Index

Backdoor.ASP.Ace.aa Sep 23

7c28ba6513a77b9a94554c050fc91b6ba04294b26d1bf21ccb3afb7876359ff6 O(C)Th

100% Encoded ASP webshell backdoor

Backdoor.ASP.Ace.fi Sep 23

7f7c802e59fad9f0c4c3ff841a9a6f55c4f0402f2c3eb532977f5ed7e2de75b9 O(C)Th

100% Known ASP webshell backdoor

Backdoor.ASP.Ace.co Sep 23

f5a638f574427ba5cfe7546d6a9d6ef0f294438a31c6d8d48d35c179929fd122 O(C)Th

78% ASP/Encodedwebshell/request

Backdoor.ASP.Kodlama.b Sep 23

000d595394d9956f7535af72553120b1fff63ac14e9b6e4f9bbdf3acc80dc182 O(C)Th

100% Encoded ASP webshell backdoor

Backdoor.ASP.Ace.cw Sep 23

ce85600d916d0f9a6c84da4b0da1ea79195eec89c4035aa20b7cd6e656b106c7 O(C)Th

100% Encoded ASP webshell backdoor

Backdoor.ASP.Ace.am Sep 23

2d7c2f4725e786419693c0d3473071953f4ba17d101cdb53e4dfe7fc0da64226 O(C)Th

78% ASP/Encodedwebshell/request

Backdoor.ASP.Ace.ce Sep 23

7136fe6d90a2958f840ab84ce8a12923ad08088f6c52c81c8c35bd24e43c71cd O(C)Th

100% Encoded ASP webshell backdoor

Backdoor.ASP.Ace.bh Sep 23

cf1f2153db6438b65ce8c8a8e4f985d9c1011d52b6e43cffbe5c03c7b5747b75 O(C)Th

100% Encoded ASP webshell backdoor

Backdoor.ASP.Ace.o Sep 23

627ccfbf496d8ced3861873be078ea30604fb5de80b102cda9656fde8fdcc264 O(C)Th

100% Encoded ASP webshell backdoor

Backdoor.ASP.Ace.cg Sep 23

01ca3ce707d6d3d0b838a42591ebf08bbd188f735a14a6d8c3f7319fdca619e3 O(C)Th

100% Encoded ASP webshell backdoor

Backdoor.ASP.Ace.de Sep 23

681b5cdc41cc6a0e58f43bc47d7b491c333ea255d77369b4a812fbad5e2e4b54 O(C)Th

100% Encoded ASP webshell backdoor

customize.ashx Sep 23

a2a1b810ba69fc360b12adec75b69c4987c80f1e7dcf1a42e59c19f666709c22 O(C)Th

100% ASP webshell with SQL access

asp小马.asp Sep 23

3dbe68406df840d46857ef9d7a5e0352d6c38ba08fd9ccdf39e0b39e78904412 O(C)Th

100% Encoded ASP webshell

DJ团队.asp Sep 23

4b42079f09f2a2c67519084e18b9e12a3c32cd1f60aaa65cdbfbb18e6835e367 O(C)Th

100% Webshell with hardcoded credentials

xx.ashx Sep 23

f9615655be7ca356b2b2f17e926d6ea6fa89ff785e39680e0019412872eb3d95 O(C)Th

100% ASP webshell with eval

拿站小助手-经典Asp小马.asp Sep 23

480b8dd9f3b52a17aa546f6b30557bb40672605e689b84beea67c09b00a60ec9 O(C)Th

75% ASP/EncodedF3/Diy

bypass-iisuser-p.asp Sep 23

31ea6e085e202e97d79ce006e683f3bdb29e557899a52f6f284e40b86d434fb6 O(C)Th

100% ASP webshell evals user input

vbencode-bypass.asp Sep 23

8f23f05d5f97707f4e3e4d90175a099fb924b07c9ed7b81e3a1b8d4bc1c471df O(C)Th

100% Encoded webshell detected

0e51029ba28243b0a6a071713c17357a8eb024aa4298d1ccc9e2c4ac8916df4d.unknown Jun 17

