Overview
overview
3Static
static
1ad/index_ad1.js
windows7-x64
1ad/index_ad1.js
windows10-2004-x64
1ad/index_ad2.js
windows7-x64
1ad/index_ad2.js
windows10-2004-x64
1ad/新云软件.url
windows7-x64
1ad/新云软件.url
windows10-2004-x64
1admin/index.vbs
windows7-x64
1admin/index.vbs
windows10-2004-x64
1admin/laos...91.asp
windows7-x64
3admin/laos...91.asp
windows10-2004-x64
3admin/laos...an.vbs
windows7-x64
1admin/laos...an.vbs
windows10-2004-x64
1admin/laos...er.vbs
windows7-x64
1admin/laos...er.vbs
windows10-2004-x64
1admin/laos...an.vbs
windows7-x64
1admin/laos...an.vbs
windows10-2004-x64
1admin/laos_exit.asp
windows7-x64
3admin/laos_exit.asp
windows10-2004-x64
3admin/laos_left.js
windows7-x64
1admin/laos_left.js
windows10-2004-x64
1admin/laos_main.vbs
windows7-x64
1admin/laos_main.vbs
windows10-2004-x64
1admin/laos_manage.asp
windows7-x64
3admin/laos_manage.asp
windows10-2004-x64
3admin/laos_md5.vbs
windows7-x64
1admin/laos_md5.vbs
windows10-2004-x64
1admin/laos_pass.vbs
windows7-x64
1admin/laos_pass.vbs
windows10-2004-x64
1admin/laos_save.vbs
windows7-x64
1admin/laos_save.vbs
windows10-2004-x64
1admin/laos...an.vbs
windows7-x64
1admin/laos...an.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ad/index_ad1.js
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad/index_ad1.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
ad/index_ad2.js
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
ad/index_ad2.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
ad/新云软件.url
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
ad/新云软件.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
admin/index.vbs
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
admin/index.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
admin/laos_7280091.asp
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
admin/laos_7280091.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
admin/laos_addshujuan.vbs
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
admin/laos_addshujuan.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
admin/laos_checkuser.vbs
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
admin/laos_checkuser.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
admin/laos_editshujuan.vbs
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
admin/laos_editshujuan.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
admin/laos_exit.asp
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
admin/laos_exit.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
admin/laos_left.js
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
admin/laos_left.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
admin/laos_main.vbs
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
admin/laos_main.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
admin/laos_manage.asp
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
admin/laos_manage.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
admin/laos_md5.vbs
Resource
win7-20240220-en
Behavioral task
behavioral26
Sample
admin/laos_md5.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
admin/laos_pass.vbs
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
admin/laos_pass.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
admin/laos_save.vbs
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
admin/laos_save.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
admin/laos_shujuan.vbs
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
admin/laos_shujuan.vbs
Resource
win10v2004-20240226-en
General
-
Target
ac0716d1374aed0b7e674019de523ddd
-
Size
225KB
-
MD5
ac0716d1374aed0b7e674019de523ddd
-
SHA1
30cdd7ef71d7bf41d7a5e839b0872304cb53bc6d
-
SHA256
d33c4de4a9dd44c60e8887347d6957cb5aedb7093e42371c479429871576383c
-
SHA512
89bb4c2c0e72aec60b4180785e8ac46df5b12760afe8d715002af8394ef50bb579680f83c2af4069013c4deec95c99860dd9123bf02fdb7f3c706058aba7074a
-
SSDEEP
6144:DuJV60JhKAYJIXu/j6WfsXkfVXhu+DJw+bedCO:D6Fu/eWfNthusJ78H
Malware Config
Signatures
Files
-
ac0716d1374aed0b7e674019de523ddd.rar
-
ad/950_90.jpg.jpg
-
ad/index_ad1.js
-
ad/index_ad2.js
-
ad/新云软件.url.url
-
admin/index.asp.vbs
-
admin/laos_7280091.asp
-
admin/laos_addjie.asp.html .vbs polyglot
-
admin/laos_addshu.asp.html .vbs polyglot
-
admin/laos_addshujuan.asp.vbs
-
admin/laos_checkuser.asp.vbs
-
admin/laos_class.asp.html .vbs polyglot
-
admin/laos_editjie.asp.html .vbs polyglot
-
admin/laos_editshu.asp.html .vbs polyglot
-
admin/laos_editshujuan.asp.vbs
-
admin/laos_exit.asp
