Overview
overview
3Static
static
15u37.netfa...de.vbs
windows7-x64
15u37.netfa...de.vbs
windows10-2004-x64
15u37.netfa...ef.vbs
windows7-x64
15u37.netfa...ef.vbs
windows10-2004-x64
15u37.netfa...d5.vbs
windows7-x64
15u37.netfa...d5.vbs
windows10-2004-x64
15u37.netfa/Jz_Add.vbs
windows7-x64
15u37.netfa/Jz_Add.vbs
windows10-2004-x64
15u37.netfa...ay.vbs
windows7-x64
15u37.netfa...ay.vbs
windows10-2004-x64
15u37.netfa...ex.vbs
windows7-x64
15u37.netfa...ex.vbs
windows10-2004-x64
15u37.netfa...st.vbs
windows7-x64
15u37.netfa...st.vbs
windows10-2004-x64
15u37.netfa...ve.vbs
windows7-x64
15u37.netfa...ve.vbs
windows10-2004-x64
15u37.netfa...37.asp
windows7-x64
35u37.netfa...37.asp
windows10-2004-x64
35u37.netfa...ve.vbs
windows7-x64
15u37.netfa...ve.vbs
windows10-2004-x64
15u37.netfa...Db.vbs
windows7-x64
15u37.netfa...Db.vbs
windows10-2004-x64
15u37.netfa...ay.vbs
windows7-x64
15u37.netfa...ay.vbs
windows10-2004-x64
15u37.netfa...el.vbs
windows7-x64
15u37.netfa...el.vbs
windows10-2004-x64
15u37.netfa...it.vbs
windows7-x64
15u37.netfa...it.vbs
windows10-2004-x64
15u37.netfa...st.vbs
windows7-x64
15u37.netfa...st.vbs
windows10-2004-x64
15u37.netfa...ve.vbs
windows7-x64
15u37.netfa...ve.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
5u37.netfa/Inc/checkcode.vbs
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5u37.netfa/Inc/checkcode.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
5u37.netfa/Inc/clsThief.vbs
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
5u37.netfa/Inc/clsThief.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
5u37.netfa/Inc/md5.vbs
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
5u37.netfa/Inc/md5.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
5u37.netfa/Jz_Add.vbs
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
5u37.netfa/Jz_Add.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
5u37.netfa/Jz_Display.vbs
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
5u37.netfa/Jz_Display.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
5u37.netfa/Jz_Index.vbs
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
5u37.netfa/Jz_Index.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
5u37.netfa/Jz_List.vbs
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
5u37.netfa/Jz_List.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
5u37.netfa/Jz_save.vbs
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
5u37.netfa/Jz_save.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
5u37.netfa/Msmir_5u3_5937.asp
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
5u37.netfa/Msmir_5u3_5937.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
5u37.netfa/Msmir_5u3_ConfigSave.vbs
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
5u37.netfa/Msmir_5u3_ConfigSave.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
5u37.netfa/Msmir_5u3_Db.vbs
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
5u37.netfa/Msmir_5u3_Db.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
5u37.netfa/Msmir_5u3_Jz_Display.vbs
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
5u37.netfa/Msmir_5u3_Jz_Display.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
5u37.netfa/Msmir_5u3_Jz_del.vbs
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
5u37.netfa/Msmir_5u3_Jz_del.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
5u37.netfa/Msmir_5u3_Jz_edit.vbs
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
5u37.netfa/Msmir_5u3_Jz_edit.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
5u37.netfa/Msmir_5u3_Jz_list.vbs
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
5u37.netfa/Msmir_5u3_Jz_list.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
5u37.netfa/Msmir_5u3_Jz_save.vbs
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
5u37.netfa/Msmir_5u3_Jz_save.vbs
Resource
win10v2004-20231215-en
General
-
Target
66b0a406bd57789bd56c5695b58eed6a
-
Size
974KB
-
MD5
66b0a406bd57789bd56c5695b58eed6a
-
SHA1
d134792e1b3467713e6f860b92c92b12bf597061
-
SHA256
a100120a1ecc8bea20d02c7170f8625653e6ed6fcea4ac98c7546f7a5e63c04a
-
SHA512
0e897607403e69bb7ecae49947708ae45bd6258b4d59ea42673103fa6c280afc1229dbc623ded6bd49dd3fa065881eee2cefd07acdfce07c3b2766633b67e5ac
-
SSDEEP
24576:cMIX8j/4nsgAd5AMeHVetVtsmwtCwdsfO1:cC7ngAd5ARVeXteA+sw
Malware Config
Signatures
Files
-
66b0a406bd57789bd56c5695b58eed6a.rar
-
5u37.netfa/Inc/checkcode.asp.vbs
-
5u37.netfa/Inc/clsThief.asp.vbs
-
5u37.netfa/Inc/md5.asp.vbs
-
5u37.netfa/Jz_Add.asp.vbs
-
5u37.netfa/Jz_Display.asp.vbs
-
5u37.netfa/Jz_Index.asp.vbs
-
5u37.netfa/Jz_List.asp.vbs
-
5u37.netfa/Jz_save.asp.vbs
-
5u37.netfa/Msmir_5u3_5937.asp.asp .vbs polyglot
-
5u37.netfa/Msmir_5u3_ConfigSave.asp.vbs
-
5u37.netfa/Msmir_5u3_Db.asp.vbs
-
5u37.netfa/Msmir_5u3_Jz_Display.asp.vbs
-
5u37.netfa/Msmir_5u3_Jz_del.asp.vbs
-
5u37.netfa/Msmir_5u3_Jz_edit.asp.vbs
-
5u37.netfa/Msmir_5u3_Jz_list.asp.vbs
-
5u37.netfa/Msmir_5u3_Jz_save.asp.vbs
-
5u37.netfa/Msmir_5u3_Jz_top.asp.vbs
-
5u37.netfa/Msmir_5u3_Jz_top_l.asp.vbs
-
5u37.netfa/Msmir_5u3_Jz_top_s.asp.vbs
-
5u37.netfa/Msmir_5u3_Jz_ulock_l.asp.vbs
-
5u37.netfa/Msmir_5u3_Jz_ulock_s.asp.vbs
-
5u37.netfa/Msmir_5u3_Sql.asp.vbs
-
5u37.netfa/Msmir_5u3_about.asp.vbs
-
5u37.netfa/Msmir_5u3_del.asp.vbs
-
5u37.netfa/Msmir_5u3_display.asp.vbs
-
5u37.netfa/Msmir_5u3_edit.asp.vbs
-
5u37.netfa/Msmir_5u3_list.asp.vbs
-
5u37.netfa/Msmir_5u3_main.asp.vbs
-
5u37.netfa/Msmir_5u3_menu.asp.vbs
-
5u37.netfa/Msmir_5u3_save.asp.vbs
-
5u37.netfa/Msmir_5u3_top.asp.vbs
-
5u37.netfa/Msmir_5u3_top_l.asp.vbs
-
5u37.netfa/Msmir_5u3_top_s.asp.vbs
-
5u37.netfa/Msmir_5u3_type.asp.vbs
-
5u37.netfa/Msmir_5u3_type_edit.asp.vbs
-
5u37.netfa/Msmir_5u3_ulock.asp.vbs
-
5u37.netfa/Msmir_5u3_ulock_s.asp.vbs
-
5u37.netfa/Msmir_login.asp.asp .vbs polyglot
-
5u37.netfa/SFpubdata/database123.mdb
-
5u37.netfa/ad.htm
-
5u37.netfa/add.asp.vbs
-
5u37.netfa/code.asp.vbs
-
5u37.netfa/daima.htm.js
-
5u37.netfa/display.asp.vbs
-
5u37.netfa/foot.asp
-
5u37.netfa/go.htm.html .js polyglot
-
5u37.netfa/head.htm.html .js polyglot
-
5u37.netfa/image/BG1.gif.gif
-
5u37.netfa/image/Head.Fix
-
5u37.netfa/image/Msmir_Login1.gif.gif
-
5u37.netfa/image/Msmir_Login2.gif.gif
-
5u37.netfa/image/Msmir_Login3.gif
-
5u37.netfa/image/Msmir_left_admin.gif.gif
-
5u37.netfa/image/Msmir_top_top.gif.gif
-
5u37.netfa/image/bg2.gif.gif
-
5u37.netfa/image/body1.fix
-
5u37.netfa/image/body10.fix
-
5u37.netfa/image/body11.fix
-
5u37.netfa/image/body12.fix
-
5u37.netfa/image/body13.fix
-
5u37.netfa/image/body14.fix
-
5u37.netfa/image/body15.fix
-
5u37.netfa/image/body16.fix
-
5u37.netfa/image/body17.fix
-
5u37.netfa/image/body18.fix
-
5u37.netfa/image/body2.fix
-
5u37.netfa/image/body3.fix
-
5u37.netfa/image/body4.fix
-
5u37.netfa/image/body5.fix
-
5u37.netfa/image/body6.fix
-
5u37.netfa/image/body7.fix
-
5u37.netfa/image/body8.fix
-
5u37.netfa/image/body9.fix
-
5u37.netfa/image/bottom.gif.gif
-
5u37.netfa/image/css.css
-
5u37.netfa/image/daohang.gif.gif
-
5u37.netfa/image/daohang2bg.gif.gif
-
5u37.netfa/image/daohangbg.gif.gif
-
5u37.netfa/image/jing.gif.gif
-
5u37.netfa/image/new.gif.gif
-
5u37.netfa/image/style.css
-
5u37.netfa/image/title_bg_quit.gif.gif
-
5u37.netfa/image/tj.js.js
-
5u37.netfa/image/top.swf
-
5u37.netfa/index.asp.vbs
-
5u37.netfa/peizhi.asp.js
-
5u37.netfa/save.asp.vbs
-
5u37.netfa/sf.asp.vbs
-
5u37.netfa/sjlianjie.asp.vbs
-
5u37.netfa/top.asp.vbs
-
5u37.netfa/下载说明.htm.html .js polyglot
-
5u37.netfa/无忧私服发布系统说明.txt
-
5u37.netfa/非常世纪资源网.url.url