Overview
overview
3Static
static
1login/Offi...ile.js
windows7-x64
3login/Offi...ile.js
windows10-2004-x64
3login/Offi...nit.js
windows7-x64
3login/Offi...nit.js
windows10-2004-x64
3login/Offi...ome.js
windows7-x64
3login/Offi...ome.js
windows10-2004-x64
3login/Offi...rol.js
windows7-x64
3login/Offi...rol.js
windows10-2004-x64
3login/al.js
windows7-x64
3login/al.js
windows10-2004-x64
3login/geop...ass.js
windows7-x64
3login/geop...ass.js
windows10-2004-x64
3login/office.js
windows7-x64
3login/office.js
windows10-2004-x64
3login/othr.js
windows7-x64
3login/othr.js
windows10-2004-x64
3login/verification.js
windows7-x64
3login/verification.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
login/Office 365_files/AppTile.js
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
login/Office 365_files/AppTile.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
login/Office 365_files/DialogManagerInit.js
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
login/Office 365_files/DialogManagerInit.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
login/Office 365_files/GeminiHome.js
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
login/Office 365_files/GeminiHome.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
login/Office 365_files/UpsellControl.js
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
login/Office 365_files/UpsellControl.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
login/al.js
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
login/al.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
login/geoplugin.class.js
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
login/geoplugin.class.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
login/office.js
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
login/office.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
login/othr.js
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
login/othr.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
login/verification.js
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
login/verification.js
Resource
win10v2004-20240508-en
General
-
Target
3adfa9e0d814490ccde1f04b650d8930_JaffaCakes118
-
Size
505KB
-
MD5
3adfa9e0d814490ccde1f04b650d8930
-
SHA1
9f2a274f4ad0ed7effc3e70adeb3924a31aa244c
-
SHA256
757b2519d570c66162c7a8c3cacb9de8271d5b688dce7048e0d55e50d0f35a37
-
SHA512
eead215febf0173ae53cd609707d51c80a873e5fe03a1eb512314d68a084f672caa2138177f2c7c4a30450c03b78ebe108089c634a40b65f900317369001322d
-
SSDEEP
12288:F3EHxn9FzqpJ6ZZrrfYQsASqmcOQUQWvI/X5YQsAScG78Rx50U9Y:F3EHxn3zqpJOZfYQokOPDI/X5YQcc48u
Malware Config
Signatures
Files
-
3adfa9e0d814490ccde1f04b650d8930_JaffaCakes118.zip
-
login/.DS_Store
-
login/Office 365_files/AppTile.css
-
login/Office 365_files/AppTile.js.js
-
login/Office 365_files/DialogManagerInit.js.js
-
login/Office 365_files/EmbeddedFonts.css
-
login/Office 365_files/GeminiHome.js.js
-
login/Office 365_files/GeminiHomeV2.css
-
login/Office 365_files/GetPersonaPhoto.gif.gif
-
login/Office 365_files/MasterStyles15.css
-
login/Office 365_files/Thumbs.db
-
login/Office 365_files/UpsellControl.js.js
-
login/Office 365_files/conciergehelper.css
-
login/Office 365_files/css/Thumbs.db
-
login/Office 365_files/css/aol.png.png
-
login/Office 365_files/css/banner.png.jpg
-
login/Office 365_files/css/home_bkgd_1.png.jpg
-
login/Office 365_files/css/oth.png.jpg
-
login/Office 365_files/data.css
-
login/Office 365_files/shellg2coremincss_ba45585d.css
-
login/al.php.js
-
login/alphp.php
-
login/css/DocuSign_logo_new.png.png
-
login/css/Thumbs.db
-
login/css/apple-touch-icon-72x72.png.png
-
login/css/favicon_a.ico
-
login/css/heroillustration.png.jpg
-
login/css/home_bkgd_1.png.jpg
-
login/css/icc.ico.png
-
login/css/logo.jpg.jpg
-
login/css/style.css
-
login/css/style2.css
-
login/error.php
-
login/error_log
-
login/geoplugin.class.php.js
-
login/icc.ico.png
-
login/index.php.html .js polyglot
-
login/office.php.js
-
login/offphp.php
-
login/oph.php
-
login/othr.php.js
-
login/verification.php.js