Overview

overview

3

Static

static

1

文章系�.../1.asp

windows7-x64

1

文章系�.../1.asp

windows10-2004-x64

1

文章系�...NN.vbs

windows7-x64

1

文章系�...NN.vbs

windows10-2004-x64

1

文章系�...N1.vbs

windows7-x64

1

文章系�...N1.vbs

windows10-2004-x64

1

文章系�...6.html

windows7-x64

3

文章系�...6.html

windows10-2004-x64

3

文章系�...IN.asp

windows7-x64

1

文章系�...IN.asp

windows10-2004-x64

1

文章系�...N1.vbs

windows7-x64

1

文章系�...N1.vbs

windows10-2004-x64

1

文章系�...le.asp

windows7-x64

1

文章系�...le.asp

windows10-2004-x64

1

文章系�...ws.vbs

windows7-x64

1

文章系�...ws.vbs

windows10-2004-x64

1

文章系�...el.asp

windows7-x64

1

文章系�...el.asp

windows10-2004-x64

1

文章系�...nk.asp

windows7-x64

1

文章系�...nk.asp

windows10-2004-x64

1

文章系�...fy.vbs

windows7-x64

1

文章系�...fy.vbs

windows10-2004-x64

1

文章系�...se.vbs

windows7-x64

1

文章系�...se.vbs

windows10-2004-x64

1

文章系�...ig.asp

windows7-x64

1

文章系�...ig.asp

windows10-2004-x64

1

文章系�...ss.vbs

windows7-x64

1

文章系�...ss.vbs

windows10-2004-x64

1

文章系�...ad.vbs

windows7-x64

1

文章系�...ad.vbs

windows10-2004-x64

1

文章系�...log.js

windows7-x64

3

文章系�...log.js

windows10-2004-x64

3

Analysis

  • max time kernel
    136s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/08/2024, 10:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    文章系统(自动生成技术标)/admin/web/asp/config.asp

  • Size

    13KB

  • MD5

    5317b594347e1509e90e50a73787d5ba

  • SHA1

    77eb35c6597cb63999a0f765003acb729eca5498

  • SHA256

    00f79737e443f4a123e7b6f96cb8a381b426bf6d65beec43b8578ee2af589ba5

  • SHA512

    05d17f2468f8ab43b6bb63ccc5fd5688e8191ace4bd5fcc0259987e859fcb3e970825c1187cb1b06c5ca6a3cbcc419f032a139d4b0590eab829c8a6aebe04dcf

  • SSDEEP

    192:ZriDDRfoeFfQs4neFf7l03aeeFfD+4heFfA4deFfq4ReFf34HeFfV4JeFf34TeF5:Zru9fBQ0mIU6Mhddxqm

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\文章系统(自动生成技术标)\admin\web\asp\config.asp
    1⤵
      PID:2944

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads