Overview
overview
1Static
static
15345753/Hd...SS.vbs
windows7-x64
15345753/Hd...SS.vbs
windows10-2004-x64
15345753/Hd...lo.com
windows7-x64
5345753/Hd...lo.com
windows10-2004-x64
5345753/ha...AT.exe
windows7-x64
5345753/ha...AT.exe
windows10-2004-x64
5345753/ha...TM.exe
windows7-x64
5345753/ha...TM.exe
windows10-2004-x64
5345753/ha...DE.exe
windows7-x64
5345753/ha...DE.exe
windows10-2004-x64
5345753/ha...RT.exe
windows7-x64
5345753/ha...RT.exe
windows10-2004-x64
5345753/ha...LD.exe
windows7-x64
5345753/ha...LD.exe
windows10-2004-x64
5345753/ha...LD.exe
windows7-x64
5345753/ha...LD.exe
windows10-2004-x64
5345753/ha...~1.exe
windows7-x64
5345753/ha...~1.exe
windows10-2004-x64
5345753/ha...2L.exe
windows7-x64
5345753/ha...2L.exe
windows10-2004-x64
5345753/ha...3L.exe
windows7-x64
5345753/ha...3L.exe
windows10-2004-x64
5345753/ha...LD.exe
windows7-x64
5345753/ha...LD.exe
windows10-2004-x64
5345753/ha...LD.com
windows7-x64
5345753/ha...LD.com
windows10-2004-x64
5345753/ha...SS.exe
windows7-x64
5345753/ha...SS.exe
windows10-2004-x64
5345753/ha...LD.com
windows7-x64
5345753/ha...LD.com
windows10-2004-x64
5345753/ha...RT.exe
windows7-x64
5345753/ha...RT.exe
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
5345753/Hd Asm/ZPASS.vbs
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
5345753/Hd Asm/ZPASS.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
5345753/Hd Asm/lilo.com
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
5345753/Hd Asm/lilo.com
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
5345753/harddisk/BINTODAT.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
5345753/harddisk/BINTODAT.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
5345753/harddisk/BOOTM.exe
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
5345753/harddisk/BOOTM.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
5345753/harddisk/CENCODE.exe
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
5345753/harddisk/CENCODE.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
5345753/harddisk/CFIXPART.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
5345753/harddisk/CFIXPART.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
5345753/harddisk/CMBOOTLD.exe
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
5345753/harddisk/CMBOOTLD.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
5345753/harddisk/CXBOOTLD.exe
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
5345753/harddisk/CXBOOTLD.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
5345753/harddisk/CXBOOT~1.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
5345753/harddisk/CXBOOT~1.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
5345753/harddisk/CXLOCK2L.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
5345753/harddisk/CXLOCK2L.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
5345753/harddisk/CXLOCK3L.exe
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
5345753/harddisk/CXLOCK3L.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
5345753/harddisk/CXLOCKLD.exe
Resource
win7-20240611-en
Behavioral task
behavioral24
Sample
5345753/harddisk/CXLOCKLD.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral25
Sample
5345753/harddisk/HDBOOTLD.com
Resource
win7-20240419-en
Behavioral task
behavioral26
Sample
5345753/harddisk/HDBOOTLD.com
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
5345753/harddisk/HDPASS.exe
Resource
win7-20240611-en
Behavioral task
behavioral28
Sample
5345753/harddisk/HDPASS.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral29
Sample
5345753/harddisk/MBOOTLD.com
Resource
win7-20240611-en
Behavioral task
behavioral30
Sample
5345753/harddisk/MBOOTLD.com
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
5345753/harddisk/PTPART.exe
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
5345753/harddisk/PTPART.exe
Resource
win10v2004-20240611-en
General
-
Target
01b2f8d96494e64bba8bad825da8fc42_JaffaCakes118
-
Size
215KB
-
MD5
01b2f8d96494e64bba8bad825da8fc42
-
SHA1
a658b893b48fb5971a13d93aa8c08d8dba960c9a
-
SHA256
f956961b6ebac72eb2917a1d0c2e0b88b7ea2234a5574b56450f343dffdc3e42
-
SHA512
0e2f5718d49b65748ddc5794cba6b3814e32cfcde4c7fb0ff78fcc43b6c1330a869088d4ebfed33ad7e3c847a59a0daef1960556b2eb22b4c6e45c543ded891d
-
SSDEEP
6144:rnnvzP5VyQaDEDB67JEBguTc8FJE45dKeDwAsJ:bDyMcJEBguTcSG2d7DxW
Malware Config
Signatures
Files
-
01b2f8d96494e64bba8bad825da8fc42_JaffaCakes118.rar
-
5345753/Hd Asm/BOOT1.ASM
-
5345753/Hd Asm/BOOTM.asm
-
5345753/Hd Asm/BT1.TXT
-
5345753/Hd Asm/BT2.TXT
-
5345753/Hd Asm/CBOOTLD.ASM
-
5345753/Hd Asm/CMBOOTLD.ASM
-
5345753/Hd Asm/CMOSTOOL.ASM
-
5345753/Hd Asm/CMSDATIO.ASM
-
5345753/Hd Asm/COSDATIO.ASM
-
5345753/Hd Asm/CRD2HD.ASM
-
5345753/Hd Asm/CRD2HD2.ASM
-
5345753/Hd Asm/CRD2HD3.ASM
-
5345753/Hd Asm/Cmosopen.asm
-
5345753/Hd Asm/DRIVEON.TXT
-
5345753/Hd Asm/DRIVER~1.TXT
-
5345753/Hd Asm/DSK13.ASM
-
5345753/Hd Asm/Encode.asm
-
5345753/Hd Asm/FIXBOOT.ASM
-
5345753/Hd Asm/FIXPART.ASM
-
5345753/Hd Asm/FMTDSK.ASM
-
5345753/Hd Asm/HDBOOTLD.ASM
-
5345753/Hd Asm/HDBOOTLDn.asm
-
5345753/Hd Asm/HDBREAK.ASM
-
5345753/Hd Asm/HDPROCRD.asm
-
5345753/Hd Asm/HDPROTE.ASM
-
5345753/Hd Asm/HDSPACEF.ASM
-
5345753/Hd Asm/IBMBOOT.ASM
-
5345753/Hd Asm/INT13.ASM
-
5345753/Hd Asm/INT13ADR.ASM
-
5345753/Hd Asm/INT13H.ASM
-
5345753/Hd Asm/Int13n.asm
-
5345753/Hd Asm/LILO.ASM
-
5345753/Hd Asm/LOCKHD.ASM
-
5345753/Hd Asm/MBOOT.ASM
-
5345753/Hd Asm/MBOOTLD.ASM
-
5345753/Hd Asm/MBR13.BIN
-
5345753/Hd Asm/PARTTA.ASM
-
5345753/Hd Asm/PARTTA~1.ASM
-
