Overview
overview
3Static
static
1UpLoad_Class.vbs
windows7-x64
1UpLoad_Class.vbs
windows10-2004-x64
1about.asp
windows7-x64
3about.asp
windows10-2004-x64
3admin_ajax.vbs
windows7-x64
1admin_ajax.vbs
windows10-2004-x64
1admin_config.vbs
windows7-x64
1admin_config.vbs
windows10-2004-x64
1admin_database.vbs
windows7-x64
1admin_database.vbs
windows10-2004-x64
1admin_datarelate.vbs
windows7-x64
1admin_datarelate.vbs
windows10-2004-x64
1admin_inc.vbs
windows7-x64
1admin_inc.vbs
windows10-2004-x64
1admin_manager.vbs
windows7-x64
1admin_manager.vbs
windows10-2004-x64
1admin_upfile.vbs
windows7-x64
1admin_upfile.vbs
windows10-2004-x64
1bigclass.vbs
windows7-x64
1bigclass.vbs
windows10-2004-x64
1bigclass_add.vbs
windows7-x64
1bigclass_add.vbs
windows10-2004-x64
1bigclass_del.vbs
windows7-x64
1bigclass_del.vbs
windows10-2004-x64
1bigclass_modi.vbs
windows7-x64
1bigclass_modi.vbs
windows10-2004-x64
1center_shou.vbs
windows7-x64
1center_shou.vbs
windows10-2004-x64
1center_zhang.vbs
windows7-x64
1center_zhang.vbs
windows10-2004-x64
1conn.vbs
windows7-x64
1conn.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
UpLoad_Class.vbs
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
UpLoad_Class.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
about.asp
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
about.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
admin_ajax.vbs
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
admin_ajax.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
admin_config.vbs
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
admin_config.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
admin_database.vbs
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
admin_database.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
admin_datarelate.vbs
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
admin_datarelate.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
admin_inc.vbs
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
admin_inc.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
admin_manager.vbs
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
admin_manager.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
admin_upfile.vbs
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
admin_upfile.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
bigclass.vbs
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
bigclass.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
bigclass_add.vbs
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
bigclass_add.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
bigclass_del.vbs
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
bigclass_del.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
bigclass_modi.vbs
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
bigclass_modi.vbs
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
center_shou.vbs
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
center_shou.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
center_zhang.vbs
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
center_zhang.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
conn.vbs
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
conn.vbs
Resource
win10v2004-20231222-en
General
-
Target
768d52de60cd218502c6b4f23fbe90f3
-
Size
856KB
-
MD5
768d52de60cd218502c6b4f23fbe90f3
-
SHA1
c076fb8b8a55f050754f41e200d828cded20d11f
-
SHA256
485f2b9753ba35beedcfa76a3f8c60128a369d573c4d519a3e298b8daf974e28
-
SHA512
e647f459bde015c4c893e830b399931eab1853c4cc78ed544309e815403ee2467f51d1d39839bbd8230249363f02a878cc1094ff31c9c9a5fdea02453731b5dd
-
SSDEEP
12288:hio4XG/f1w36gDD8+N4xbb9KshswPwPkDWvvTDqVO6C5SAzjkmU5Oz0XRB0QFnCF:v4gfk6gv8+A3h/PskCiy/Y5vB6RKc
Malware Config
Signatures
Files
-
768d52de60cd218502c6b4f23fbe90f3.rar
-
UpLoad_Class.inc.vbs
-
about.asp
-
admin_ajax.asp.vbs
-
admin_config.asp.vbs
-
admin_database.asp.vbs
-
admin_datarelate.asp.vbs
-
admin_inc.asp.vbs
-
admin_manager.asp.vbs
-
admin_upfile.asp.vbs
-
bigclass.asp.vbs
-
bigclass_add.asp.vbs
-
bigclass_del.asp.vbs
-
bigclass_modi.asp.vbs
-
center_shou.asp.vbs
-
center_zhang.asp.vbs
-
conn.asp.vbs
-
data/#eptime#%home.mdb
-
data/新云软件.url.url
-
day.asp.vbs
-
diary/add.asp.js
-
diary/diary.asp.vbs
-
diary/getip.asp.vbs
-
diary/index.asp.vbs
-
diary/list.asp.js
-
dzh.asp.vbs
-
favicon.ico
-
head.asp.js
-
help.asp
-
images/000.JPG.jpg
-
images/a_1.jpg.jpg
-
images/admin.css
-
images/base.css
-
images/bg/1.jpg.jpg
-
images/bg/2.jpg.jpg
-
images/bg/3.jpg.jpg
-
images/bg/4.jpg.jpg
-
images/bg_custom.gif.gif
-
images/bg_custom_t.gif.gif
-
images/bg_index.gif.gif
-
images/bg_index.jpg.jpg
-
images/bg_login.jpg.jpg
-
images/bg_repx_hb.gif.gif
-
images/bg_repx_hc.gif.gif
-
images/btn_add.gif.gif
-
images/btn_block_2.gif.gif
-
images/btn_block_3.gif.gif
-
images/btn_close.gif.gif
-
images/css.gif.gif
-
images/date.gif.gif
-
images/diary_10.jpg.jpg
-
images/diary_12.jpg.jpg
-
images/diary_14.jpg.jpg
-
images/diary_15.jpg.jpg
-
images/diary_16.jpg.jpg
-
images/diary_3.jpg.jpg
-
images/diary_5.jpg.jpg
-
images/diary_6.jpg.jpg
-
images/diary_7.jpg.jpg
-
images/diary_9.jpg.jpg
-
images/diary_bg1.jpg.jpg
-
images/down.gif.gif
-
images/down2.gif.gif
-
images/excel.jpg.jpg
-
images/file.gif.gif
-
images/flash/Autumn.swf
-
images/flash/Fish.swf
-
images/flash/Spring.swf
-
images/flash/Summer.swf
-
images/flash/Winter.swf
-
images/folder.gif.gif
-
images/gif.gif.gif
-
images/html.gif.gif
-
images/icon01.GIF.gif
-
images/icon_01.gif.gif
-
images/icon_01z.gif.gif
-
images/icon_l01.gif.gif
-
images/icon_l02.gif.gif
-
images/jpg.gif.gif
-
images/js.gif.gif
-
images/last.gif.gif
-
images/loading.gif.gif
-
images/loading2.gif.gif
-
images/minus.gif.gif
-
images/modify.gif.gif
-
images/modify1.gif.gif
-
images/next.gif.gif
-
images/no.gif.gif
-
images/print.gif.gif
-
images/print.jpg.jpg
-
images/r_0.gif.gif
-
images/r_1.gif.gif
-
images/r_2.gif.gif
-
images/r_3.gif.gif
-
images/r_4.gif.gif
-
images/repno.gif.gif
-
images/res.gif.gif
-
