Overview
overview
1Static
static
1admin/channel.js
windows7-x64
1admin/channel.js
windows10-2004-x64
1admin/content.js
windows7-x64
1admin/content.js
windows10-2004-x64
1admin/guest.js
windows7-x64
1admin/guest.js
windows10-2004-x64
1admin/kind...tor.js
windows7-x64
1admin/kind...tor.js
windows10-2004-x64
1admin/kind...o.html
windows7-x64
1admin/kind...o.html
windows10-2004-x64
1admin/kind...t.html
windows7-x64
1admin/kind...t.html
windows10-2004-x64
1admin/kind...r.html
windows7-x64
1admin/kind...r.html
windows10-2004-x64
1admin/kind...ger.js
windows7-x64
1admin/kind...ger.js
windows10-2004-x64
1admin/kind...h.html
windows7-x64
1admin/kind...h.html
windows10-2004-x64
1admin/kind...e.html
windows7-x64
1admin/kind...e.html
windows10-2004-x64
1admin/kind...k.html
windows7-x64
1admin/kind...k.html
windows10-2004-x64
1admin/kind...a.html
windows7-x64
1admin/kind...a.html
windows10-2004-x64
1admin/kind...e.html
windows7-x64
1admin/kind...e.html
windows10-2004-x64
1admin/kind...e.html
windows7-x64
1admin/kind...e.html
windows10-2004-x64
1admin/menu.js
windows7-x64
1admin/menu.js
windows10-2004-x64
1admin/other.js
windows7-x64
1admin/other.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
admin/channel.js
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
admin/channel.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
admin/content.js
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
admin/content.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
admin/guest.js
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
admin/guest.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
admin/kindeditor/kindeditor.js
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
admin/kindeditor/kindeditor.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
admin/kindeditor/php/demo.html
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
admin/kindeditor/php/demo.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
admin/kindeditor/plugins/about.html
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
admin/kindeditor/plugins/about.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
admin/kindeditor/plugins/file_manager/file_manager.html
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
admin/kindeditor/plugins/file_manager/file_manager.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
admin/kindeditor/plugins/file_manager/file_manager.js
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
admin/kindeditor/plugins/file_manager/file_manager.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
admin/kindeditor/plugins/flash.html
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
admin/kindeditor/plugins/flash.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral19
Sample
admin/kindeditor/plugins/image/image.html
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
admin/kindeditor/plugins/image/image.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
admin/kindeditor/plugins/link/link.html
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
admin/kindeditor/plugins/link/link.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
admin/kindeditor/plugins/media.html
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
admin/kindeditor/plugins/media.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
admin/kindeditor/plugins/plainpaste.html
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
admin/kindeditor/plugins/plainpaste.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
admin/kindeditor/plugins/wordpaste.html
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
admin/kindeditor/plugins/wordpaste.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
admin/menu.js
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
admin/menu.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
admin/other.js
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
admin/other.js
Resource
win10v2004-20231215-en
General
-
Target
4d4e9bf304888f377d368ad71f964264
-
Size
284KB
-
MD5
4d4e9bf304888f377d368ad71f964264
-
SHA1
6fe21bc1bcb1bcf9f52d7d013ed81dd86345d540
-
SHA256
aef9774531f5348d6fd5891830a73782c1b3b34e00fa24e6dd03ae60a9c4ed52
-
SHA512
5527d3785b233b7885bd8cac478187b8ddbbb1d6397b5d1f09bb3a12c7b2ecce76204a3b5975fc470deeb57ffe29ef4ad25b665eb27947c90b83b803eb5d69bf
-
SSDEEP
6144:nbXXvV5T9d7AtvatTzGc4Z0FOwan/NIvvzTIPxRcaknbyGet1C:Dt5T8tkzGlUOwan/OvIJmHDw4
Malware Config
Signatures
Files
-
4d4e9bf304888f377d368ad71f964264.rar
-
admin/channel.php.js
-
admin/chtml.php
-
admin/content.php.js
-
admin/err.php
-
admin/guest.php.js
-
admin/html.php
-
admin/index.php
-
admin/isadmin.php
-
admin/kindeditor/kindeditor.js.js
-
admin/kindeditor/php/demo.php.html
-
admin/kindeditor/php/file_manager_json.php
-
admin/kindeditor/php/upload.php
-
admin/kindeditor/plugins/about.html.html .js polyglot
-
admin/kindeditor/plugins/file_manager/file_manager.css
-
admin/kindeditor/plugins/file_manager/file_manager.html.html
-
admin/kindeditor/plugins/file_manager/file_manager.js.js
-
admin/kindeditor/plugins/file_manager/images/file-16.gif.gif
-
admin/kindeditor/plugins/file_manager/images/file-64.gif.gif
-
admin/kindeditor/plugins/file_manager/images/folder-16.gif.gif
-
admin/kindeditor/plugins/file_manager/images/folder-64.gif.gif
-
admin/kindeditor/plugins/file_manager/images/go-up.gif.gif
-
admin/kindeditor/plugins/flash.html.html .js polyglot
-
admin/kindeditor/plugins/image/image.html.html .js polyglot
-
admin/kindeditor/plugins/image/images/align_bottom.gif.gif
-
admin/kindeditor/plugins/image/images/align_left.gif.gif
-
admin/kindeditor/plugins/image/images/align_middle.gif.gif
-
admin/kindeditor/plugins/image/images/align_right.gif.gif
-
admin/kindeditor/plugins/image/images/align_top.gif.gif
-
admin/kindeditor/plugins/image/images/refresh.gif.gif
-
admin/kindeditor/plugins/link/link.html.html .js polyglot
-
admin/kindeditor/plugins/media.html.html .js polyglot
-
admin/kindeditor/plugins/plainpaste.html.html .js polyglot
-
admin/kindeditor/plugins/wordpaste.html.html .js polyglot
-
admin/kindeditor/skins/common/blank.gif.gif
-
admin/kindeditor/skins/common/editor.css
-
admin/kindeditor/skins/common/flash.gif.gif
-
admin/kindeditor/skins/common/loading.gif.gif
-
admin/kindeditor/skins/common/media.gif.gif
-
admin/kindeditor/skins/common/rm.gif.gif
-
admin/kindeditor/skins/tinymce.css
-
admin/kindeditor/skins/tinymce/tinymce.gif.gif
-
admin/login.php
-
admin/logout.php
-
admin/main.php
-
admin/manage.php
-
admin/menu.php.js
-
admin/other.php.js
-
admin/right.php.js
-
admin/styles/advanced/dl.css
-
admin/styles/advanced/images/_notes/dwsync.xml.xml
-
admin/styles/advanced/images/admin_bg1.gif.gif
-
admin/styles/advanced/images/admin_bg1.jpg.jpg
-
admin/styles/advanced/images/bg.gif.gif
-
admin/styles/advanced/images/bg2.gif.gif
-
admin/styles/advanced/images/bg3.gif.gif
-
admin/styles/advanced/images/bg4.gif.gif
-
admin/styles/advanced/images/btn_bg.gif.gif
-
admin/styles/advanced/images/closed.gif.gif
-
admin/styles/advanced/images/configure.gif.gif
-
admin/styles/advanced/images/disabletiny.gif.gif
-
admin/styles/advanced/images/editablefile1.gif.gif
-
admin/styles/advanced/images/editablefile2.gif.gif
-
admin/styles/advanced/images/enabletiny.gif.gif
-
admin/styles/advanced/images/folder1.gif.gif
-
admin/styles/advanced/images/folder2.gif.gif
-
admin/styles/advanced/images/folderforbidden1.gif.gif
-
admin/styles/advanced/images/folderforbidden2.gif.gif
-
admin/styles/advanced/images/folderup1.gif.gif
-
admin/styles/advanced/images/folderup2.gif.gif
-
admin/styles/advanced/images/gradient.gif.gif
-
admin/styles/advanced/images/header_bg.gif.gif
-
admin/styles/advanced/images/header_left.gif.gif
-
admin/styles/advanced/images/header_right.gif.gif
-
admin/styles/advanced/images/ht.gif.gif
-
admin/styles/advanced/images/ht2.gif.gif
-
admin/styles/advanced/images/link.gif.gif
-
admin/styles/advanced/images/login.gif.gif
-
admin/styles/advanced/images/login_box_bottom.jpg.jpg
-
admin/styles/advanced/images/login_box_legal_bg.gif.gif
-
admin/styles/advanced/images/logo-login.gif.gif
-
admin/styles/advanced/images/logo.gif.gif
-
admin/styles/advanced/images/logo.jpg.jpg
-
admin/styles/advanced/images/logo.psd
-
admin/styles/advanced/images/magnifying_glass.gif.gif
-
admin/styles/advanced/images/menu1.gif.gif
-
admin/styles/advanced/images/menu2.gif.gif
-
admin/styles/advanced/images/menu_1.gif.gif
-
admin/styles/advanced/images/menu_2.gif.gif
-
admin/styles/advanced/images/menu_category_bg.gif.gif
-
admin/styles/advanced/images/notrash.gif.gif
-
admin/styles/advanced/images/open.gif.gif
-
admin/styles/advanced/images/section/section_bottom_bg.gif.gif
-
admin/styles/advanced/images/section/section_bottom_left.gif.gif
-
admin/styles/advanced/images/section/section_bottom_right.gif.gif
-
admin/styles/advanced/images/section/section_middle_left.gif.gif
-
admin/styles/advanced/images/section/section_middle_right.gif.gif
-
admin/styles/advanced/images/section/section_top_bg.gif.gif
-
admin/styles/advanced/images/section/section_top_bg2.gif.gif
-
admin/styles/advanced/images/section/section_top_left.gif.gif
-
admin/styles/advanced/images/section/section_top_left2.gif.gif
-
admin/styles/advanced/images/section/section_top_right.gif.gif
-
admin/styles/advanced/images/section/section_top_right2.gif.gif
-
admin/styles/advanced/images/section/td1_bottom.gif.gif
-
admin/styles/advanced/images/section/td1_top.gif.gif
-
admin/styles/advanced/images/section/td2_bottom.gif.gif
-
admin/styles/advanced/images/section/td2_top.gif.gif
-
admin/styles/advanced/images/top-tpage.gif.gif
-
admin/styles/advanced/images/trash.gif.gif
-
admin/styles/advanced/login.css
-
admin/styles/advanced/menu.css
-
admin/styles/advanced/style.css
-
admin/sys_data.php
-
admin/sys_re.php
-
admin/upload.htm.php
-
admin/upload.php
-
admin/url.php
-
admin/新云软件.url.url
-
buy.php
-
diy.php
-
down.php
-
guest.php
-
images/bg_x.gif.gif
-
images/buy-img.gif.gif
-
images/buy-img1.gif.gif
-
images/buy-img2.gif.gif
-
images/buy-img3.gif.gif
-
images/buy-img4.gif.gif
-
images/buy-img5.gif.gif
-
images/buy-img6.gif.gif
-
images/login.jpg.jpg
-
inc/cache.php
-
inc/category.php.ps1
-
inc/code.php
-
inc/get_re.php
-
inc/hits.php
-
inc/jquery.min.js.js
-
inc/js.php
-
inc/login_action.php
-
inc/news.php.ps1
-
inc/plus.php
-
inc/plus_down.php
-
inc/review.php
-
inc/sys.php
-
inc/temp.php
-
inc/temp_html.php
-
inc/temp_rewrite.php
-
inc/tfunction.php
-
index.php
-
install/conn.php
-
install/images/LOGIN.gif.gif
-
install/images/css.css
-
install/images/install_01.jpg.jpg
-
install/images/install_02.jpg.jpg
-
install/images/install_03.jpg.jpg
-
install/images/qieyi.html.html
-
install/index.php.html .js polyglot
-
install/sql.txt
-
language/cn.php
-
list.php
-
login.php
-
myzip.php.js
-
qcms_php_1.3Free.txt
-
reg.php
-
review.php
-
search.php
-
templist/all_rss.txt
-
templist/baidu_map.txt
-
templist/default/css.css
-
templist/default/footer.html
-
templist/default/guest.html.js
-
templist/default/header.html.html .js polyglot
-
templist/default/images/banner.jpg.jpg
-
templist/default/images/bg_1.gif.gif
-
templist/default/images/bg_x.gif.gif
-
templist/default/images/bottMenuBg.jpg.jpg
-
templist/default/images/chanpin.gif.gif
-
templist/default/images/h4Bg.jpg.jpg
-
templist/default/images/headerBg.jpg.jpg
-
templist/default/images/login.jpg.jpg
-
templist/default/images/logo.jpg.jpg
-
templist/default/images/menuBg.jpg.jpg
-
templist/default/images/more.gif.gif
-
templist/default/images/new_dian.gif.gif
-
templist/default/images/notice-newsBg.jpg.jpg
-
templist/default/images/notice-newsLi.jpg.jpg
-
templist/default/images/rss.jpg.jpg
-
templist/default/images/search.png.png
-
templist/default/images/tp.jpg.jpg
-
templist/default/index.html.html
-
templist/default/list_buy.html
-
templist/default/list_down.html
-
templist/default/list_news.html
-
templist/default/list_pro.html
-
templist/default/other.html
-
templist/default/view_buy.html
-
templist/default/view_down.html
-
templist/default/view_news.html
-
templist/default/view_pro.html
-
templist/google_map.txt
-
upfile/CR-6wEKU20A9i.jpg.jpg
-
upfile/CR-Pm1YBk10I0.jpg.jpg
-
upfile/CR-m3GjwPToYN.jpg.jpg
-
view.php