Overview
overview
3Static
static
1Install.vbs
windows7-x64
1Install.vbs
windows10-2004-x64
1assp/assp-monitor.pl
ubuntu-18.04-amd64
assp/assp-monitor.pl
debian-9-armhf
assp/assp-monitor.pl
debian-9-mips
assp/assp-monitor.pl
debian-9-mipsel
assp/assp_pop3.pl
ubuntu-18.04-amd64
assp/assp_pop3.pl
debian-9-armhf
assp/assp_pop3.pl
debian-9-mips
assp/assp_pop3.pl
debian-9-mipsel
assp/docs/...on.htm
windows7-x64
3assp/docs/...on.htm
windows10-2004-x64
3assp/docs/...on.htm
windows7-x64
3assp/docs/...on.htm
windows10-2004-x64
3assp/docs/...al.htm
windows7-x64
3assp/docs/...al.htm
windows10-2004-x64
3assp/docs/...me.vbs
windows7-x64
1assp/docs/...me.vbs
windows10-2004-x64
1asspfw.cmd
windows7-x64
1asspfw.cmd
windows10-2004-x64
1asspfw.vbs
windows7-x64
1asspfw.vbs
windows10-2004-x64
1assp/image...ce.vbs
windows7-x64
1assp/image...ce.vbs
windows10-2004-x64
1assp/image...al.vbs
windows7-x64
1assp/image...al.vbs
windows10-2004-x64
1assp/image..._o.vbs
windows7-x64
1assp/image..._o.vbs
windows10-2004-x64
1assp/images/fc.js
windows7-x64
3assp/images/fc.js
windows10-2004-x64
3assp/images/stat.vbs
windows7-x64
1assp/images/stat.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Install.vbs
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Install.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
assp/assp-monitor.pl
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral4
Sample
assp/assp-monitor.pl
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral5
Sample
assp/assp-monitor.pl
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral6
Sample
assp/assp-monitor.pl
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral7
Sample
assp/assp_pop3.pl
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral8
Sample
assp/assp_pop3.pl
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral9
Sample
assp/assp_pop3.pl
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral10
Sample
assp/assp_pop3.pl
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral11
Sample
assp/docs/ASSP Documentation.htm
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
assp/docs/ASSP Documentation.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
assp/docs/Legacy - ASSP Documentation.htm
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
assp/docs/Legacy - ASSP Documentation.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
assp/docs/Regular Expression Tutorial.htm
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
assp/docs/Regular Expression Tutorial.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
assp/docs/assp_database_readme.vbs
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
assp/docs/assp_database_readme.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
asspfw.cmd
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
asspfw.cmd
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
asspfw.vbs
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
asspfw.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
assp/images/confidence.vbs
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
assp/images/confidence.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
assp/images/confidence_integral.vbs
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
assp/images/confidence_integral.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
assp/images/confidence_o.vbs
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
assp/images/confidence_o.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
assp/images/fc.js
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
assp/images/fc.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
assp/images/stat.vbs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
assp/images/stat.vbs
Resource
win10v2004-20240802-en
General
-
Target
ASSP_2.8.1%2024226install.zip
-
Size
2.4MB
-
MD5
81c126ba766b812112b360aa3c773dfb
-
SHA1
7477e627bd9ab425163d24f9417920ffb7798b24
-
SHA256
367cc4b7cc67df002698b6176157820fb8202365f7be9d1dfcdd6ccb39394cbd
-
SHA512
d9ffe99a169492ce3246c82638da0c20d4c7dca53aa3e44c96ff4cba582b5b5f6a3c2e910106234462345547a7914ccbb11b531df713f1aea21e820a344bf027
-
SSDEEP
49152:jWaz3fcKxgvcVdsgR3DnGpZ1+t5z1FFIkTcafV/ybz78BSwgl7f:6a7fcKigApZsTL0j807f
Malware Config
Signatures
Files
-
ASSP_2.8.1%2024226install.zip.zip
Password: infected
-
Install.txt.vbs
-
MacOSX-launchd.txt
-
Win32-quickstart-guide.txt
-
assp/Plugins/ASSP_AFC.pm.js .pdf polyglot
-
assp/Plugins/file_types.txt
-
assp/Plugins/nodecompress.txt
-
assp/assp-monitor.pl.pl .sh linux
-
assp/assp.cfg.rename_on_new_install
-
assp/assp.pl.sh .js linux polyglot
-
assp/assp_db_import.cfg
-
assp/assp_pop3.pl.pl .sh linux
-
assp/assp_sync.cfg
-
assp/changelog.txt
-
assp/changelog_2.0.X.txt
-
assp/changelog_2.1.X.txt
-
assp/changelog_2.2.X.txt
-
assp/changelog_2.3.X.txt
-
assp/changelog_2.4.X.txt
-
assp/changelog_2.5.X.txt
-
assp/changelog_2.6.X.txt
-
assp/cmdqueue_example.txt
-
assp/dkim/dkimconfig.txt
-
assp/docs/ASSP Documentation.htm.html
-
assp/docs/Legacy - ASSP Documentation.htm.html
-
assp/docs/Regular Expression Tutorial.htm
-
assp/docs/assp_check_order.txt
-
assp/docs/assp_database_readme.txt.vbs
-
assp/docs/asspflow.png.png
Password: infected
-
assp/docs/asspflow_simple.png.png
Password: infected
-
assp/docs/asspfw.zip.zip
Password: infected
-
asspfw.cmd
-
asspfw.ini
-
asspfw.vbs.vbs
-
assp/docs/complex_AND-NOT_regexes.txt
-
assp/docs/config-description.txt
-
assp/docs/configure_BlockReports.txt
-
assp/docs/global-PB.txt
-
assp/docs/memory_tuning_ulimit.txt
-
assp/files/URIBLCCTLDS-L2.txt
-
assp/files/URIBLCCTLDS-L3.txt
-
assp/files/URIBLCCTLDS.txt
-
assp/files/arc_default_map_file.txt
-
assp/files/blackdomains.txt
-
assp/files/blackre.txt
-
assp/files/blockreportuser.txt
-
assp/files/bombheaderre.txt
-
assp/files/bombre.txt
-
assp/files/deny.txt
-
assp/files/denyalways.txt
-
assp/files/dnsbls.txt
-
assp/files/dnsrws.txt
-
assp/files/droplist.txt
-
assp/files/groups.txt
-
assp/files/invalidhelo.txt
-
assp/files/invalidptr.txt
-
assp/files/ipnp.txt
-
assp/files/ipwl.txt
-
assp/files/nodelay.txt
-
assp/files/pop3cfg.txt
-
assp/files/preheaderre.txt
-
assp/files/rcptreplrules.txt
-
assp/files/redre.txt
-
assp/files/strictspf.txt
-
assp/files/suspiciousvirus.txt
-
assp/files/tlds-alpha-by-domain.txt
-
assp/files/uribls.txt
-
assp/files/validhelo.txt
-
assp/files/validptr.txt
-
assp/files/whitedomains.txt
-
assp/files/whiteorg.txt
-
assp/images/address.jpg.jpg
Password: infected
-
assp/images/address.png.png
Password: infected
-
assp/images/admins.jpg.jpg
Password: infected
-
assp/images/admins.png.png
Password: infected
-
assp/images/analyze.png.png
Password: infected
-
assp/images/assp-home-page.jpg.jpg
-
assp/images/assp.css
-
assp/images/blockreport.css
-
assp/images/blockreport.gif
-
assp/images/blockreporticon.gif.gif
-
assp/images/bomb.jpg.jpg
-
assp/images/bomb.png.png
-
assp/images/collaps.png.png
-
assp/images/confidence.gplot.vbs
-
assp/images/confidence_integral.gplot.vbs
-
assp/images/confidence_o.gplot.vbs
-
assp/images/conn.png.png
-
assp/images/connp.png.png
-
assp/images/donate.jpg.jpg
-
assp/images/donate.png.png
-
assp/images/dropShadow.gif.gif
-
assp/images/editor.css
-
assp/images/expand.png.png
-
assp/images/favicon.ico
-
assp/images/fc.css
-
assp/images/fc.js.js
-
assp/images/fc.png.png
-
assp/images/fc_1.png.png
-
assp/images/fc_2.png.png
-
assp/images/fc_3.png.png
-
assp/images/fc_4.png.png
-
assp/images/fc_5.png.png
-
assp/images/fc_main.png.png
-
assp/images/fc_p.png.png
-
assp/images/fc_z.png.png
-
assp/images/help.jpg.jpg
-
assp/images/help.png.png
-
assp/images/history.jpg.jpg
-
assp/images/history.png.png
-
assp/images/home.jpg.jpg
-
assp/images/home.png.png
-
assp/images/index.jpg.jpg
-
assp/images/index.png.png
-
assp/images/info.jpg.jpg
-
assp/images/info.png.png
-
assp/images/ip.jpg.jpg
-
assp/images/ip.png.png
-
assp/images/lists.png.png
-
assp/images/loading.gif.gif
-
assp/images/log.jpg.jpg
-
assp/images/log.png.png
-
assp/images/logo.gif
-
assp/images/logo1.jpg.jpg
-
assp/images/minusIcon.png.png
-
assp/images/mobile.jpg.jpg
-
assp/images/mobile.png.png
-
assp/images/noIcon.png.png
-
assp/images/nomobile.jpg.jpg
-
assp/images/nomobile.png.png
-
assp/images/nosearchIcon.png.png
-
assp/images/opensource-logo.gif.gif
-
assp/images/password.jpg.jpg
-
assp/images/password.png.png
-
assp/images/plusIcon.png.png
-
assp/images/regex.jpg.jpg
-
assp/images/regex.png.png
-
assp/images/remember.jpg.jpg
-
assp/images/remember.png.png
-
assp/images/replace.jpg.jpg
-
assp/images/replace.png.png
-
assp/images/restart.jpg.jpg
-
assp/images/restart.png.png
-
assp/images/schedule.jpg.jpg
-
assp/images/schedule.png.png
-
assp/images/searchIcon.png.png
-
assp/images/shutdown.css
-
assp/images/sourceforge-logo.gif.gif
-
assp/images/stat.gplot.vbs
-
assp/images/stats.jpg.jpg
-
assp/images/stats.png.png
-
assp/images/status.jpg.jpg
-
assp/images/statusbad.gif.gif
-
assp/images/statusbad.jpg.jpg
-
assp/images/statusok.jpg.jpg
-
assp/images/statusok.png.png
-
assp/images/statuswarn.gif.gif
-
assp/images/statuswarn.jpg.jpg
-
assp/images/svg.js.js
-
assp/images/svg_defs.svg
-
assp/images/svg_style.css
-
assp/images/togglemenu.png.png
-
assp/images/top10.jpg.jpg
-
assp/images/top10.png.png
-
assp/images/unicode.png.png
-
assp/images/valid-xhtml10.gif.gif
-
assp/images/viewvc-logo.png.png
-
assp/images/village.gif.gif
-
assp/images/xml-pill.gif.gif
-
assp/language/readme.txt
-
assp/lib/ASSP_FC.pm.sh .js linux polyglot
-
assp/lib/ASSP_SVG.pm.ps1
-
assp/lib/ASSP_VirusTotal_API.pm
-
assp/lib/ASSP_WordStem.pm
-
assp/lib/AsspSelfLoader.pm
-
assp/lib/Authen/SASL/Perl/XOAUTH2.pm
-
assp/lib/BlockReport/modify.pm.sh linux
-
assp/lib/CorrectASSPcfg.pm.vbs
-
assp/lib/Lingua/Stem/Patch.pm
-
assp/lib/Lingua/Stem/Patch/EO.pm
-
assp/lib/Lingua/Stem/Patch/IO.pm
-
assp/lib/Lingua/Stem/Patch/PL.pm
-
assp/lib/Lingua/Stem/UniNE.pm
-
assp/lib/Lingua/Stem/UniNE/BG.pm
-
assp/lib/Lingua/Stem/UniNE/CS.pm
-
assp/lib/Lingua/Stem/UniNE/DE.pm
-
assp/lib/Lingua/Stem/UniNE/FA.pm
-
assp/lib/Net/SMTP/SSL.pm
-
assp/lib/SNMPmakeMIB.pl_
-
assp/lib/SNMPmakeMRTG.pl_
-
assp/lib/V1upgrade.pm.read_first
-
assp/license/smime.db
-
assp/license/smime.license
-
assp/mib/ASSP-MIB
-
assp/mib/assp-mrtg.cfg
-
assp/notes/ASSP_advanced_workflow.png.png
-
assp/notes/ASSP_simple_workflow.png.png
-
assp/notes/bayesian.txt
-
assp/notes/countries.txt
-
assp/notes/emailinterface.txt
-
assp/notes/network.txt
-
assp/notes/relaying.txt
-
assp/rc/_etc_default_assp.debian
-
assp/rc/_etc_init.d_assp.debian
-
assp/rc/assp
-
assp/rc/assp.bsd.sh linux
-
assp/rc/assp.default
-
assp/rc/assp.small.sh linux
-
assp/rc/assp_watchdog.sh .ps1 linux polyglot
-
assp/rc/readme.txt
-
assp/reports/analyzereport.txt
-
assp/reports/blackremovereport.txt
-
assp/reports/blackreport.txt
-
assp/reports/blockreport_html.txt
-
assp/reports/blockreport_sub.txt
-
assp/reports/blockreport_text.txt
-
assp/reports/blockreportfile.txt
-
assp/reports/blockreportforwarderror.txt
-
assp/reports/denied.txt
-
assp/reports/helpreport.txt
-
assp/reports/notspamreport.txt
-
assp/reports/npremovereport.txt
-
assp/reports/npreport.txt
-
assp/reports/redremovereport.txt
-
assp/reports/redreport.txt
-
assp/reports/slremovereport.txt
-
assp/reports/slreport.txt
-
assp/reports/spamreport.txt
-
assp/reports/virusreport.txt
-
assp/reports/whiteremovereport.txt
-
assp/reports/whitereport.txt
-
assp/version.txt
-
quickstart.txt