Overview
overview
3Static
static
3超能仓�...ut.htm
windows7-x64
3超能仓�...ut.htm
windows10-2004-x64
3超能仓�...CK.vbs
windows7-x64
1超能仓�...CK.vbs
windows10-2004-x64
1超能仓�...R.html
windows7-x64
3超能仓�...R.html
windows10-2004-x64
3超能仓�...IT.vbs
windows7-x64
1超能仓�...IT.vbs
windows10-2004-x64
超能仓�...DEX.js
windows7-x64
3超能仓�...DEX.js
windows10-2004-x64
3超能仓�...NE.vbs
windows7-x64
1超能仓�...NE.vbs
windows10-2004-x64
1超能仓�...ST.vbs
windows7-x64
1超能仓�...ST.vbs
windows10-2004-x64
1超能仓�...IN.asp
windows7-x64
3超能仓�...IN.asp
windows10-2004-x64
3超能仓�...NE.asp
windows7-x64
3超能仓�...NE.asp
windows10-2004-x64
3超能仓�...AY.asp
windows7-x64
3超能仓�...AY.asp
windows10-2004-x64
3超能仓�...YZ.asp
windows7-x64
3超能仓�...YZ.asp
windows10-2004-x64
3超能仓�...DY.vbs
windows7-x64
1超能仓�...DY.vbs
windows10-2004-x64
1超能仓�...Y2.vbs
windows7-x64
1超能仓�...Y2.vbs
windows10-2004-x64
1超能仓�...AR.asp
windows7-x64
3超能仓�...AR.asp
windows10-2004-x64
3超能仓�...NN.asp
windows7-x64
3超能仓�...NN.asp
windows10-2004-x64
3超能仓�...S.html
windows7-x64
3超能仓�...S.html
windows10-2004-x64
3Analysis
-
max time kernel
124s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
15-09-2024 04:03
Static task
static1
Behavioral task
behavioral1
Sample
超能仓库进销存系统正式商业版/About/about.htm
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
超能仓库进销存系统正式商业版/About/about.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
超能仓库进销存系统正式商业版/CHAT/CHECK.vbs
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
超能仓库进销存系统正式商业版/CHAT/CHECK.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
超能仓库进销存系统正式商业版/CHAT/ERROR.html
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
超能仓库进销存系统正式商业版/CHAT/ERROR.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
超能仓库进销存系统正式商业版/CHAT/EXIT.vbs
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
超能仓库进销存系统正式商业版/CHAT/EXIT.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
超能仓库进销存系统正式商业版/CHAT/INDEX.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
超能仓库进销存系统正式商业版/CHAT/INDEX.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
超能仓库进销存系统正式商业版/CHAT/KILLONE.vbs
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
超能仓库进销存系统正式商业版/CHAT/KILLONE.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
超能仓库进销存系统正式商业版/CHAT/LIST.vbs
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
超能仓库进销存系统正式商业版/CHAT/LIST.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
超能仓库进销存系统正式商业版/CHAT/MAIN.asp
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
超能仓库进销存系统正式商业版/CHAT/MAIN.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
超能仓库进销存系统正式商业版/CHAT/ONLINE.asp
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
超能仓库进销存系统正式商业版/CHAT/ONLINE.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
超能仓库进销存系统正式商业版/CHAT/SAY.asp
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
超能仓库进销存系统正式商业版/CHAT/SAY.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
超能仓库进销存系统正式商业版/GBOOK/ADMIN_YZ.asp
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
超能仓库进销存系统正式商业版/GBOOK/ADMIN_YZ.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
超能仓库进销存系统正式商业版/GBOOK/BODY.vbs
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
超能仓库进销存系统正式商业版/GBOOK/BODY.vbs
Resource
win10v2004-20240910-en
Behavioral task
behavioral25
Sample
超能仓库进销存系统正式商业版/GBOOK/BODY2.vbs
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
超能仓库进销存系统正式商业版/GBOOK/BODY2.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
超能仓库进销存系统正式商业版/GBOOK/CLEAR.asp
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
超能仓库进销存系统正式商业版/GBOOK/CLEAR.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
超能仓库进销存系统正式商业版/GBOOK/CONN.asp
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
超能仓库进销存系统正式商业版/GBOOK/CONN.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
超能仓库进销存系统正式商业版/GBOOK/CSS.html
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
超能仓库进销存系统正式商业版/GBOOK/CSS.html
Resource
win10v2004-20240802-en
General
-
Target
超能仓库进销存系统正式商业版/CHAT/CHECK.vbs
-
Size
957B
-
MD5
e4793a0a1be05cb3785dca69fe72c2ea
-
SHA1
dcc81b057c4df1567d2e6ab1e708558807a67e85
-
SHA256
bd860a39e2d878bbd5a46054725b4f76af6e55e1ea3a117a455b0fb88c1148a6
-
SHA512
bfa1bdb826fbb3eb79c191866caffa729c4ae820f179933fe97add7e76fa9ad3ae7b210f7a8a56ab86c0f07a4862b844b7a7aa8e533bc421f2691d6909d450c1
Malware Config
Signatures
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\超能仓库进销存系统正式商业版\CHAT\CHECK.vbs"1⤵PID:4024
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4276,i,13995403245988825027,7033610968827661507,262144 --variations-seed-version --mojo-platform-channel-handle=1316 /prefetch:81⤵PID:5040