Overview
overview
3Static
static
1091_cc_pic...nn.vbs
windows7-x64
1091_cc_pic...nn.vbs
windows10-2004-x64
1091_cc_pic...ds.asp
windows7-x64
3091_cc_pic...ds.asp
windows10-2004-x64
3091_cc_pic...ig.vbs
windows7-x64
1091_cc_pic...ig.vbs
windows10-2004-x64
1091_cc_pic...ex.asp
windows7-x64
3091_cc_pic...ex.asp
windows10-2004-x64
3091_cc_pic...nk.asp
windows7-x64
3091_cc_pic...nk.asp
windows10-2004-x64
3091_cc_pic...er.asp
windows7-x64
3091_cc_pic...er.asp
windows10-2004-x64
3091_cc_pic...ck.vbs
windows7-x64
1091_cc_pic...ck.vbs
windows10-2004-x64
1091_cc_pic...ut.asp
windows7-x64
3091_cc_pic...ut.asp
windows10-2004-x64
3091_cc_pic...ds.asp
windows7-x64
3091_cc_pic...ds.asp
windows10-2004-x64
3091_cc_pic...og.asp
windows7-x64
3091_cc_pic...og.asp
windows10-2004-x64
3091_cc_pic...sm.asp
windows7-x64
3091_cc_pic...sm.asp
windows10-2004-x64
3091_cc_pic...ss.asp
windows7-x64
3091_cc_pic...ss.asp
windows10-2004-x64
3091_cc_pic...wu.asp
windows7-x64
3091_cc_pic...wu.asp
windows10-2004-x64
3091_cc_pic...lc.asp
windows7-x64
3091_cc_pic...lc.asp
windows10-2004-x64
3091_cc_pic...lc.asp
windows7-x64
3091_cc_pic...lc.asp
windows10-2004-x64
3091_cc_pic...lp.asp
windows7-x64
3091_cc_pic...lp.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
091_cc_pic2011_free_v4.5/cfss_admin/Conn.vbs
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
091_cc_pic2011_free_v4.5/cfss_admin/Conn.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
091_cc_pic2011_free_v4.5/cfss_admin/admin_ads.asp
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
091_cc_pic2011_free_v4.5/cfss_admin/admin_ads.asp
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
091_cc_pic2011_free_v4.5/cfss_admin/admin_config.vbs
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
091_cc_pic2011_free_v4.5/cfss_admin/admin_config.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
091_cc_pic2011_free_v4.5/cfss_admin/admin_index.asp
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
091_cc_pic2011_free_v4.5/cfss_admin/admin_index.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
091_cc_pic2011_free_v4.5/cfss_admin/admin_link.asp
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
091_cc_pic2011_free_v4.5/cfss_admin/admin_link.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
091_cc_pic2011_free_v4.5/cfss_admin/admin_webmaster.asp
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
091_cc_pic2011_free_v4.5/cfss_admin/admin_webmaster.asp
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
091_cc_pic2011_free_v4.5/cfss_admin/check.vbs
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
091_cc_pic2011_free_v4.5/cfss_admin/check.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_about.asp
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_about.asp
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_ads.asp
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_ads.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_blog.asp
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_blog.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_bqsm.asp
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_bqsm.asp
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_class.asp
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_class.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_fuwu.asp
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_fuwu.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_fzlc.asp
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_fzlc.asp
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_gmlc.asp
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_gmlc.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_help.asp
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_help.asp
Resource
win10v2004-20231215-en
General
-
Target
477c30776183629fe18db10acf91e17a
-
Size
162KB
-
MD5
477c30776183629fe18db10acf91e17a
-
SHA1
f8c5f9122e64c3e5961244c8ae64e2ee5f44382f
-
SHA256
aa7ede60c215a037c171262c3af45860bf120a1c6120453cacaae5bc8fbf39d5
-
SHA512
1a57bdf0fac505e7247df00f3444acbb53033a501130db259cb77327499c521cd815678d95c4f87e100bb9715cd0841e8c8f643b4462e9d522372522732a9e6a
-
SSDEEP
3072:HmE396nGa1ZufJT/b0BVeN1M0hWpCcY95sI8BiV7kFCyrp8PHnwdGoCuBsPQDCb6:Ft6l1g54neUEW8cI9laC2p8PHw0oCuBX
Malware Config
Signatures
Files
-
477c30776183629fe18db10acf91e17a.rar
-
091_cc_pic2011_free_v4.5/cfss_admin/Conn.asp.vbs
-
091_cc_pic2011_free_v4.5/cfss_admin/admin.css
-
091_cc_pic2011_free_v4.5/cfss_admin/admin_ads.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/admin_config.asp.vbs
-
091_cc_pic2011_free_v4.5/cfss_admin/admin_index.asp.asp .vbs polyglot
-
091_cc_pic2011_free_v4.5/cfss_admin/admin_link.asp.asp .vbs polyglot
-
091_cc_pic2011_free_v4.5/cfss_admin/admin_webmaster.asp.asp .js polyglot
-
091_cc_pic2011_free_v4.5/cfss_admin/check.asp.vbs
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_about.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_ads.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_blog.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_bqsm.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_class.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_fuwu.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_fzlc.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_gmlc.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_help.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_host.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_link.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_lmbz.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_lxwm.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_mzsm.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_syfw.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_tool.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_union.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_vip.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/fjqq_yhhd.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/htmltojs.html.html
-
091_cc_pic2011_free_v4.5/cfss_admin/images/login_bg.png.png
-
091_cc_pic2011_free_v4.5/cfss_admin/images/login_foot.png.png
-
091_cc_pic2011_free_v4.5/cfss_admin/images/login_input.png.png
-
091_cc_pic2011_free_v4.5/cfss_admin/images/login_left_bg.png.png
-
091_cc_pic2011_free_v4.5/cfss_admin/images/login_logo.png.png
-
091_cc_pic2011_free_v4.5/cfss_admin/images/login_main_bg.png.png
-
091_cc_pic2011_free_v4.5/cfss_admin/images/login_right_bg.png.png
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/admin_bg.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/admin_bg_1.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/admin_left_1.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/admin_left_2.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/admin_title.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/bullet.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/close.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/color.js.js
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/html_no.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/html_ok.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/key.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/minus.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/name.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/plus.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/title_bg_hide.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/title_bg_quit.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/manage/title_bg_show.gif.gif
-
091_cc_pic2011_free_v4.5/cfss_admin/images/style.css
-
091_cc_pic2011_free_v4.5/cfss_admin/index.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/jstohtml.html.html
-
091_cc_pic2011_free_v4.5/cfss_admin/login.asp.asp
-
091_cc_pic2011_free_v4.5/cfss_admin/serverinfo.asp.asp .vbs polyglot
-
091_cc_pic2011_free_v4.5/fjqq.cn/index.asp.asp
-
091_cc_pic2011_free_v4.5/foot.asp
-
091_cc_pic2011_free_v4.5/head.asp
-
091_cc_pic2011_free_v4.5/images/A1_3_bg.jpg.jpg
-
091_cc_pic2011_free_v4.5/images/A2_2_bg.gif.gif
-
091_cc_pic2011_free_v4.5/images/Favorites.png.png
-
091_cc_pic2011_free_v4.5/images/baidu.gif.gif
-
091_cc_pic2011_free_v4.5/images/bg.png.png
-
091_cc_pic2011_free_v4.5/images/dot.jpg.jpg
-
091_cc_pic2011_free_v4.5/images/flash-sbg.png.png
-
091_cc_pic2011_free_v4.5/images/flashbg.jpg.jpg
-
091_cc_pic2011_free_v4.5/images/foucs.css
-
091_cc_pic2011_free_v4.5/images/friend.gif.gif
-
091_cc_pic2011_free_v4.5/images/google.gif.gif
-
091_cc_pic2011_free_v4.5/images/ie.gif.gif
-
091_cc_pic2011_free_v4.5/images/index.asp.vbs
-
091_cc_pic2011_free_v4.5/images/logo.jpg.jpg
-
091_cc_pic2011_free_v4.5/images/map.png.png
-
091_cc_pic2011_free_v4.5/images/nopic.gif.gif
-
091_cc_pic2011_free_v4.5/images/qq.gif.gif
-
091_cc_pic2011_free_v4.5/images/style.css
-
091_cc_pic2011_free_v4.5/images/vt_arrow.gif.gif
-
091_cc_pic2011_free_v4.5/images/vtt_bg.gif.gif
-
091_cc_pic2011_free_v4.5/inc/#fjqq_cn_meinv2010.asp
-
091_cc_pic2011_free_v4.5/inc/Config.asp
-
091_cc_pic2011_free_v4.5/inc/Function.asp
-
091_cc_pic2011_free_v4.5/inc/fjqq.asp.vbs
-
091_cc_pic2011_free_v4.5/inc/fso.asp.vbs
-
091_cc_pic2011_free_v4.5/inc/md5.asp.vbs
-
091_cc_pic2011_free_v4.5/index.asp.asp
-
091_cc_pic2011_free_v4.5/js/750x60.js
-
091_cc_pic2011_free_v4.5/js/count.js
-
091_cc_pic2011_free_v4.5/js/fav.js.js
-
091_cc_pic2011_free_v4.5/js/focus.js.js
-
091_cc_pic2011_free_v4.5/js/foot.js
-
091_cc_pic2011_free_v4.5/js/language.js.js
-
091_cc_pic2011_free_v4.5/js/link.txt
-
091_cc_pic2011_free_v4.5/js/list_foot.js
-
091_cc_pic2011_free_v4.5/js/list_top.js
-
091_cc_pic2011_free_v4.5/js/list_txt.js
-
091_cc_pic2011_free_v4.5/js/main.js
-
091_cc_pic2011_free_v4.5/js/news_foot.js
-
091_cc_pic2011_free_v4.5/js/news_main.js
-
091_cc_pic2011_free_v4.5/js/news_top.js
-
091_cc_pic2011_free_v4.5/js/news_txt.js
-
091_cc_pic2011_free_v4.5/js/news_url.js.js
-
091_cc_pic2011_free_v4.5/js/show_foot.js
-
091_cc_pic2011_free_v4.5/js/show_tan.js
-
091_cc_pic2011_free_v4.5/js/show_top.js
-
091_cc_pic2011_free_v4.5/js/top.js
-
091_cc_pic2011_free_v4.5/js/ver.js
-
091_cc_pic2011_free_v4.5/js/wangzhai.js
-
091_cc_pic2011_free_v4.5/js/weather.js.js
-
091_cc_pic2011_free_v4.5/js/wz.js
-
091_cc_pic2011_free_v4.5/search/index.asp.asp
-
091_cc_pic2011_free_v4.5/使用说明.txt
-
091_cc_pic2011_free_v4.5/新云软件.url.url
-
091_cc_pic2011_free_v4.5/服务购买.url.url
-
091_cc_pic2011_free_v4.5/程序官网.url.url