Overview
overview
3Static
static
1Connections/wxbbs.vbs
windows7-x64
1Connections/wxbbs.vbs
windows10-2004-x64
1admin.asp
windows7-x64
3admin.asp
windows10-2004-x64
3askly.asp
windows7-x64
3askly.asp
windows10-2004-x64
3checkcode.vbs
windows7-x64
1checkcode.vbs
windows10-2004-x64
1default.asp
windows7-x64
3default.asp
windows10-2004-x64
3delly.asp
windows7-x64
3delly.asp
windows10-2004-x64
3face.htm
windows7-x64
1face.htm
windows10-2004-x64
1images/krId.js
windows7-x64
1images/krId.js
windows10-2004-x64
1lybook.asp
windows7-x64
3lybook.asp
windows10-2004-x64
3pass.asp
windows7-x64
3pass.asp
windows10-2004-x64
3新云软件.url
windows7-x64
1新云软件.url
windows10-2004-x64
1Connections/wxbbs.vbs
windows7-x64
1Connections/wxbbs.vbs
windows10-2004-x64
1admin.asp
windows7-x64
3admin.asp
windows10-2004-x64
3askly.asp
windows7-x64
3askly.asp
windows10-2004-x64
3checkcode.vbs
windows7-x64
1checkcode.vbs
windows10-2004-x64
1default.asp
windows7-x64
3default.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Connections/wxbbs.vbs
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Connections/wxbbs.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
admin.asp
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
admin.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
askly.asp
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
askly.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
checkcode.vbs
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
checkcode.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
default.asp
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
default.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
delly.asp
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
delly.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
face.htm
Resource
win7-20240215-en
Behavioral task
behavioral14
Sample
face.htm
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
images/krId.js
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
images/krId.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
lybook.asp
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
lybook.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
pass.asp
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
pass.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
新云软件.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Connections/wxbbs.vbs
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Connections/wxbbs.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
admin.asp
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
admin.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
askly.asp
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
askly.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
checkcode.vbs
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
checkcode.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
default.asp
Resource
win7-20240220-en
Behavioral task
behavioral32
Sample
default.asp
Resource
win10v2004-20240226-en
General
-
Target
c89bc1a628be4e6ce2bf136ac6be88a2
-
Size
176KB
-
MD5
c89bc1a628be4e6ce2bf136ac6be88a2
-
SHA1
fcab20aad424f7054f7a94ef91a1d60fb253840b
-
SHA256
85b7811c965ee530f29164b3f2e83e449e0ef03e17e0f3e6235392da904bb03d
-
SHA512
bf4ec2f9b0975da338b390376f337e05787c9661a629f3249f5c63148f04c3a1d2bf8733623cd4df7c2e025469d1a99e56329f014d1e9ecbe191f3570c1142eb
-
SSDEEP
3072:M+S80p3CZtGv9Gc2og+PqMa3L0iRVxSRHgLMhu4VWnD7bijdfztURM3voU:M+SJCZkv9U+C570ibBsu4aLOfb3vn
Malware Config
Signatures
Files
-
c89bc1a628be4e6ce2bf136ac6be88a2.rar
-
中文.rar.rar
-
Connections/wxbbs.asp.vbs
-
admin.asp.asp .js polyglot
-
askly.asp.asp .vbs polyglot
-
checkcode.asp.vbs
-
css.css
-
default.asp.asp .vbs polyglot
-
delly.asp.asp .vbs polyglot
-
face.htm.html
-
images/25175.gif.gif
-
images/Head.Fix
-
images/admin.jpg.jpg
-
images/back1.gif.gif
-
images/body.Fix
-
images/email.gif.gif
-
images/face/01.gif.gif
-
images/face/02.gif.gif
-
images/face/03.gif.gif
-
images/face/04.gif.gif
-
images/face/05.gif.gif
-
images/face/06.gif.gif
-
images/face/07.gif.gif
-
images/face/08.gif.gif
-
images/face/09.gif.gif
-
images/face/10.gif.gif
-
images/face/11.gif.gif
-
images/face/12.gif.gif
-
images/face/13.gif.gif
-
images/face/14.gif.gif
-
images/face/15.gif.gif
-
images/face/16.gif.gif
-
images/face/17.gif.gif
-
images/face/18.gif.gif
-
images/face/19.gif.gif
-
images/face/20.gif.gif
-
images/foot.gif.gif
-
images/home.gif.gif
-
images/ip.gif.gif
-
images/krId.js.js
-
images/ly.gif.gif
-
images/msn.gif.gif
-
images/oicq.gif.gif
-
images/userlist.gif.gif
-
images/wave.gif.gif
-
lybook.asp.asp .vbs polyglot
-
mouse_db/25175_rat.mdb
-
pass.asp.asp .vbs polyglot
-
readme.txt
-
新云软件.url.url
-
英文.rar.rar
-
Connections/wxbbs.asp.vbs
-
admin.asp.asp .vbs polyglot
-
askly.asp.asp .vbs polyglot
-
checkcode.asp.vbs
-
css.css
-
default.asp.asp .vbs polyglot
-
delly.asp.asp .vbs polyglot
-
face.htm.html
-
images/Head.Fix
-
images/admin.jpg.jpg
-
images/back1.gif.gif
-
images/body.Fix
-
images/email.gif.gif
-
images/face/01.gif.gif
-
images/face/02.gif.gif
-
images/face/03.gif.gif
-
images/face/04.gif.gif
-
images/face/05.gif.gif
-
images/face/06.gif.gif
-
images/face/07.gif.gif
-
images/face/08.gif.gif
-
images/face/09.gif.gif
-
images/face/10.gif.gif
-
images/face/11.gif.gif
-
images/face/12.gif.gif
-
images/face/13.gif.gif
-
images/face/14.gif.gif
-
images/face/15.gif.gif
-
images/face/16.gif.gif
-
images/face/17.gif.gif
-
images/face/18.gif.gif
-
images/face/19.gif.gif
-
images/face/20.gif.gif
-
images/foot.gif.gif
-
images/home.gif.gif
-
images/ip.gif.gif
-
images/ly.gif.gif
-
images/msn.gif.gif
-
images/oicq.gif.gif
-
images/reply.gif.gif
-
images/userlist.gif.gif
-
images/wave.gif.gif
-
lybook.asp.asp .vbs polyglot
-
mouse_db/rat.asp
-
pass.asp.asp .vbs polyglot
-
readme.txt