Overview
overview
1Static
static
1ad/indexad.js
windows7-x64
1ad/indexad.js
windows10-2004-x64
1ad/moviead.js
windows7-x64
1ad/moviead.js
windows10-2004-x64
1ad/playad.js
windows7-x64
1ad/playad.js
windows10-2004-x64
1ad/tonglan.js
windows7-x64
1ad/tonglan.js
windows10-2004-x64
1ad/新云软件.url
windows7-x64
1ad/新云软件.url
windows10-2004-x64
1admin/Coll...ml.vbs
windows7-x64
1admin/Coll...ml.vbs
windows10-2004-x64
1admin/Coll...ax.vbs
windows7-x64
1admin/Coll...ax.vbs
windows10-2004-x64
1admin/coll...ng.vbs
windows7-x64
1admin/coll...ng.vbs
windows10-2004-x64
1admin/coll...ie.vbs
windows7-x64
1admin/coll...ie.vbs
windows10-2004-x64
1admin/coll...ng.vbs
windows7-x64
1admin/coll...ng.vbs
windows10-2004-x64
1admin/coll...ing.js
windows7-x64
1admin/coll...ing.js
windows10-2004-x64
1admin/coll...on.vbs
windows7-x64
1admin/coll...on.vbs
windows10-2004-x64
1admin/coll...pe.vbs
windows7-x64
1admin/coll...pe.vbs
windows10-2004-x64
1admin/coll...on.vbs
windows7-x64
1admin/coll...on.vbs
windows10-2004-x64
1admin/edit...ct.htm
windows7-x64
1admin/edit...ct.htm
windows10-2004-x64
1admin/edit...ct.htm
windows7-x64
1admin/edit...ct.htm
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ad/indexad.js
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad/indexad.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
ad/moviead.js
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
ad/moviead.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
ad/playad.js
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
ad/playad.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
ad/tonglan.js
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
ad/tonglan.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
ad/新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
ad/新云软件.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
admin/CollectingXml.vbs
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
admin/CollectingXml.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
admin/CollectingXmlAjax.vbs
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
admin/CollectingXmlAjax.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
admin/collecting/admin_collecting.vbs
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
admin/collecting/admin_collecting.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
admin/collecting/admin_collecting_movie.vbs
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
admin/collecting/admin_collecting_movie.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
admin/collecting/collecting.vbs
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
admin/collecting/collecting.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
admin/collecting/collecting.js
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
admin/collecting/collecting.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
admin/collecting/collecting_cregion.vbs
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
admin/collecting/collecting_cregion.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
admin/collecting/collecting_ctype.vbs
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
admin/collecting/collecting_ctype.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
admin/collecting/collecting_function.vbs
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
admin/collecting/collecting_function.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
admin/editor/FontFaceSelect.htm
