Overview

overview

3

Static

static

1

Demo01/ADM...s_.asp

windows7-x64

3

Demo01/ADM...s_.asp

windows10-2004-x64

3

Demo01/ADMIN/DELV.vbs

windows7-x64

1

Demo01/ADMIN/DELV.vbs

windows10-2004-x64

1

Demo01/ADM...se.vbs

windows7-x64

1

Demo01/ADM...se.vbs

windows10-2004-x64

1

Demo01/ADMIN/Jobs.vbs

windows7-x64

1

Demo01/ADMIN/Jobs.vbs

windows10-2004-x64

1

Demo01/ADMIN/USER.asp

windows7-x64

3

Demo01/ADMIN/USER.asp

windows10-2004-x64

3

Demo01/ADM...ews.js

windows7-x64

1

Demo01/ADM...ews.js

windows10-2004-x64

1

Demo01/ADM...shi.js

windows7-x64

1

Demo01/ADM...shi.js

windows10-2004-x64

1

Demo01/ADM...gce.js

windows7-x64

1

Demo01/ADM...gce.js

windows10-2004-x64

1

Demo01/ADM...ic.vbs

windows7-x64

1

Demo01/ADM...ic.vbs

windows10-2004-x64

1

Demo01/ADM...ex.vbs

windows7-x64

1

Demo01/ADM...ex.vbs

windows10-2004-x64

1

Demo01/ADMIN/class.js

windows7-x64

1

Demo01/ADMIN/class.js

windows10-2004-x64

1

Demo01/ADM...te.vbs

windows7-x64

1

Demo01/ADM...te.vbs

windows10-2004-x64

1

Demo01/ADMIN/exit.asp

windows7-x64

3

Demo01/ADMIN/exit.asp

windows10-2004-x64

3

Demo01/ADM...ex.asp

windows7-x64

3

Demo01/ADM...ex.asp

windows10-2004-x64

3

Demo01/ADM...tou.js

windows7-x64

1

Demo01/ADM...tou.js

windows10-2004-x64

1

Demo01/ADMIN/news.js

windows7-x64

1

Demo01/ADMIN/news.js

windows10-2004-x64

1

Analysis

  • max time kernel
    137s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-01-2024 08:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Demo01/ADMIN/leitou.js

  • Size

    9KB

  • MD5

    c1d1bbe24e4ed081dbfa3556cb5a618a

  • SHA1

    2ca48448d2c4b8951649beb252b37743fbeed5e6

  • SHA256

    2509253e4db88fa9bd80e54f257c65b7a7d5d20077d5bea068d16c5af48d30be

  • SHA512

    13a41f21767dd135c93199367e5f8f3528d1c2e9d1c5182615a377e280d9312e89d43b9275ae34dbca64c6bf7505630fdfa76b722f6545def1872f9bfa264f32

  • SSDEEP

    96:BBHj3V7f8XVWC2SbSQC4L0tYna9Ml0LzoFCePc2eFI4E+nDBHs9bSs9ZTDszoStH:B5TV78lm4L0geT36VU28R/nDBe8PH

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Demo01\ADMIN\leitou.js
    1⤵
      PID:4012

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads