Overview

overview

6

Static

static

1

.url

windows7-x64

6

.url

windows10-2004-x64

3

api.js

windows7-x64

1

api.js

windows10-2004-x64

1

api/uc.js

windows7-x64

1

api/uc.js

windows10-2004-x64

1

api/uc_api_db.js

windows7-x64

1

api/uc_api_db.js

windows10-2004-x64

1

api/新云软件.url

windows7-x64

1

api/新云软件.url

windows10-2004-x64

1

images/sec...ex.htm

windows7-x64

1

images/sec...ex.htm

windows10-2004-x64

1

images/sec...ex.htm

windows7-x64

1

images/sec...ex.htm

windows10-2004-x64

1

images/sec...ex.htm

windows7-x64

1

images/sec...ex.htm

windows10-2004-x64

1

images/sec...ex.htm

windows7-x64

1

images/sec...ex.htm

windows10-2004-x64

1

images/sec...ex.htm

windows7-x64

1

images/sec...ex.htm

windows10-2004-x64

1

images/sec...ex.htm

windows7-x64

1

images/sec...ex.htm

windows10-2004-x64

1

images/sec...ex.htm

windows7-x64

1

images/sec...ex.htm

windows10-2004-x64

1

images/upl...min.js

windows7-x64

1

images/upl...min.js

windows10-2004-x64

1

imjiqiren.js

windows7-x64

1

imjiqiren.js

windows10-2004-x64

1

include/db....db.js

windows7-x64

1

include/db....db.js

windows10-2004-x64

1

include/db....db.js

windows7-x64

1

include/db....db.js

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-04-2024 01:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    include/db/mysql.db.js

  • Size

    11KB

  • MD5

    03bca3be7177cf3c64be8a2ddb3f7a37

  • SHA1

    8fc3b8541c6c9ab4ede621064bcb39934a9a1ff7

  • SHA256

    bf1845b567b6f6009d5655860be26b615ab8cea3bfeac8244eb8134b82b1de24

  • SHA512

    c3aa24a89583d6855397ed348f8f9cfd29263e2de8ebfd7d66fd163be02f86b100770a8613cf064702a5ddc7e1b6cc5ecdb8b17461103306e1c36ce75834def0

  • SSDEEP

    192:oI+sxyTRue9d3tMlOeZ/F8aZU2n+KJy4wH+YglzaapX:oIJxGRNilPDrIFwlx

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\include\db\mysql.db.js
    1⤵
      PID:1120

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads