Overview
overview
3Static
static
1鸿天全�...ex.htm
windows7-x64
3鸿天全�...ex.htm
windows10-2004-x64
1鸿天全�...312.js
windows7-x64
3鸿天全�...312.js
windows10-2004-x64
3鸿天全�...min.js
windows7-x64
3鸿天全�...min.js
windows10-2004-x64
3鸿天全�...gin.js
windows7-x64
3鸿天全�...gin.js
windows10-2004-x64
3鸿天全�...nk.htm
windows7-x64
3鸿天全�...nk.htm
windows10-2004-x64
3鸿天全�...mon.js
windows7-x64
3鸿天全�...mon.js
windows10-2004-x64
3鸿天全�...mp.htm
windows7-x64
3鸿天全�...mp.htm
windows10-2004-x64
3鸿天全�.../en.js
windows7-x64
3鸿天全�.../en.js
windows10-2004-x64
3鸿天全�.../zh.js
windows7-x64
3鸿天全�.../zh.js
windows10-2004-x64
3鸿天全�..._cn.js
windows7-x64
3鸿天全�..._cn.js
windows10-2004-x64
3鸿天全�...gin.js
windows7-x64
3鸿天全�...gin.js
windows10-2004-x64
3鸿天全�...src.js
windows7-x64
3鸿天全�...src.js
windows10-2004-x64
3鸿天全�.../en.js
windows7-x64
3鸿天全�.../en.js
windows10-2004-x64
3鸿天全�.../zh.js
windows7-x64
3鸿天全�.../zh.js
windows10-2004-x64
3鸿天全�..._cn.js
windows7-x64
3鸿天全�..._cn.js
windows10-2004-x64
3鸿天全�...gin.js
windows7-x64
3鸿天全�...gin.js
windows10-2004-x64
3Analysis
-
max time kernel
130s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
07-09-2024 08:20
Static task
static1
Behavioral task
behavioral1
Sample
鸿天全站HUGESKY CMS V7.0.1.1/tools/index.htm
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
鸿天全站HUGESKY CMS V7.0.1.1/tools/index.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/GB2312.js
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/GB2312.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/admin.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/admin.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/admin_login.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/admin_login.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/blank.htm
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/blank.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/common.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/common.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/down_samp.htm
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/down_samp.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/langs/en.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/langs/en.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/langs/zh.js
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/langs/zh.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/langs/zh_cn.js
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/langs/zh_cn.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/plugins/advimage/editor_plugin.js
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/plugins/advimage/editor_plugin.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/plugins/advimage/editor_plugin_src.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/plugins/advimage/editor_plugin_src.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/plugins/advimage/langs/en.js
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/plugins/advimage/langs/en.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/plugins/advimage/langs/zh.js
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/plugins/advimage/langs/zh.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/plugins/advimage/langs/zh_cn.js
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/plugins/advimage/langs/zh_cn.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/plugins/advlink/editor_plugin.js
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
鸿天全站HUGESKY CMS V7.0.1.1/upload/admin/plugins/advlink/editor_plugin.js
Resource
win10v2004-20240802-en
General
-
Target
鸿天全站HUGESKY CMS V7.0.1.1/tools/index.htm
-
Size
1B
-
MD5
7215ee9c7d9dc229d2921a40e899ec5f
-
SHA1
b858cb282617fb0956d960215c8e84d1ccf909c6
-
SHA256
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
-
SHA512
f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\鸿天全站HUGESKY CMS V7.0.1.1\tools\index.htm1⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --field-trial-handle=4040,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:11⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --field-trial-handle=4060,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:11⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --field-trial-handle=5440,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:11⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=5472,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:81⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --field-trial-handle=5624,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:81⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --field-trial-handle=5436,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:11⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --field-trial-handle=5632,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:81⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4184,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:81⤵