5345753/Hd Asm/PTPART1.ASM
-
5345753/Hd Asm/R.HD
-
5345753/Hd Asm/S.ND
-
5345753/Hd Asm/TBLOCK.ASM
-
5345753/Hd Asm/TBLOCKLD.ASM
-
5345753/Hd Asm/WRIPETC.ASM
-
5345753/Hd Asm/XBOOT.ASM
-
5345753/Hd Asm/XBOOT1.asm
-
5345753/Hd Asm/XBOOTLD.ASM
-
5345753/Hd Asm/XLOCK.ASM
-
5345753/Hd Asm/XLOCK2.ASM
-
5345753/Hd Asm/XLOCK2LD.ASM
-
5345753/Hd Asm/XLOCK3.ASM
-
5345753/Hd Asm/XLOCK3LD.ASM
-
5345753/Hd Asm/XLOCKLD.ASM
-
5345753/Hd Asm/Xbootldn.asm
-
5345753/Hd Asm/ZKPASS.ASM
-
5345753/Hd Asm/ZKPASS2.ASM
-
5345753/Hd Asm/ZPASS.ASM.vbs
-
5345753/Hd Asm/ZPASS1.ASM
-
5345753/Hd Asm/bootmanld.asm
-
5345753/Hd Asm/cmosboot.asm
-
5345753/Hd Asm/cmosboot.txt
-
5345753/Hd Asm/lilo.com
-
5345753/Hd Asm/ptpart.asm
-
5345753/Hd Asm/xboot1ld.asm
-
5345753/harddisk/BINTODAT.EXE
-
5345753/harddisk/BOOT1.ASM
-
5345753/harddisk/BOOTM.EXE
-
5345753/harddisk/BOOTM.asm
-
5345753/harddisk/BOOTM.bin
-
5345753/harddisk/CENCODE.C
-
5345753/harddisk/CENCODE.EXE
-
5345753/harddisk/CFIXPART.C
-
5345753/harddisk/CFIXPART.EXE
-
5345753/harddisk/CMBOOTLD.EXE
-
5345753/harddisk/CMOSTOOL.ASM
-
5345753/harddisk/CXBOOT1LD.c
-
5345753/harddisk/CXBOOTLD.C
-
5345753/harddisk/CXBOOTLD.EXE
-
5345753/harddisk/CXBOOT~1.EXE
-
5345753/harddisk/CXLOCK2L.C
-
5345753/harddisk/CXLOCK2L.EXE
-
5345753/harddisk/CXLOCK3L.C
-
5345753/harddisk/CXLOCK3L.EXE
-
5345753/harddisk/CXLOCKLD.C
-
5345753/harddisk/CXLOCKLD.EXE
-
5345753/harddisk/CmBOOTLD.c
-
5345753/harddisk/CmBOOTLD.txt
-
5345753/harddisk/FIXPART.ASM
-
5345753/harddisk/FMTDSK.ASM
-
5345753/harddisk/HDBOOTLD.ASM
-
5345753/harddisk/HDBOOTLD.COM
-
5345753/harddisk/HDPASS.EXE
-
5345753/harddisk/HDPROTE.ASM
-
5345753/harddisk/MBOOT.ASM
-
5345753/harddisk/MBOOTLD.ASM
-
5345753/harddisk/MBOOTLD.COM
-
5345753/harddisk/PARTTA.ASM
-
5345753/harddisk/PARTTA~1.ASM
-
5345753/harddisk/PARTTA~1.TXT
-
5345753/harddisk/PTPART.ASM
-
5345753/harddisk/PTPART.BIN
-
5345753/harddisk/PTPART.CAT
-
5345753/harddisk/PTPART.DAT
-
5345753/harddisk/PTPART.EXE
-
5345753/harddisk/PTPART.MAP
-
5345753/harddisk/PTPART1.ASM
-
5345753/harddisk/TBLOCK.ASM
-
5345753/harddisk/TBLOCKLD.ASM
-
5345753/harddisk/TEST.ASM
-
5345753/harddisk/TXT2COM.ASM
-
5345753/harddisk/XBOOT.ASM
-
5345753/harddisk/XBOOT1.asm
-
5345753/harddisk/XBOOT1LD.COM
-
5345753/harddisk/XBOOTLD.ASM
-
5345753/harddisk/XBOOTLD.COM
-
5345753/harddisk/XBOOTLD.EXE
-
5345753/harddisk/XLOCK.ASM
-
5345753/harddisk/XLOCK2.ASM
-
5345753/harddisk/XLOCK2LD.ASM
-
5345753/harddisk/XLOCK3.ASM
-
5345753/harddisk/XLOCK3LD.ASM
-
5345753/harddisk/XLOCK3N.ASM
-
5345753/harddisk/XLOCKLD.ASM
-
5345753/harddisk/XLOCKLD.COM
-
5345753/harddisk/XLOCKLD.EXE
-
5345753/harddisk/ZKPASS.ASM
-
5345753/harddisk/ZKPASS2.ASM
-
5345753/harddisk/ZPASS.ASM.vbs
-
5345753/harddisk/ZPASS1.ASM
-
