Breaking Down the China Chopper Web Shell - Part I | Mandiant
Tags
country: China
attack-pattern: Malware - T1587.001 Malware - T1588.001 Password Guessing - T1110.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Web Shell - T1505.003 Tool - T1588.002 Brute Force - T1110 Web Shell - T1100
Show in Graph
Common Information
Type Value
UUID bd9dcdae-1190-46f0-9e37-b92153371a9e
Fingerprint 24f78c18652f3f99
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 7, 2013, midnight
Added to db Nov. 9, 2023, 12:27 a.m.
Last updated Oct. 9, 2024, 8:27 p.m.
Headline Breaking Down the China Chopper Web Shell - Part I
Title Breaking Down the China Chopper Web Shell - Part I | Mandiant
Detected Hints/Tags/Attributes 45/2/17
Source URLs
Redirection Url
Details Source https://www.mandiant.com/resources/blog/breaking-down-china-chopper-web-shell-part-i
URL Provider
Details Provider Source level domain
Details mandiant.com www.mandiant.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 330 ✔ Threat Intelligence https://www.mandiant.com/resources/blog/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
www.maicaidao.com
Details Domain 3 
google.com.hk
Details Domain 2 
informationonsecurity.blogspot.com
Details Domain 1 
malware-hunters.net
Details File 2 
caidao.exe
Details File 1 
5001ef50c7e869253a7c152a638eab8a.exe
Details File 1 
decomp.exe
Details File 2 
customize.aspx
Details File 2 
customize.cfm
Details File 2 
customize.jsp
Details File 3 
china-chopper-webshell.html
Details md5 2 
5001ef50c7e869253a7c152a638eab8a
Details md5 2 
8aa603ee2454da64f4c70f24cc0b5e08
Details md5 2 
ad8288227240477a95fb023551773c84
Details md5 2 
acba8115d027529763ea5c7ed6621499
Details Url 2 
http://informationonsecurity.blogspot.com/2012/11/china-chopper-webshell.html
Details Url 1 
http://malware-hunters.net/all-downloads