Overview
overview
3Static
static
1ad.asp
windows7-x64
3ad.asp
windows10-2004-x64
3add.vbs
windows7-x64
1add.vbs
windows10-2004-x64
1add_bclass.asp
windows7-x64
3add_bclass.asp
windows10-2004-x64
3add_bclass_save.asp
windows7-x64
3add_bclass_save.asp
windows10-2004-x64
3add_sclass.asp
windows7-x64
3add_sclass.asp
windows10-2004-x64
3add_sclass_save.asp
windows7-x64
3add_sclass_save.asp
windows10-2004-x64
3admin.vbs
windows7-x64
1admin.vbs
windows10-2004-x64
1ajax_select.vbs
windows7-x64
1ajax_select.vbs
windows10-2004-x64
1axingweb_z....0.asp
windows7-x64
3axingweb_z....0.asp
windows10-2004-x64
3by.asp
windows7-x64
3by.asp
windows10-2004-x64
3class.asp
windows7-x64
3class.asp
windows10-2004-x64
3class_co.vbs
windows7-x64
1class_co.vbs
windows10-2004-x64
1class_more.vbs
windows7-x64
1class_more.vbs
windows10-2004-x64
1class_url.vbs
windows7-x64
1class_url.vbs
windows10-2004-x64
1class_url.htm
windows7-x64
1class_url.htm
windows10-2004-x64
1dig.vbs
windows7-x64
1dig.vbs
windows10-2004-x64
1General
-
Target
dea20cff88add00dd42cb4e80582c48e
-
Size
391KB
-
Sample
240325-wref8ahg2t
-
MD5
dea20cff88add00dd42cb4e80582c48e
-
SHA1
c755eb2eff319697fd644a47c06566553d5e44c8
-
SHA256
486028ce4ee8bd6759bf30f710cb9322991de798c4ee38f0474ccc427da4048c
-
SHA512
d9617dcdb8b17b74c63966fac3fa5e6d451775fd06de3457a4176c4c7e6fbe7bf058813fa128b3c6594b2cbc65db4608a2643879b71cd7334d3ad7798b68bee6
-
SSDEEP
12288:Q9EEA6da76EPxCiis73ZWVVDCkrKNEX15T8b:aAGiVcvT7KSb0
Static task
static1
Behavioral task
behavioral1
Sample
ad.asp
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
add.vbs
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
add.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
add_bclass.asp
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
add_bclass.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
add_bclass_save.asp
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
add_bclass_save.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
add_sclass.asp
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
add_sclass.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
add_sclass_save.asp
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
add_sclass_save.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
admin.vbs
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
admin.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
ajax_select.vbs
Resource
win7-20240319-en
Behavioral task
behavioral16
Sample
ajax_select.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
axingweb_zidonglian_2.0.asp
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
axingweb_zidonglian_2.0.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
by.asp
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
by.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
class.asp
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
class.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
class_co.vbs
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
class_co.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
class_more.vbs
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
class_more.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
class_url.vbs
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
class_url.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
class_url.htm
Resource
win7-20240319-en
Behavioral task
behavioral30
Sample
class_url.htm
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
dig.vbs
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
dig.vbs
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ad.asp
-
Size
2KB
-
MD5
c4afb44a88a2f811ce30979ebf91a6e1
-
SHA1
6d345f1c7a8e026305339d8f7f6be3b7ddbb9c6e
-
SHA256
5183f60d83602b43f92851bc7ee3e09e00e922034f39ff507bc4b1cfa43857a9
-
SHA512
1cd193d2de1fc57762f04520764f160da5fd5e4256a24330db102ad3ed9d72823ad2a80c55bc21bcffb88a727e3923b6d9a6e391a10abdb953f849ee8d2f539b
Score3/10 -
-
-
Target
add.asp
-
Size
626B
-
MD5
aa134f0f6dc86b53c49501084bfb611a
-
SHA1
5fbd3eb3f7efc72c1f2141b7ea6a825025da0b6f
-
SHA256
9c7bfdb139389a313fea3096264fe186ae817b922eb5add7e8d59ed25d295ddc
-
SHA512
3a24c493a10f2c03ca833bc797333285584b87d67d955ed2de9ec308ef397d04bcb61bd67720d03cf58554b4b72ea70a9094c69fa3303e947e2292dc7f0e2623
Score1/10 -
-
-
Target
add_bclass.asp
-
Size
2KB
-
MD5
ac03f2b8f2207d7d72a9e6c61a9b237f
-
SHA1
a0d140ca31e9b2921e7ef858e8dff12026c1ef8b
-
SHA256
4dcb132ae0448c5b72ac355ad19d9b29f8ae65821b6c38732ca155680e24d624
-
SHA512
01dadba026e32f007ef1de0a543a7056b1417122ba7e376a8b88130cdfded0e74ab70e50f5893f75b83a5c8cb38b40d0097f499a672d75baf41e651bfe0f5746
Score3/10 -
-
-
Target
add_bclass_save.asp
-
Size
400B
-
MD5
05e2b750ae0153034d6790eb8d81cc74
-
SHA1
ad041e147a38e203420f2b6423d22c4a77505fd3
-
SHA256
60670599a10c5427c611b1f6e5d2fcd52b74da955215b3d6fadf07deeaf69e9f
-
SHA512
5e49127ce883c34f38557e8e5924c47cbb4d66308a9ee81b9b747b7ea053de48f58d97ad03f5779b4c88899d39ac42f00242ae2f8f2df1e699750b3b65b55c47
Score3/10 -
-
-
Target
add_sclass.asp
-
Size
2KB
-
MD5
67b90f2933bdc34d598a9ec128828f0c
-
SHA1
79adeb52f830f5d6c46266f6b758d9500491a87e
-
SHA256
60e51485c2eb7f2d959fdcadb8397aca17018babe61a2308cc145f87201b2c50
-
SHA512
eed58a05e8b2199375370709ff6638e2f1d432506464310bf51fb2d570261be678b6b5fec64ceaefe56a44f10cf407a9c3a44891579d486d7f54ac423267f891
Score3/10 -
-
-
Target
add_sclass_save.asp
-
Size
488B
-
MD5
cc607c3f4c507906416d18f0b4ae470f
-
SHA1
83c3f8b8bf84d2b7da11e1982ff1d73c1f38aa62
-
SHA256
07036fb135465331da39bb99669ce4c42733fd891cca2289ca46f051165cd4f2
-
SHA512
897150d293001ec09f7e747d1f8a1aa4acb1862219cf64711805dd0740d3e2cac36b14dc26cef86b258b05310676634540a147cce88d9b967050ab8c453c9b56
Score3/10 -
-
-
Target
admin.asp
-
Size
16KB
-
MD5
c084b262d0bfe6ee8e92bd298c6da0e5
-
SHA1
438cbee747520ee4ef4899b2444a9cbd1cd47d1c
-
SHA256
6a726a8f38283d75258ab5f2b135df91ddf13b008431d4048b71be53708188d2
-
SHA512
fdcf397dc3b3c7194e8452bd3b42c27ddb8e8a51b5f6b6058333d2636e62fcd125c93efa4b85c7a3f896f2905769a2dd8168112da207d594eee11b8a054d8a8d
-
SSDEEP
384:RsMN4FH/kbmUMlMQt5uUTbJvNKG3b6lXl5llpxn+t9XWoXUIKpVrwQR1:A9/kbHG0HlXlxcWxLJ
Score1/10 -
-
-
Target
ajax_select.asp
-
Size
416B
-
MD5
acf2f5bba309fe618ca5924c191cec01
-
SHA1
506b0fb0707c7e8eb26e46dff7bb0b226b9256e3
