004-x64
1LIUYAN/adm...dd.asp
windows7-x64
3LIUYAN/adm...dd.asp
windows10-2004-x64
3LIUYAN/adm...st.vbs
windows7-x64
1LIUYAN/adm...st.vbs
windows10-2004-x64
1LIUYAN/adm...t.html
windows7-x64
1LIUYAN/adm...t.html
windows10-2004-x64
1LIUYAN/adm...p.html
windows7-x64
1LIUYAN/adm...p.html
windows10-2004-x64
1LIUYAN/adm..._x.vbs
windows7-x64
1LIUYAN/adm..._x.vbs
windows10-2004-x64
1LIUYAN/adm...st.vbs
windows7-x64
1LIUYAN/adm...st.vbs
windows10-2004-x64
1LIUYAN/admin/arr.asp
windows7-x64
3LIUYAN/admin/arr.asp
windows10-2004-x64
3LIUYAN/adm...in.vbs
windows7-x64
1LIUYAN/adm...in.vbs
windows10-2004-x64
1LIUYAN/adm...min.js
windows7-x64
1LIUYAN/adm...min.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
LIUYAN/admin/Admin_KeyWordList.js
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
LIUYAN/admin/Admin_KeyWordList.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
LIUYAN/admin/Admin_Keyword.vbs
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
LIUYAN/admin/Admin_Keyword.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
LIUYAN/admin/Admins_UploadFiles.vbs
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
LIUYAN/admin/Admins_UploadFiles.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
LIUYAN/admin/admin_config.vbs
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
LIUYAN/admin/admin_config.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
LIUYAN/admin/admin_index.js
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
LIUYAN/admin/admin_index.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
LIUYAN/admin/admin_manage_edit.vbs
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
LIUYAN/admin/admin_manage_edit.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
LIUYAN/admin/admin_manage_save.vbs
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
LIUYAN/admin/admin_manage_save.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
LIUYAN/admin/admin_mangage_add.asp
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
LIUYAN/admin/admin_mangage_add.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
LIUYAN/admin/admin_mangage_list.vbs
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
LIUYAN/admin/admin_mangage_list.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral19
Sample
LIUYAN/admin/admin_right.html
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
LIUYAN/admin/admin_right.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
LIUYAN/admin/admin_top.html
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
LIUYAN/admin/admin_top.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
LIUYAN/admin/admin_user_x.vbs
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
LIUYAN/admin/admin_user_x.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
LIUYAN/admin/admin_wuser_list.vbs
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
LIUYAN/admin/admin_wuser_list.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
LIUYAN/admin/arr.asp
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
LIUYAN/admin/arr.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
LIUYAN/admin/checklogin.vbs
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
LIUYAN/admin/checklogin.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
LIUYAN/admin/images/admin.js
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
LIUYAN/admin/images/admin.js
Resource
win10v2004-20231215-en
General
-
Target
2b4b4f83202a874a1438aadebbcc6cb6
-
Size
492KB
-
MD5
2b4b4f83202a874a1438aadebbcc6cb6
-
SHA1
6fc5cdad08b2dea9ba67c466806ae9ec5d32e47c
-
SHA256
42a4c15d8c77b2582b7bd2df35dcfcdc7f7a26a6ca5f3058a8149e8497f896ca
-
SHA512
414be360460c850907d918ec1358c883811a5b1a7a194293e77ea2d41b16d1b6963748caecec1cec7997dc65751d25ffbccf1e076fe99ce52ba2db279c76b439
-
SSDEEP
12288:Pke0ynDkWETUvowT8GbWXS2Uei37CdhTKWAw3Tt0PxFw:sxahETEo2FMi37CddK9Bw
Malware Config
Signatures
Files
-
2b4b4f83202a874a1438aadebbcc6cb6.rar
-
LIUYAN/admin/Admin_KeyWordList.asp.js
-
LIUYAN/admin/Admin_Keyword.asp.vbs
-
LIUYAN/admin/Admins_UploadFiles.asp.vbs
-
LIUYAN/admin/admin_config.asp.vbs
-
LIUYAN/admin/admin_index.asp.js
-
LIUYAN/admin/admin_left.asp.html .js polyglot
-
LIUYAN/admin/admin_manage_edit.asp.vbs
-
LIUYAN/admin/admin_manage_save.asp.vbs
-
LIUYAN/admin/admin_mangage_add.asp
-
LIUYAN/admin/admin_mangage_list.asp.vbs
-
LIUYAN/admin/admin_right.asp.html
-
LIUYAN/admin/admin_top.asp.html
-
LIUYAN/admin/admin_user_x.asp.vbs
-
LIUYAN/admin/admin_wuser_list.asp.vbs
-
LIUYAN/admin/arr.asp
-
LIUYAN/admin/checklogin.asp.vbs
-
LIUYAN/admin/images/FileIcon/DefaultPreview.gif.gif
-
LIUYAN/admin/images/FileIcon/asp.gif.gif
-
LIUYAN/admin/images/FileIcon/doc.gif.gif
-
LIUYAN/admin/images/FileIcon/exe.gif.gif
-
LIUYAN/admin/images/FileIcon/flash.gif.gif
-
LIUYAN/admin/images/FileIcon/folder.gif.gif
-
LIUYAN/admin/images/FileIcon/gif.gif.gif
-
LIUYAN/admin/images/FileIcon/html.gif.gif
-
LIUYAN/admin/images/FileIcon/jpg.gif.gif
-
LIUYAN/admin/images/FileIcon/mail.gif
-
LIUYAN/admin/images/FileIcon/notype.gif
-
LIUYAN/admin/images/FileIcon/perl.gif.gif
-
LIUYAN/admin/images/FileIcon/script.gif
-
LIUYAN/admin/images/FileIcon/txt.gif.gif
-
LIUYAN/admin/images/FileIcon/unknown.gif.gif
-
LIUYAN/admin/images/FileIcon/vbs.gif
-
LIUYAN/admin/images/FileIcon/xml.gif.gif
-
LIUYAN/admin/images/FileIcon/zip.gif.gif
-
LIUYAN/admin/images/Head.Fix
-
LIUYAN/admin/images/IncludeInfo2.gif.gif
-
LIUYAN/admin/images/Rect.gif.gif
-
LIUYAN/admin/images/System/Login_bg.png.png
-
LIUYAN/admin/images/System/asp.gif.gif
-
LIUYAN/admin/images/System/avi.gif.gif
-
LIUYAN/admin/images/System/bat.gif.gif
-
LIUYAN/admin/images/System/bmp.gif.gif
-
LIUYAN/admin/images/System/code.gif.gif
-
LIUYAN/admin/images/System/css.gif.gif
-
LIUYAN/admin/images/System/dll.gif.gif
-
LIUYAN/admin/images/System/doc.gif.gif
-
LIUYAN/admin/images/System/exe.gif.gif
-
LIUYAN/admin/images/System/folder.gif.gif
-
LIUYAN/admin/images/System/folderback.gif.gif
-
LIUYAN/admin/images/System/gif.gif.gif
-
LIUYAN/admin/images/System/htm.gif.gif
-
LIUYAN/admin/images/System/jpg.gif.gif
-
LIUYAN/admin/images/System/js.gif.gif
-
LIUYAN/admin/images/System/mdb.gif.gif
-
LIUYAN/admin/images/System/media.gif.gif
-
LIUYAN/admin/images/System/mid.gif.gif
-
LIUYAN/admin/images/System/pdf.gif.gif
-
LIUYAN/admin/images/System/png.gif.gif
-
LIUYAN/admin/images/System/ppt.gif.gif
-
LIUYAN/admin/images/System/rar.gif.gif
-
LIUYAN/admin/images/System/reg.gif.gif
-
LIUYAN/admin/images/System/reload.gif.gif
-
LIUYAN/admin/images/System/swf.gif.gif
-
LIUYAN/admin/images/System/txt.gif.gif
-
LIUYAN/admin/images/System/unknow.gif.gif
-
LIUYAN/admin/images/System/wav.gif.gif
-
LIUYAN/admin/images/System/xls.gif.gif
-
LIUYAN/admin/images/System/xml.gif.gif
-
LIUYAN/admin/images/System/zip.gif.gif
-
LIUYAN/admin/images/admin.css
-
LIUYAN/admin/images/admin.js.js
-
LIUYAN/admin/images/admin/Login_bg.png.png
-
LIUYAN/admin/images/admin/admin_top_left.png.png
-
LIUYAN/admin/images/admin/admin_top_right.png.png
-
LIUYAN/admin/images/admin/left_conten.png.png
-
LIUYAN/admin/images/admin/left_end.png.png
-
LIUYAN/admin/images/admin/left_top.png.png
-
LIUYAN/admin/images/admin/main_content_leftbg.png.png
-
LIUYAN/admin/images/admin/main_content_rightbg.png.png
-
LIUYAN/admin/images/admin/main_content_topbg.png.png
-
LIUYAN/admin/images/admin/main_end_left.png.png
-
LIUYAN/admin/images/admin/main_end_right.png.png
-
LIUYAN/admin/images/admin/style.css
-
LIUYAN/admin/images/admin/style_edit.css
-
LIUYAN/admin/images/admin_top_close.gif.gif
-
LIUYAN/admin/images/admin_top_icon_1.gif.gif
-
LIUYAN/admin/images/admin_top_icon_5.gif.gif
-
LIUYAN/admin/images/admin_top_open.gif.gif
-
LIUYAN/admin/images/bar.gif.gif
-
LIUYAN/admin/images/bar2.gif.gif
-
LIUYAN/admin/images/bg.gif.gif
-
LIUYAN/admin/images/body1.fix
-
LIUYAN/admin/images/body10.fix
-
LIUYAN/admin/images/body11.fix
-
LIUYAN/admin/images/body12.fix
-
LIUYAN/admin/images/body13.fix
-
LIUYAN/admin/images/body14.fix
-
LIUYAN/admin/images/body15.fix
-
LIUYAN/admin/images/body16.fix
-
LIUYAN/admin/images/body17.fix
-
LIUYAN/admin/images/body18.fix
-
LIUYAN/admin/images/body2.fix
-
LIUYAN/admin/images/body3.fix
-
LIUYAN/admin/images/body4.fix
-
LIUYAN/admin/images/body5.fix
-
LIUYAN/admin/images/body6.fix
-
LIUYAN/admin/images/body7.fix
-
LIUYAN/admin/images/body8.fix
-
LIUYAN/admin/images/body9.fix
-
LIUYAN/admin/images/bullet.gif.gif
-
LIUYAN/admin/images/cod2.gif.gif
-
LIUYAN/admin/images/code.gif.gif
-
LIUYAN/admin/images/down_1.gif.gif
-
LIUYAN/admin/images/down_2.gif.gif
-
LIUYAN/admin/images/edit.gif.gif
-
LIUYAN/admin/images/folder-up.gif.gif
-
LIUYAN/admin/images/folderclosed.gif.gif
-
LIUYAN/admin/images/ico_bottom.GIF.gif
-
LIUYAN/admin/images/ico_help.gif.gif
-
LIUYAN/admin/images/ico_top.gif.gif
-
LIUYAN/admin/images/isfocus.gif.gif
-
LIUYAN/admin/images/isgood.gif.gif
-
LIUYAN/admin/images/ispic.gif.gif
-
LIUYAN/admin/images/istitpic.gif.gif
-
LIUYAN/admin/images/istop.gif.gif
-
LIUYAN/admin/images/liuyan.JS
-
LIUYAN/admin/images/menu.js.js
-
LIUYAN/admin/images/minus.gif.gif
-
LIUYAN/admin/images/nopic.gif.gif
-
LIUYAN/admin/images/plus.gif.gif
-
LIUYAN/admin/images/style.css
-
LIUYAN/admin/images/topbg.gif.gif
-
LIUYAN/admin/images/tree_empty.gif.gif
-
LIUYAN/admin/images/tree_folder0.gif.gif
-
LIUYAN/admin/images/tree_folder1.gif.gif
-
LIUYAN/admin/images/tree_folder3.gif.gif
-
LIUYAN/admin/images/tree_folder4.gif.gif
-
LIUYAN/admin/images/tree_line1.gif.gif
-
LIUYAN/admin/images/tree_line2.gif.gif
-
LIUYAN/admin/images/tree_line3.GIF.gif
-
LIUYAN/admin/images/tree_line4.gif.gif
-
LIUYAN/admin/images/tree_minus.gif.gif
-
LIUYAN/admin/images/tree_plus.gif.gif
-
LIUYAN/admin/images/up_1.gif.gif
-
LIUYAN/admin/images/up_2.gif.gif
-
LIUYAN/admin/inc/Check.js.js
-
LIUYAN/admin/inc/CheckCode.asp.vbs
-
LIUYAN/admin/inc/Config.asp
-
LIUYAN/admin/inc/Func_Page.asp.vbs
-
LIUYAN/admin/inc/fanyi.asp.html .js polyglot
-
LIUYAN/admin/inc/function.asp.vbs
-
LIUYAN/admin/inc/funews.asp.vbs
-
LIUYAN/admin/inc/html.js.js
-
LIUYAN/admin/inc/md5.asp.vbs
-
LIUYAN/admin/inc/pcasunzip.js.js
-
LIUYAN/admin/inc/time.asp.html .js polyglot
-
LIUYAN/admin/inc/user.js
-
LIUYAN/admin/inc/yanchar.js.js
-
LIUYAN/admin/index.asp
-
LIUYAN/admin/liuyan.asp.vbs
-
LIUYAN/admin/liuyan_edit.asp.vbs
-
LIUYAN/admin/liuyan_list.asp.vbs
-
LIUYAN/admin/liuyan_sh.asp.vbs
-
LIUYAN/admin/login.asp.vbs
-
LIUYAN/admin/loginout.asp
-
LIUYAN/bottom.asp
-
LIUYAN/conn.asp.vbs
-
LIUYAN/const.asp.vbs
-
LIUYAN/data@/!!!QQ83152719.mdb
-
LIUYAN/images/about_left.gif.gif
-
LIUYAN/images/about_o_j.gif.gif
-
LIUYAN/images/about_over_j.gif.gif
-
LIUYAN/images/about_xian.gif.gif
-
LIUYAN/images/bg.GIF
-
LIUYAN/images/css.css
-
LIUYAN/images/dbh_bgbom.jpg.jpg
-
LIUYAN/images/flash_bg.jpg.jpg
-
LIUYAN/images/gexia.gif.gif
-
LIUYAN/images/heidian.jpg.jpg
-
LIUYAN/images/index_left.jpg.jpg
-
LIUYAN/images/landian.jpg.jpg
-
LIUYAN/images/left1_fk.jpg.jpg
-
LIUYAN/images/menu_bg.gif.gif
-
LIUYAN/images/nav_over_bg.gif.gif
-
LIUYAN/images/news_left_bom.jpg.jpg
-
LIUYAN/images/news_left_top.jpg.jpg
-
LIUYAN/images/news_right_t.jpg.jpg
-
LIUYAN/images/news_sanjiao.gif.gif
-
LIUYAN/images/news_xiahua.gif.gif
-
LIUYAN/images/r_c.jpg.jpg
-
LIUYAN/images/r_l.jpg.jpg
-
LIUYAN/images/right1_bg.gif.gif
-
LIUYAN/images/shi_top.gif.gif
-
LIUYAN/images/spacer.gif.gif
-
LIUYAN/images/top.swf
-
LIUYAN/images/top_bg.gif.gif
-
LIUYAN/images/xiahua312.gif.gif
-
LIUYAN/images/xiaxian.jpg.jpg
-
LIUYAN/include/CheckList.asp.vbs
-
LIUYAN/include/Cls_PageCute.asp.vbs
-
LIUYAN/include/Cls_main.asp.vbs
-
LIUYAN/include/Func_Page.asp.vbs
-
LIUYAN/include/HtmlModify.asp
-
LIUYAN/include/_notes/dwsync.xml.xml
-
LIUYAN/include/cls_Public.asp.vbs
-
LIUYAN/index.asp.html
-
LIUYAN/js/html.js.js
-
LIUYAN/js/jquery-1.3.2-vsdoc2.js.js
-
LIUYAN/message.asp.html .vbs polyglot
-
LIUYAN/top.asp
-
LIUYAN/www.cfyy120.net_save.asp.vbs
-
LIUYAN/新云软件.url.url
-
LIUYAN/程序演示.url.url
-
LIUYAN/程序说明.txt