0e51029ba28243b0a6a071713c17357a8eb024aa4298d1ccc9e2c4ac8916df4d O(C)Th

99% VBScript backdoor with C2

6acc9df3e69a59d7f6ff827ab6b9098c526e2b4f288ce7a6063d7aab9c053ab8.lnk May 18

6acc9df3e69a59d7f6ff827ab6b9098c526e2b4f288ce7a6063d7aab9c053ab8 O(C)Th

35000d579ed54c184e8404157d0b5414c350d22ba1d0493acd0ddef6f1254a4f.lnk May 18

35000d579ed54c184e8404157d0b5414c350d22ba1d0493acd0ddef6f1254a4f O(C)Th

a561972a2eddb201a5f85c138743f5002294191f971114d525f85009c407632c.lnk May 18

a561972a2eddb201a5f85c138743f5002294191f971114d525f85009c407632c O(C)Th

1b326c54f5daefe44bb94d0900f186eb53afd290b291c50c1e4af8f27ffbcff2.lnk May 18

1b326c54f5daefe44bb94d0900f186eb53afd290b291c50c1e4af8f27ffbcff2 O(C)Th

6da7215d05faee1d1811c71e0ea70c3abd10887e6d8c89093cbcde37b9330fbd.lnk May 18

6da7215d05faee1d1811c71e0ea70c3abd10887e6d8c89093cbcde37b9330fbd O(C)Th

cc71e575319396e1266406f5fecb8d4658008557307d7ba75dddcdf2c69a7db4.lnk May 18

cc71e575319396e1266406f5fecb8d4658008557307d7ba75dddcdf2c69a7db4 O(C)Th

2ee8446db11ef44dee1093b90f8020f9b3a5eda3c4b42fe26575c7584d26939e.lnk May 18

2ee8446db11ef44dee1093b90f8020f9b3a5eda3c4b42fe26575c7584d26939e O(C)Th

1bdfcd1d33ff8a80eb5a687622f752b148065d158d2925003ad2d6cd458da261.lnk May 18

1bdfcd1d33ff8a80eb5a687622f752b148065d158d2925003ad2d6cd458da261 O(C)Th

a395c3d88f4c72fa292b03df2693ea937cf370b24d84dd13143066eb24a0eb92.lnk May 17

a395c3d88f4c72fa292b03df2693ea937cf370b24d84dd13143066eb24a0eb92 O(C)Th

e6b71fb954c15afdeb377e6b65389a8182fc0bb7c14453f19d95e7fa1ab8310d.lnk May 17

e6b71fb954c15afdeb377e6b65389a8182fc0bb7c14453f19d95e7fa1ab8310d O(C)Th

4a31076f31a1e51fa52e8d4ee9e8c502646788cc03e4cc3c4fdc0fce568779eb.lnk May 17

4a31076f31a1e51fa52e8d4ee9e8c502646788cc03e4cc3c4fdc0fce568779eb O(C)Th

c71f453365854d4758a853cab20ccbc6947c158e553ab0cf147fcf6a3d8a9ffe.lnk May 17

c71f453365854d4758a853cab20ccbc6947c158e553ab0cf147fcf6a3d8a9ffe O(C)Th

c746152c4e23fb14b4437b4777b2c850539795ff7e1ae9d6f80ab26ec94dbec5.lnk May 17

c746152c4e23fb14b4437b4777b2c850539795ff7e1ae9d6f80ab26ec94dbec5 O(C)Th

cmd_system64_minimized.lnk May 17

50511077882628f78039d77ec1565b73b5f2670f9fec7c436b22b9106ea33696 O(C)Th

80% LNK runs cmd.exe minimized

cmd_wow64_minimized.lnk May 17

e3e6a6beb549b89a13578a8c83e6f954875977648de261af6e594493613c49fc O(C)Th

ee25d6efaaf9cfcea1a6bc65e32cf8654642c3c5eedebb466dd149b0424261c0.lnk May 16

ee25d6efaaf9cfcea1a6bc65e32cf8654642c3c5eedebb466dd149b0424261c0 O(C)Th

cb2d88dd274c268e1fca382cc8d94006098021ccb7c9a4011ed637e8dae834c2.lnk May 16

cb2d88dd274c268e1fca382cc8d94006098021ccb7c9a4011ed637e8dae834c2 O(C)Th

84653f85e5a8c5b1c741d68c4748e6d119d2b14b2d321fa8faa590aa32c6d5ac.unknown May 16

84653f85e5a8c5b1c741d68c4748e6d119d2b14b2d321fa8faa590aa32c6d5ac O(C)Th

100% SVG executes external malicious script

a3819441c746297c18b2308a865f72ab028e1d46988d59589d4a47940dfbec2b.lnk May 16

a3819441c746297c18b2308a865f72ab028e1d46988d59589d4a47940dfbec2b O(C)Th

cdbc04fe9ad2d8378255120207a9f21fc7e7d4494856e9a02310369ae6a3c435.unknown May 16

cdbc04fe9ad2d8378255120207a9f21fc7e7d4494856e9a02310369ae6a3c435 O(C)Th

100% SVG loads external malicious script

c86f1f043314bd600482595d382a3c3b3f0999cad5b1635529058650e9d4782e.svg May 16

c86f1f043314bd600482595d382a3c3b3f0999cad5b1635529058650e9d4782e O(C)Th

100% SVG executes external malicious script

dbacd92dfadbbd3f379cbe31cf0715bab488c5690a08a031e2d582c1d80258c0.svg May 16

dbacd92dfadbbd3f379cbe31cf0715bab488c5690a08a031e2d582c1d80258c0 O(C)Th

100% SVG executes external malicious script

6638389bbcdca1e6266edeb39416b55c5b02e810439f991e464a6cc444d2ba32.unknown May 16

6638389bbcdca1e6266edeb39416b55c5b02e810439f991e464a6cc444d2ba32 O(C)Th

100% SVG executes external malicious script

3837171f2b0349f3e59638016eb63ee0f9674d2c80e00681069bb03101736d98.unknown May 16

3837171f2b0349f3e59638016eb63ee0f9674d2c80e00681069bb03101736d98 O(C)Th

100% SVG executes external malicious script

3d02441be4d6f93256ed353bb977277d113614797b45864b268721706ee66a77.svg May 16

3d02441be4d6f93256ed353bb977277d113614797b45864b268721706ee66a77 O(C)Th

100% SVG executes external malicious script

58e508cd5c25a60e72bf9a755946fb154c86ce5b235bff0db3e432cfd9807202.lnk May 16

58e508cd5c25a60e72bf9a755946fb154c86ce5b235bff0db3e432cfd9807202 O(C)Th

5714d402ebc409c5537833ae2ca5fcef2831dad5fbb4b863dff047b2b5549fbd.unknown May 16

5714d402ebc409c5537833ae2ca5fcef2831dad5fbb4b863dff047b2b5549fbd O(C)Th

100% SVG executes external malicious script

85c71c163fbf51dd9ce661289c2173928f8297d0352a7f567b947b708eb9ad40.lnk May 16

85c71c163fbf51dd9ce661289c2173928f8297d0352a7f567b947b708eb9ad40 O(C)Th

0478d3d06de4d0d16d5d9217167b3db05b0063c9dc93c84d02c492cfc940a0fa.lnk May 16

0478d3d06de4d0d16d5d9217167b3db05b0063c9dc93c84d02c492cfc940a0fa O(C)Th

e4cc0fa64b8dc370305b6e2c86f82add3b7e0e883c9bdf463489ed17f698d49d.lnk May 16

e4cc0fa64b8dc370305b6e2c86f82add3b7e0e883c9bdf463489ed17f698d49d O(C)Th

29f13c1393fbc036ec56e4765304e1bc2accadd86a21efdc3ffdf6cef38d22f7.lnk May 16

29f13c1393fbc036ec56e4765304e1bc2accadd86a21efdc3ffdf6cef38d22f7 O(C)Th

