Overview
overview
3Static
static
3企业网�...n.html
windows7-x64
3企业网�...n.html
windows10-2004-x64
3企业网�...gin.js
windows7-x64
3企业网�...gin.js
windows10-2004-x64
3企业网�...d.html
windows7-x64
3企业网�...d.html
windows10-2004-x64
3企业网�.../en.js
windows7-x64
3企业网�.../en.js
windows10-2004-x64
3企业网�.../fr.js
windows7-x64
3企业网�.../fr.js
windows10-2004-x64
3企业网�.../it.js
windows7-x64
3企业网�.../it.js
windows10-2004-x64
3企业网�...e.html
windows7-x64
3企业网�...e.html
windows10-2004-x64
3企业网�...gin.js
windows7-x64
3企业网�...gin.js
windows10-2004-x64
3企业网�...01.vbs
windows7-x64
1企业网�...01.vbs
windows10-2004-x64
1企业网�...01.asp
windows7-x64
3企业网�...01.asp
windows10-2004-x64
3企业网�...e02.js
windows7-x64
3企业网�...e02.js
windows10-2004-x64
3企业网�...e03.js
windows7-x64
3企业网�...e03.js
windows10-2004-x64
3企业网�...e04.js
windows7-x64
3企业网�...e04.js
windows10-2004-x64
3企业网�...ta.asp
windows7-x64
3企业网�...ta.asp
windows10-2004-x64
3企业网�...mx.vbs
windows7-x64
1企业网�...mx.vbs
windows10-2004-x64
1企业网�...t.html
windows7-x64
3企业网�...t.html
windows10-2004-x64
3Analysis
-
max time kernel
122s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
07-09-2024 07:57
Static task
static1
Behavioral task
behavioral1
Sample
企业网站系统.net v1.0/FCKeditor/_documentation.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
企业网站系统.net v1.0/FCKeditor/_documentation.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/fckplugin.js
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/fckplugin.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/find.html
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/find.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/lang/en.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/lang/en.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/lang/fr.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/lang/fr.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/lang/it.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/lang/it.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/replace.html
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/replace.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/samples/fckplugin.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/samples/fckplugin.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
企业网站系统.net v1.0/FCKeditor/_samples/afp/sample01.vbs
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
企业网站系统.net v1.0/FCKeditor/_samples/afp/sample01.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
企业网站系统.net v1.0/FCKeditor/_samples/asp/sample01.asp
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
企业网站系统.net v1.0/FCKeditor/_samples/asp/sample01.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
企业网站系统.net v1.0/FCKeditor/_samples/asp/sample02.js
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
企业网站系统.net v1.0/FCKeditor/_samples/asp/sample02.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
企业网站系统.net v1.0/FCKeditor/_samples/asp/sample03.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
企业网站系统.net v1.0/FCKeditor/_samples/asp/sample03.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
企业网站系统.net v1.0/FCKeditor/_samples/asp/sample04.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
企业网站系统.net v1.0/FCKeditor/_samples/asp/sample04.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
企业网站系统.net v1.0/FCKeditor/_samples/asp/sampleposteddata.asp
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
企业网站系统.net v1.0/FCKeditor/_samples/asp/sampleposteddata.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
企业网站系统.net v1.0/FCKeditor/_samples/cfm/sample02_mx.vbs
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
企业网站系统.net v1.0/FCKeditor/_samples/cfm/sample02_mx.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
企业网站系统.net v1.0/FCKeditor/_samples/default.html
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
企业网站系统.net v1.0/FCKeditor/_samples/default.html
Resource
win10v2004-20240802-en
General
-
Target
企业网站系统.net v1.0/FCKeditor/_samples/_plugins/findreplace/lang/en.js
-
Size
1003B
-
MD5
362454d29ed84cf5c4452457941b630d
-
SHA1
b441a83d719f2ee011810027aa29b10e0df7d781
-
SHA256
e1e391eac08c270ab2e6d20367b28768f7d4f169da237a135aebb5ba3a5b5d23
-
SHA512
fbd5e172686107f7a02bc686a1c9c31da10469ba3c98afc7558401d117fa599729658ed05561768b70c1a82deeddc3b41f72a6856101d32bc3bf24990e53c9c8
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe "C:\Users\Admin\AppData\Local\Temp\企业网站系统.net v1.0\FCKeditor\_samples\_plugins\findreplace\lang\en.js"1⤵PID:4956
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1036,i,4356837537417149674,16553092232944545509,262144 --variations-seed-version --mojo-platform-channel-handle=3908 /prefetch:81⤵PID:1948