-
SHA256
5336f62891e29f566d7aac103b047e9fd13716d471a2131a87b4ef3d1317fd37
-
SHA512
06e78403bca7e1f9c4d23e4bd487e8824c1db77dbf670f48d0bfa1e2fe4b9a3a47d65d5678ce8bf31287bad843c223d86701309731b7b606d0ba754ca5866b19
Score1/10 -
-
-
Target
axingweb_zidonglian_2.0.asp
-
Size
4.0MB
-
MD5
fe81c156f4203733845f4c75738e297d
-
SHA1
e27cf6ee2d0c07da79fa0323352bcc2bac5541e0
-
SHA256
d0f70a4b7f55e8f6a572cacf2e484af4357abd6b2c2016133718fcca41d2a3af
-
SHA512
0e4bef4657ec1aebb2e879eba5b8a197113bf844623fd45a3de706dafa8d96d33ae1b07ad33baccf01aef0a55fb5cd0c0723e9303e940b3bdc5e03963fac0d87
-
SSDEEP
12288:hT4BosJJuyLzO8KY7Nym536hXX93xAIJXeZuBMuay4:hyPO8KY7Nym5qhXX93xAIJuy4
Score3/10 -
-
-
Target
by.asp
-
Size
1KB
-
MD5
1b1e08b4768d8c762f07147d16067581
-
SHA1
eb9cc9c31b3654aa99f4be92a2c95a79f3b0c8c1
-
SHA256
842a345c0d4b3b711157b367e413bbc215e7e46d05cb3451303bba6d0e5dd98c
-
SHA512
7ddf326505ec1e8bea46d10c95a810d52915c330913d3e1ce1a3ff146df6e55d21514bade40c01db9c06799c60e254e2c68bdc796b4dec0f690e0c2e630731a8
Score3/10 -
-
-
Target
class.asp
-
Size
4KB
-
MD5
d03a621c11a8400bdaadd4c7a12dadf1
-
SHA1
8f44e16bee62019499884f391bf055202ba096e2
-
SHA256
83b4e48cd3dc7b4eac1e8da0117f810325ff1751c1a39c61df236e8ff8e21ec9
-
SHA512
9f50cf5292ad1cc2948b208cd753e134b1496695c18476876fc9efcf3d5e888a2df848860e8d6d30f94855daae7c12d665d0feea294dd3031ac8041847638a62
-
SSDEEP
96:oOBtOBlCq5xKOgot/N/yOcRG8Pc8sDKgHVLObv63co7CA:oOBtOBlCq5oLot/N/yOcRhPLsDKAKbvK
Score3/10 -
-
-
Target
class_co.asp
-
Size
354B
-
MD5
c984e6556fde818ff72ae1bf58d8b545
-
SHA1
bae90f2ab0aa397f42444b9e350b302eaa14cb87
-
SHA256
811e65c48c144d10f18b4750848466b0d5ae1183d939f138332d7b6ed51b5b72
-
SHA512
d1ddf5c3899ff6d568bdde573f1209a6394f9bf7694b60186874e6bde2fda050d614a20f53f2cff3dd83a685a7f02e99f4f523da0215410b434fadf07e91d6da
Score1/10 -
-
-
Target
class_more.asp
-
Size
1KB
-
MD5
588f2106d0c611971bfb6afaf2ba1c4a
-
SHA1
dfc32ab3fafe7a3ec9d3f13dafad079f366ba2e9
-
SHA256
e7136c471e89a27307b2d5e65e7e685486e91f40e3b0235bd40a23c6f69e6e05
-
SHA512
f087dd232dda0ae1d110de10999c4a6b3703a7d4bd5694186e78625f814dc9472fcf303f51647cc81d6ba8dcf6ebe4bb534dbaa1c7748b07bf4dd62b692ab518
Score1/10 -
-
-
Target
class_url.asp
-
Size
1KB
-
MD5
7a4fa37bac18b3ae2402a174cd6f5e6d
-
SHA1
34e02472d3e4825674108133efb8eae67e7e491a
-
SHA256
1936234ae866d4806a3c6f7ed44f1a01e903426f01534fee644f421a11b72987
-
SHA512
b0980668d744b7fa010c01cf58cc61efd2c725087f26c33a67b1b2616011a5b748aff1fd37c89fadcff73dcd9aea569ce2f9ead318de517818a6fd38ff935e1d
Score1/10 -
-
-
Target
class_url.htm
-
Size
2B
-
MD5
81051bcc2cf1bedf378224b0a93e2877
-
SHA1
ba8ab5a0280b953aa97435ff8946cbcbb2755a27
-
SHA256
7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
-
SHA512
1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d
Score1/10 -
-
-
Target
dig.asp
-
Size
759B
-
MD5
e9b784c0ab1d6d173461bc0087dec14f
-
SHA1
40651a6ed22f01424278f29a1e5cd0f9b29cbc38
-
SHA256
9740c7e0e98a34e27f0f88ce31ad62c06e0a855cbc1a0a849a37c4da3fa5b804
-
SHA512
99de43c40a389e792d44dc7ab0ecbec11f8b0ea5da728c197c2a1d9ad60380721f5ea59d3cd05e5df2364f8ed16498a2cce5422f59aad016e09f7388d844daca
Score1/10 -