Overview
overview
3Static
static
1youku/Cache.asp
windows7-x64
3youku/Cache.asp
windows10-2004-x64
3youku/Config.asp
windows7-x64
3youku/Config.asp
windows10-2004-x64
3youku/bottom.asp
windows7-x64
3youku/bottom.asp
windows10-2004-x64
3youku/gg/i...ght.js
windows7-x64
1youku/gg/i...ght.js
windows10-2004-x64
1youku/gg/piao.js
windows7-x64
1youku/gg/piao.js
windows10-2004-x64
1youku/gg/p...ght.js
windows7-x64
1youku/gg/p...ght.js
windows10-2004-x64
1youku/gg/s...ght.js
windows7-x64
1youku/gg/s...ght.js
windows10-2004-x64
1youku/gg/s...ght.js
windows7-x64
1youku/gg/s...ght.js
windows10-2004-x64
1youku/gg/soRight.js
windows7-x64
1youku/gg/soRight.js
windows10-2004-x64
1youku/guan...he.vbs
windows7-x64
1youku/guan...he.vbs
windows10-2004-x64
1youku/guan...in.vbs
windows7-x64
1youku/guan...in.vbs
windows10-2004-x64
1youku/guanli/ads.vbs
windows7-x64
1youku/guanli/ads.vbs
windows10-2004-x64
1youku/guanli/fso.vbs
windows7-x64
1youku/guanli/fso.vbs
windows10-2004-x64
1youku/guanli/gmm.vbs
windows7-x64
1youku/guanli/gmm.vbs
windows10-2004-x64
1youku/guanli/ht.vbs
windows7-x64
1youku/guanli/ht.vbs
windows10-2004-x64
1youku/guanli/mima.asp
windows7-x64
3youku/guanli/mima.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
youku/Cache.asp
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
youku/Cache.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
youku/Config.asp
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
youku/Config.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
youku/bottom.asp
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
youku/bottom.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
youku/gg/indexRight.js
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
youku/gg/indexRight.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
youku/gg/piao.js
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
youku/gg/piao.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
youku/gg/playlistshowRight.js
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
youku/gg/playlistshowRight.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
youku/gg/showlistRight.js
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
youku/gg/showlistRight.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
youku/gg/showpageRight.js
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
youku/gg/showpageRight.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
youku/gg/soRight.js
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
youku/gg/soRight.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
youku/guanli/CleanCache.vbs
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
youku/guanli/CleanCache.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
youku/guanli/admin.vbs
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
youku/guanli/admin.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
youku/guanli/ads.vbs
Resource
win7-20240215-en
Behavioral task
behavioral24
Sample
youku/guanli/ads.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
youku/guanli/fso.vbs
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
youku/guanli/fso.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
youku/guanli/gmm.vbs
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
youku/guanli/gmm.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
youku/guanli/ht.vbs
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
youku/guanli/ht.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
youku/guanli/mima.asp
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
youku/guanli/mima.asp
Resource
win10v2004-20240226-en
General
-
Target
c16f70ae3976b5e43f0a805cb99cc804
-
Size
75KB
-
MD5
c16f70ae3976b5e43f0a805cb99cc804
-
SHA1
bfa3e0a5598c69ce32369ac6e3e8c267f68a6c08
-
SHA256
48c5589838369ec0cc9e426cc08f9c447900734c5692dcfbf2f2a9f29cbf6fd3
-
SHA512
a4e7ede5165af6efe4dff8680eca71be1dd34116ef206c8ad7f50b83003b14a19cad880dcaf1c11eb96d3d753d0e70f9c2d35a79162dc5b4b15dbdb933f9aed4
-
SSDEEP
1536:+RxaUQjQG1QHSoDU/rP2aQI6cAqcg1t4w6CiI9IOBbDzCwlGzD8Q+l:+vQjQG1QHxgaiA9gH68IOBbXBGzDIl
Malware Config
Signatures
Files
-
c16f70ae3976b5e43f0a805cb99cc804.rar
-
youku/Cache.asp
-
youku/Config.asp
-
youku/bottom.asp
-
youku/gg/indexRight.js
-
youku/gg/piao.js
-
youku/gg/playlistshowRight.js
-
youku/gg/showlistRight.js
-
youku/gg/showpageRight.js
-
youku/gg/soRight.js
-
youku/guanli/CleanCache.asp.vbs
-
youku/guanli/admin.asp.vbs
-
youku/guanli/ads.asp.vbs
-
youku/guanli/fso.asp.vbs
-
youku/guanli/gmm.asp.vbs
-
youku/guanli/ht.asp.vbs
-
youku/guanli/mima.asp
-
youku/guanli/upload.asp.vbs
-
youku/head.asp
-
youku/images/ajax-loading.gif.gif
-
youku/images/black-70.png.png
-
youku/images/black.png.png
-
youku/images/effects.js.js
-
youku/images/fangxin.gif.gif
-
youku/images/lightwindow.css
-
youku/images/lightwindow.js.js
-
youku/images/logo.gif.gif
-
youku/images/nuli.gif.gif
-
youku/images/prototype.js.js
-
youku/images/so.gif.gif
-
youku/index.asp.asp .js polyglot
-
youku/playlistshow.asp.vbs
-
youku/searchtop.asp.js
-
youku/showeplist.asp.vbs
-
youku/showlist.asp.vbs
-
youku/showpage.asp.vbs
-
youku/so.asp.vbs
-
youku/sql.asp.vbs
-
youku/vplaylist.asp.vbs
-
youku/yp.asp
-
youku/优酷视频小偷说明.txt
-
youku/新云软件.url.url