Overview
overview
3Static
static
1index.asp
windows7-x64
3index.asp
windows10-2004-x64
3link/Keyboard.js
windows7-x64
1link/Keyboard.js
windows10-2004-x64
1link/SqlIn.vbs
windows7-x64
1link/SqlIn.vbs
windows10-2004-x64
1link/TT_GetCode.vbs
windows7-x64
1link/TT_GetCode.vbs
windows10-2004-x64
1link/ad_info.asp
windows7-x64
3link/ad_info.asp
windows10-2004-x64
3link/addlink.vbs
windows7-x64
1link/addlink.vbs
windows10-2004-x64
1link/admin.vbs
windows7-x64
1link/admin.vbs
windows10-2004-x64
1link/admin...in.vbs
windows7-x64
1link/admin...in.vbs
windows10-2004-x64
1link/admin...dd.vbs
windows7-x64
1link/admin...dd.vbs
windows10-2004-x64
1link/admin...hk.vbs
windows7-x64
1link/admin...hk.vbs
windows10-2004-x64
1link/admin...ink.js
windows7-x64
1link/admin...ink.js
windows10-2004-x64
1link/admin...ck.vbs
windows7-x64
1link/admin...ck.vbs
windows10-2004-x64
1link/admin...dd.vbs
windows7-x64
1link/admin...dd.vbs
windows10-2004-x64
1link/admin...ve.vbs
windows7-x64
1link/admin...ve.vbs
windows10-2004-x64
1link/admin...te.vbs
windows7-x64
1link/admin...te.vbs
windows10-2004-x64
1link/admin...ng.vbs
windows7-x64
1link/admin...ng.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
index.asp
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
index.asp
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
link/Keyboard.js
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
link/Keyboard.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
link/SqlIn.vbs
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
link/SqlIn.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
link/TT_GetCode.vbs
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
link/TT_GetCode.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
link/ad_info.asp
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
link/ad_info.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
link/addlink.vbs
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
link/addlink.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
link/admin.vbs
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
link/admin.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
link/admin/Admin_Skin.vbs
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
link/admin/Admin_Skin.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
link/admin/admin_add.vbs
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
link/admin/admin_add.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
link/admin/admin_addchk.vbs
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
link/admin/admin_addchk.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
link/admin/admin_addlink.js
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
link/admin/admin_addlink.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
link/admin/admin_check.vbs
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
link/admin/admin_check.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
link/admin/admin_check_add.vbs
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
link/admin/admin_check_add.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
link/admin/admin_check_addsave.vbs
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
link/admin/admin_check_addsave.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
link/admin/admin_check_delete.vbs
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
link/admin/admin_check_delete.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
link/admin/admin_check_diaoyong.vbs
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
link/admin/admin_check_diaoyong.vbs
Resource
win10v2004-20231222-en
General
-
Target
39c2aba984886e5c2c5d86b76da1b001
-
Size
248KB
-
MD5
39c2aba984886e5c2c5d86b76da1b001
-
SHA1
d3881ee675e579f4223a7f5afad3813a9bcfd026
-
SHA256
1713a650a941ed51a0c7881d61160d4ffc2e7c6506bb1ea13ca29d2f21c485d1
-
SHA512
0762968b9eed8674b94052ca59d8f97969032a97c252ffb0033b2bd5acf5b0bac4bbdf7a65825c45aeea62cb3dbce7f1025a69fbc1ff83b049f2b21640d13af2
-
SSDEEP
6144:IFQ9QicVozMfqKLsYkR2bkqXGTdp8IK4Y/eMA:vQ5VozMyxukNTdfK4F
Malware Config
Signatures
Files
-
39c2aba984886e5c2c5d86b76da1b001.rar
-
index.asp
-
link/Keyboard.js.js
-
link/SqlIn.Asp.vbs
-
link/TT_GetCode.asp.vbs
-
link/ad_info.asp
-
link/addlink.asp.vbs
-
link/admin.asp.vbs
-
link/admin/Admin_Skin.asp.vbs
-
link/admin/admin_add.asp.vbs
-
link/admin/admin_addchk.asp.vbs
-
link/admin/admin_addlink.asp.js
-
link/admin/admin_check.asp.vbs
-
link/admin/admin_check_add.asp.vbs
-
link/admin/admin_check_addsave.asp.vbs
-
link/admin/admin_check_delete.asp.vbs
-
link/admin/admin_check_diaoyong.asp.vbs
-
link/admin/admin_check_edit.asp.vbs
-
link/admin/admin_check_editsave.asp.vbs
-
link/admin/admin_clink.asp.vbs
-
link/admin/admin_code.asp
-
link/admin/admin_config.asp.vbs
-
link/admin/admin_database.asp.vbs
-
link/admin/admin_editlink.asp.js
-
link/admin/admin_editmail.asp.vbs
-
link/admin/admin_editmailchk.asp.vbs
-
link/admin/admin_fenlei.asp.vbs
-
link/admin/admin_fenleiedit.asp.vbs
-
link/admin/admin_login.asp.vbs
-
link/admin/admin_manage.asp.vbs
-
link/admin/admin_manage_link.asp.vbs
-
link/admin/admin_pass.asp.vbs
-
link/admin/admin_regjc.asp.vbs
-
link/admin/admin_userpass.asp.vbs
-
link/admin/chkserver.asp.vbs
-
link/admin/conn.asp.asp .vbs polyglot
-
link/admin/function.asp.vbs
-
link/admin/index.asp.js
-
link/admin/left.asp.vbs
-
link/admin/link.js
-
link/admin/sendmail.asp.vbs
-
link/admin/sendmail_user.asp.vbs
-
link/admin/stylemb.css
-
link/admin/top.asp
-
link/admin/ttout.asp.vbs
-
link/admin/union.htm.html
-
link/admin/upload.asp
-
link/admin/upload_5xsoft.inc.html .vbs polyglot
-
link/admin/upsave.asp.vbs
-
link/ads/ad.asp.vbs
-
link/ads/add.asp.vbs
-
link/ads/code.asp
-
link/ads/cookies.asp
-
link/ads/createjs.asp.vbs
-
link/ads/del.asp.vbs
-
link/ads/edit.asp.vbs
-
link/ads/html2js.asp
-
link/ads/images/ad_dialog.js.js
-
link/ads/images/ad_float_fullscreen.js.js
-
link/ads/images/ad_float_upanddown.js.js
-
link/ads/images/ad_float_upanddown_l.js.js
-
link/ads/images/ad_fullscreen.js.js
-
link/ads/images/close.gif.gif
-
link/ads/images/close1.gif.gif
-
link/ads/images/close_o.gif.gif
-
link/ads/images/coad_bevel.gif.gif
-
link/ads/images/js.js.js
-
link/ads/js/ad01.js.js
-
link/ads/js/ad02.js.js
-
link/ads/js/ad03.js.js
-
link/ads/js/ad04.js.js
-
link/ads/js/foot.js.js
-
link/ads/js/top.js.js
-
link/ads/list.asp.vbs
-
link/ads/openad.asp.vbs
-
link/ads/pic/ad02.gif.gif
-
link/ads/pic/ad04.gif
-
link/ads/pic/foot.gif.gif
-
link/ads/pic/top.jpg.jpg
-
link/ads/regid.asp.vbs
-
link/bd_Upload.asp.js
-
link/bd_upfile2.asp.vbs
-
link/bd_upfile_class.asp.vbs
-
link/class.asp.vbs
-
link/code.asp
-
link/conn.asp.asp .vbs polyglot
-
link/data/#ttlink#.asp
-
link/dv_ajax.js.js
-
link/dv_ajax_check.asp.vbs
-
link/dv_getcode.asp.vbs
-
link/friendlink.asp.vbs
-
link/getpwd.asp
-
link/getpwd2.asp.vbs
-
link/getpwd3.asp.vbs
-
link/help.asp
-
link/images/Thumbs.db
-
link/images/admin_left_2.gif.gif
-
link/images/admin_title.gif.gif
-
link/images/back.gif.gif
-
link/images/bg.gif.gif
-
link/images/bullet.gif.gif
-
link/images/common.gif.gif
-
link/images/delete.gif.gif
-
link/images/email.gif
-
link/images/gd.gif.gif
-
link/images/gdlj.gif.gif
-
link/images/ico.gif.gif
-
link/images/icon.gif.gif
-
link/images/logo.gif.gif
-
link/images/logo/20091115164921491.gif.gif
-
link/images/main_title1.gif.gif
-
link/images/main_title2.gif.gif
-
link/images/main_title3.gif.gif
-
link/images/main_title4.gif
-
link/images/main_title5.gif.gif
-
link/images/main_title6.gif.gif
-
link/images/main_title7.gif
-
link/images/main_title8.gif.gif
-
link/images/memo.gif.gif
-
link/images/mouse_on_title.js.js
-
link/images/nologo2.gif.gif
-
link/images/note_error.gif.gif
-
link/images/note_ok.gif.gif
-
link/images/reg_error.gif.gif
-
link/images/reg_ok.gif.gif
-
link/images/reg_warning.gif.gif
-
link/images/title_bg_quit.gif.gif
-
link/images/title_bg_show.gif.gif
-
link/images/top.gif.gif
-
link/images/ttdv.jpg.jpg
-
link/images/wu.gif.gif
-
link/images/your_link.gif.gif
-
link/index.asp.vbs
-
link/js.asp.vbs
-
link/link.asp.vbs
-
link/link.js
-
link/list.asp.vbs
-
link/md5.asp.vbs
-
link/morelink.asp.vbs
-
link/regjc.asp.vbs
-
link/reload.asp.vbs
-
link/style.css
-
link/test.asp.js
-
link/top.asp
-
link/tt_getcodee.asp.asp
-
link/ttindex.asp.vbs
-
link/ttlink.asp.vbs
-
link/ttout.asp.vbs
-
link/under.asp
-
link/使用说明.txt
-
link/新云软件.url.url
-
link/版本升级历史.txt
-
首页调用示例.txt