Resource
win7-20240215-en
Behavioral task
behavioral30
Sample
admin/editor/FontFaceSelect.htm
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
admin/editor/FontSizeSelect.htm
Resource
win7-20240220-en
Behavioral task
behavioral32
Sample
admin/editor/FontSizeSelect.htm
Resource
win10v2004-20240226-en
General
-
Target
c40c0e70dd9890f89974ee684ff0d084
-
Size
592KB
-
MD5
c40c0e70dd9890f89974ee684ff0d084
-
SHA1
73c874e6e53b70421b3950ca3658e8bc22bfde56
-
SHA256
f8657757d3f25d577ddbfe50f5a3853751ff786931e5a104f727b901b2c45995
-
SHA512
6bf6bf737f3e29cb491f5d89a3069a1c45e49a7f45180554125e7f31b5c3d2684f5397091773ac04a434d563e412f126348961ca3e9cf57e81f5ba64d24bac15
-
SSDEEP
12288:yYYjZ0crlnBz184SBzRp29w8eZvlm+/fBYd38T1oVoNvACAyfFZTVDG:yYkBrlnho9p29wnDBn4MT1oaNDAcVDG
Malware Config
Signatures
Files
-
c40c0e70dd9890f89974ee684ff0d084.rar
-
ad/indexad.js
-
ad/moviead.js
-
ad/playad.js
-
ad/tonglan.js
-
ad/新云软件.url.url
-
admin/CollectingXml.asp.vbs
-
admin/CollectingXmlAjax.asp.vbs
-
admin/collecting/admin_collecting.asp.vbs
-
admin/collecting/admin_collecting_movie.asp.vbs
-
admin/collecting/admin_left_collecting.asp.html .js polyglot
-
admin/collecting/collecting.asp.vbs
-
admin/collecting/collecting.js.js
-
admin/collecting/collecting_cregion.asp.vbs
-
admin/collecting/collecting_ctype.asp.vbs
-
admin/collecting/collecting_function.asp.vbs
-
admin/editor/ColorSelect.htm.html .js polyglot
-
admin/editor/FontFaceSelect.htm.html
-
admin/editor/FontSizeSelect.htm.html
-
admin/editor/blankpage.htm.html
-
admin/editor/colorSelect.js.js
-
admin/editor/editfunc.js.js
-
admin/editor/editorArea.css
-
admin/editor/images/1.gif.gif
-
admin/editor/images/10.gif.gif
-
admin/editor/images/11.gif.gif
-
admin/editor/images/12.gif.gif
-
admin/editor/images/13.gif.gif
-
admin/editor/images/14.gif.gif
-
admin/editor/images/15.gif.gif
-
admin/editor/images/16.gif.gif
-
admin/editor/images/17.gif.gif
-
admin/editor/images/18.gif.gif
-
admin/editor/images/19.gif.gif
-
admin/editor/images/2.gif.gif
-
admin/editor/images/20.gif.gif
-
admin/editor/images/3.gif.gif
-
admin/editor/images/4.gif.gif
-
admin/editor/images/5.gif.gif
-
admin/editor/images/6.gif.gif
-
admin/editor/images/7.gif.gif
-
admin/editor/images/8.gif.gif
-
admin/editor/images/9.gif.gif
-
admin/editor/images/bg.gif.gif
-
admin/editor/images/line.gif.gif
-
admin/editor/index.html.html .js polyglot
-
admin/editor/portraitSelect.js.js
-
admin/images/admin_tlogo.jpg.jpg
-
admin/images/asp.gif.gif
-
admin/images/body_title_bg.gif.gif
-
admin/images/body_title_cen.gif.gif
-
admin/images/body_title_left.gif.gif
-
admin/images/body_title_right.gif.gif
-
admin/images/c_bg.gif.gif
-
admin/images/calendar.gif.gif
-
admin/images/css_body.css
-
admin/images/css_menu.css
-
admin/images/css_top.css
-
admin/images/dir.gif.gif
-
admin/images/dir2.gif.gif
-
admin/images/ico_1.gif.gif
-
admin/images/ico_2.gif.gif
-
admin/images/ico_3.gif.gif
-
admin/images/icon_01.gif.gif
-
admin/images/icon_02.gif.gif
-
admin/images/inputbut_bg.gif.gif
-
admin/images/loadings.gif.gif
-
admin/images/login_input_bg.gif.gif
-
admin/images/login_input_hr.gif.gif
-
admin/images/login_submit.gif.gif
-
admin/images/login_toptitle.jpg.jpg
-
admin/images/menu_bg.gif.gif
-
admin/images/menu_bg_over.gif.gif
-
admin/images/menu_title_bg.jpg.jpg
-
admin/images/right.gif.gif
-
admin/images/tobbg.gif.gif
-
admin/images/top_bg_hr.jpg.jpg
-
admin/images/top_nav_bg.jpg.jpg
-
admin/images/top_nav_left.jpg.jpg
-
admin/images/top_nav_on.gif.gif
-
admin/images/top_nav_right.jpg.jpg
-
admin/images/top_nav_sr.gif.gif
-
admin/inc/calendar.js.js
-
admin/inc/downpic.asp.vbs
-
admin/inc/function.asp.vbs
-
admin/inc/htmljs.js.js
-
admin/inc/js.js.js
-
admin/inc/md5.asp.vbs
-
admin/inc/movie.js.js
-
admin/inc/movieajax.asp
-
admin/inc/upclass.asp.vbs
-
admin/inc/upload.asp.vbs
-
admin/inc/upmoviepic.asp.html .js polyglot
-
admin/inc/vassistant.asp.vbs
-
admin/index.asp
-
admin/updata/upinstall.asp
-
admin/yk_ad.asp.vbs
-
admin/yk_admin.asp.vbs
-
admin/yk_comments.asp.vbs
-
admin/yk_dbback.asp.vbs
-
admin/yk_error.asp.js
-
admin/yk_feature.asp.vbs
-
admin/yk_formovie.asp.js
-
admin/yk_ftpdata.asp.js
-
admin/yk_ftpdataajax.asp.vbs
-
admin/yk_htmlall.asp.js
-
admin/yk_htmlallmovie.asp
-
admin/yk_htmlallmovieajax.asp
-
admin/yk_htmlfeature.asp.vbs
-
admin/yk_htmlfeatureajax.asp.vbs
-
admin/yk_htmlindex.asp
-
admin/yk_htmlindexajax.asp
-
admin/yk_htmlmovie.asp.vbs
-
admin/yk_htmlmovieajax.asp.js
-
admin/yk_htmltype.asp.vbs
-
admin/yk_htmltypeajax.asp.vbs
-
admin/yk_index.asp.vbs
-
admin/yk_left_data.asp.html .js polyglot
-
admin/yk_left_html.asp.html .js polyglot
-
admin/yk_left_movie.asp.html .js polyglot
-
admin/yk_left_safe.asp.html .js polyglot
-
admin/yk_left_system.asp.html .js polyglot
-
admin/yk_left_template.asp.html .js polyglot
-
admin/yk_left_union.asp.js
-
admin/yk_link.asp.vbs
-
admin/yk_log.asp.vbs
-
admin/yk_login.asp.vbs
-
admin/yk_movie.asp.vbs
-
admin/yk_news.asp.vbs
-
admin/yk_playad.asp.vbs
-
admin/yk_player.asp.vbs
-
admin/yk_region.asp.vbs
-
admin/yk_sitemap.asp
-
admin/yk_sitemapajax.asp.vbs
-
admin/yk_slide.asp.vbs
-
admin/yk_sqlexe.asp.vbs
-
admin/yk_system.asp.vbs
-
admin/yk_templates.asp.vbs
-
admin/yk_top.asp
-
admin/yk_type.asp.vbs
-
admin/yk_umovie.asp.vbs
-
admin/yk_updata.asp.js
-
admin/yk_updataajax.asp.vbs
-
admin/yk_uplayer.asp.vbs
-
admin/yk_uregion.asp.vbs
-
admin/yk_utype.asp.vbs
-
allmovie.asp
-
data/#db.asp
-
feature.asp
-
flashslide/style1/Flash.swf
-
flashslide/style2/Flash.swf
-
inc/ajaxrequest.js.js
-
inc/btn_bg.gif.gif
-
inc/close.gif.gif
-
inc/comments.asp.vbs
-
inc/config.asp
-
inc/conn.asp.vbs
-
inc/formovie.asp.vbs
-
inc/lablefunction.asp.vbs
-
inc/movieerror.asp
-
inc/moviehits.asp
-
inc/moviejs.js.js
-
inc/movieurlerror.asp.vbs
-
inc/page.asp.vbs
-
inc/somap.asp.vbs
-
inc/titleIco.gif.gif
-
inc/title_bg_left.gif.gif
-
inc/title_bg_right.gif.gif
-
inc/ykmvshowhits.asp.vbs
-
inc/ykskin.asp.vbs
-
index.asp.vbs
-
install/images/default.css
-
install/images/logo.gif.gif
-
install/images/ok.jpg.jpg
-
install/index.asp.vbs
-
install/md5.asp.vbs
-
install/top.asp.html
-
movie.asp.js
-
moviecms说明.txt
-
news.asp
-
play.asp.js
-
play/56.htm.html .js polyglot
-
play/KKPlayer.js.js
-
play/ad-bg.gif.gif
-
play/ad.asp.js
-
play/player.asp
-
play/vcastr22.swf
-
search.asp
-
slide/1.jpg.jpg
-
slide/2.jpg.jpg
-
slide/3.jpg.jpg
-
templates/black/allmovie.htm.html
-
templates/black/feature.htm.html
-
templates/black/footer.htm.js
-
templates/black/header.htm
-
templates/black/images/1.gif.gif
-
templates/black/images/10.gif.gif
-
templates/black/images/2.gif.gif
-
templates/black/images/3.gif.gif
-
templates/black/images/4.gif.gif
-
templates/black/images/5.gif.gif
-
templates/black/images/6.gif.gif
-
templates/black/images/7.gif.gif
-
templates/black/images/8.gif.gif
-
templates/black/images/9.gif.gif
-
templates/black/images/bg.jpg.jpg
-
templates/black/images/bookmarker.js.js
-
templates/black/images/box1.jpg.jpg
-
templates/black/images/box2.jpg.jpg
-
templates/black/images/highline.jpg.jpg
-
templates/black/images/hoverbg.jpg.jpg
-
templates/black/images/ico.gif.gif
-
templates/black/images/more.jpg.jpg
-
templates/black/images/nav-bg.gif.gif
-
templates/black/images/nav-bg.jpg.jpg
-
templates/black/images/navbg.gif.gif
-
templates/black/images/navbg.jpg.jpg
-
templates/black/images/sbutton.gif.gif
-
templates/black/images/titleblue.jpg.jpg
-
templates/black/images/titlegreen.jpg.jpg
-
templates/black/images/titlewrite.jpg.jpg
-
templates/black/index.htm.html
-
templates/black/movie.htm.html .js polyglot
-
templates/black/play.htm.html
-
templates/black/search.htm.html
-
templates/black/styles/default.css
-
templates/black/type.htm.html
-
templates/default/allmovie.htm.html
-
templates/default/feature.htm.html
-
templates/default/footer.htm
-
templates/default/header.htm
-
templates/default/images/1.gif.gif
-
templates/default/images/10.gif.gif
-
templates/default/images/2.gif.gif
-
templates/default/images/2star.gif.gif
-
templates/default/images/3.gif.gif
-
templates/default/images/4.gif.gif
-
templates/default/images/5.gif.gif
-
templates/default/images/6.gif.gif
-
templates/default/images/7.gif.gif
-
templates/default/images/8.gif.gif
-
templates/default/images/9.gif.gif
-
templates/default/images/an.gif.gif
-
templates/default/images/bookmarker.js.js
-
templates/default/images/di_top2.gif.gif
-
templates/default/images/down_qvod.gif.gif
-
templates/default/images/hot.gif.jpg
-
templates/default/images/ico.gif.gif
-
templates/default/images/nav-bg.gif.gif
-
templates/default/images/nav-bg2.gif.gif
-
templates/default/images/sbutton.gif.gif
-
templates/default/images/sou1.gif.gif
-
templates/default/images/sougif.gif.gif
-
templates/default/images/title_bg.jpg.jpg
-
templates/default/images/top_bg.gif.gif
-
templates/default/index.htm.html
-
templates/default/movie.htm.html .js polyglot
-
templates/default/play.htm.html
-
templates/default/search.htm.html
-
templates/default/styles/default.css
-
templates/default/type.htm.html
-
templates/no.2/allmovie.htm.html
-
templates/no.2/feature.htm.html
-
templates/no.2/footer.htm
-
templates/no.2/header.htm
-
templates/no.2/images/1.gif.gif
-
templates/no.2/images/10.gif.gif
-
templates/no.2/images/2.gif.gif
-
templates/no.2/images/2star.gif.gif
-
templates/no.2/images/3.gif.gif
-
templates/no.2/images/4.gif.gif
-
templates/no.2/images/5.gif.gif
-
templates/no.2/images/6.gif.gif
-
templates/no.2/images/7.gif.gif
-
templates/no.2/images/8.gif.gif
-
templates/no.2/images/9.gif.gif
-
templates/no.2/images/Thumbs.db
-
templates/no.2/images/accordion.js.js
-
templates/no.2/images/an.gif.gif
-
templates/no.2/images/bookmarker.js.js
-
templates/no.2/images/cycle.js.js
-
templates/no.2/images/di_top2.gif.gif
-
templates/no.2/images/down_qvod.gif.gif
-
templates/no.2/images/hot.gif.jpg
-
templates/no.2/images/ico.gif.gif
-
templates/no.2/images/jquery.js.js
-
templates/no.2/images/lightbox.css
-
templates/no.2/images/nav-bg-s.gif.gif
-
templates/no.2/images/nav-bg.gif.gif
-
templates/no.2/images/nav-bg2.gif.gif
-
templates/no.2/images/nav-bg3.gif.gif
-
templates/no.2/images/nav.gif.gif
-
templates/no.2/images/sbutton.gif.gif
-
templates/no.2/images/sou1.gif.gif
-
templates/no.2/images/sougif.gif.gif
-
templates/no.2/images/styles.css
-
templates/no.2/images/title_bg.jpg.jpg
-
templates/no.2/images/top_bg.gif.gif
-
templates/no.2/images/top_bg.jpg.jpg
-
templates/no.2/index.htm.html
-
templates/no.2/movie.htm.html .js polyglot
-
templates/no.2/play.htm.html
-
templates/no.2/search.htm.html
-
templates/no.2/styles/default.css
-
templates/no.2/type.htm.html
-
templates/no.3/allmovie.htm.html
-
templates/no.3/footer.htm
-
templates/no.3/images/1.gif.gif
-
templates/no.3/images/10.gif.gif
-
templates/no.3/images/11.gif.gif
-
templates/no.3/images/12.gif.gif
-
templates/no.3/images/13.gif.gif
-
templates/no.3/images/14.gif.gif
-
templates/no.3/images/15.gif.gif
-
templates/no.3/images/16.gif.gif
-
templates/no.3/images/17.gif.gif
-
templates/no.3/images/18.gif.gif
-
templates/no.3/images/19.gif.gif
-
templates/no.3/images/2.gif.gif
-
templates/no.3/images/20.gif.gif
-
templates/no.3/images/21.gif.gif
-
templates/no.3/images/22.gif.gif
-
templates/no.3/images/23.gif.gif
-
templates/no.3/images/24.gif.gif
-
templates/no.3/images/25.gif.gif
-
templates/no.3/images/26.gif.gif
-
templates/no.3/images/27.gif.gif
-
templates/no.3/images/28.gif.gif
-
templates/no.3/images/29.gif.gif
-
templates/no.3/images/3.gif.gif
-
templates/no.3/images/30.gif.gif
-
templates/no.3/images/31.gif.gif
-
templates/no.3/images/32.gif.gif
-
templates/no.3/images/33.gif.gif
-
templates/no.3/images/34.gif.gif
-
templates/no.3/images/35.gif.gif
-
templates/no.3/images/36.gif.gif
-
templates/no.3/images/37.gif.gif
-
templates/no.3/images/38.gif.gif
-
templates/no.3/images/39.gif.gif
-
templates/no.3/images/4.gif.gif
-
templates/no.3/images/40.gif.gif
-
templates/no.3/images/41.gif.gif
-
templates/no.3/images/42.gif.gif
-
templates/no.3/images/43.gif.gif
-
templates/no.3/images/44.gif.gif
-
templates/no.3/images/45.gif.gif
-
templates/no.3/images/46.gif.gif
-
templates/no.3/images/47.gif.gif
-
templates/no.3/images/48.gif.gif
-
templates/no.3/images/49.gif.gif
-
templates/no.3/images/5.gif.gif
-
templates/no.3/images/6.gif.gif
-
templates/no.3/images/7.gif.gif
-
templates/no.3/images/8.gif.gif
-
templates/no.3/images/9.gif.gif
-
templates/no.3/images/bookmarker.js.js
-
templates/no.3/images/ico.gif.gif
-
templates/no.3/images/sbutton.gif.gif
-
templates/no.3/index.htm.html
-
templates/no.3/movie.htm.html .js polyglot
-
templates/no.3/play.htm.html
-
templates/no.3/search.htm.html
-
templates/no.3/styles/default.css
-
templates/no.3/type.htm.html
-
templates/no.3/zytop.htm
-
templates/no.4/allmovie.htm.html
-
templates/no.4/footer.htm
-
templates/no.4/header.htm
-
templates/no.4/images/Bg_soyour_bg.jpg.jpg
-
templates/no.4/images/Button_01.gif.gif
-
templates/no.4/images/Button_02.gif.gif
-
templates/no.4/images/Button_03.gif.gif
-
templates/no.4/images/Button_04.gif.gif
-
templates/no.4/images/Button_05.gif.gif
-
templates/no.4/images/Button_06.gif.gif
-
templates/no.4/images/Button_07.gif.gif
-
templates/no.4/images/button_nav.gif.gif
-
templates/no.4/images/hot.png.png
-
templates/no.4/images/list_ico.png.png
-
templates/no.4/images/more.bmp
-
templates/no.4/images/s1.bmp
-
templates/no.4/images/s2.bmp
-
templates/no.4/images/s3.bmp
-
templates/no.4/images/serch.gif.gif
-
templates/no.4/images/sercht.gif.gif
-
templates/no.4/images/tb_8.gif.gif
-
templates/no.4/images/tuijian.png.png
-
templates/no.4/index.htm
-
templates/no.4/movie.htm.html .js polyglot
-
templates/no.4/play.htm
-
templates/no.4/search.htm.html
-
templates/no.4/styles/default.css
-
templates/no.4/type.htm.html
-
type.asp