Overview

overview

3

Static

static

1

SZ企业�...ut.asp

windows7-x64

3

SZ企业�...ut.asp

windows10-2004-x64

3

SZ企业�...ob.asp

windows7-x64

3

SZ企业�...ob.asp

windows10-2004-x64

3

SZ企业�...il.vbs

windows7-x64

1

SZ企业�...il.vbs

windows10-2004-x64

1

SZ企业�...ow.vbs

windows7-x64

1

SZ企业�...ow.vbs

windows10-2004-x64

1

SZ企业�...eg.vbs

windows7-x64

1

SZ企业�...eg.vbs

windows10-2004-x64

1

SZ企业�...il.vbs

windows7-x64

1

SZ企业�...il.vbs

windows10-2004-x64

1

SZ企业�...ar.asp

windows7-x64

3

SZ企业�...ar.asp

windows10-2004-x64

3

SZ企业�...nn.vbs

windows7-x64

1

SZ企业�...nn.vbs

windows10-2004-x64

1

SZ企业�...db.vbs

windows7-x64

1

SZ企业�...db.vbs

windows10-2004-x64

1

SZ企业�...bb.vbs

windows7-x64

1

SZ企业�...bb.vbs

windows10-2004-x64

1

SZ企业�...ct.asp

windows7-x64

3

SZ企业�...ct.asp

windows10-2004-x64

3

SZ企业�...re.asp

windows7-x64

3

SZ企业�...re.asp

windows10-2004-x64

3

SZ企业�...lt.vbs

windows7-x64

1

SZ企业�...lt.vbs

windows10-2004-x64

1

SZ企业�...il.vbs

windows7-x64

1

SZ企业�...il.vbs

windows10-2004-x64

1

SZ企业�...hop.js

windows7-x64

1

SZ企业�...hop.js

windows10-2004-x64

1

SZ企业�...op.asp

windows7-x64

3

SZ企业�...op.asp

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d609c1da71fbbfdf11bde85689869bf1

  • Size

    1.3MB

  • Sample

    240319-nzbfjabd23

  • MD5

    d609c1da71fbbfdf11bde85689869bf1

  • SHA1

    9da76ddc500b669b5cf250e7c5ccf166fe459024

  • SHA256

    45d8ac0c6817084b5db30113340ae26397a635873b3fb15b9b1d09060a7701a9

  • SHA512

    d80465dde94158ba6e21a4f4612c8d66ccd323ee78ce0fadffb936adbabcf0b7d53a0cc697becbf5bfd1319c970f0587fe68b83bf997e81d0b374d93bac16946

  • SSDEEP

    24576:hQ47cRey5COg8JIOEDevmHSee7AZRrxrHMBNRL1yokDXE0+Ikcu2F7YkZ8jQvphd:hUe4/g2sxyL7kRJ891dkDUuZdYZQvphd

Score
3/10

Malware Config

Targets

    • Target

      SZ企业快速建站系统/about.asp

    • Size

      7KB

    • MD5

      a0550921961455b885e7e629b35b5387

    • SHA1

      53aaa1a60bf44e22d2da44115386cccc93bda9c9

    • SHA256

      15144153004c7153e62543a360e2568aee7a0d0de351fa452cba9aff8e2ad493

    • SHA512

      556d4303314ba79d903d04aa263ed32d02371bcfc9df78c3c6c66a9128f60808866a492b92cd13810c7a7d58eb4f172fb1881aaf63af9cca5e0211d3559746c1

    • SSDEEP

      96:XemkIPt5HvXh0t92uPAXyDGRfLtdRfLtD7fLtQRfLtMAEAXzNt9al7uO5u7x8QY7:XemRPrqth4fBfJfqfkstKo8QYoYXtF

    Score
    3/10
    behavioral1behavioral2

    • Target

      SZ企业快速建站系统/acceptjob.asp

    • Size

      13KB

    • MD5

      8ad0a35db3b0323df97a152b35a6685b

    • SHA1

      33bc866826e8df9aba8a228e4358535f168d1c9c

    • SHA256

      5e40d10488a733377e8c8b30729d45bbdfcd665d9e9cfee4641b268590e20c1b

    • SHA512

      22320790e24ef49f32652b830f7cc775c58e41d85ed0314de3fb4bfb91125429d4e9fd17ebdffaa8cd168748442a8ffd8fb52c5550b1edd5c1e5df449b626ed9

    • SSDEEP

      192:XQRl/Bth0feWtko8FrPpp9NaRmDmaJWADaxx:XQRJXheeYkJFrhpJuP

    Score
    3/10
    behavioral3behavioral4

    • Target

      SZ企业快速建站系统/add_email.asp

    • Size

      426B

    • MD5

      32518ca3b048e087225452b3eecadd86

    • SHA1

      071ea7a450aa24a2c224b86c767345cdf56af9ef

    • SHA256

      a69142b1a25fc687610ec5129fbf72a1f921c6e2e0c3027f689d5663e341c3aa

    • SHA512

      1a8c6efea093d98b94167b78629f31019a478993fd2b8dbddefeddbdb9258f7530a884942fa2fc3680c42b75a001ba3f44d6ee4fca1cef909c5293f19c5de286

    Score
    1/10
    behavioral5behavioral6

    • Target

      SZ企业快速建站系统/articleshow.asp

    • Size

      8KB

    • MD5

      60f646e334df1892daad5db9893d3118

    • SHA1

      e525bd4e6b054f9cf843464e6d974d267bbde3fe

    • SHA256

      47f319e6e4398b92f6bf1885c0c4196eb0de837e771c7049d1eb40f7488f28d4

    • SHA512

      de881147d9c55588dc1f31f8cfdb27fe34ad1850fa00cb5d1b9be1112763e11cac7ceef435e54f9678db392868079590fcc7e9ea91e07a050b7f1f5e5dae9ddb

    • SSDEEP

      192:XyQC61qQ+pv3D7LLTzdHc/BthnWtJKpzpb6kaS7kyO:XyQGvLzdAXhnYJKENyO

    Score
    1/10
    behavioral7behavioral8

    • Target

      SZ企业快速建站系统/checkreg.asp

    • Size

      2KB

    • MD5

      136208e847372f6149199e917bd4f9e1

    • SHA1

      fd9c333fb5f170b602dd702b842b419d0f2a8d62

    • SHA256

      b35a4c1cf9092f38d87d145db73fbcddc3a80c6e351d0237119a94d8f7c2d9e0

    • SHA512

      fb8d523728a7b519f5381fab59a28af97d2774b78536c691ee1f7657de28dc0f55d757ebb103998dc84d99495b8710907dc4f53716562d1b687626051958da2d

    Score
    1/10
    behavioral10behavioral9

    • Target

      SZ企业快速建站系统/chkemail.asp

    • Size

      1KB

    • MD5

      96e8a955e551ade679e0d8cf16ebb445

    • SHA1

      1fb681b8320f559999f1283ee962eec3ae52052b

    • SHA256

      b1b05d7af82ed012287c5e56e3ab24c7000ba35ee21bf33c77d0ba63a87e9800

    • SHA512

      a4da9140803d702ba3f7688bafc35764099930c6c9767b14cca70815762da08fe253f52402b89ea07767d58f65b078a08f655c1529ffd24fa912f8218cfb59cb

    Score
    1/10
    behavioral11behavioral12

    • Target

      SZ企业快速建站系统/clear.asp

    • Size

      858B

    • MD5

      39c67313ae9a89b5e754cd727b342a21

    • SHA1

      d13ce33f47e92299e133f584cf8e6ff68fa99450

    • SHA256

      ad02cfb67f82df594b5982d18804c97680177503eb3012f789826097b65e9964

    • SHA512

      9c9b48677009427cb9659d695084deeeded2c04639229003e8bc06b6186f29264bcb4964f5276dc180d4e5666130964134bef64bc41ed75b2b39e646e825a529

    Score
    3/10
    behavioral13behavioral14

    • Target

      SZ企业快速建站系统/conn.asp

    • Size

      596B

    • MD5

      531a8498b58a4d1d02b92b7999205293

    • SHA1

      c228ec3de642d4b17883c1027c847a8d539cec2a

    • SHA256

      121ba68f498f20086de87d211614bc9bd6f18342fce0be2fc9e5ce21a5b50a91

    • SHA512

      a184f904fec95e307875bdb9941cc5af1fbcdfdf9bc46bf2d0bcd9ffaaa6dd6694b58eecbaebcb9f3d978925c224b1bf3ab9aace60cf82768220b8f9c39e0aa3

    Score
    1/10
    behavioral15behavioral16

    • Target

      SZ企业快速建站系统/conndb.asp

    • Size

      289B

    • MD5

      9f8ff6de16b302e26d19e5ca8028ab5f

    • SHA1

      4a8ab8937f4983d71eae5cfcc178577bdc51b94f

    • SHA256

      0ca61201b1785e9a659f3e15c1af0703498e0ab934924eb00355025e75883060

    • SHA512

      ca77e8f80c3e7d0ab7cd3e3c74eb247a8322b53659743997097dbcb39bb03dd3e9c48b458912338f6cecf08f9cb24f8a33a02a2f4d696af327b116819aeca658

    Score
    1/10
    behavioral17behavioral18

    • Target

      SZ企业快速建站系统/conndbb.asp

    • Size

      321B

    • MD5

      cb18f15ca1c786ba4fb7b09ba1f6ba94

    • SHA1

      30f39453c80b5e965948c750765243a92efd771f

    • SHA256

      a4d9a9c87ed6570f79348c72e4a86923de5907b244f624ee6092922265d03034

    • SHA512

      ee4c7dff5e9110bf42180b00eba00b40a0f4ce9a1272c6a747e56d2c35731bf265ad1ac6b49d57e2c54855d952eb261cc847dd9fb0e5232e2154da72e9e8199f

    Score
    1/10
    behavioral19behavioral20

    • Target

      SZ企业快速建站系统/contact.asp

    • Size

      7KB

    • MD5

      b18cb6985dbe6ba3dd4e96aa0a01bc22

    • SHA1

      170d82df0f40ae8985b1f9d77ae903494adbb864

    • SHA256

      041df926900a9fbdc485b3d20119960c063465b331df2b3b4ab01616819a9ec5

    • SHA512

      5400a57805cc234c99beb534da3ecfba114c0000c78d29c08b7668b4796329b6de5f1219d158389f121dbdc9f8a5534027f7e985a1166649c51a6d6d08df9de3

    • SSDEEP

      96:XemkIytNHvXh0t92uPAXyPGRfLhdRfLhD7fLhQRfLhVuPAXzZt9al7uZXu7x8+0w:XemRyLqthQf9f1fWf4WtVo8FYLCs

    Score
    3/10
    behavioral21behavioral22

    • Target

      SZ企业快速建站系统/culture.asp

    • Size

      7KB

    • MD5

      1b962ff453d4a5498252c99081509640

    • SHA1

      741d376391cc17e03c59476e18b1dc3f44b541af

    • SHA256

      c0bf75a82ab1f21e7d76ad4d5431898997308ba92830573f0515683c509fa0f9

    • SHA512

      a02d496da69ed7f10b8197401df5a7e5a4a1a62df7778f4cbb800e19861f7982f0e5149ec7ed7fb386a6ee4d6f6ce06e30a1c19c8f36bd53a2bec34702382a23

    • SSDEEP

      96:XemkIytNHvXh0t92uPAXyPGRfLhdRfLhD7fLhQRfLhVuPAXzZt9al7uZXe7w8xD0:XemRyLqthQf9f1fWf4WtV58xDQY2tZ

    Score
    3/10
    behavioral23behavioral24

    • Target

      SZ企业快速建站系统/default.asp

    • Size

      9KB

    • MD5

      baf8fdcd47fbb5a241eaa53462621702

    • SHA1

      0c1d64ad7f0f996a6f45a315a1a97942239fd9b2

    • SHA256

      be358772888f6b1f7dbed91da84e3d3aa7155c8a6c7f8a01f72ba8d2ff298481

    • SHA512

      09c4668fb6f78970774a12b273ee1156f4824b76a00bd183b0ebb10c5a14f81a349fa47fd84426e68d4c4ddb650a90bc91e057b554d59e865b6e0d8e11c918e6

    • SSDEEP

      192:X+dAnBthDgR5ftG0XikCPGZCs7NaSyCIT7MUDz:X+dSXhDQ5FG0SHPGZC6Tq/Dz

    Score
    1/10
    behavioral25behavioral26

    • Target

      SZ企业快速建站系统/del_email.asp

    • Size

      389B

    • MD5

      00408d184118b45be402a73e7e0976fb

    • SHA1

      033551b79021373ec6cfc4baf024e750afdcaace

    • SHA256

      31cb546d9bf4080e301e52e150b81857c758bb591eaf3955725f4b14a6eb5f71

    • SHA512

      f2a68897d6056dfa778c76aa4b39db5da84fbfdd4e3ea7ae374664bd11b8673c0c476f487c75bff8ec86128b553eaa1085e33af4688f4cc489b70be710c1b342

    Score
    1/10
    behavioral27behavioral28

    • Target

      SZ企业快速建站系统/e_shop.asp

    • Size

      9KB

    • MD5

      1f75ae49c4db0043eff6c1645bdd01bb

    • SHA1

      01c8e9f3b2d66105f7a26fe0a9d167d5cd754af1

    • SHA256

      28f295be2121474ff795ede8e25a9347eafa3734f5fcc06089ace808fb55ae05

    • SHA512

      ce152033c79054f6e0a10832e7ca132333751115b7ca9372e98cf2fe93459751c878bb20a1c1a4e458fdb0087fd7574ddec0992cd010575a5e77475813c0e3a0

    • SSDEEP

      192:/qdP7kPRlDyftffQfPf0rdNMOlEK7r8EY+8AxD7t0:kgPRJYdCX0rUWEK7gD+xDm

    Score
    1/10
    behavioral29behavioral30

    • Target

      SZ企业快速建站系统/eshop.asp

    • Size

      5KB

    • MD5

      455075deb4336052106692fed4fc578b

    • SHA1

      7c33caf6598ab60b4a43e4ef22d65675f282b7d1

    • SHA256

      9de489cadb8ddf87c423162afead81a4407e2ec1dae2f3d4abefd03ee97b2667

    • SHA512

      3047c2179926dd9dbae4f51831adb9d8adb627fbbec698d8c712e48b678f2ce8ebae0e3bcb916ed51a27107a413dc977b5777eb2268788c97ee859b6686d3dc1

    • SSDEEP

      96:QdXz4M/lASCM/TnDDTtd87rjyBxjvU9QIvLvIv9Wxe9hV2F1Zzj0zKizsEz01s1N:qeSHxa7r2zIbLM9TFGuF9tSm

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks