Overview

overview

3

Static

static

1

Classrooma/EXCEL.vbs

windows7-x64

1

Classrooma/EXCEL.vbs

windows10-2004-x64

1

Classrooma/Md5.vbs

windows7-x64

1

Classrooma/Md5.vbs

windows10-2004-x64

1

Classrooma/SysInfo.js

windows7-x64

1

Classrooma/SysInfo.js

windows10-2004-x64

1

Classrooma/access.asp

windows7-x64

3

Classrooma/access.asp

windows10-2004-x64

3

Classrooma/bottom.asp

windows7-x64

3

Classrooma/bottom.asp

windows10-2004-x64

3

Classrooma...dar.js

windows7-x64

1

Classrooma...dar.js

windows10-2004-x64

1

Classrooma...nt.vbs

windows7-x64

1

Classrooma...nt.vbs

windows10-2004-x64

1

Classrooma...tb.vbs

windows7-x64

1

Classrooma...tb.vbs

windows10-2004-x64

1

Classrooma/check.vbs

windows7-x64

1

Classrooma/check.vbs

windows10-2004-x64

1

Classrooma/checkb.vbs

windows7-x64

1

Classrooma/checkb.vbs

windows10-2004-x64

1

Classrooma/class.vbs

windows7-x64

1

Classrooma/class.vbs

windows10-2004-x64

1

Classrooma...ss.asp

windows7-x64

3

Classrooma...ss.asp

windows10-2004-x64

3

Classrooma...dd.vbs

windows7-x64

1

Classrooma...dd.vbs

windows10-2004-x64

1

Classrooma...ge.vbs

windows7-x64

1

Classrooma...ge.vbs

windows10-2004-x64

1

Classrooma...ok.asp

windows7-x64

3

Classrooma...ok.asp

windows10-2004-x64

3

Classrooma...el.asp

windows7-x64

3

Classrooma...el.asp

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    e85a12de46102838ebb6ea8a7c8e1582_JaffaCakes118

  • Size

    15.3MB

  • MD5

    e85a12de46102838ebb6ea8a7c8e1582

  • SHA1

    e43206d4b90cb76eb050bf413f0915edc6caffd4

  • SHA256

    a52678acc8463c445ab939b63ff2b03dafea29a9945107e77126d6337898074b

  • SHA512

    15d2b1d34dcb01e35dd276b89b4ab6e12ec0044a804c6034d4cb07386fdb485a08159023061f2ef2e6a676eca7eccfbbf0225f39cbcdadc1cd9c08323eae7418

  • SSDEEP

    393216:b2Qt6rXiwVuCoRA/hA6FhYAhhuxU/AMWs782oXY3eYxW9cWV:opD/hA6sA6J2oXIdxW9cWV

Score
1/10

Malware Config

Signatures

Files

  • e85a12de46102838ebb6ea8a7c8e1582_JaffaCakes118
    .rar
  • Classrooma/EXCEL.asp
    .vbs
  • Classrooma/EXCEL/2008-12-13.csv
  • Classrooma/EXCEL/EXCEL报单生成指南.txt
  • Classrooma/Md5.asp
    .vbs
  • Classrooma/SysInfo.asp
    .js
  • Classrooma/access.asp
  • Classrooma/bottom.asp
  • Classrooma/cal.css
  • Classrooma/calendar.js
    .js
  • Classrooma/caspt/chy.cnt
  • Classrooma/caspt/cnt.asp
    .vbs
  • Classrooma/caspt/cntb.asp
    .vbs
  • Classrooma/caspt/dchy.cnt
  • Classrooma/caspt/访问总在线人数今日访问量.txt
  • Classrooma/check.asp
    .vbs
  • Classrooma/checkb.asp
    .vbs
  • Classrooma/class.asp
    .vbs
  • Classrooma/class.css
  • Classrooma/class_Success.asp
    .asp .vbs polyglot
  • Classrooma/class_add.asp
    .vbs
  • Classrooma/class_change.asp
    .vbs
  • Classrooma/class_change_ok.asp
    .asp .vbs polyglot
  • Classrooma/class_del.asp
    .asp .vbs polyglot
  • Classrooma/config.asp
    .vbs
  • Classrooma/conn.asp
    .vbs
  • Classrooma/database/jkghrgt#89d.asa
  • Classrooma/database/原始数据库.mdb
  • Classrooma/err.asp
    .asp .vbs polyglot
  • Classrooma/gg.asp
    .js
  • Classrooma/guestbook/add.asp
    .vbs
  • Classrooma/guestbook/admin.asp
  • Classrooma/guestbook/b.asp
    .asp
  • Classrooma/guestbook/b2.asp
    .asp
  • Classrooma/guestbook/bb.asp
    .asp .vbs polyglot
  • Classrooma/guestbook/bb2.asp
    .asp .vbs polyglot
  • Classrooma/guestbook/bottom.asp
  • Classrooma/guestbook/c.asp
    .asp
  • Classrooma/guestbook/cc.asp
    .asp .vbs polyglot
  • Classrooma/guestbook/class.css
  • Classrooma/guestbook/config.asp
    .vbs
  • Classrooma/guestbook/edit.asp
    .vbs
  • Classrooma/guestbook/email.asp
    .vbs
  • Classrooma/guestbook/header.asp
    .vbs
  • Classrooma/guestbook/help.asp
  • Classrooma/guestbook/images/##book#%lvi_dddi.asp
  • Classrooma/guestbook/images/f.gif
  • Classrooma/guestbook/images/index.gif
    .gif
  • Classrooma/guestbook/images/post.gif
    .gif
  • Classrooma/guestbook/images/qq.gif
    .gif
  • Classrooma/guestbook/images/url.gif
    .gif
  • Classrooma/guestbook/images/win16.gif
  • Classrooma/guestbook/index.asp
    .vbs
  • Classrooma/guestbook/login.asp
    .vbs
  • Classrooma/guestbook/logout.asp
  • Classrooma/guestbook/md5.asp
    .vbs
  • Classrooma/guestbook/pub.asp
    .vbs
  • Classrooma/guestbook/search.asp
  • Classrooma/guestbook/top.asp
    .js
  • Classrooma/guestbook/top_lz/Announce_01A.jpg
    .jpg
  • Classrooma/guestbook/top_lz/Announce_02.jpg
    .jpg
  • Classrooma/guestbook/top_lz/Bg_Path.gif
    .gif
  • Classrooma/guestbook/top_lz/Thumbs.db
  • Classrooma/guestbook/top_lz/_notes/logowp.jpg.mno
  • Classrooma/guestbook/top_lz/addr.jpg
    .jpg
  • Classrooma/guestbook/top_lz/addr_line.jpg
    .jpg
  • Classrooma/guestbook/top_lz/arrows.gif
    .gif
  • Classrooma/guestbook/top_lz/arrows2.gif
    .gif
  • Classrooma/guestbook/top_lz/bg58655.gif
    .gif
  • Classrooma/guestbook/top_lz/bg_btn.gif
    .gif
  • Classrooma/guestbook/top_lz/bg_td.gif
    .gif
  • Classrooma/guestbook/top_lz/bg_tdb.gif
  • Classrooma/guestbook/top_lz/bottom_bg.gif
    .gif
  • Classrooma/guestbook/top_lz/bottom_left.gif
    .gif
  • Classrooma/guestbook/top_lz/bottom_r.gif
    .gif
  • Classrooma/guestbook/top_lz/class.swf
  • Classrooma/guestbook/top_lz/ico_gototop.gif
    .gif
  • Classrooma/guestbook/top_lz/index_top1.gif
    .gif
  • Classrooma/guestbook/top_lz/menu_bg.jpg
    .jpg
  • Classrooma/guestbook/top_lz/menu_bg2.jpg
    .jpg
  • Classrooma/guestbook/top_lz/menu_bottombg.gif
    .gif
  • Classrooma/guestbook/top_lz/td.gif
  • Classrooma/guestbook/top_lz/td_bbs.gif
    .jpg
  • Classrooma/guestbook/top_lz/th.gif
    .gif
  • Classrooma/guestbook/top_lz/top_bg.jpg
    .jpg
  • Classrooma/guestbook/top_lz/ttd5.gif
  • Classrooma/guestbook/top_lz/web228.js
    .js
  • Classrooma/guestbook/tou.asp
  • Classrooma/guestbook/ubb.asp
    .vbs
  • Classrooma/guestbook/up/#upyesitis.asp
  • Classrooma/guestbook/up/add.asp
    .vbs
  • Classrooma/guestbook/up/admin_list.asp
    .vbs
  • Classrooma/guestbook/up/admin_main.asp
    .asp .vbs polyglot
  • Classrooma/guestbook/up/config.asp
    .vbs
  • Classrooma/guestbook/up/del.asp
    .vbs
  • Classrooma/guestbook/up/images/bg2.gif
    .gif
  • Classrooma/guestbook/up/images/bmp.gif
    .gif
  • Classrooma/guestbook/up/images/f.gif
  • Classrooma/guestbook/up/images/gif.gif
    .gif
  • Classrooma/guestbook/up/images/jpg.gif
    .gif
  • Classrooma/guestbook/up/images/up.js
    .js
  • Classrooma/guestbook/up/index.asp
  • Classrooma/guestbook/up/saveupload.asp
    .asp
  • Classrooma/guestbook/up/tou.asp
    .html
  • Classrooma/guestbook/up/uploadfile/0701_2482_on.gif
    .gif
  • Classrooma/guestbook/up/uploadfile/0701_7127_me.gif
    .gif
  • Classrooma/guestbook/up/uploadfile/0701_7956_1229.jpg
    .jpg
  • Classrooma/guestbook/up/yes2.css
  • Classrooma/guestbook/user_login.asp
  • Classrooma/guestbook/user_logout.asp
  • Classrooma/guestbook/web228.js
    .js
  • Classrooma/guestbook/安装说明.txt
  • Classrooma/help.asp
    .js
  • Classrooma/images/200612522413.jpg
    .gif
  • Classrooma/images/2class.swf
  • Classrooma/images/43.jpg
    .jpg
  • Classrooma/images/Admin.css
  • Classrooma/images/Dreamhome_adminbottom.gif
    .gif
  • Classrooma/images/Dreamhome_adminhelp.gif
    .gif
  • Classrooma/images/Dreamhome_adminmusn.gif
    .gif
  • Classrooma/images/Dreamhome_admintop.gif
    .gif
  • Classrooma/images/Dreamhome_style.css
  • Classrooma/images/Image0002.JPG
    .jpg
  • Classrooma/images/Menu/Blank.gif
    .gif
  • Classrooma/images/Menu/EMAIL.GIF
    .gif
  • Classrooma/images/Menu/HOMEPAGE.GIF
    .gif
  • Classrooma/images/Menu/Menu1.gif
    .gif
  • Classrooma/images/Menu/Menu2.gif
    .gif
  • Classrooma/images/Menu/Thumbs.db
  • Classrooma/images/Menu/icon.gif
    .gif
  • Classrooma/images/Thumbs.db
  • Classrooma/images/_notes/index_top1.gif.mno
  • Classrooma/images/_notes/index_top2.jpg.mno
  • Classrooma/images/_notes/kdfger.jpg.mno
  • Classrooma/images/_notes/top.jpg.mno
  • Classrooma/images/_notes/top1.jpg.mno
  • Classrooma/images/admin_key.gif
    .gif
  • Classrooma/images/bg00.gif
    .gif
  • Classrooma/images/bg01f.gif
    .gif
  • Classrooma/images/bg_search.gif
    .gif
  • Classrooma/images/class.swf
  • Classrooma/images/class制作.ini
  • Classrooma/images/cy_sdi.gif
    .gif
  • Classrooma/images/denglu.png
    .png
  • Classrooma/images/footc.jpg
    .jpg
  • Classrooma/images/index_top1.gif
    .gif
  • Classrooma/images/kdfger.jpg
    .jpg
  • Classrooma/images/lxzx.swf
  • Classrooma/images/pattern.gif
    .gif
  • Classrooma/images/position.gif
    .gif
  • Classrooma/images/top.gif
    .gif
  • Classrooma/images/top.jpg
    .jpg
  • Classrooma/images/top.png
    .png
  • Classrooma/images/xia.gif
    .gif
  • Classrooma/images/原class.swf
  • Classrooma/images/系统名制作.png
    .png
  • Classrooma/images/页头背景图制作.png
    .png
  • Classrooma/images/页头背景图制作2.png
    .png
  • Classrooma/index.asp
    .asp
