Overview
overview
1Static
static
1tool/ajax2.js
windows7-x64
1tool/ajax2.js
windows10-2004-x64
1tool/baidu/ajax2.js
windows7-x64
1tool/baidu/ajax2.js
windows10-2004-x64
1tool/baidu/baidu.js
windows7-x64
1tool/baidu/baidu.js
windows10-2004-x64
1tool/esearch.js
windows7-x64
1tool/esearch.js
windows10-2004-x64
1tool/frien...ink.js
windows7-x64
1tool/frien...ink.js
windows10-2004-x64
1tool/frien...wry.js
windows7-x64
1tool/frien...wry.js
windows10-2004-x64
1tool/frien...nds.js
windows7-x64
1tool/frien...nds.js
windows10-2004-x64
1tool/frien...ese.js
windows7-x64
1tool/frien...ese.js
windows10-2004-x64
1tool/friends/shows.js
windows7-x64
1tool/friends/shows.js
windows10-2004-x64
1tool/google/ajax2.js
windows7-x64
1tool/google/ajax2.js
windows10-2004-x64
1tool/google/google.js
windows7-x64
1tool/google/google.js
windows10-2004-x64
1tool/image...als.js
windows7-x64
1tool/image...als.js
windows10-2004-x64
1tool/image...ls2.js
windows7-x64
1tool/image...ls2.js
windows10-2004-x64
1tool/image...ls3.js
windows7-x64
1tool/image...ls3.js
windows10-2004-x64
1tool/images/home.js
windows7-x64
1tool/images/home.js
windows10-2004-x64
1tool/images/menu.js
windows7-x64
1tool/images/menu.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
tool/ajax2.js
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
tool/ajax2.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
tool/baidu/ajax2.js
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
tool/baidu/ajax2.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
tool/baidu/baidu.js
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
tool/baidu/baidu.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
tool/esearch.js
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
tool/esearch.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
tool/friendlink/friendlink.js
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
tool/friendlink/friendlink.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
tool/friendlink/qqwry.js
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
tool/friendlink/qqwry.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
tool/friends/friends.js
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
tool/friends/friends.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
tool/friends/require/chinese.js
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
tool/friends/require/chinese.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
tool/friends/shows.js
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
tool/friends/shows.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
tool/google/ajax2.js
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
tool/google/ajax2.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
tool/google/google.js
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
tool/google/google.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
tool/images/globals.js
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
tool/images/globals.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
tool/images/globals2.js
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
tool/images/globals2.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
tool/images/globals3.js
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
tool/images/globals3.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
tool/images/home.js
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
tool/images/home.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
tool/images/menu.js
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
tool/images/menu.js
Resource
win10v2004-20240226-en
General
-
Target
ca8144fd982b6f519bc5dad3ef8fd381
-
Size
3.7MB
-
MD5
ca8144fd982b6f519bc5dad3ef8fd381
-
SHA1
6db80fafab0fef6d56209f4d6caff05f00288456
-
SHA256
ddae2e75d98b4477ca14de27990a6d8ce4820d147764aa5c0e298c8dd3aad5f6
-
SHA512
c578e891cc486864cf930b71240d2cc424e1518a9d867ae68e30190d15ea0168695478e06d87cdbca337bf2fd8501dbc8a2a3279d4b665587fdfe887dfc97a03
-
SSDEEP
98304:nFnV1zZ/rGhNURjgvqohertffBoZa0Pouh3bhIvWj7n+WnWPZ+DpE:FZ/yh8jgvvArteZToQr1n+WWf
Malware Config
Signatures
Files
-
ca8144fd982b6f519bc5dad3ef8fd381.rar
-
tool/ajax2.js.js
-
tool/baidu/ajax2.js.js
-
tool/baidu/baidu.php.js
-
tool/baidu/function.php
-
tool/baidu/pageft.php
-
tool/baidu/seo.php
-
tool/cache.php
-
tool/cache/seo.php
-
tool/countryym.php
-
tool/dels/dels.php
-
tool/density.php
-
tool/esearch.php.js
-
tool/foot.php
-
tool/friendlink/QQWry.Dat
-
tool/friendlink/friendlink.php.js
-
tool/friendlink/qqwry.php.js
-
tool/friendlink/shows.php
-
tool/friends/friends.php.js
-
tool/friends/require/chinese.php.js
-
tool/friends/require/encode/big5-gb.table
-
tool/friends/require/encode/big5-unicode.table
-
tool/friends/require/encode/gb-big5.table
-
tool/friends/require/encode/gb-pinyin.table
-
tool/friends/require/encode/gb-unicode.table
-
tool/friends/shows.php.js
-
tool/global.php
-
tool/google/ajax2.js.js
-
tool/google/function.php
-
tool/google/google.php.js
-
tool/google/seo.php
-
tool/header.php.html .js polyglot
-
tool/htmljs.php
-
tool/htmlubb.php
-
tool/ids.php
-
tool/images/468x60.gif.gif
-
tool/images/but.gif.gif
-
tool/images/global.css
-
tool/images/globals.js.js
-
tool/images/globals2.js.js
-
tool/images/globals3.js.js
-
tool/images/h1-bg.gif.gif
-
tool/images/h1-bg.jpg.jpg
-
tool/images/h1bg.gif.gif
-
tool/images/home.js.js
-
tool/images/kaishi.gif.gif
-
tool/images/loading.gif.gif
-
tool/images/loading2.gif.gif
-
tool/images/logo.gif.gif
-
tool/images/map.gif.gif
-
tool/images/menu-bg.jpg.jpg
-
tool/images/menu.js.js
-
tool/images/pagerank0.gif.gif
-
tool/images/pagerank1.gif.gif
-
tool/images/pagerank10.gif.gif
-
tool/images/pagerank2.gif.gif
-
tool/images/pagerank3.gif.gif
-
tool/images/pagerank4.gif.gif
-
tool/images/pagerank5.gif.gif
-
tool/images/pagerank6.gif.gif
-
tool/images/pagerank7.gif.gif
-
tool/images/pagerank8.gif.gif
-
tool/images/pagerank9.gif.gif
-
tool/images/s-menu-bg.gif.gif
-
tool/images/shuaxin.gif.gif
-
tool/images/tingzhi.gif.gif
-
tool/images/toolsite.css
-
tool/images/topright.js
-
tool/images/yes.gif.gif
-
tool/index.php.js
-
tool/info.txt
-
tool/ip/index.php
-
tool/ip/ip.php
-
tool/js.php.js
-
tool/js/Html_JS.js
-
tool/js/Html_Ubb.js
-
tool/js/Unicode.js.js
-
tool/js/ajax.js.js
-
tool/js/unixtime.js.js
-
tool/keys/function.php.ps1
-
tool/keys/keys.php
-
tool/mds.php
-
tool/meta.php.js
-
tool/pr/donow.php
-
tool/pr/outpr.php.js
-
tool/pr/pr.php.js
-
tool/pr/prfunction.php
-
tool/require/chinese.php.js
-
tool/require/encode/big5-gb.table
-
tool/require/encode/big5-unicode.table
-
tool/require/encode/gb-big5.table
-
tool/require/encode/gb-pinyin.table
-
tool/require/encode/gb-unicode.table
-
tool/robot.php
-
tool/seo/ajax.php
-
tool/seo/alls.php.js
-
tool/seo/finds.php
-
tool/seo/require/chinese.php.js
-
tool/seo/require/encode/big5-gb.table
-
tool/seo/require/encode/big5-unicode.table
-
tool/seo/require/encode/gb-big5.table
-
tool/seo/require/encode/gb-unicode.table
-
tool/seo/robot.php
-
tool/shouji/befo/130.txt
-
tool/shouji/befo/131.txt
-
tool/shouji/befo/132.txt
-
tool/shouji/befo/133.txt
-
tool/shouji/befo/134.txt
-
tool/shouji/befo/135.txt
-
tool/shouji/befo/136.txt
-
tool/shouji/befo/137.txt
-
tool/shouji/befo/138.txt
-
tool/shouji/befo/139.txt
-
tool/shouji/befo/150.txt
-
tool/shouji/befo/151.txt
-
tool/shouji/befo/153.txt
-
tool/shouji/befo/155.txt
-
tool/shouji/befo/156.txt
-
tool/shouji/befo/157.txt
-
tool/shouji/befo/158.txt
-
tool/shouji/befo/159.txt
-
tool/shouji/function.php
-
tool/shouji/index.php
-
tool/ssyqfl/ajax2.js.js
-
tool/ssyqfl/function.php
-
tool/ssyqfl/require/chinese.php.js
-
tool/ssyqfl/require/encode/big5-gb.table
-
tool/ssyqfl/require/encode/big5-unicode.table
-
tool/ssyqfl/require/encode/gb-big5.table
-
tool/ssyqfl/require/encode/gb-pinyin.table
-
tool/ssyqfl/require/encode/gb-unicode.table
-
tool/ssyqfl/seo.php
-
tool/ssyqfl/ssyqfl.php.js
-
tool/ssyqsl/ajax2.js.js
-
tool/ssyqsl/function.php
-
tool/ssyqsl/require/chinese.php.js
-
tool/ssyqsl/require/encode/big5-gb.table
-
tool/ssyqsl/require/encode/big5-unicode.table
-
tool/ssyqsl/require/encode/gb-big5.table
-
tool/ssyqsl/require/encode/gb-pinyin.table
-
tool/ssyqsl/require/encode/gb-unicode.table
-
tool/ssyqsl/seo.php
-
tool/ssyqsl/ssyqsl.php.js
-
tool/unicode.php
-
tool/unix.php.js
-
tool/utf.php.js
-
tool/webs/ajax2.js.js
-
tool/webs/require/chinese.php.js
-
tool/webs/require/encode/big5-gb.table
-
tool/webs/require/encode/big5-unicode.table
-
tool/webs/require/encode/gb-big5.table
-
tool/webs/require/encode/gb-pinyin.table
-
tool/webs/require/encode/gb-unicode.table
-
tool/webs/testlink.php
-
tool/webs/texts.php.js
-
tool/webs/webs.php.js
-
tool/whois/index.php.js
-
tool/yb/pc.dat
-
tool/yb/yb.php
-
tool/yuan.php
-
tool/新云软件.url.url