13013536118b69ed79be1cf3c2eaada34e540ca48aa236afbeff49469c0b4e76.lnk May 16

13013536118b69ed79be1cf3c2eaada34e540ca48aa236afbeff49469c0b4e76 O(C)Th

5f0ff028fe981ee258397cb0a1bbefc065126d4bf5d7a80d5fe78720f1179d4e.lnk May 16

5f0ff028fe981ee258397cb0a1bbefc065126d4bf5d7a80d5fe78720f1179d4e O(C)Th

c326256f531b3a0c00572fd26265015779b0b74653094db04a90eb3e58f53a71.lnk May 15

c326256f531b3a0c00572fd26265015779b0b74653094db04a90eb3e58f53a71 O(C)Th

9886707db0885acfb6e7bffe5d1e9e1e70460f428a99dd63503e6982a643c1d4.lnk May 15

9886707db0885acfb6e7bffe5d1e9e1e70460f428a99dd63503e6982a643c1d4 O(C)Th

b598f70f9598d053cc1375d0df211fe8d6079059fac8d127bb6c85fd198de882.lnk May 14

b598f70f9598d053cc1375d0df211fe8d6079059fac8d127bb6c85fd198de882 O(C)Th

bef454310a01e957308766153f2a8031dd58451555e0dc43a9c82b9fa8a05742.lnk May 14

bef454310a01e957308766153f2a8031dd58451555e0dc43a9c82b9fa8a05742 O(C)Th

b21a36ba6d6e00227ead0ef1033950b7ab13ae7f8cca9a5b91df1b7bb15d6f4e.lnk May 14

b21a36ba6d6e00227ead0ef1033950b7ab13ae7f8cca9a5b91df1b7bb15d6f4e O(C)Th

3f6dcb3c2a0891f5f0894e9a70dc04a7021cb1ee8f61f73fa2f9139d254eded6.lnk May 14

3f6dcb3c2a0891f5f0894e9a70dc04a7021cb1ee8f61f73fa2f9139d254eded6 O(C)Th

a58bb13fc23e586f8a5f077012a44d9651f78fdfe6161a0c0c3bebafae63598f.bat May 14

a58bb13fc23e586f8a5f077012a44d9651f78fdfe6161a0c0c3bebafae63598f O(C)Th

f6be2889c3c4265e2cf2d747c140dd7375dc0bed2aaacdf26c841d95ec69c135.lnk May 14

f6be2889c3c4265e2cf2d747c140dd7375dc0bed2aaacdf26c841d95ec69c135 O(C)Th

c9e5b55be290891b9fb38948d02a7aa2090351ef999de6679cb1de8091c945e7.lnk May 14

c9e5b55be290891b9fb38948d02a7aa2090351ef999de6679cb1de8091c945e7 O(C)Th

56a8b8e7c206693524d6a6ea711b1a6746f67f9f3013adb801d92d315efc2157.lnk May 14

56a8b8e7c206693524d6a6ea711b1a6746f67f9f3013adb801d92d315efc2157 O(C)Th

10fb9c8e6be6d7e61a4a73ae842a861aa2e5d65b25fb085d38b6a5e574cb23c0.lnk May 14

10fb9c8e6be6d7e61a4a73ae842a861aa2e5d65b25fb085d38b6a5e574cb23c0 O(C)Th

2823b2b6fc290f9a91f5a1df5a7ff448799fa1c864749618ff28be5c86bb9dc5.lnk May 14

2823b2b6fc290f9a91f5a1df5a7ff448799fa1c864749618ff28be5c86bb9dc5 O(C)Th

d36e5164b7d2f847442f465ac3f8f52216eb06fdc48a1f664416f4d1d2dcfe7f.lnk May 14

d36e5164b7d2f847442f465ac3f8f52216eb06fdc48a1f664416f4d1d2dcfe7f O(C)Th

a170d5a665d3639726a2bb939d96ae9647a80bcfecf9a854d6a50d6895250791.lnk May 14

a170d5a665d3639726a2bb939d96ae9647a80bcfecf9a854d6a50d6895250791 O(C)Th

ddd2ab79388a5b04226b99ba968e8b2f59b7f2e05b8bf7fc3138f827a973b1d0.lnk May 14

ddd2ab79388a5b04226b99ba968e8b2f59b7f2e05b8bf7fc3138f827a973b1d0 O(C)Th

b6272b947936451f233201d05ab27d441c424fc6af21d4a2e568b7f03a5faad3.lnk May 14

b6272b947936451f233201d05ab27d441c424fc6af21d4a2e568b7f03a5faad3 O(C)Th

594e677b6a73393911013984c5dfc8549cb8fb9ff979c67ca34794ca26095308.lnk May 14

594e677b6a73393911013984c5dfc8549cb8fb9ff979c67ca34794ca26095308 O(C)Th

43d457da97274a84982b833136f55b90bee59fd1d4e9848c084c5e8d5c6df95e.lnk May 14

43d457da97274a84982b833136f55b90bee59fd1d4e9848c084c5e8d5c6df95e O(C)Th

e0ed5c8323aa068c5cd9ec7e078ffd7e0930630eeb5755cc222a827ec81ab054.lnk May 14

e0ed5c8323aa068c5cd9ec7e078ffd7e0930630eeb5755cc222a827ec81ab054 O(C)Th

319e4fbf9060926402c3796ec527542ae47273166681145a6da387118dd855c1.lnk May 14

319e4fbf9060926402c3796ec527542ae47273166681145a6da387118dd855c1 O(C)Th

afb27d3436745b5a9938ea28e17c32c7ded817f58edb40b6ac78b461a14ce733.lnk May 14

afb27d3436745b5a9938ea28e17c32c7ded817f58edb40b6ac78b461a14ce733 O(C)Th

f3e3f70f46ad18583fe731b207aa4217a92cfd6a5aa1959cbb699e6d30238be3.lnk May 14

f3e3f70f46ad18583fe731b207aa4217a92cfd6a5aa1959cbb699e6d30238be3 O(C)Th

c4ff400cdecd4000b62eedc0ab408fbf299b961df4a64cb48a786fbd65c4304d.lnk May 14

c4ff400cdecd4000b62eedc0ab408fbf299b961df4a64cb48a786fbd65c4304d O(C)Th

7f517b4eca79646e81ece0ffeb467159303383b8959f42e8efc2fefa8773baf6.lnk May 14

7f517b4eca79646e81ece0ffeb467159303383b8959f42e8efc2fefa8773baf6 O(C)Th

9bdb0e3f6d9844112355c2c8f47bec31ea74c6c0ec5d174cabebb9975516b723.lnk May 14

9bdb0e3f6d9844112355c2c8f47bec31ea74c6c0ec5d174cabebb9975516b723 O(C)Th

b342e3a02b933f773fbdd97d85bdedf7f370aa48ef8b84d4c21ef31cef3f050b.lnk May 14

b342e3a02b933f773fbdd97d85bdedf7f370aa48ef8b84d4c21ef31cef3f050b O(C)Th

9a8ec8a367f89287e61188e2ab38947d020ca28e5e271c2da9efea818505ae4a.lnk May 14

9a8ec8a367f89287e61188e2ab38947d020ca28e5e271c2da9efea818505ae4a O(C)Th

3545f9d3ed947a54018b10a1c149e67bd74a3be12107d56d8b3e1785ad0e3f22.lnk May 14

3545f9d3ed947a54018b10a1c149e67bd74a3be12107d56d8b3e1785ad0e3f22 O(C)Th

45e0304812642308060ad57c3e6e00a0eb3bfd7c8ef0829dfc7f0b455e3d7a12.lnk May 14

45e0304812642308060ad57c3e6e00a0eb3bfd7c8ef0829dfc7f0b455e3d7a12 O(C)Th

c573cf0de7779f505f6a8d93fa8dcac5a4bbb4b691cbe1d710cab2e3513d9703.lnk May 14

c573cf0de7779f505f6a8d93fa8dcac5a4bbb4b691cbe1d710cab2e3513d9703 O(C)Th

44488027f0728e41d8bb316529869b8031439d84a46a30ebb94c1b2a94d4abe2.lnk May 14

44488027f0728e41d8bb316529869b8031439d84a46a30ebb94c1b2a94d4abe2 O(C)Th

5e5d501329aa1482df6fab3da7b839bc0b0f049cc9c1ebd79860e1d7b0e0086d.lnk May 14

5e5d501329aa1482df6fab3da7b839bc0b0f049cc9c1ebd79860e1d7b0e0086d O(C)Th

e54fb7684c3b11ada2ecc37d87bb050b15f00a192cf757e67a135a7ea113588c.lnk May 14

e54fb7684c3b11ada2ecc37d87bb050b15f00a192cf757e67a135a7ea113588c O(C)Th

89c0ea787964103d57d5459fbcd1b251a98eca28c14cef55f18943248939f21a.lnk May 14

89c0ea787964103d57d5459fbcd1b251a98eca28c14cef55f18943248939f21a O(C)Th

9805d2f3d81d3b27302bbfdfe5619f5deb59d0c993beb4d10417f28e74c77123.lnk May 14

9805d2f3d81d3b27302bbfdfe5619f5deb59d0c993beb4d10417f28e74c77123 O(C)Th

0a71c7f29055e2682b34852112d0e691a0f59434ac8eabb56fe4032c96185964.lnk May 14

0a71c7f29055e2682b34852112d0e691a0f59434ac8eabb56fe4032c96185964 O(C)Th

93ab4ab3709ea26ca94fbb7645d20d66b33eab8d77f28cc94fa963d202296376.lnk May 14

93ab4ab3709ea26ca94fbb7645d20d66b33eab8d77f28cc94fa963d202296376 O(C)Th

92f5f00033164c621688ac215583a2153709856ceec6bdc3a420d949f63f0768.lnk May 14

92f5f00033164c621688ac215583a2153709856ceec6bdc3a420d949f63f0768 O(C)Th

2a7d60e582815aec30287ab69cd5c7a743bef1671e65b6f3b782c7dc1c908b2f.lnk May 14

2a7d60e582815aec30287ab69cd5c7a743bef1671e65b6f3b782c7dc1c908b2f O(C)Th

ed7743265c8327854d2218967121987a99df9c83f6fc99055ba90fde7d894a96.lnk May 14

ed7743265c8327854d2218967121987a99df9c83f6fc99055ba90fde7d894a96 O(C)Th

6a68108fd921b82865e5f6110a89f8271579731f810a1d1b0bfa0d8046330672.lnk May 14

6a68108fd921b82865e5f6110a89f8271579731f810a1d1b0bfa0d8046330672 O(C)Th

f8cf232fd172fc0daba02259cceb9ea1508d444e06dc7ce85c7dacc2e71865da.lnk May 14

f8cf232fd172fc0daba02259cceb9ea1508d444e06dc7ce85c7dacc2e71865da O(C)Th

0bf1b72c98be0685187e5bfdf1a6baa2a17cb20738ba8e79e1d116952a150003.lnk May 14

0bf1b72c98be0685187e5bfdf1a6baa2a17cb20738ba8e79e1d116952a150003 O(C)Th

597dce062ac3a05e9d839bb7da4e70862d30ec7982a06fb219093a75018c1080.lnk May 14

597dce062ac3a05e9d839bb7da4e70862d30ec7982a06fb219093a75018c1080 O(C)Th

5b097c25cde69f18f9a8a88063c235a8215eb835b2fb6381bc9b6b855aaa5f71.lnk May 14

5b097c25cde69f18f9a8a88063c235a8215eb835b2fb6381bc9b6b855aaa5f71 O(C)Th

934495cf8709d715987ceeb52730438e9fde89955cef793541bc7ffb0845cd0f.lnk May 13

934495cf8709d715987ceeb52730438e9fde89955cef793541bc7ffb0845cd0f O(C)Th

b2a1aa9fb416d8fbc550697ab703f4f8d8a620e20a854ad6de0b0d05c503067c.lnk May 13

b2a1aa9fb416d8fbc550697ab703f4f8d8a620e20a854ad6de0b0d05c503067c O(C)Th

b035ccbd9e923cc371a1f5ba74fc18694e7b8194a6cdd46e2c052485d60beeab.lnk May 13

b035ccbd9e923cc371a1f5ba74fc18694e7b8194a6cdd46e2c052485d60beeab O(C)Th