Overview
overview
4Static
static
1LiyuNet/�...��.rtf
windows7-x64
4LiyuNet/�...��.rtf
windows10-2004-x64
1LiyuNet/�...��.url
windows7-x64
1LiyuNet/�...��.url
windows10-2004-x64
1LiyuNet/�...on.jar
windows7-x64
1LiyuNet/�...on.jar
windows10-2004-x64
1LiyuNet/�....2.jar
windows7-x64
1LiyuNet/�....2.jar
windows10-2004-x64
1LiyuNet/�....1.jar
windows7-x64
1LiyuNet/�....1.jar
windows10-2004-x64
1LiyuNet/�....6.jar
windows7-x64
1LiyuNet/�....6.jar
windows10-2004-x64
1LiyuNet/�...en.jar
windows7-x64
1LiyuNet/�...en.jar
windows10-2004-x64
1LiyuNet/�....2.jar
windows7-x64
1LiyuNet/�....2.jar
windows10-2004-x64
1LiyuNet/�...14.jar
windows7-x64
1LiyuNet/�...14.jar
windows10-2004-x64
1LiyuNet/�...il.jar
windows7-x64
1LiyuNet/�...il.jar
windows10-2004-x64
1LiyuNet/�...in.jar
windows7-x64
1LiyuNet/�...in.jar
windows10-2004-x64
1LiyuNet/�....3.jar
windows7-x64
1LiyuNet/�....3.jar
windows10-2004-x64
1LiyuNet/�....3.jar
windows7-x64
1LiyuNet/�....3.jar
windows10-2004-x64
1LiyuNet/�...or.asp
windows7-x64
3LiyuNet/�...or.asp
windows10-2004-x64
3LiyuNet/�...ist.js
windows7-x64
3LiyuNet/�...ist.js
windows10-2004-x64
3LiyuNet/�...ct.asp
windows7-x64
3LiyuNet/�...ct.asp
windows10-2004-x64
3Analysis
-
max time kernel
139s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11-08-2024 17:10
Static task
static1
Behavioral task
behavioral1
Sample
LiyuNet/数据库/鲤鱼论坛数据库说明文档.rtf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
LiyuNet/数据库/鲤鱼论坛数据库说明文档.rtf
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
LiyuNet/新云软件.url
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
LiyuNet/新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
LiyuNet/论坛应用/WEB-INF/lib/activation.jar
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
LiyuNet/论坛应用/WEB-INF/lib/activation.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
LiyuNet/论坛应用/WEB-INF/lib/c3p0-0.9.1.2.jar
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
LiyuNet/论坛应用/WEB-INF/lib/c3p0-0.9.1.2.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
LiyuNet/论坛应用/WEB-INF/lib/commons-logging-1.1.jar
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
LiyuNet/论坛应用/WEB-INF/lib/commons-logging-1.1.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
LiyuNet/论坛应用/WEB-INF/lib/dom4j-1.6.jar
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
LiyuNet/论坛应用/WEB-INF/lib/dom4j-1.6.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
LiyuNet/论坛应用/WEB-INF/lib/jaxen.jar
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
LiyuNet/论坛应用/WEB-INF/lib/jaxen.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
LiyuNet/论坛应用/WEB-INF/lib/jtds-1.2.jar
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
LiyuNet/论坛应用/WEB-INF/lib/jtds-1.2.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
LiyuNet/论坛应用/WEB-INF/lib/log4j-1.2.14.jar
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
LiyuNet/论坛应用/WEB-INF/lib/log4j-1.2.14.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
LiyuNet/论坛应用/WEB-INF/lib/mail.jar
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
LiyuNet/论坛应用/WEB-INF/lib/mail.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
LiyuNet/论坛应用/WEB-INF/lib/mysql-connector-java-3.0.17-ga-bin.jar
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
LiyuNet/论坛应用/WEB-INF/lib/mysql-connector-java-3.0.17-ga-bin.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
LiyuNet/论坛应用/WEB-INF/lib/oscache-2.3.jar
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
LiyuNet/论坛应用/WEB-INF/lib/oscache-2.3.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
LiyuNet/论坛应用/WEB-INF/lib/proxool-0.8.3.jar
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
LiyuNet/论坛应用/WEB-INF/lib/proxool-0.8.3.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
LiyuNet/论坛应用/bbs/INC/error.asp
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
LiyuNet/论坛应用/bbs/INC/error.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
LiyuNet/论坛应用/bbs/INC/forumList.js
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
LiyuNet/论坛应用/bbs/INC/forumList.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
LiyuNet/论坛应用/bbs/admin_html_act.asp
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
LiyuNet/论坛应用/bbs/admin_html_act.asp
Resource
win10v2004-20240802-en
General
-
Target
LiyuNet/论坛应用/WEB-INF/lib/jaxen.jar
-
Size
233KB
-
MD5
c153c4ab878f6f05961bd140f306e414
-
SHA1
5068765aac584432b0ef144f9beb8d0988365119
-
SHA256
60ae8892590aaaae89c2c8525eb9069aee8d2f10c299f9ca92cb7d7767894578
-
SHA512
bc51a43f45235612fdf238362453be8dea1bdda7847a3dcc20fe2f4455b3ed3b9ddb4da9dfa68bd64b22b1c002c8d53c1333bdeb269164c022b41c7460898878
-
SSDEEP
6144:jvJ5fldMBgytgVPLjLBxgb7W3ze++pyQX9DjSbt+F4:jXj4t4TjLDgb7owX9Dj6g6
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\LiyuNet\论坛应用\WEB-INF\lib\jaxen.jar1⤵PID:520
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=2820,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:81⤵PID:2444