images/skin/1.png.png
-
images/skin/2.png.png
-
images/skin/3.png.png
-
images/skin/4.png.png
-
images/skin/5.png.png
-
images/skin/6.png.png
-
images/skin/7.png.png
-
images/skin/bg.jpg.jpg
-
images/skin/black/bg.jpg.jpg
-
images/skin/black/headbg.jpg.jpg
-
images/skin/black/left.gif.gif
-
images/skin/black/menu.gif.gif
-
images/skin/blue/bg.jpg.jpg
-
images/skin/blue/headbg.jpg.jpg
-
images/skin/blue/left.gif.gif
-
images/skin/blue/menu.gif.gif
-
images/skin/green/bg.jpg.jpg
-
images/skin/green/headbg.jpg.jpg
-
images/skin/green/left.gif.gif
-
images/skin/green/menu.gif.gif
-
images/skin/headbg.jpg.jpg
-
images/skin/icon-1.gif.gif
-
images/skin/icon-2.gif.gif
-
images/skin/icon-3.gif.gif
-
images/skin/icon-4.gif.gif
-
images/skin/icon-5.gif.gif
-
images/skin/icon-6.gif.gif
-
images/skin/icon-7.gif.gif
-
images/skin/icon-8.gif.gif
-
images/skin/icon-9.gif.gif
-
images/skin/icon.gif.gif
-
images/skin/left.css
-
images/skin/left.gif.gif
-
images/skin/lianxi.gif.gif
-
images/skin/menu.gif.gif
-
images/skin/moble.jpg.jpg
-
images/skin/news.gif.gif
-
images/skin/phone.css
-
images/skin/purple/bg.jpg.jpg
-
images/skin/purple/headbg.jpg.jpg
-
images/skin/purple/left.gif.gif
-
images/skin/purple/menu.gif.gif
-
images/skin/red/bg.jpg.jpg
-
images/skin/red/headbg.jpg.jpg
-
images/skin/red/left.gif.gif
-
images/skin/red/menu.gif.gif
-
images/skin/usr.gif.gif
-
images/skin/zhuce.gif.gif
-
images/star0.gif.gif
-
images/star1.gif.gif
-
images/starno.gif.gif
-
images/up.gif.gif
-
images/up2.gif.gif
-
images/yes.gif.gif
-
images/yesno.gif.gif
-
images/yesok.gif.gif
-
inc/CommonFun.asp.vbs
-
inc/DB_Class.asp.vbs
-
inc/Datelist_Class.asp.vbs
-
inc/Main_Class.asp.vbs
-
inc/Template_Class.asp.vbs
-
inc/Xml_Class.asp.vbs
-
inc/code.asp
-
inc/config.asp
-
inc/lang.asp.vbs
-
inc/md5.asp.vbs
-
inc/sqlin.asp.vbs
-
index.asp.vbs
-
js/calendar.js.js
-
js/common.js.js
-
js/jquery-1.1.3.1.pack.js.js
-
js/jquery-1.2.3.pack.js.js
-
js/jquery.jcarousel.pack.js.js
-
js/qtcheck.js.js
-
js/soft.js.js
-
js/tb.js.js
-
js/thickbox-compressed.js.js
-
js/yu.js.js
-
left.asp
-
money.asp.vbs
-
money_add.asp.vbs
-
money_del.asp.vbs
-
money_jie.asp.vbs
-
money_modi.asp.vbs
-
money_modi_jie.asp.vbs
-
money_modi_zhuan.asp.vbs
-
money_show.asp
-
money_zhuan.asp.vbs
-
reg.asp.vbs
-
smallclass.asp.vbs
-
smallclass_add.asp.vbs
-
smallclass_del.asp.vbs
-
smallclass_modi.asp.vbs
-
tongji/chengyuan.asp
-
tongji/fun.asp.vbs
-
tongji/shouzhi.asp.js
-
tongji/shouzhi_index.asp
-
tongji/tongji.jpg.jpg
-
tongji/tongji1.jpg.jpg
-
tongji/tongji2.jpg.jpg
-
tongji/tongji3.jpg.jpg
-
tongji/tongji4.jpg.jpg
-
tongji/tongji5.jpg.jpg
-
tongji/total.asp.js
-
tongji/year.asp
-
tongji/yearReport.asp
-
tools.asp.html
-
upload.asp.vbs
-
user_modi.asp.vbs
-
wanglai.asp.js
-
wanglai_add.asp.vbs
-
wanglai_del.asp
-
wanglai_modi.asp.vbs
-
wap.asp.html
-
yearReport_show.asp.vbs
-
zhaiquan.asp.vbs
-
zhaiquan_list.asp.vbs
-
zhanghu.asp.vbs
-
zhanghu_add.asp.vbs
-
zhanghu_del.asp
-
zhanghu_list.asp.vbs
-
zhanghu_modi.asp.vbs
-
系统说明V5.0.txt