Overview
overview
3Static
static
1androghost...met.js
windows7-x64
3androghost...met.js
windows10-2004-x64
3androghost...et.ps1
windows7-x64
3androghost...et.ps1
windows10-2004-x64
3androghost577/ind.ps1
windows7-x64
3androghost577/ind.ps1
windows10-2004-x64
3androghost...x.html
windows7-x64
1androghost...x.html
windows10-2004-x64
1androghost577/wso.js
windows7-x64
3androghost577/wso.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
androghost577/akismet.js
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
androghost577/akismet.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
androghost577/akismet.ps1
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
androghost577/akismet.ps1
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
androghost577/ind.ps1
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
androghost577/ind.ps1
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
androghost577/index.html
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
androghost577/index.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
androghost577/wso.js
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
androghost577/wso.js
Resource
win10v2004-20240226-en
General
-
Target
16cf122838d9279e06e1403de7b33f32_JaffaCakes118
-
Size
159KB
-
MD5
16cf122838d9279e06e1403de7b33f32
-
SHA1
c318baa462881da7c5cfc85fb6fb0b6eda8035b8
-
SHA256
42a8f81f75d54936ebb3f5c46eca74cb236bc006e143e2a4cf49d46990be3f53
-
SHA512
ef1c13cc651f6da0a3428c4660ddd76dafbcd0beec61d18ccb5a0a1e8cfddbc8d631db893e95fa7101027c2f4cf14eb5f033a61b62ff1ac1cfdc6ba9adf9b187
-
SSDEEP
3072:9pGoyuV2F1V460lIMJuCF110srjg/XiziaZzAIj6pQPWAy5r:9pGlhB+Iz4LgfeSpQ9+r
Malware Config
Signatures
Files
-
16cf122838d9279e06e1403de7b33f32_JaffaCakes118.zip
-
androghost577/Error.php
-
androghost577/Vand.php
-
androghost577/Vand.php.bak
-
androghost577/admin.php
-
androghost577/akismet.css
-
androghost577/akismet.js.js
-
androghost577/akismet.php.ps1
-
androghost577/ind.php.ps1
-
androghost577/ind.phtml.html .ps1 polyglot
-
androghost577/index.html.html
-
androghost577/index.php
-
androghost577/widget.php
-
androghost577/wp-dbf.php
-
androghost577/wso.php.js