Overview

overview

3

Static

static

3

webApp/app...e.html

windows7-x64

1

webApp/app...e.html

windows10-2004-x64

1

webApp/app...x.html

windows7-x64

1

webApp/app...x.html

windows10-2004-x64

1

webApp/app...x.html

windows7-x64

1

webApp/app...x.html

windows10-2004-x64

1

webApp/app...x.html

windows7-x64

1

webApp/app...x.html

windows10-2004-x64

1

webApp/app...b.html

windows7-x64

1

webApp/app...b.html

windows10-2004-x64

1

webApp/app...h.html

windows7-x64

1

webApp/app...h.html

windows10-2004-x64

1

webApp/app...t.html

windows7-x64

1

webApp/app...t.html

windows10-2004-x64

1

webApp/app...n.html

windows7-x64

1

webApp/app...n.html

windows10-2004-x64

1

webApp/app...s.html

windows7-x64

1

webApp/app...s.html

windows10-2004-x64

1

webApp/app...b.html

windows7-x64

1

webApp/app...b.html

windows10-2004-x64

1

webApp/app...t.html

windows7-x64

1

webApp/app...t.html

windows10-2004-x64

1

webApp/app...x.html

windows7-x64

1

webApp/app...x.html

windows10-2004-x64

1

webApp/app...one.js

windows7-x64

3

webApp/app...one.js

windows10-2004-x64

3

webApp/app...jzx.js

windows7-x64

3

webApp/app...jzx.js

windows10-2004-x64

3

webApp/app...gzx.js

windows7-x64

3

webApp/app...gzx.js

windows10-2004-x64

3

webApp/app...stx.js

windows7-x64

3

webApp/app...stx.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    344e50c674f630a29965e72b21fad3ff_JaffaCakes118

  • Size

    21.4MB

  • Sample

    240511-nbd7hsgf38

  • MD5

    344e50c674f630a29965e72b21fad3ff

  • SHA1

    95f21a9eb9b0d8e88f6a9a252136e448b9c2e4c5

  • SHA256

    6235ebd11b4a9232cc4dcd7473c55bbb7a6301f13beb22c18021a42e2a5e8fe3

  • SHA512

    231abe2b11a4114c03864a586d5f9ff0acb75093fa7588bc6dc644280536232a2073666785e3a765af0badcf1c30b8c9c335aa0c812749aac440fc9447750cac

  • SSDEEP

    393216:dMsr0F47aSriCwpDvpMRAlnOosewA9f9v51NdSJUvvDUeXRfT:Gyh906BZrA9Fv1E+vvwuT

Score
3/10
executionlinkqr

Malware Config

Targets

    • Target

      webApp/app/MobInfo/html/appIphone.html

    • Size

      1KB

    • MD5

      5536c23061db32e64a99541a3bb51f51

    • SHA1

      337aa7da201ea2386f07bd95103511ecf3ee5ce1

    • SHA256

      657ca6cbcc1dd303c4f5f2efda87a8ba0d1182fa8886c7574943ef1955a3cc16

    • SHA512

      2f56cea3a7b3c870e008070921554b0e576e3be0897e7df02478f4e4c674c9321d489e6086a1c9d6216646e0f070d5adcf97133dca9ebe270188f3f50e8260d8

    Score
    1/10
    behavioral1behavioral2

    • Target

      webApp/app/MobInfo/html/cjzx.html

    • Size

      1KB

    • MD5

      43ec505598b9fdb3be94d9dc42e120f4

    • SHA1

      58ca8a46fa32a4583915f4c3d77629984d205ab1

    • SHA256

      058ff83145d8f3da7898cc88238674721547d5bf0196def7b5a75f9ac1464093

    • SHA512

      3ff0033720889d26bbf1b3ed9a623041ce696e49af14b3fce9c66bdd1c0ed34e105eaa7e12eff4a91cdb53d0740a9c20aed18bb5e689a0e7cc0ccbab2f301c17

    Score
    1/10
    behavioral3behavioral4

    • Target

      webApp/app/MobInfo/html/ggzx.html

    • Size

      1KB

    • MD5

      9d04cae1eb27219428d28d485417d931

    • SHA1

      5cb0a7315aeee21d7d55d9a3c0a29ffb0f61bc8c

    • SHA256

      4cfd67dca198773e8f6bb962883fa42372cbe187a60f8346b0895c30965ec03e

    • SHA512

      fdb4e0178d71714f43788a09520ff80b8a09a741df309bc5fb973ae9f1a33cc1680435762aaec392f2a0bcd203a0a49034a06f54968b98e29dae81502cf9d409