5345753/harddisk/bootmanld.asm
-
5345753/harddisk/hd/BINTOCAT.C
-
5345753/harddisk/hd/BINTOCAT.EXE
-
5345753/harddisk/hd/BINTODAT.C
-
5345753/harddisk/hd/BINTODAT.EXE
-
5345753/harddisk/hd/BOOT1.ASM
-
5345753/harddisk/hd/BOOTM.asm
-
5345753/harddisk/hd/CENCODE.C
-
5345753/harddisk/hd/CENCODE.EXE
-
5345753/harddisk/hd/CFIXPART.C
-
5345753/harddisk/hd/CMBOOTLD.EXE
-
5345753/harddisk/hd/CMOS.C
-
5345753/harddisk/hd/CMOS.EXE
-
5345753/harddisk/hd/CMOSTOOL.ASM
-
5345753/harddisk/hd/CXBOOT1LD.c
-
5345753/harddisk/hd/CXBOOTLD.C
-
5345753/harddisk/hd/CXBOOTLD.EXE
-
5345753/harddisk/hd/CXBOOT~1.EXE
-
5345753/harddisk/hd/CXLOCK2L.C
-
5345753/harddisk/hd/CXLOCK2L.EXE
-
5345753/harddisk/hd/CXLOCK3L.C
-
5345753/harddisk/hd/CXLOCKLD.C
-
5345753/harddisk/hd/CXLOCKLD.EXE
-
5345753/harddisk/hd/CmBOOTLD.c
-
5345753/harddisk/hd/DEBUG.EXE
-
5345753/harddisk/hd/Encode.asm
-
5345753/harddisk/hd/FIXBOOT.ASM
-
5345753/harddisk/hd/FIXBOOT.EXE
-
5345753/harddisk/hd/FIXPART.ASM
-
5345753/harddisk/hd/FMTDSK.ASM
-
5345753/harddisk/hd/HDBOOTLD.ASM
-
5345753/harddisk/hd/HDBREAK.ASM
-
5345753/harddisk/hd/HDBREAK.COM
-
5345753/harddisk/hd/HDBREAK.EXE
-
5345753/harddisk/hd/HDLOCK.C
-
5345753/harddisk/hd/HDLOCK.EXE
-
5345753/harddisk/hd/HDPASS.C
-
5345753/harddisk/hd/HDPASS.EXE
-
5345753/harddisk/hd/HDREMOVE.C
-
5345753/harddisk/hd/HDREMOVE.EXE
-
5345753/harddisk/hd/IBMBOOT.ASM
-
5345753/harddisk/hd/IBMBOOT.EXE
-
5345753/harddisk/hd/INT13ADR.ASM
-
5345753/harddisk/hd/INT13ADR.COM
-
5345753/harddisk/hd/INT13ADR.EXE
-
5345753/harddisk/hd/MASTER.COM
-
5345753/harddisk/hd/MBOOT.ASM
-
5345753/harddisk/hd/MBOOTLD.ASM
-
5345753/harddisk/hd/MBOOTLD.COM
-
5345753/harddisk/hd/MBR.C
-
5345753/harddisk/hd/MBR.EXE
-
5345753/harddisk/hd/PARTN.C
-
5345753/harddisk/hd/PTPART1.ASM
-
5345753/harddisk/hd/Reset.ASM
-
5345753/harddisk/hd/SETPASS.C
-
5345753/harddisk/hd/SETPASS.EXE
-
5345753/harddisk/hd/TBLOCK.ASM
-
5345753/harddisk/hd/TBLOCKLD.ASM
-
5345753/harddisk/hd/WRIPETC.ASM
-
5345753/harddisk/hd/XBOOT.ASM
-
5345753/harddisk/hd/XBOOT1.asm
-
5345753/harddisk/hd/XBOOT1LD.COM
-
5345753/harddisk/hd/XBOOTLD.ASM
-
5345753/harddisk/hd/XBOOTLD.COM
-
5345753/harddisk/hd/XBOOTLD.EXE
-
5345753/harddisk/hd/XLOCK.ASM
-
5345753/harddisk/hd/XLOCK2.ASM
-
5345753/harddisk/hd/XLOCK2LD.ASM
-
5345753/harddisk/hd/XLOCK3.ASM
-
5345753/harddisk/hd/XLOCK3LD.ASM
-
5345753/harddisk/hd/XLOCKLD.ASM
-
5345753/harddisk/hd/Xbootldn.asm
-
5345753/harddisk/hd/ZKPASS.ASM
-
5345753/harddisk/hd/ZKPASS2.ASM
-
5345753/harddisk/hd/ZPASS.ASM.vbs
-
5345753/harddisk/hd/ZPASS1.ASM
-
5345753/harddisk/hd/bootmanld.asm
-
5345753/harddisk/hd/cdebug.exe
-
5345753/harddisk/hd/ptpart.asm
-
5345753/harddisk/hd/xboot1ld.asm
-
5345753/harddisk/xboot1ld.asm
-
5345753/下载说明.htm.html .js polyglot