Overview

overview

3

Static

static

1

易百万�...ion.js

windows7-x64

3

易百万�...ion.js

windows10-2004-x64

3

易百万�...n1.vbs

windows7-x64

1

易百万�...n1.vbs

windows10-2004-x64

1

易百万�...dRe.js

windows7-x64

3

易百万�...dRe.js

windows10-2004-x64

3

易百万�...ain.js

windows7-x64

3

易百万�...ain.js

windows10-2004-x64

3

易百万�...qq0.js

windows7-x64

3

易百万�...qq0.js

windows10-2004-x64

3

易百万�...qq1.js

windows7-x64

3

易百万�...qq1.js

windows10-2004-x64

3

易百万�...le.asp

windows7-x64

3

易百万�...le.asp

windows10-2004-x64

3

易百万�...AQ.vbs

windows7-x64

1

易百万�...AQ.vbs

windows10-2004-x64

1

易百万�...ct.asp

windows7-x64

3

易百万�...ct.asp

windows10-2004-x64

3

易百万�...st.asp

windows7-x64

3

易百万�...st.asp

windows10-2004-x64

3

易百万�...ll.vbs

windows7-x64

1

易百万�...ll.vbs

windows10-2004-x64

1

易百万�...rt.asp

windows7-x64

3

易百万�...rt.asp

windows10-2004-x64

3

易百万�...ct.asp

windows7-x64

3

易百万�...ct.asp

windows10-2004-x64

3

易百万�...g.html

windows7-x64

3

易百万�...g.html

windows10-2004-x64

3

易百万�...st.asp

windows7-x64

3

易百万�...st.asp

windows10-2004-x64

3

易百万�...il.asp

windows7-x64

3

易百万�...il.asp

windows10-2004-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/08/2024, 03:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    易百万网上商城 v1.2/123.files/Function.js

  • Size

    6KB

  • MD5

    16f6b6d63c0207ac5e5906c81d9272ab

  • SHA1

    b71fc6efdc9f7e9c21912aeeedf02b745346732d

  • SHA256

    618b2b99389ae5ceabbf0322964071c1399d533b5583f4bb3a4b65e775f69001

  • SHA512

    71d0c9732160d041aaed093f184568d0def21a3627ac09575cc7ac10eb151628ea59e3c290ca00320366fa09ff92da8e8e940e35373ed3df70421b4a8346068c

  • SSDEEP

    192:8qMDMAwZieHbinfiF3Sc/KW9Z/KNNVhDMhKb2ZMVufSvrdadSLHlHsn0uZH/4rhf:XHAMi0infiFiqhZCziMV82Rafn0vlZd

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe "C:\Users\Admin\AppData\Local\Temp\易百万网上商城 v1.2\123.files\Function.js"
    1⤵
      PID:3824

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads