Overview

overview

1

Static

static

1

api/poll.js

windows7-x64

1

api/poll.js

windows10-2004-x64

1

api/uc.js

windows7-x64

1

api/uc.js

windows10-2004-x64

1

api/新云软件.url

windows7-x64

1

api/新云软件.url

windows10-2004-x64

1

config/con...lt.ps1

windows7-x64

1

config/con...lt.ps1

windows10-2004-x64

1

data/ipdata/index.htm

windows7-x64

1

data/ipdata/index.htm

windows10-2004-x64

1

install/in...on.ps1

windows7-x64

1

install/in...on.ps1

windows10-2004-x64

1

install/in...sql.js

windows7-x64

1

install/in...sql.js

windows10-2004-x64

1

install/index.js

windows7-x64

1

install/index.js

windows10-2004-x64

1

install/update.ps1

windows7-x64

1

install/update.ps1

windows10-2004-x64

1

source/adm...der.js

windows7-x64

1

source/adm...der.js

windows10-2004-x64

1

source/adm...ain.js

windows7-x64

1

source/adm...ain.js

windows10-2004-x64

1

source/adm...ile.js

windows7-x64

1

source/adm...ile.js

windows10-2004-x64

1

source/adm...ll.ps1

windows7-x64

1

source/adm...ll.ps1

windows10-2004-x64

1

source/adm...ex.htm

windows7-x64

1

source/adm...ex.htm

windows10-2004-x64

1

source/cla...ncp.js

windows7-x64

1

source/cla...ncp.js

windows10-2004-x64

1

source/cla...ode.js

windows7-x64

1

source/cla...ode.js

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    05-02-2024 07:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    source/admincp/admincp_founder.js

  • Size

    18KB

  • MD5

    4c70a371101fd4794c442b0e2b2587b9

  • SHA1

    06198defcc4b1334c33911a78eadaa6d6f581837

  • SHA256

    3e48e95785e230aaef24e854f60bd394bcf919b423e6bcd26fdb9e30e25bb8c2

  • SHA512

    ddc1df836c4919f8a1c1c20254928b988002c93c8118d9ccac47133c5fb0c537d0fd5befec819927741eb3bd59b9d7684efae2bf729e3de5d06abeb7aa97134f

  • SSDEEP

    384:rTYCEdTsUNTI/0gaBvLyqN6sGeiDMqEFUeQskdW1:nYCETNTc0gaBvLyqN6scMqEFUeGdE

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\source\admincp\admincp_founder.js
    1⤵
      PID:2196

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads