Overview

overview

3

Static

static

1

传名网�...day.js

windows7-x64

1

传名网�...day.js

windows10-2004-x64

1

传名网�...ig.vbs

windows7-x64

1

传名网�...ig.vbs

windows10-2004-x64

1

传名网�...st.vbs

windows7-x64

1

传名网�...st.vbs

windows10-2004-x64

1

传名网�...ex.vbs

windows7-x64

1

传名网�...ex.vbs

windows10-2004-x64

1

传名网�...ass.js

windows7-x64

1

传名网�...ass.js

windows10-2004-x64

1

传名网�...in.vbs

windows7-x64

1

传名网�...in.vbs

windows10-2004-x64

1

传名网�...rl.vbs

windows7-x64

1

传名网�...rl.vbs

windows10-2004-x64

1

传名网�...ty.asp

windows7-x64

3

传名网�...ty.asp

windows10-2004-x64

3

传名网�...��.htm

windows7-x64

1

传名网�...��.htm

windows10-2004-x64

1

Analysis

  • max time kernel
    135s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-01-2024 15:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    传名网络内部服务器管理系统 v1.0 简化版/xxqltyty.asp

  • Size

    292KB

  • MD5

    df2a1eec3821ec6e0f9d8532b617fe22

  • SHA1

    284ed9106df7ff5e9fdae18172248ff10862c51a

  • SHA256

    e0dfcc842222634d57b0d78759784746bb0751f360c382202ba3ee7e150cff0d

  • SHA512

    26ca80a4aa5b85c0c1c01e8407c25124e9f13a0a0c60e89058b01f6a1bf6887c3aa96e7e20a62b2f49844272ec7cbbad0b33b10b3501d8222cfa2b2561e536ea

  • SSDEEP

    1536:NhMqUBihjih8ihkhkhkTUTXTKTMTskLl:NhM

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\传名网络内部服务器管理系统 v1.0 简化版\xxqltyty.asp"
    1⤵
      PID:1004

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads