Overview
overview
3Static
static
1CONFIG.vbs
windows7-x64
1CONFIG.vbs
windows10-2004-x64
1Conn.vbs
windows7-x64
1Conn.vbs
windows10-2004-x64
1INFO.vbs
windows7-x64
1INFO.vbs
windows10-2004-x64
1admin/ADDFILE.vbs
windows7-x64
1admin/ADDFILE.vbs
windows10-2004-x64
1admin/ADMINset.vbs
windows7-x64
1admin/ADMINset.vbs
windows10-2004-x64
1admin/ADMINzhuti.vbs
windows7-x64
1admin/ADMINzhuti.vbs
windows10-2004-x64
1admin/Admindata.vbs
windows7-x64
1admin/Admindata.vbs
windows10-2004-x64
1admin/Conn.vbs
windows7-x64
1admin/Conn.vbs
windows10-2004-x64
1admin/FILEEDIT.vbs
windows7-x64
1admin/FILEEDIT.vbs
windows10-2004-x64
1admin/LOGIN.vbs
windows7-x64
1admin/LOGIN.vbs
windows10-2004-x64
1admin/SAVEFILE.vbs
windows7-x64
1admin/SAVEFILE.vbs
windows10-2004-x64
1admin/a_le.asp
windows7-x64
3admin/a_le.asp
windows10-2004-x64
3admin/a_m.asp
windows7-x64
3admin/a_m.asp
windows10-2004-x64
3admin/about.htm
windows7-x64
1admin/about.htm
windows10-2004-x64
1admin/admin.vbs
windows7-x64
1admin/admin.vbs
windows10-2004-x64
1admin/admintype.vbs
windows7-x64
1admin/admintype.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
CONFIG.vbs
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CONFIG.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
Conn.vbs
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
Conn.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
INFO.vbs
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
INFO.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
admin/ADDFILE.vbs
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
admin/ADDFILE.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
admin/ADMINset.vbs
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
admin/ADMINset.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
admin/ADMINzhuti.vbs
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
admin/ADMINzhuti.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
admin/Admindata.vbs
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
admin/Admindata.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
admin/Conn.vbs
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
admin/Conn.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
admin/FILEEDIT.vbs
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
admin/FILEEDIT.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
admin/LOGIN.vbs
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
admin/LOGIN.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
admin/SAVEFILE.vbs
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
admin/SAVEFILE.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
admin/a_le.asp
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
admin/a_le.asp
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
admin/a_m.asp
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
admin/a_m.asp
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
admin/about.htm
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
admin/about.htm
Resource
win10v2004-20240412-en
Behavioral task
behavioral29
Sample
admin/admin.vbs
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
admin/admin.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
admin/admintype.vbs
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
admin/admintype.vbs
Resource
win10v2004-20240412-en
General
-
Target
fb4585dd4762ce5c7fd47abe1349d8fd_JaffaCakes118
-
Size
278KB
-
MD5
fb4585dd4762ce5c7fd47abe1349d8fd
-
SHA1
f46b7c0fc12eee33e2e3692ec8f7a5b48ce78794
-
SHA256
75f56dd75e5610e0e744373b362dad48bd2dbab3c84ad96e30603d8f23c1320b
-
SHA512
b85d12f96e81a2faeb41acf0af729f02800e3e8ad27feb934d82cc6c97eb37c822a9dc9548e7a63fec5232adedb16ee0cefd247265401b9632bbd08b6d204c01
-
SSDEEP
6144:hz97tgC3ihxXBEQF/pOSTOVMwRddITFx9K0q9rN:197tghPBE8pOS03dWFxI0Y
Malware Config
Signatures
Files
-
fb4585dd4762ce5c7fd47abe1349d8fd_JaffaCakes118.rar
-
CONFIG.ASP.vbs
-
Conn.asp.vbs
-
INDEX.css
-
INFO.ASP.vbs
-
Search.asp.html .vbs polyglot
-
admin/ADDFILE.ASP.vbs
-
admin/ADMINset.ASP.vbs
-
admin/ADMINzhuti.ASP.vbs
-
admin/Admindata.asp.vbs
-
admin/Conn.asp.vbs
-
admin/FILEEDIT.ASP.vbs
-
admin/LOGIN.ASP.vbs
-
admin/SAVEFILE.ASP.vbs
-
admin/a_le.asp
-
admin/a_m.asp
-
admin/about.htm.html
-
admin/admin.asp.vbs
-
admin/admintype.ASP.vbs
-
admin/check.asp.vbs
-
admin/index.css
-
admin/loginout.asp
-
admin/md5.asp.vbs
-
admin/photohot.asp.vbs
-
admin/saveadmintype.asp.vbs
-
admin/saveadminzhuanti.asp.vbs
-
admin/upload.inc.html .vbs polyglot
-
admin/uploadpic_ok.asp.vbs
-
admin/zhuantiadd.asp.vbs
-
admin/zhuantiedit.asp.vbs
-
admin/新云软件.url.url
-
allzhuanti.ASP.html .vbs polyglot
-
foot.asp
-
images/0.gif.gif
-
images/00.GIF.gif
-
images/01.GIF.gif
-
images/09.GIF.gif
-
images/1.gif.gif
-
images/1.jpg.jpg
-
images/6.swf
-
images/DOWN.GIF.gif
-
images/I1.gif.gif
-
images/banner.png.png
-
images/bg_line.png.png
-
images/bottom_bg.png.png
-
images/bottom_bgline.png.png
-
images/container_bg.gif.gif
-
images/container_bg.png.png
-
images/dbg_line.png.png
-
images/end.gif.gif
-
images/f.gif.gif
-
images/flash_bg_top.png.png
-
images/fywz.mid
-
images/index.css
-
images/index1.css
-
images/mouse.cur
-
images/mypoco.swf
-
images/mypoco_1.png.png
-
images/mypoco_2.png.png
-
images/mypoco_logo.png.png
-
images/n.gif.gif
-
images/nopass.jpg.jpg
-
images/pat_20030528100401.gif.gif
-
images/player.swf
-
images/snow.swf
-
images/title_bg.jpg.jpg
-
images/top.jpg.jpg
-
images/top_bgline.png.png
-
index.asp.html .vbs polyglot
-
paladin/data/impaladin.mdb
-
paladin/small_20076114584.jpg.jpg
-
paladin/small_200761151256.jpg.jpg
-
paladin/small_20076115158.jpg.jpg
-
paladin/small_200761152147.jpg.jpg
-
paladin/small_200766104918.jpg.jpg
-
paladin/small_20076612418.jpg.jpg
-
paladin/small_200767151555.jpg.jpg
-
paladin/small_200767153517.jpg.jpg
-
paladin/small_200767154116.jpg.jpg
-
paladin/small_200767155923.jpg.jpg
-
paladin/small_20076716333.jpg.jpg
-
pass.asp.asp .vbs polyglot
-
top.asp.vbs
-
使用说明.txt