Overview

overview

3

Static

static

1

a/新云软件.url

windows7-x64

1

a/新云软件.url

windows10-2004-x64

1

admin/ad.ps1

windows7-x64

3

admin/ad.ps1

windows10-2004-x64

3

admin/class/db_sql.js

windows7-x64

3

admin/class/db_sql.js

windows10-2004-x64

3

admin/clas...inc.js

windows7-x64

3

admin/clas...inc.js

windows10-2004-x64

3

admin/dh_class.ps1

windows7-x64

3

admin/dh_class.ps1

windows10-2004-x64

3

admin/glob...ion.js

windows7-x64

3

admin/glob...ion.js

windows10-2004-x64

3

admin/index_main.html

windows7-x64

3

admin/index_main.html

windows10-2004-x64

3

admin/index_top.html

windows7-x64

3

admin/index_top.html

windows10-2004-x64

3

admin/lang...eDb.js

windows7-x64

3

admin/lang...eDb.js

windows10-2004-x64

3

admin/lang...ble.js

windows7-x64

3

admin/lang...ble.js

windows10-2004-x64

3

admin/lang...eld.js

windows7-x64

3

admin/lang...eld.js

windows10-2004-x64

3

admin/lang...bak.js

windows7-x64

3

admin/lang...bak.js

windows10-2004-x64

3

admin/lang...age.js

windows7-x64

3

admin/lang...age.js

windows10-2004-x64

3

admin/lang...eDb.js

windows7-x64

3

admin/lang...eDb.js

windows10-2004-x64

3

admin/lang...ble.js

windows7-x64

3

admin/lang...ble.js

windows10-2004-x64

3

admin/lang...eld.js

windows7-x64

3

admin/lang...eld.js

windows10-2004-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/09/2024, 11:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    admin/class/phpzip.inc.js

  • Size

    6KB

  • MD5

    66a51d8bcd8f196a46d99694bff40c59

  • SHA1

    01909c37b5c4d6c95dbdba8a5c645f2295571e21

  • SHA256

    44dc3376e334e3fee25638b11d0873e3e77923aa37b1581577b695bcd9c2d999

  • SHA512

    8aa42b5c679fcf278a53d330f93b5cb43a0a12e9d5d325c05ce4d09d0d0f44c2eb6799ecc4bed3082db7b94a6d236574b425b9db40361a331e02cd82f5c5d67b

  • SSDEEP

    192:C858X8Wk4b4a9N9cyTua3Yp7s8VuEVnvB1:Qjk4bd9N9rTuaIp7HuknvB1

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\admin\class\phpzip.inc.js
    1⤵
      PID:2976

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads