Overview

overview

3

Static

static

1

程序文�...bd.vbs

windows7-x64

1

程序文�...bd.vbs

windows10-2004-x64

1

程序文�...in.vbs

windows7-x64

1

程序文�...in.vbs

windows10-2004-x64

1

程序文�...ck.asp

windows7-x64

3

程序文�...ck.asp

windows10-2004-x64

3

程序文�...ax.vbs

windows7-x64

1

程序文�...ax.vbs

windows10-2004-x64

1

程序文�...le.vbs

windows7-x64

1

程序文�...le.vbs

windows10-2004-x64

1

程序文�...ta.asp

windows7-x64

3

程序文�...ta.asp

windows10-2004-x64

3

程序文�...rd.asp

windows7-x64

3

程序文�...rd.asp

windows10-2004-x64

3

程序文�...wn.vbs

windows7-x64

1

程序文�...wn.vbs

windows10-2004-x64

1

程序文�...min.js

windows7-x64

1

程序文�...min.js

windows10-2004-x64

1

程序文�...min.js

windows7-x64

1

程序文�...min.js

windows10-2004-x64

1

程序文�...ld.vbs

windows7-x64

1

程序文�...ld.vbs

windows10-2004-x64

1

程序文�...le.vbs

windows7-x64

1

程序文�...le.vbs

windows10-2004-x64

1

程序文�...ds.vbs

windows7-x64

1

程序文�...ds.vbs

windows10-2004-x64

1

程序文�...pe.vbs

windows7-x64

1

程序文�...pe.vbs

windows10-2004-x64

1

程序文�...ok.vbs

windows7-x64

1

程序文�...ok.vbs

windows10-2004-x64

1

程序文�...el.vbs

windows7-x64

1

程序文�...el.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/03/2024, 09:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    程序文件夹/Admin/AdminCheck.asp

  • Size

    264B

  • MD5

    60e5f8ed3c56b49ca6968326e7303582

  • SHA1

    4391b7e4abaedc442b5d39320a5fe4b35321d49f

  • SHA256

    b7588871b4f357b852d56b4f7ad60d30d845c53b29df5e50951edd1e97784d86

  • SHA512

    ccecf7edad3b025abcf5b444ab1628eba2b9eb147ce6f12f25cfee41f31d0b43a90f6da4609ac9500657bb139e32bd32ca658d367e5efc01ca550419f1823e3c

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\程序文件夹\Admin\AdminCheck.asp
    1⤵
      PID:4940
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1792 --field-trial-handle=2228,i,521073434451423547,2311651514500527526,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:4120

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads