Overview
overview
3Static
static
1amavisd-ne...x.html
windows7-x64
1amavisd-ne...x.html
windows10-2004-x64
1amavisd-ne...ME.ps1
windows7-x64
3amavisd-ne...ME.ps1
windows10-2004-x64
3amavisd-ne...s.html
windows7-x64
1amavisd-ne...s.html
windows10-2004-x64
1amavisd-ne...mavisd
ubuntu-18.04-amd64
1amavisd-ne...mavisd
debian-9-armhf
1amavisd-ne...mavisd
debian-9-mips
amavisd-ne...mavisd
debian-9-mipsel
amavisd-ne...-agent
ubuntu-18.04-amd64
1amavisd-ne...-agent
debian-9-armhf
1amavisd-ne...-agent
debian-9-mips
amavisd-ne...-agent
debian-9-mipsel
amavisd-ne...-nanny
ubuntu-18.04-amd64
1amavisd-ne...-nanny
debian-9-armhf
1amavisd-ne...-nanny
debian-9-mips
amavisd-ne...-nanny
debian-9-mipsel
amavisd-ne...elease
ubuntu-18.04-amd64
1amavisd-ne...elease
debian-9-armhf
1amavisd-ne...elease
debian-9-mips
amavisd-ne...elease
debian-9-mipsel
amavisd-ne...nit.sh
ubuntu-18.04-amd64
1amavisd-ne...nit.sh
debian-9-armhf
1amavisd-ne...nit.sh
debian-9-mips
amavisd-ne...nit.sh
debian-9-mipsel
amavisd-ne...vis.pl
ubuntu-18.04-amd64
1amavisd-ne...vis.pl
debian-9-armhf
1amavisd-ne...vis.pl
debian-9-mips
amavisd-ne...vis.pl
debian-9-mipsel
amavisd-ne...re.vbs
windows7-x64
1amavisd-ne...re.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
amavisd-new-2.5.0/README_FILES/README.postfix.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
amavisd-new-2.5.0/README_FILES/README.postfix.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
amavisd-new-2.5.0/README_FILES/README.ps1
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
amavisd-new-2.5.0/README_FILES/README.ps1
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
amavisd-new-2.5.0/README_FILES/amavisd-new-docs.html
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
amavisd-new-2.5.0/README_FILES/amavisd-new-docs.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
amavisd-new-2.5.0/amavisd
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral8
Sample
amavisd-new-2.5.0/amavisd
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral9
Sample
amavisd-new-2.5.0/amavisd
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral10
Sample
amavisd-new-2.5.0/amavisd
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral11
Sample
amavisd-new-2.5.0/amavisd-agent
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral12
Sample
amavisd-new-2.5.0/amavisd-agent
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral13
Sample
amavisd-new-2.5.0/amavisd-agent
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral14
Sample
amavisd-new-2.5.0/amavisd-agent
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral15
Sample
amavisd-new-2.5.0/amavisd-nanny
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral16
Sample
amavisd-new-2.5.0/amavisd-nanny
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral17
Sample
amavisd-new-2.5.0/amavisd-nanny
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral18
Sample
amavisd-new-2.5.0/amavisd-nanny
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral19
Sample
amavisd-new-2.5.0/amavisd-release
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral20
Sample
amavisd-new-2.5.0/amavisd-release
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral21
Sample
amavisd-new-2.5.0/amavisd-release
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral22
Sample
amavisd-new-2.5.0/amavisd-release
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral23
Sample
amavisd-new-2.5.0/amavisd_init.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral24
Sample
amavisd-new-2.5.0/amavisd_init.sh
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral25
Sample
amavisd-new-2.5.0/amavisd_init.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral26
Sample
amavisd-new-2.5.0/amavisd_init.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral27
Sample
amavisd-new-2.5.0/helper-progs/amavis.pl
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral28
Sample
amavisd-new-2.5.0/helper-progs/amavis.pl
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral29
Sample
amavisd-new-2.5.0/helper-progs/amavis.pl
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral30
Sample
amavisd-new-2.5.0/helper-progs/amavis.pl
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral31
Sample
amavisd-new-2.5.0/helper-progs/configure.vbs
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
amavisd-new-2.5.0/helper-progs/configure.vbs
Resource
win10v2004-20240426-en
General
-
Target
990a8c78911e208afca8c43a1f7c018d_JaffaCakes118
-
Size
762KB
-
MD5
990a8c78911e208afca8c43a1f7c018d
-
SHA1
b520c2bb5a5fd93d894466de10a89573de336da5
-
SHA256
d5f5238a565868b5150c2591cd06780556d2aa093355475874e6b539e7eb1116
-
SHA512
c53ef9ef94ed8fba54e21d0f5d106384648a96f5ea348836587080830778dbe4c08325fca84278b213a651f1668cacbeddcd6f154057e76b2a6c38de7c9154e0
-
SSDEEP
12288:jnAFV+iYHrk448UhPxV6Zg3CZYMZY4gFHP0kn6TJFBt7dd5cNyc0w7zcEa6f:roVZx8UhLagfMZY4gF8k6H/7dwuw7gna
Malware Config
Signatures
Files
-
990a8c78911e208afca8c43a1f7c018d_JaffaCakes118.gz
-
amavisd-new-2.5.0.tar.tar
-
amavisd-new-2.5.0/AAAREADME.first
-
amavisd-new-2.5.0/INSTALL
-
amavisd-new-2.5.0/JpegTester.pm
-
amavisd-new-2.5.0/LDAP.schema
-
amavisd-new-2.5.0/LICENSE
-
amavisd-new-2.5.0/MANIFEST
-
amavisd-new-2.5.0/README_FILES/README.banned
-
amavisd-new-2.5.0/README_FILES/README.chroot
-
amavisd-new-2.5.0/README_FILES/README.contributed
-
amavisd-new-2.5.0/README_FILES/README.courier
-
amavisd-new-2.5.0/README_FILES/README.courier-old
-
amavisd-new-2.5.0/README_FILES/README.customize
-
amavisd-new-2.5.0/README_FILES/README.exim_v3
-
amavisd-new-2.5.0/README_FILES/README.exim_v3_app.eml
-
http://marc.theaimsgroup.com/?l=exim-users&m=102977722707468&w=2
-
http://marc.theaimsgroup.com/?t=103014542500001&r=1&w=2
-
http://www.kreativkombinat.de/
-
-
email-plain-1.txt
-
amavisd-new-2.5.0/README_FILES/README.exim_v4
-
amavisd-new-2.5.0/README_FILES/README.exim_v4_app
-
amavisd-new-2.5.0/README_FILES/README.exim_v4_app2
-
amavisd-new-2.5.0/README_FILES/README.ldap
-
amavisd-new-2.5.0/README_FILES/README.lookups
-
amavisd-new-2.5.0/README_FILES/README.milter
-
amavisd-new-2.5.0/README_FILES/README.old.scanners
-
amavisd-new-2.5.0/README_FILES/README.performance
-
amavisd-new-2.5.0/README_FILES/README.policy-on-notifications.eml
-
http://www.renaissoft.com/projects/maia),
-
-
email-plain-1.txt
-
amavisd-new-2.5.0/README_FILES/README.postfix
-
amavisd-new-2.5.0/README_FILES/README.postfix.html.html
-