  • Classrooma/info.asp
  • Classrooma/info_Default.asp
    .vbs
  • Classrooma/keshi.asp
    .vbs
  • Classrooma/keshi_Success.asp
    .asp .vbs polyglot
  • Classrooma/keshi_add.asp
    .vbs
  • Classrooma/keshi_change.asp
    .vbs
  • Classrooma/keshi_change_ok.asp
    .asp .vbs polyglot
  • Classrooma/keshi_del.asp
    .asp .vbs polyglot
  • Classrooma/left.asp
    .js
  • Classrooma/login.asp
    .vbs
  • Classrooma/loginb.asp
    .js
  • Classrooma/loginchk.asp
    .vbs
  • Classrooma/loginchkb.asp
    .vbs
  • Classrooma/loginout.asp
  • Classrooma/loginoutb.asp
  • Classrooma/mm_menu.js
    .js
  • Classrooma/password.asp
    .vbs
  • Classrooma/passwordb.asp
    .vbs
  • Classrooma/pcshm.asp
  • Classrooma/pcxm.asp
  • Classrooma/qqlx.asp
    .js
  • Classrooma/see.asp
    .asp .vbs polyglot
  • Classrooma/seeb.asp
    .asp .vbs polyglot
  • Classrooma/seeba.asp
    .asp .vbs polyglot
  • Classrooma/seec.asp
    .asp .vbs polyglot
  • Classrooma/seecd.asp
    .asp .vbs polyglot
  • Classrooma/show.asp
    .asp .vbs polyglot
  • Classrooma/sql.inc
    .vbs
  • Classrooma/system.asp
    .vbs
  • Classrooma/system_tj.asp
    .vbs
  • Classrooma/time.asp
    .html .js polyglot
  • Classrooma/top.asp
    .html .js polyglot
  • Classrooma/top_lz/Announce_01A.jpg
    .jpg
  • Classrooma/top_lz/Announce_02.jpg
    .jpg
  • Classrooma/top_lz/Bg_Path.gif
    .gif
  • Classrooma/top_lz/Thumbs.db
  • Classrooma/top_lz/_notes/logowp.jpg.mno
  • Classrooma/top_lz/addr.jpg
    .jpg
  • Classrooma/top_lz/addr_line.jpg
    .jpg
  • Classrooma/top_lz/arrows.gif
    .gif
  • Classrooma/top_lz/arrows2.gif
    .gif
  • Classrooma/top_lz/bg58655.gif
    .gif
  • Classrooma/top_lz/bg_btn.gif
    .gif
  • Classrooma/top_lz/bg_td.gif
    .gif
  • Classrooma/top_lz/bg_tdb.gif
  • Classrooma/top_lz/bglz.gif
    .gif
  • Classrooma/top_lz/bottom_bg.gif
    .gif
  • Classrooma/top_lz/bottom_left.gif
    .gif
  • Classrooma/top_lz/bottom_r.gif
    .gif
  • Classrooma/top_lz/ico_gototop.gif
    .gif
  • Classrooma/top_lz/menu_bg.jpg
    .jpg
  • Classrooma/top_lz/menu_bg2.jpg
    .jpg
  • Classrooma/top_lz/menu_bottombg.gif
    .gif
  • Classrooma/top_lz/menubg.gif
  • Classrooma/top_lz/td.gif
  • Classrooma/top_lz/td_bbs.gif
    .jpg
  • Classrooma/top_lz/th.gif
    .gif
  • Classrooma/top_lz/top_bg.jpg
    .jpg
  • Classrooma/top_lz/ttd5.gif
  • Classrooma/top_lz/web228.js
    .js
  • Classrooma/tzysh.asp
    .html
  • Classrooma/user.asp
    .vbs
  • Classrooma/user.xls
    .xls windows office2003
  • Classrooma/user_Success.asp
    .asp .vbs polyglot
  • Classrooma/user_add.asp
    .vbs
  • Classrooma/user_change.asp
    .vbs
  • Classrooma/user_change_ok.asp
    .asp .vbs polyglot
  • Classrooma/user_del.asp
    .asp .vbs polyglot
  • Classrooma/user_pl.asp
    .vbs
  • Classrooma/user_pl_save.asp
    .vbs
  • Classrooma/user_show.asp
    .vbs
  • Classrooma/yuding.asp
    .vbs
  • Classrooma/yuding_change.asp
    .vbs
  • Classrooma/yuding_change_ok.asp
    .vbs
  • Classrooma/yuding_change_okb.asp
    .vbs
  • Classrooma/yuding_changeb.asp
    .vbs
  • Classrooma/yuding_del.asp
    .asp .vbs polyglot
  • Classrooma/yuding_delb.asp
    .asp .vbs polyglot
  • Classrooma/yuding_success.asp
    .asp .vbs polyglot
  • Classrooma/yuding_successb.asp
    .asp .vbs polyglot
  • Classrooma/yuding_successc.asp
    .asp .vbs polyglot
  • Classrooma/yudingb.asp
    .vbs
  • Classrooma/yudingc.asp
    .vbs
  • Classrooma/yudingshow.asp
    .vbs
  • Classrooma/yudingshowb.asp
    .vbs
  • Classrooma/使用说明.txt
  • Classrooma/新云软件.url
    .url