Overview
overview
3Static
static
1downcode.c...��.url
windows7-x64
1downcode.c...��.url
windows10-2004-x64
1downcode.c...us.vbs
windows7-x64
1downcode.c...us.vbs
windows10-2004-x64
1downcode.c...me.vbs
windows7-x64
1downcode.c...me.vbs
windows10-2004-x64
1downcode.c...pw.vbs
windows7-x64
1downcode.c...pw.vbs
windows10-2004-x64
1downcode.c...ck.vbs
windows7-x64
1downcode.c...ck.vbs
windows10-2004-x64
1downcode.c...nn.vbs
windows7-x64
1downcode.c...nn.vbs
windows10-2004-x64
1downcode.c...et.vbs
windows7-x64
1downcode.c...et.vbs
windows10-2004-x64
1downcode.c...ce.vbs
windows7-x64
1downcode.c...ce.vbs
windows10-2004-x64
1downcode.c...ne.vbs
windows7-x64
1downcode.c...ne.vbs
windows10-2004-x64
1downcode.c...ws.vbs
windows7-x64
1downcode.c...ws.vbs
windows10-2004-x64
1downcode.c...ow.vbs
windows7-x64
1downcode.c...ow.vbs
windows10-2004-x64
1downcode.c...er.vbs
windows7-x64
1downcode.c...er.vbs
windows10-2004-x64
1downcode.c...at.vbs
windows7-x64
1downcode.c...at.vbs
windows10-2004-x64
1downcode.c...d.html
windows7-x64
1downcode.c...d.html
windows10-2004-x64
1downcode.c...ml.vbs
windows7-x64
1downcode.c...ml.vbs
windows10-2004-x64
1downcode.c...ln.asp
windows7-x64
3downcode.c...ln.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
downcode.com/中国源码下载站.url
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
downcode.com/中国源码下载站.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
downcode.com/S○γγy丫旅游网站/aboutus.vbs
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
downcode.com/S○γγy丫旅游网站/aboutus.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
downcode.com/S○γγy丫旅游网站/admin/aboutme.vbs
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
downcode.com/S○γγy丫旅游网站/admin/aboutme.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
downcode.com/S○γγy丫旅游网站/admin/acandpw.vbs
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
downcode.com/S○γγy丫旅游网站/admin/acandpw.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
downcode.com/S○γγy丫旅游网站/admin/check.vbs
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
downcode.com/S○γγy丫旅游网站/admin/check.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
downcode.com/S○γγy丫旅游网站/admin/conn.vbs
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
downcode.com/S○γγy丫旅游网站/admin/conn.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
downcode.com/S○γγy丫旅游网站/admin/delnet.vbs
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
downcode.com/S○γγy丫旅游网站/admin/delnet.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
downcode.com/S○γγy丫旅游网站/admin/delnotice.vbs
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
downcode.com/S○γγy丫旅游网站/admin/delnotice.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
downcode.com/S○γγy丫旅游网站/admin/delpopline.vbs
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
downcode.com/S○γγy丫旅游网站/admin/delpopline.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
downcode.com/S○γγy丫旅游网站/admin/deltnews.vbs
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
downcode.com/S○γγy丫旅游网站/admin/deltnews.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral21
Sample
downcode.com/S○γγy丫旅游网站/admin/deltripknow.vbs
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
downcode.com/S○γγy丫旅游网站/admin/deltripknow.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
downcode.com/S○γγy丫旅游网站/admin/delviewer.vbs
Resource
win7-20240611-en
Behavioral task
behavioral24
Sample
downcode.com/S○γγy丫旅游网站/admin/delviewer.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
downcode.com/S○γγy丫旅游网站/admin/format.vbs
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
downcode.com/S○γγy丫旅游网站/admin/format.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
downcode.com/S○γγy丫旅游网站/admin/head.html
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
downcode.com/S○γγy丫旅游网站/admin/head.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
downcode.com/S○γγy丫旅游网站/admin/html.vbs
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
downcode.com/S○γγy丫旅游网站/admin/html.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
downcode.com/S○γγy丫旅游网站/admin/inc/ubbbln.asp
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
downcode.com/S○γγy丫旅游网站/admin/inc/ubbbln.asp
Resource
win10v2004-20240508-en
General
-
Target
aa674f904cad1baef0e9b5ebdc8d3ad3_JaffaCakes118
-
Size
1.1MB
-
MD5
aa674f904cad1baef0e9b5ebdc8d3ad3
-
SHA1
2e1433d9498dffd93ac4d27a816dd28ee400d106
-
SHA256
8cdf8cb05238ec5b6fcf025e95f0f015870bac27f7500e350a70d178cd184ef6
-
SHA512
3a27a00ffe1b05ad444072cc90ffda1c6d5d517a1a0168a4d217bd3523cdc0f8ca3260d8be13e03b7c4f4df44f8b40931fe4eef8ed605524bc0bd47f065abb8d
-
SSDEEP
24576:E+kw0zCPtIDV1W4oqvm+wpuet1BLoHasoqqib50zwAPqiX:E+PIDKngm+wY4XLKaibGzwACiX
Malware Config
Signatures
Files
-
aa674f904cad1baef0e9b5ebdc8d3ad3_JaffaCakes118.rar
-
downcode.com/downcode.com.txt
-
downcode.com/中国源码下载站.url.url
-
downcode.com/S○γγy丫旅游网站/aboutus.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/aboutme.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/acandpw.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/admin.css
-
downcode.com/S○γγy丫旅游网站/admin/check.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/conn.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/delnet.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/delnotice.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/delpopline.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/deltnews.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/deltripknow.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/delviewer.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/downcode.com.txt
-
downcode.com/S○γγy丫旅游网站/admin/format.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/head.asp.html
-
downcode.com/S○γγy丫旅游网站/admin/html.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/inc/ubbbln.asp
-
downcode.com/S○γγy丫旅游网站/admin/inc/ubbcode.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/inc/ubbcode.js.js
-
downcode.com/S○γγy丫旅游网站/admin/index.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/left.asp.js
-
downcode.com/S○γγy丫旅游网站/admin/logout.asp
-
downcode.com/S○γγy丫旅游网站/admin/main.asp.html .vbs polyglot
-
downcode.com/S○γγy丫旅游网站/admin/md5.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/menu.asp
-
downcode.com/S○γγy丫旅游网站/admin/net.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/notice.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/popline.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/tnews.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/tripknow.asp.vbs
-
downcode.com/S○γγy丫旅游网站/admin/ubb.asp.html .js polyglot
-
downcode.com/S○γγy丫旅游网站/admin/upload.asp
-
downcode.com/S○γγy丫旅游网站/admin/upload_asjob.asp.html .vbs polyglot
-
downcode.com/S○γγy丫旅游网站/admin/uppic/1.jpg.jpg
-
downcode.com/S○γγy丫旅游网站/admin/uppic/11.jpg.jpg
-
downcode.com/S○γγy丫旅游网站/admin/uppic/2.jpg.jpg
-
downcode.com/S○γγy丫旅游网站/admin/uppic/20063603135.jpg.jpg
-
downcode.com/S○γγy丫旅游网站/admin/uppic/3.jpg.jpg
-
downcode.com/S○γγy丫旅游网站/admin/uppic/4.jpg.jpg
-
downcode.com/S○γγy丫旅游网站/admin/uppic/thumbs.db
-
downcode.com/S○γγy丫旅游网站/admin/webmes.asp.vbs
-
downcode.com/S○γγy丫旅游网站/bottle.asp.vbs
-
downcode.com/S○γγy丫旅游网站/conn.asp.vbs
-
downcode.com/S○γγy丫旅游网站/css.css.html
-
downcode.com/S○γγy丫旅游网站/downcode.com.txt
-
downcode.com/S○γγy丫旅游网站/format.asp.vbs
-
downcode.com/S○γγy丫旅游网站/hotline.asp.vbs
-
downcode.com/S○γγy丫旅游网站/html.asp.vbs
-
downcode.com/S○γγy丫旅游网站/images/_notes/aboutmeus.gif.mno
-
downcode.com/S○γγy丫旅游网站/images/_notes/bgs.gif.mno
-
downcode.com/S○γγy丫旅游网站/images/_notes/hotline.gif.mno
-
downcode.com/S○γγy丫旅游网站/images/_notes/knows.gif.mno
-
downcode.com/S○γγy丫旅游网站/images/_notes/popview.gif.mno
-
downcode.com/S○γγy丫旅游网站/images/_notes/viewer.gif.mno
-
downcode.com/S○γγy丫旅游网站/images/aboutmeus.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/announce.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/article_common(1).gif.gif
-
downcode.com/S○γγy丫旅游网站/images/bg1.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/bg2.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/bgs.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/bottom.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/bottom1.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/bottom11.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/bottom2.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/bottom2.png.png
-
downcode.com/S○γγy丫旅游网站/images/bottom3.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/channel_bottom.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/dian.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/hotline.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/hotview.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/knows.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/line.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/mid.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/more.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/nows.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/popview.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/search.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/search_left.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/search_mid.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/search_right.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/thumbs.db
-
downcode.com/S○γγy丫旅游网站/images/titlebg.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/titleleft1.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/titleright1.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/top0.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/top0.png.png
-
downcode.com/S○γγy丫旅游网站/images/top1.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/top2.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/top2.png.png
-
downcode.com/S○γγy丫旅游网站/images/tripknow.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/tripknow.png.png
-
downcode.com/S○γγy丫旅游网站/images/viewer.gif.gif
-
downcode.com/S○γγy丫旅游网站/images/xx.gif.gif
-
downcode.com/S○γγy丫旅游网站/index.asp.vbs
-
downcode.com/S○γγy丫旅游网站/knows.asp.vbs
-
downcode.com/S○γγy丫旅游网站/news.asp.vbs
-
downcode.com/S○γγy丫旅游网站/search.asp.vbs
-
downcode.com/S○γγy丫旅游网站/show_.asp.vbs
-
downcode.com/S○γγy丫旅游网站/showhotline.asp.vbs
-
downcode.com/S○γγy丫旅游网站/showknow.asp.vbs
-
downcode.com/S○γγy丫旅游网站/shownews.asp.vbs
-
downcode.com/S○γγy丫旅游网站/showview.asp.vbs
-
downcode.com/S○γγy丫旅游网站/top.asp.vbs
-
downcode.com/S○γγy丫旅游网站/top1.gif.gif
-
downcode.com/S○γγy丫旅游网站/top2.gif.gif
-
downcode.com/S○γγy丫旅游网站/trip_dbase/trip.mdb
-
downcode.com/S○γγy丫旅游网站/viewer.asp.vbs
-
downcode.com/S○γγy丫旅游网站/中国源码下载站.url.url
-
downcode.com/S○γγy丫旅游网站/安装必看.txt