Overview
overview
1Static
static
1readme/新...��.url
windows7-x64
1readme/新...��.url
windows10-2004-x64
1upload/dat...x.html
windows7-x64
1upload/dat...x.html
windows10-2004-x64
1upload/dat...x.html
windows7-x64
1upload/dat...x.html
windows10-2004-x64
1upload/dat...x.html
windows7-x64
1upload/dat...x.html
windows10-2004-x64
1upload/dat...x.html
windows7-x64
1upload/dat...x.html
windows10-2004-x64
1upload/dat...x.html
windows7-x64
1upload/dat...x.html
windows10-2004-x64
1upload/dat...x.html
windows7-x64
1upload/dat...x.html
windows10-2004-x64
1upload/dat...x.html
windows7-x64
1upload/dat...x.html
windows10-2004-x64
1upload/dat...x.html
windows7-x64
1upload/dat...x.html
windows10-2004-x64
upload/dat...x.html
windows7-x64
1upload/dat...x.html
windows10-2004-x64
1upload/dat...x.html
windows7-x64
1upload/dat...x.html
windows10-2004-x64
1upload/dat...x.html
windows7-x64
1upload/dat...x.html
windows10-2004-x64
1upload/ded...it.vbs
windows7-x64
1upload/ded...it.vbs
windows10-2004-x64
1upload/ded...dd.ps1
windows7-x64
1upload/ded...dd.ps1
windows10-2004-x64
1upload/ded...do.ps1
windows7-x64
1upload/ded...do.ps1
windows10-2004-x64
1upload/ded...it.ps1
windows7-x64
1upload/ded...it.ps1
windows10-2004-x64
1Analysis
-
max time kernel
137s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
27-02-2024 12:51
Static task
static1
Behavioral task
behavioral1
Sample
readme/新云软件.url
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
readme/新云软件.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
upload/data/admin/index.html
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
upload/data/admin/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
upload/data/backupdata/index.html
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
upload/data/backupdata/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
upload/data/cache/index.html
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
upload/data/cache/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
upload/data/index.html
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
upload/data/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
upload/data/js/index.html
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
upload/data/js/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
upload/data/mark/index.html
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
upload/data/mark/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
upload/data/rss/index.html
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
upload/data/rss/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
upload/data/sessions/index.html
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
upload/data/sessions/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
upload/data/textdata/index.html
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
upload/data/textdata/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
upload/data/tplcache/index.html
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
upload/data/tplcache/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
upload/data/ziptmp/index.html
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
upload/data/ziptmp/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
upload/dede/ad_edit.vbs
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
upload/dede/ad_edit.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
upload/dede/archives_add.ps1
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
upload/dede/archives_add.ps1
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
upload/dede/archives_do.ps1
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
upload/dede/archives_do.ps1
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
upload/dede/archives_edit.ps1
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
upload/dede/archives_edit.ps1
Resource
win10v2004-20240226-en
General
-
Target
upload/data/backupdata/index.html
-
Size
3B
-
MD5
736007832d2167baaae763fd3a3f3cf1
-
SHA1
7ee737c83ee689c96ef37d3a029068c390ebc8f8
-
SHA256
2b64c6d9afd8a34ed0dbf35f7de171a8825a50d9f42f05e98fe2b1addf00ab44
-
SHA512
6beba489cd62566c108b652b7143cb97e007396a0b16ce250d2d0ac6e51ed999e41e96eb497b29efa99d2a15f276d6d531aa9ead15e2c13d77b3846ee45f64ac
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\upload\data\backupdata\index.html1⤵PID:872
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=4012 --field-trial-handle=2276,i,5697607538120380977,9987005253899555344,262144 --variations-seed-version /prefetch:11⤵PID:1608
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5816 --field-trial-handle=2276,i,5697607538120380977,9987005253899555344,262144 --variations-seed-version /prefetch:81⤵PID:1732
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=5672 --field-trial-handle=2276,i,5697607538120380977,9987005253899555344,262144 --variations-seed-version /prefetch:11⤵PID:2244
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=4932 --field-trial-handle=2276,i,5697607538120380977,9987005253899555344,262144 --variations-seed-version /prefetch:11⤵PID:3436
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=4416 --field-trial-handle=2276,i,5697607538120380977,9987005253899555344,262144 --variations-seed-version /prefetch:81⤵PID:2376