    Score
    1/10
    behavioral5behavioral6

    • Target

      webApp/app/MobInfo/html/ggzx_dstx.html

    • Size

      1KB

    • MD5

      65389ed3826e5b660e7b58f8b72e03e2

    • SHA1

      43399b70b092bdd14e21101d83efb6da398905c3

    • SHA256

      87491b126f350c8c73466a2ca2eb987037fc829dddfc0473232134dba261426e

    • SHA512

      501f76de3f0381a700ff2835dd9c2b8337ddc90f1d05168993aebea324d9d632339db3201008d45ad6adc9e246b28042bfb4a50b7f87a8426a142e8cf229467f

    Score
    1/10
    behavioral7behavioral8

    • Target

      webApp/app/MobInfo/html/ggzx_lhb.html

    • Size

      3KB

    • MD5

      71a142018bde32b756b54a7491793165

    • SHA1

      aa0d88f7b152a36fc941327ce34d1c27fa9876c2

    • SHA256

      f3044f3c50268208015400565bb16b611022df73198eb34adf9ac1a4c64eac1a

    • SHA512

      0bd0710d99e76af94c156c40d4def1ee2e6153f4d3cc2b0851ba25e4ffe625694c79ecb14138973cfb86c8f9f2fc9ee43c0057f841398162648417be256c1776

    Score
    1/10
    behavioral10behavioral9

    • Target

      webApp/app/MobInfo/html/jh.html

    • Size

      1014B

    • MD5

      e768ddd8167ce860ca9239898dd9eff3

    • SHA1

      e008cee40ff5dea1d90ff0270eae304085afd33d

    • SHA256

      7754a3d2586b75e43e070c85952341c4800bef00b1443fae10ef827c9b787262

    • SHA512

      c912e0e97186d73c75073eccaacb2c4a058887ccc6276cd49f5f6b9b32684807248adca9207b76051f3cb56e0b23e21198ebfdacc83ca100bfd613e174075e1e

    Score
    1/10
    behavioral11behavioral12

    • Target

      webApp/app/MobInfo/html/pdftest.html

    • Size

      1KB

    • MD5

      e21f5b28c3c9193b4f39f0c32654a1de

    • SHA1

      10c20b09f58aedc4b3589b7e49dd613f2c40dfdf

    • SHA256

      e33ce67987b6e627dbb21fda350ada2a4fb697a36316ebd8004389cb45b763c9

    • SHA512

      d6dd78e69b8cb7c1678bc9477971f74e79236adf033a56afa22b79f4aa1c83172b7bfd1f1b2b8fe33b8269e268a63c2bf5c720d1133d04f86144e98c6a6bbcab

    Score
    1/10
    behavioral13behavioral14

    • Target

      webApp/app/MobInfo/html/yaowen.html

    • Size

      1KB

    • MD5

      94e48d9d1310d6325f16d0f741b12d02

    • SHA1

      75f9f247f6fb97e73f8b0408bcb27cffd6c621c8

    • SHA256

      d7aff22a92f67353d8a6872e144f2b9931d7163db69f8bab8c556dfc053d35f1

    • SHA512

      edd6bbddcee604aecf79dc07c0be181a1818a6f310a7b012e1b48c9925a4668544e392f7a59421f645f20dd8b1a9d410ec9920b85352a24f5362c61d08258a18

    Score
    1/10
    behavioral15behavioral16

    • Target

      webApp/app/MobInfo/html/ywclass.html

    • Size

      1KB

    • MD5

      94e48d9d1310d6325f16d0f741b12d02

    • SHA1

      75f9f247f6fb97e73f8b0408bcb27cffd6c621c8

    • SHA256

      d7aff22a92f67353d8a6872e144f2b9931d7163db69f8bab8c556dfc053d35f1

    • SHA512

      edd6bbddcee604aecf79dc07c0be181a1818a6f310a7b012e1b48c9925a4668544e392f7a59421f645f20dd8b1a9d410ec9920b85352a24f5362c61d08258a18

    Score
    1/10
    behavioral17behavioral18

    • Target

      webApp/app/MobInfo/html/zb.html

    • Size

      970B

    • MD5

      f73ffab5ae25f7798205efd45c6fd31c

    • SHA1

      a04f2d9a837f0e990b293d4ab0adc4c76e1a7dd3

    • SHA256

      5f77fd2a90def5c2acab2175ad4e9f14afd1d8c3905fe7bc2035ad2af601015f

    • SHA512

      6988328dbec1f1301aebfed2ddea0173720e7a03c8f59600185794891f9cf44d72ed7c914e7306bf507bedcabe5308eed753b24a7d942a73b62a60af460e6954

    Score
    1/10
    behavioral19behavioral20

    • Target

      webApp/app/MobInfo/html/zt.html

    • Size

      979B

    • MD5

      9617be84895d3208d1be40bea4c93e0a

    • SHA1

      0af99a94cdb05094154cb9471378ce11ba27d26c

    • SHA256

      4a80d14763d9f094e42fd8a17a9cc1b368a3af1f96bd6891aef7e8f1fa1b12ef

    • SHA512

      2b4298274ec1f40ab474c9109faafc487f9dbc76da645136441c27cd4c9f877eb627518cbd7076cc8a620effa964ad015124e94e550fa249acfe0781c43c376b

    Score
    1/10
    behavioral21behavioral22

    • Target

      webApp/app/MobInfo/html/zxgzx.html

    • Size

      1KB

    • MD5

      2e770f30ca1998d04be6dbdef97fb29a

    • SHA1

      660cbd5ee50b208ec32ef388845c410bfb554bf9

    • SHA256

      b6c3b43f15e9f7951335b4db5999d948855145ae4bfbd8297f97981df17df2aa

    • SHA512

      113945553177a2930f167daee4715328f03b460e74c19b3890811500306ca4b1bd270a78e3d41e6e828cdc9d774efb1f8931e58f6bb620ac1dadfd7312bfc51f

    Score
    1/10
    behavioral23behavioral24

    • Target

      webApp/app/MobInfo/js/appIphone.js

    • Size

      3KB

    • MD5

      13b28fd8318f049c34a6a6f57e4162e6

    • SHA1

      b923b1d8951cc158d1f0655007f932a49b6611c2

    • SHA256

      c83fcaffd38f19037744ef6560b7e439f5ff0a95bc1aff805771ff19a137135b

    • SHA512

      09fe4a5fc31838443552041e45c7b9171591175124482bd2710ca373ddcfff9878c2ddc932bae35d22629c34c3e12680de595fb9915bfb2a608a8db80ca18ef0

    Score
    3/10
    execution
    behavioral25behavioral26

    • Target

      webApp/app/MobInfo/js/cjzx.js

    • Size

      16KB

    • MD5

      cb26d5a7e62f33e74d2eae405c3d5dfb

    • SHA1

      f6c8c56c4b7e1bbc7311bfa1a9d698fa68374504

    • SHA256

      a8d551930ffd15d428874c411f13270243ff8907e69452e52cc7a009b539996e

    • SHA512

      f860efb06f62f17d9c57c56bfe6cf5fcea1ac2dbae86270777c2710247be7f788393dcd6e6ae2a262c4db7843327ea5f9062d6cacc46c8c446e0daac0e7ca090

    • SSDEEP

      384:5BNyU79R1cBf0Zt8t2r2+fCImiLWDgK7cp3:5IZ0PYxI3

    Score
    3/10
    execution
    behavioral27behavioral28

    • Target

      webApp/app/MobInfo/js/ggzx.js

    • Size

      13KB

    • MD5

      cb35a71d6813fcbb511b28cf8cdd4920

    • SHA1

      c86f1c5a3c72ea383c079308c0a2dc5ec8d6c4fd

    • SHA256

      9f3145e3dca85271d4f68fdee95f196f33b95d001ceeb24e3ce73d65bc26a147

    • SHA512

      41225aef38ece8a57079d1893b06f9ecf22bf3a6b872cb2d859cce496e1b8b1cb4827d6b024a92f83e0280c297e5bc07686a2050a1ccac5120029434abe4f99b

    • SSDEEP

      192:pf7VZq8I748VLZwP50VA1c/kvn2RB4ggPbokq8In4oFFI4yuy59Qc1u:1VZmVLZw3AksghNR9c

    Score
    3/10
    execution
    behavioral29behavioral30

    • Target

      webApp/app/MobInfo/js/ggzx_dstx.js

    • Size

      995B

    • MD5

      f9ce70a1b6b28b54a40b1a477cde4bb0

    • SHA1

      a28582dde5ae079057d823593a2c9d3166d4f790

    • SHA256

      fe07494ce74f6b00e3efdac1b01dabc2e10d5b0b2d56a6ab7b9bbcbce51c81b2

    • SHA512

      508550477bfb7ad5229e2b79b6e17be3c18fa0679f481e5c3d1c102c24bd40607a7a30adacab3c120c046ba7565ad7353e6b839ede48c62e7547b0b67c26bfe1

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

4
T1059

JavaScript

4
T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

12
T1112

Credential Access

Discovery

Query Registry

11
T1012

System Information Discovery

11
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

qrlink
Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10