Overview
overview
6Static
static
1CHINA-APT-.../dlump
ubuntu-18.04-amd64
CHINA-APT-.../dlump
debian-9-armhf
CHINA-APT-.../dlump
debian-9-mips
CHINA-APT-.../dlump
debian-9-mipsel
CHINA-APT-...l1/ccc
ubuntu-22.04-amd64
1CHINA-APT-...l1/kde
ubuntu-22.04-amd64
6CHINA-APT-.../udevd
ubuntu-24.04-amd64
6CHINA-APT-...ile.sh
ubuntu-18.04-amd64
CHINA-APT-...ile.sh
debian-9-armhf
CHINA-APT-...ile.sh
debian-9-mips
CHINA-APT-...ile.sh
debian-9-mipsel
CHINA-APT-...p/a.js
windows7-x64
3CHINA-APT-...p/a.js
windows10-2004-x64
3CHINA-APT-...yy1.js
windows7-x64
3CHINA-APT-...yy1.js
windows10-2004-x64
3CHINA-APT-...gin.js
windows7-x64
3CHINA-APT-...gin.js
windows10-2004-x64
3CHINA-APT-...l1/kde
ubuntu-24.04-amd64
6CHINA-APT-.../udevd
ubuntu-24.04-amd64
6CHINA-APT-...nux.so
ubuntu-22.04-amd64
1CHINA-APT-...m/dbus
ubuntu-24.04-amd64
6Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
21-11-2024 12:22
Static task
static1
Behavioral task
behavioral1
Sample
CHINA-APT-Trojan/etc/init.d/dlump
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral2
Sample
CHINA-APT-Trojan/etc/init.d/dlump
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
CHINA-APT-Trojan/etc/init.d/dlump
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
CHINA-APT-Trojan/etc/init.d/dlump
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral5
Sample
CHINA-APT-Trojan/home/www/.Xl1/ccc
Resource
ubuntu2204-amd64-20240522.1-en
Behavioral task
behavioral6
Sample
CHINA-APT-Trojan/home/www/.Xl1/kde
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral7
Sample
CHINA-APT-Trojan/home/www/.Xl1/udevd
Resource
ubuntu2404-amd64-20240729-en
Behavioral task
behavioral8
Sample
CHINA-APT-Trojan/home/www/.profile.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral9
Sample
CHINA-APT-Trojan/home/www/.profile.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral10
Sample
CHINA-APT-Trojan/home/www/.profile.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral11
Sample
CHINA-APT-Trojan/home/www/.profile.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral12
Sample
CHINA-APT-Trojan/home/www/tomcat/webapps/WEB-INF/attache_temp/a.js
Resource
win7-20241023-en
Behavioral task
behavioral13
Sample
CHINA-APT-Trojan/home/www/tomcat/webapps/WEB-INF/attache_temp/a.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
CHINA-APT-Trojan/home/www/tomcat/webapps/img/yy1.js
Resource
win7-20240903-en
Behavioral task
behavioral15
Sample
CHINA-APT-Trojan/home/www/tomcat/webapps/img/yy1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
CHINA-APT-Trojan/home/www/tomcat/webapps/login.js
Resource
win7-20241023-en
Behavioral task
behavioral17
Sample
CHINA-APT-Trojan/home/www/tomcat/webapps/login.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
CHINA-APT-Trojan/usr/bin/.Xl1/kde
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral19
Sample
CHINA-APT-Trojan/usr/bin/.Xl1/udevd
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral20
Sample
CHINA-APT-Trojan/usr/lib/libselinux.so
Resource
ubuntu2204-amd64-20240729-en
Behavioral task
behavioral21
Sample
CHINA-APT-Trojan/usr/lib64/gdm/.gdm/dbus
Resource
ubuntu2404-amd64-20240523-en
General
-
Target
CHINA-APT-Trojan/home/www/tomcat/webapps/img/yy1.js
-
Size
57KB
-
MD5
2f017728ead4b0d45f431e8d8f2622a6
-
SHA1
9f7790524bd759373ab57ee2aafa6f5d8bcb918a
-
SHA256
ff8b297fb8efc1b7b2cd871a489337831d889ec2d4945e58ee5358d201e865cd
-
SHA512
6a662be9b8a9935fd4cf6a1af399cc3fcc7528dd0f796960d05e847292be06298c90c89c6772528aad81aef7888d51e069f17b10072505f1d47a3ea8074e2e87
-
SSDEEP
768:OSmt4dfLJPEHgWYWtZSxsyX6c6idXjqHte:OUdD5EHgWYWtZSxs6qHg
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs