Overview
overview
3Static
static
1lx_photosh...NN.vbs
windows7-x64
1lx_photosh...NN.vbs
windows10-2004-x64
1lx_photosh...in.vbs
windows7-x64
1lx_photosh...in.vbs
windows10-2004-x64
1lx_photosh...nc.vbs
windows7-x64
1lx_photosh...nc.vbs
windows10-2004-x64
1lx_photosh...n.html
windows7-x64
1lx_photosh...n.html
windows10-2004-x64
1lx_photosh...ig.vbs
windows7-x64
1lx_photosh...ig.vbs
windows10-2004-x64
lx_photosh...rd.vbs
windows7-x64
1lx_photosh...rd.vbs
windows10-2004-x64
1lx_photosh...st.asp
windows7-x64
3lx_photosh...st.asp
windows10-2004-x64
3lx_photosh...ex.vbs
windows7-x64
1lx_photosh...ex.vbs
windows10-2004-x64
1lx_photosh...os.vbs
windows7-x64
1lx_photosh...os.vbs
windows10-2004-x64
1lx_photosh...t-.vbs
windows7-x64
1lx_photosh...t-.vbs
windows10-2004-x64
1lx_photosh...st.vbs
windows7-x64
1lx_photosh...st.vbs
windows10-2004-x64
1lx_photosh...es.vbs
windows7-x64
1lx_photosh...es.vbs
windows10-2004-x64
1lx_photosh...ot.asp
windows7-x64
3lx_photosh...ot.asp
windows10-2004-x64
3lx_photosh...ad.asp
windows7-x64
3lx_photosh...ad.asp
windows10-2004-x64
3lx_photosh...de.vbs
windows7-x64
1lx_photosh...de.vbs
windows10-2004-x64
1lx_photosh...eg.vbs
windows7-x64
1lx_photosh...eg.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
lx_photoshow_v1.1/CONN.vbs
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
lx_photoshow_v1.1/CONN.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
lx_photoshow_v1.1/admin/admin_checklogin.vbs
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
lx_photoshow_v1.1/admin/admin_checklogin.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
lx_photoshow_v1.1/admin/admin_func.vbs
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
lx_photoshow_v1.1/admin/admin_func.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
lx_photoshow_v1.1/admin/admin_login.html
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
lx_photoshow_v1.1/admin/admin_login.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
lx_photoshow_v1.1/admin/config.vbs
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
lx_photoshow_v1.1/admin/config.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
lx_photoshow_v1.1/admin/edit_password.vbs
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
lx_photoshow_v1.1/admin/edit_password.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
lx_photoshow_v1.1/admin/inc/const.asp
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
lx_photoshow_v1.1/admin/inc/const.asp
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
lx_photoshow_v1.1/admin/index.vbs
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
lx_photoshow_v1.1/admin/index.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
lx_photoshow_v1.1/admin/photos.vbs
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
lx_photoshow_v1.1/admin/photos.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
lx_photoshow_v1.1/admin/post-.vbs
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
lx_photoshow_v1.1/admin/post-.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
lx_photoshow_v1.1/admin/post.vbs
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
lx_photoshow_v1.1/admin/post.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
lx_photoshow_v1.1/admin/types.vbs
Resource
win7-20240215-en
Behavioral task
behavioral24
Sample
lx_photoshow_v1.1/admin/types.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
lx_photoshow_v1.1/foot.asp
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
lx_photoshow_v1.1/foot.asp
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
lx_photoshow_v1.1/head.asp
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
lx_photoshow_v1.1/head.asp
Resource
win10v2004-20240412-en
Behavioral task
behavioral29
Sample
lx_photoshow_v1.1/include/GetCode.vbs
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
lx_photoshow_v1.1/include/GetCode.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral31
Sample
lx_photoshow_v1.1/include/aspjpeg.vbs
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
lx_photoshow_v1.1/include/aspjpeg.vbs
Resource
win10v2004-20240412-en
General
-
Target
fe7b10ba2b1c3e883f1fc6b7b170335f_JaffaCakes118
-
Size
611KB
-
MD5
fe7b10ba2b1c3e883f1fc6b7b170335f
-
SHA1
5d2baedbb1153fd17e2bfb5adfe15c07cd4bc537
-
SHA256
ec5f6b3574a32e0bcc1636f2951f07566e89e68831ff042c270e1dc7fb5434a9
-
SHA512
30e98c0e25eacdd5d6d6a37bd3054db02807b7ab8c31e02c502a350c7f31db2418bbcef7ae9da459c4ff2d3468ff870dede528794254c78ad2fceaac35a02e91
-
SSDEEP
12288:O5EFnuVi70HrOD+xwePExheer4rpt+DzYw5e0o7ljQEtcZ5x85L9:7nuVQNDlePo4rpz0e0q6r5G
Malware Config
Signatures
Files
-
fe7b10ba2b1c3e883f1fc6b7b170335f_JaffaCakes118.rar
-
lx_photoshow_v1.1/CONN.ASP.vbs
-
lx_photoshow_v1.1/admin/admin_checklogin.asp.vbs
-
lx_photoshow_v1.1/admin/admin_func.asp.vbs
-
lx_photoshow_v1.1/admin/admin_login.asp.html
-
lx_photoshow_v1.1/admin/config.asp.vbs
-
lx_photoshow_v1.1/admin/edit_password.asp.vbs
-
lx_photoshow_v1.1/admin/inc/const.asp
-
lx_photoshow_v1.1/admin/index.asp.vbs
-
lx_photoshow_v1.1/admin/photos.asp.vbs
-
lx_photoshow_v1.1/admin/post-.asp.vbs
-
lx_photoshow_v1.1/admin/post.asp.vbs
-
lx_photoshow_v1.1/admin/types.asp.vbs
-
lx_photoshow_v1.1/css/style.css
-
lx_photoshow_v1.1/css/style_.css
-
lx_photoshow_v1.1/data/#photo.mdb
-
lx_photoshow_v1.1/foot.asp
-
lx_photoshow_v1.1/head.asp
-
lx_photoshow_v1.1/images/admincp/admincp.css
-
lx_photoshow_v1.1/images/admincp/admincp.css.bak
-
lx_photoshow_v1.1/images/admincp/bg_button.gif.gif
-
lx_photoshow_v1.1/images/admincp/bg_header.gif.gif
-
lx_photoshow_v1.1/images/admincp/bg_input.gif.gif
-
lx_photoshow_v1.1/images/admincp/bg_list.gif.gif
-
lx_photoshow_v1.1/images/admincp/bg_menu.gif.gif
-
lx_photoshow_v1.1/images/admincp/bg_menu2.gif.gif
-
lx_photoshow_v1.1/images/admincp/login.css
-
lx_photoshow_v1.1/images/admincp/login_header.gif.gif
-
lx_photoshow_v1.1/images/admincp/logo.gif.gif
-
lx_photoshow_v1.1/images/admincp/menu_add.gif.gif
-
lx_photoshow_v1.1/images/admincp/menu_reduce.gif.gif
-
lx_photoshow_v1.1/images/admincp/zoomin.gif.gif
-
lx_photoshow_v1.1/images/admincp/zoomout.gif.gif
-
lx_photoshow_v1.1/images/banner.gif
-
lx_photoshow_v1.1/images/banner2.gif.gif
-
lx_photoshow_v1.1/images/banner4.gif
-
lx_photoshow_v1.1/images/cat_bg.gif.gif
-
lx_photoshow_v1.1/images/logo.gif.gif
-
lx_photoshow_v1.1/images/menu_bg.gif.gif
-
lx_photoshow_v1.1/images/none.gif.gif
-
lx_photoshow_v1.1/include/GetCode.asp.vbs
-
lx_photoshow_v1.1/include/Head.Fix
-
lx_photoshow_v1.1/include/aspjpeg.asp.vbs
-
lx_photoshow_v1.1/include/body.Fix
-
lx_photoshow_v1.1/include/clsUp.asp.vbs
-
lx_photoshow_v1.1/include/const.asp
-
lx_photoshow_v1.1/include/fso.asp.vbs
-
lx_photoshow_v1.1/include/function.asp.vbs
-
lx_photoshow_v1.1/include/md5.asp.vbs
-
lx_photoshow_v1.1/index.asp
-
lx_photoshow_v1.1/list.asp.vbs
-
lx_photoshow_v1.1/photos/200833112133152t.jpg.jpg
-
lx_photoshow_v1.1/photos/200833112133152t_thumb.jpg.jpg
-
lx_photoshow_v1.1/photos/2008331121459a7z.jpg.jpg
-
lx_photoshow_v1.1/photos/2008331121459a7z_thumb.jpg.jpg
-
lx_photoshow_v1.1/photos/2008331121706ypn.jpg.jpg
-
lx_photoshow_v1.1/photos/2008331121706ypn_thumb.jpg.jpg
-
lx_photoshow_v1.1/photos/2008331121825mjb.jpg.jpg
-
lx_photoshow_v1.1/photos/2008331121825mjb_thumb.jpg.jpg
-
lx_photoshow_v1.1/photos/200833113545596y.jpg.jpg
-
lx_photoshow_v1.1/photos/200833113545596y_thumb.jpg.jpg
-
lx_photoshow_v1.1/photos/2008331140257zwo.jpg.jpg
-
lx_photoshow_v1.1/photos/2008331140257zwo_thumb.jpg.jpg
-
lx_photoshow_v1.1/post.asp.vbs
-
lx_photoshow_v1.1/postcomment.asp
-
lx_photoshow_v1.1/prg.inc.asp.vbs
-
lx_photoshow_v1.1/tpl/channel.htm
-
lx_photoshow_v1.1/tpl/css.htm
-
lx_photoshow_v1.1/viewphoto.asp.vbs
-
lx_photoshow_v1.1/使用说明.txt
-
lx_photoshow_v1.1/新云软件.url.url