Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3信阳热�...3d.asp
windows7-x64
3信阳热�...3d.asp
windows10-2004-x64
3信阳热�...NG.vbs
windows7-x64
1信阳热�...NG.vbs
windows10-2004-x64
1信阳热�...in.vbs
windows7-x64
1信阳热�...in.vbs
windows10-2004-x64
1信阳热�...ds.vbs
windows7-x64
1信阳热�...ds.vbs
windows10-2004-x64
1信阳热�...le.vbs
windows7-x64
1信阳热�...le.vbs
windows10-2004-x64
1信阳热�...at.vbs
windows7-x64
1信阳热�...at.vbs
windows10-2004-x64
1信阳热�...ms.vbs
windows7-x64
1信阳热�...ms.vbs
windows10-2004-x64
1信阳热�...ny.vbs
windows7-x64
1信阳热�...ny.vbs
windows10-2004-x64
1信阳热�...it.vbs
windows7-x64
1信阳热�...it.vbs
windows10-2004-x64
1信阳热�...ta.vbs
windows7-x64
1信阳热�...ta.vbs
windows10-2004-x64
1信阳热�...ry.vbs
windows7-x64
1信阳热�...ry.vbs
windows10-2004-x64
1信阳热�...sk.vbs
windows7-x64
1信阳热�...sk.vbs
windows10-2004-x64
1信阳热�...wn.vbs
windows7-x64
1信阳热�...wn.vbs
windows10-2004-x64
1信阳热�...av.vbs
windows7-x64
1信阳热�...av.vbs
windows10-2004-x64
1信阳热�...sh.vbs
windows7-x64
1信阳热�...sh.vbs
windows10-2004-x64
1信阳热�...ea.vbs
windows7-x64
1信阳热�...ea.vbs
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28/02/2024, 08:09
Static task
static1
Behavioral task
behavioral1
Sample
信阳热线全站程序 v2.8/3d.asp
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
信阳热线全站程序 v2.8/3d.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
信阳热线全站程序 v2.8/DUCHANG.vbs
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
信阳热线全站程序 v2.8/DUCHANG.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
信阳热线全站程序 v2.8/admin.vbs
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
信阳热线全站程序 v2.8/admin.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
信阳热线全站程序 v2.8/admin_ads.vbs
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
信阳热线全站程序 v2.8/admin_ads.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
信阳热线全站程序 v2.8/admin_article.vbs
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
信阳热线全站程序 v2.8/admin_article.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
信阳热线全站程序 v2.8/admin_chat.vbs
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
信阳热线全站程序 v2.8/admin_chat.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
信阳热线全站程序 v2.8/admin_chms.vbs
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
信阳热线全站程序 v2.8/admin_chms.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
信阳热线全站程序 v2.8/admin_company.vbs
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
信阳热线全站程序 v2.8/admin_company.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
信阳热线全站程序 v2.8/admin_config_edit.vbs
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
信阳热线全站程序 v2.8/admin_config_edit.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
信阳热线全站程序 v2.8/admin_data.vbs
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
信阳热线全站程序 v2.8/admin_data.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
信阳热线全站程序 v2.8/admin_diary.vbs
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
信阳热线全站程序 v2.8/admin_diary.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
信阳热线全站程序 v2.8/admin_disk.vbs
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
信阳热线全站程序 v2.8/admin_disk.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
信阳热线全站程序 v2.8/admin_down.vbs
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
信阳热线全站程序 v2.8/admin_down.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
信阳热线全站程序 v2.8/admin_fav.vbs
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
信阳热线全站程序 v2.8/admin_fav.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
信阳热线全站程序 v2.8/admin_flash.vbs
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
信阳热线全站程序 v2.8/admin_flash.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
信阳热线全站程序 v2.8/admin_flea.vbs
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
信阳热线全站程序 v2.8/admin_flea.vbs
Resource
win10v2004-20240226-en
General
-
Target
信阳热线全站程序 v2.8/admin_disk.vbs
-
Size
2KB
-
MD5
4ac3132a4134ed01d79817a70b64f61d
-
SHA1
0bf05d40588f66ad6923d524a10cc36207e4448f
-
SHA256
87f4c21b2dc3177a356ff776b46df319926c38d8f2fda17376f43f93662d2582
-
SHA512
9f212051c8f3a7b8c7b5381fdb0f1b94884614685e038c7363ba5afe38549453e9a899295d1b28fd68bcd6d439f942df0272c9716470230cf5e4258383d24497
Malware Config
Signatures
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\信阳热线全站程序 v2.8\admin_disk.vbs"1⤵PID:3684
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1340 --field-trial-handle=2276,i,11674642242468042059,14711253743544118298,262144 --variations-seed-version /prefetch:81⤵PID:4900