amavisd-new-2.5.0/README_FILES/README.postfix.old
-
amavisd-new-2.5.0/README_FILES/README.protocol
-
amavisd-new-2.5.0/README_FILES/README.sendmail.ps1
-
amavisd-new-2.5.0/README_FILES/README.sendmail-dual
-
amavisd-new-2.5.0/README_FILES/README.sendmail-dual.old
-
amavisd-new-2.5.0/README_FILES/README.sql
-
amavisd-new-2.5.0/README_FILES/README.sql-mysql
-
amavisd-new-2.5.0/README_FILES/README.sql-pg
-
amavisd-new-2.5.0/README_FILES/TODO-SNMP-AGENT
-
amavisd-new-2.5.0/README_FILES/amavisd-new-docs.html.html
-
amavisd-new-2.5.0/README_FILES/images/1.png.png
-
amavisd-new-2.5.0/README_FILES/images/10.png.png
-
amavisd-new-2.5.0/README_FILES/images/11.png.png
-
amavisd-new-2.5.0/README_FILES/images/12.png.png
-
amavisd-new-2.5.0/README_FILES/images/13.png.png
-
amavisd-new-2.5.0/README_FILES/images/14.png.png
-
amavisd-new-2.5.0/README_FILES/images/15.png.png
-
amavisd-new-2.5.0/README_FILES/images/2.png.png
-
amavisd-new-2.5.0/README_FILES/images/3.png.png
-
amavisd-new-2.5.0/README_FILES/images/4.png.png
-
amavisd-new-2.5.0/README_FILES/images/5.png.png
-
amavisd-new-2.5.0/README_FILES/images/6.png.png
-
amavisd-new-2.5.0/README_FILES/images/7.png.png
-
amavisd-new-2.5.0/README_FILES/images/8.png.png
-
amavisd-new-2.5.0/README_FILES/images/9.png.png
-
amavisd-new-2.5.0/README_FILES/images/blank.png.png
-
amavisd-new-2.5.0/README_FILES/images/caution.png.png
-
amavisd-new-2.5.0/README_FILES/images/draft.png.png
-
amavisd-new-2.5.0/README_FILES/images/home.png.png
-
amavisd-new-2.5.0/README_FILES/images/important.png.png
-
amavisd-new-2.5.0/README_FILES/images/next.png.png
-
amavisd-new-2.5.0/README_FILES/images/note.png.png
-
amavisd-new-2.5.0/README_FILES/images/prev.png.png
-
amavisd-new-2.5.0/README_FILES/images/tip.png.png
-
amavisd-new-2.5.0/README_FILES/images/toc-blank.png.png
-
amavisd-new-2.5.0/README_FILES/images/toc-minus.png.png
-
amavisd-new-2.5.0/README_FILES/images/toc-plus.png.png
-
amavisd-new-2.5.0/README_FILES/images/up.png.png
-
amavisd-new-2.5.0/README_FILES/images/warning.png.png
-
amavisd-new-2.5.0/README_FILES/screen.css
-
amavisd-new-2.5.0/RELEASE_NOTES
-
amavisd-new-2.5.0/TODO
-
amavisd-new-2.5.0/amavisd.sh linux
-
amavisd-new-2.5.0/amavisd-agent.sh linux
-
amavisd-new-2.5.0/amavisd-custom.conf
-
amavisd-new-2.5.0/amavisd-nanny.sh linux
-
amavisd-new-2.5.0/amavisd-new-courier.patch
-
amavisd-new-2.5.0/amavisd-new-qmqpqq.patch
-
amavisd-new-2.5.0/amavisd-new.spec
-
amavisd-new-2.5.0/amavisd-release.sh linux
-
amavisd-new-2.5.0/amavisd.conf
-
amavisd-new-2.5.0/amavisd.conf-default
-
amavisd-new-2.5.0/amavisd.conf-sample
-
amavisd-new-2.5.0/amavisd_init.sh.sh linux
-
amavisd-new-2.5.0/helper-progs/Makefile.in
-
amavisd-new-2.5.0/helper-progs/README
-
amavisd-new-2.5.0/helper-progs/amavis-milter.c
-
amavisd-new-2.5.0/helper-progs/amavis.c
-
amavisd-new-2.5.0/helper-progs/amavis.pl.pl .sh linux
-
amavisd-new-2.5.0/helper-progs/config.h.in
-
amavisd-new-2.5.0/helper-progs/configure.vbs
-
amavisd-new-2.5.0/helper-progs/configure.in
-
amavisd-new-2.5.0/helper-progs/install-sh.sh linux
-
amavisd-new-2.5.0/p0f-analyzer.pl.pl .sh linux
-
amavisd-new-2.5.0/test-messages/README
-
amavisd-new-2.5.0/test-messages/sample.tar.gz.compl