Overview
overview
3Static
static
1Download.asp
windows7-x64
3Download.asp
windows10-2004-x64
3Include.asp
windows7-x64
3Include.asp
windows10-2004-x64
3Include/Config.vbs
windows7-x64
1Include/Config.vbs
windows10-2004-x64
1Include/Function.vbs
windows7-x64
1Include/Function.vbs
windows10-2004-x64
1Include/Template.vbs
windows7-x64
1Include/Template.vbs
windows10-2004-x64
1Include/�...��.url
windows7-x64
1Include/�...��.url
windows10-2004-x64
1Index.asp
windows7-x64
3Index.asp
windows10-2004-x64
3List.asp
windows7-x64
3List.asp
windows10-2004-x64
3Listen.asp
windows7-x64
3Listen.asp
windows10-2004-x64
3Lyric.vbs
windows7-x64
1Lyric.vbs
windows10-2004-x64
1Search.vbs
windows7-x64
1Search.vbs
windows10-2004-x64
1Skin/Js/base.js
windows7-x64
1Skin/Js/base.js
windows10-2004-x64
1Skin/Js/jquery.js
windows7-x64
1Skin/Js/jquery.js
windows10-2004-x64
1Skin/Js/jq...ble.js
windows7-x64
1Skin/Js/jq...ble.js
windows10-2004-x64
1Skin/Js/sug.js
windows7-x64
1Skin/Js/sug.js
windows10-2004-x64
1Skin/download.html
windows7-x64
1Skin/download.html
windows10-2004-x64
1Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11/03/2024, 23:32
Static task
static1
Behavioral task
behavioral1
Sample
Download.asp
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Download.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Include.asp
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Include.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Include/Config.vbs
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Include/Config.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Include/Function.vbs
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Include/Function.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Include/Template.vbs
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
Include/Template.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Include/新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Include/新云软件.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Index.asp
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Index.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
List.asp
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
List.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Listen.asp
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Listen.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Lyric.vbs
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Lyric.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Search.vbs
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Search.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Skin/Js/base.js
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Skin/Js/base.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
Skin/Js/jquery.js
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Skin/Js/jquery.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
Skin/Js/jquery.sortable.js
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
Skin/Js/jquery.sortable.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
Skin/Js/sug.js
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
Skin/Js/sug.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
Skin/download.html
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Skin/download.html
Resource
win10v2004-20240226-en
General
-
Target
Include.asp
-
Size
500B
-
MD5
894aa1b56fe5564a5d2f91bf891f447d
-
SHA1
6c740c6a34c1c36dd132ab4687f60632c668a4c6
-
SHA256
ef369c2828e31473e8b8d187eb75f6b6922e9cb1a1010388de267724d9ef51b9
-
SHA512
7758f6d0e84d12679396a34f40c4224f6c79b8819896df69f9b871078d916e908f5587e9335b6fe685b8997018f12646755afaea75600ba55ed87c26ead6e1bf
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Include.asp1⤵PID:3792
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3776 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:81⤵PID:4280