-
admin/laos_hfly.asp.html .vbs polyglot
-
admin/laos_jie.asp.html .vbs polyglot
-
admin/laos_left.asp.js
-
admin/laos_ly.asp.html .vbs polyglot
-
admin/laos_main.asp.vbs
-
admin/laos_manage.asp
-
admin/laos_md5.asp.vbs
-
admin/laos_pass.asp.vbs
-
admin/laos_pics.asp.html .vbs polyglot
-
admin/laos_save.asp.vbs
-
admin/laos_shu.asp.html .vbs polyglot
-
admin/laos_shujuan.asp.vbs
-
admin/laos_system.asp
-
admin/laos_top.asp
-
admin/laos_upload.inc.html .vbs polyglot
-
bid.asp.html .vbs polyglot
-
book.asp.html .vbs polyglot
-
click.asp.vbs
-
editor/bbcode.js.js
-
editor/common.js.js
-
editor/editor.html.html .js polyglot
-
editor/editor.js.js
-
editor/images/Thumbs.db
-
editor/images/bb_bold.gif.gif
-
editor/images/bb_center.gif.gif
-
editor/images/bb_clear.gif.gif
-
editor/images/bb_code.gif.gif
-
editor/images/bb_color.gif.gif
-
editor/images/bb_contract.gif.gif
-
editor/images/bb_email.gif.gif
-
editor/images/bb_expand.gif.gif
-
editor/images/bb_flash.gif.gif
-
editor/images/bb_floatleft.gif.gif
-
editor/images/bb_floatright.gif.gif
-
editor/images/bb_fly.gif.gif
-
editor/images/bb_free.gif.gif
-
editor/images/bb_hide.gif.gif
-
editor/images/bb_image.gif.gif
-
editor/images/bb_indent.gif.gif
-
editor/images/bb_italic.gif.gif
-
editor/images/bb_left.gif.gif
-
editor/images/bb_media.gif.gif
-
editor/images/bb_menupop.gif.gif
-
editor/images/bb_orderedlist.gif.gif
-
editor/images/bb_outdent.gif.gif
-
editor/images/bb_qq.gif.gif
-
editor/images/bb_quote.gif.gif
-
editor/images/bb_redo.gif.gif
-
editor/images/bb_removeformat.gif.gif
-
editor/images/bb_right.gif.gif
-
editor/images/bb_separator.gif.gif
-
editor/images/bb_sub.gif.gif
-
editor/images/bb_sup.gif.gif
-
editor/images/bb_table.gif.gif
-
editor/images/bb_underline.gif.gif
-
editor/images/bb_undo.gif.gif
-
editor/images/bb_unlink.gif.gif
-
editor/images/bb_unorderedlist.gif.gif
-
editor/images/bb_url.gif.gif
-
editor/images/portalbox_bg.gif.gif
-
editor/lang.js.js
-
editor/laos.js
-
editor/menu.js.js
-
editor/post.js.js
-
editor/post_editor.js.js
-
editor/style.css
-
id.asp.html .vbs polyglot
-
images/Thumbs.db
-
images/admin/1.png.png
-
images/admin/2.png.png
-
images/admin/3.png.png
-
images/admin/Thumbs.db
-
images/admin/admin_a.png.png
-
images/admin/admin_b.png.png
-
images/admin/exit.png.png
-
images/admin/exit_a.png.png
-
images/admin/left_a.png.png
-
images/admin/left_bg.png.png
-
images/admin/left_down.png.png
-
images/admin/left_top.png.png
-
images/admin/left_top1.png.png
-
images/admin/logo.png.png
-
images/admin/right_top.png.png
-
images/admin/right_topbg.png.png
-
images/admin/topbg.png.png
-
images/admin/write.jpg.jpg
-
images/bang.gif.gif
-
images/bg1.gif.gif
-
images/bg2.gif.gif
-
images/bg3.gif.gif
-
images/bg4.gif.gif
-
images/css.css
-
images/hbg.gif.gif
-
images/hm_bg.png.png
-
images/ico/Thumbs.db
-
images/ico/ico.gif.gif
-
images/ico/ico1.png.png
-
images/ico/ico10.png.png
-
images/ico/ico11.png.png
-
images/ico/ico12.png.png
-
images/ico/ico13.png.png
-
images/ico/ico14.png.png
-
images/ico/ico15.png.png
-
images/ico/ico16.png.png
-
images/ico/ico17.png.png
-
images/ico/ico19.png.png
-
images/ico/ico2.png.png
-
images/ico/ico20.png.png
-
images/ico/ico21.png.png
-
images/ico/ico22.png.png
-
images/ico/ico23.png.png
-
images/ico/ico24.png.png
-
images/ico/ico25.png.png
-
images/ico/ico26.png.png
-
images/ico/ico27.png.png
-
images/ico/ico28.png.png
-
images/ico/ico29.png.png
-
images/ico/ico3.png.png
-
images/ico/ico30.png.png
-
images/ico/ico31.png.png
-
images/ico/ico32.png.png
-
images/ico/ico33.png.png
-
images/ico/ico34.png.png
-
images/ico/ico35.png.png
-
images/ico/ico36.png.png
-
images/ico/ico37.png.png
-
images/ico/ico38.png.png
-
images/ico/ico39.png.png
-
images/ico/ico4.png.png
-
images/ico/ico40.png.png
-
images/ico/ico41.png.png
-
images/ico/ico42.png.png
-
images/ico/ico5.png.png
-
images/ico/ico6.png.png
-
images/ico/ico7.png.png
-
images/ico/ico8.png.png
-
images/ico/ico9.png.png
-
images/ico/line.gif.gif
-
images/ico/url.gif
-
images/lang.js.js
-
images/laos.js
-
images/logo.png.png
-
images/ly.png.png
-
images/memu_d.png.png
-
images/memu_l.png.png
-
images/menu_bg.png.png
-
images/search.png.png
-
images/style.css
-
images/tit_a.png.png
-
images/view.js.js
-
inc/conn.asp.vbs
-
inc/fso.asp.vbs
-
inc/nocode.asp.vbs
-
inc/stream.asp.vbs
-
inc/ubb.asp.vbs
-
index.asp.html .vbs polyglot
-
laos_date/#laos_book.mdb
-
list.asp.html .vbs polyglot
-
search.asp.html .vbs polyglot
-
说明.txt