Overview
overview
3Static
static
1留溪网�...tr.asp
windows7-x64
3留溪网�...tr.asp
windows10-2004-x64
3留溪网�...nu.asp
windows7-x64
3留溪网�...nu.asp
windows10-2004-x64
3留溪网�...om.vbs
windows7-x64
1留溪网�...om.vbs
windows10-2004-x64
1留溪网�...ig.vbs
windows7-x64
1留溪网�...ig.vbs
windows10-2004-x64
1留溪网�...sf.vbs
windows7-x64
1留溪网�...sf.vbs
windows10-2004-x64
1留溪网�...s.html
windows7-x64
1留溪网�...s.html
windows10-2004-x64
1留溪网�...p.html
windows7-x64
1留溪网�...p.html
windows10-2004-x64
1留溪网�...x.html
windows7-x64
1留溪网�...x.html
windows10-2004-x64
1留溪网�...om.asp
windows7-x64
3留溪网�...om.asp
windows10-2004-x64
3留溪网�...p.html
windows7-x64
1留溪网�...p.html
windows10-2004-x64
1留溪网�...d5.vbs
windows7-x64
1留溪网�...d5.vbs
windows10-2004-x64
1留溪网�...nu.asp
windows7-x64
3留溪网�...nu.asp
windows10-2004-x64
3留溪网�...it.asp
windows7-x64
3留溪网�...it.asp
windows10-2004-x64
3留溪网�...op.asp
windows7-x64
3留溪网�...op.asp
windows10-2004-x64
3留溪网�...a1.vbs
windows7-x64
1留溪网�...a1.vbs
windows10-2004-x64
1留溪网�...a2.vbs
windows7-x64
1留溪网�...a2.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
留溪网上传文系统 v3.01/Checkstr.asp
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
留溪网上传文系统 v3.01/Checkstr.asp
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
留溪网上传文系统 v3.01/admin_menu.asp
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
留溪网上传文系统 v3.01/admin_menu.asp
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
留溪网上传文系统 v3.01/bottom.vbs
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
留溪网上传文系统 v3.01/bottom.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
留溪网上传文系统 v3.01/config.vbs
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
留溪网上传文系统 v3.01/config.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
留溪网上传文系统 v3.01/connsf.vbs
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
留溪网上传文系统 v3.01/connsf.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
留溪网上传文系统 v3.01/css.html
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
留溪网上传文系统 v3.01/css.html
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
留溪网上传文系统 v3.01/help.html
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
留溪网上传文系统 v3.01/help.html
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
留溪网上传文系统 v3.01/index.html
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
留溪网上传文系统 v3.01/index.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
留溪网上传文系统 v3.01/index_bottom.asp
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
留溪网上传文系统 v3.01/index_bottom.asp
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
留溪网上传文系统 v3.01/index_top.html
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
留溪网上传文系统 v3.01/index_top.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
留溪网上传文系统 v3.01/md5.vbs
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
留溪网上传文系统 v3.01/md5.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
留溪网上传文系统 v3.01/menu.asp
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
留溪网上传文系统 v3.01/menu.asp
Resource
win10v2004-20240611-en
Behavioral task
behavioral25
Sample
留溪网上传文系统 v3.01/quit.asp
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
留溪网上传文系统 v3.01/quit.asp
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
留溪网上传文系统 v3.01/top.asp
Resource
win7-20240220-en
Behavioral task
behavioral28
Sample
留溪网上传文系统 v3.01/top.asp
Resource
win10v2004-20240611-en
Behavioral task
behavioral29
Sample
留溪网上传文系统 v3.01/updata1.vbs
Resource
win7-20240419-en
Behavioral task
behavioral30
Sample
留溪网上传文系统 v3.01/updata1.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
留溪网上传文系统 v3.01/updata2.vbs
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
留溪网上传文系统 v3.01/updata2.vbs
Resource
win10v2004-20240226-en
General
-
Target
04f53f5e952c1b9d51fd58e918ceb9a1_JaffaCakes118
-
Size
187KB
-
MD5
04f53f5e952c1b9d51fd58e918ceb9a1
-
SHA1
256c0c200b30454155862934e4883fe8f0b5d5d1
-
SHA256
6568b08c03661784ed597c7a5cbc4aef6f07c05807b30a860f3afde933b17105
-
SHA512
f87c2a6ea9b4bdaf82f0fe01fe2964f3964e41dc22bf4e2a6b421f919c5d70c1acdb0ee654819f3269218e6335a5d0dd3ed350ae235f31b48e0919884ce7370b
-
SSDEEP
3072:QTeWTX12pkT12CQzhtEgxvuitlAiqi8/chYg7OV7/CQ/yZCL4rkKs1wstxP9SgA:M241TLMvuGlFRkrjgbYn1nKgA
Malware Config
Signatures
Files
-
04f53f5e952c1b9d51fd58e918ceb9a1_JaffaCakes118.rar
-
留溪网上传文系统 v3.01/Checkstr.asp
-
留溪网上传文系统 v3.01/admin_disp.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/admin_edit.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/admin_editmsg.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/admin_list.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/admin_menu.asp
-
留溪网上传文系统 v3.01/admin_send.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/admin_serch.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/admin_setup.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/admin_temp.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/admin_user.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/bottom.asp.vbs
-
留溪网上传文系统 v3.01/config.asp.vbs
-
留溪网上传文系统 v3.01/connsf.asp.vbs
-
留溪网上传文系统 v3.01/css.css.html
-
留溪网上传文系统 v3.01/data/db.mdb
-
留溪网上传文系统 v3.01/disp.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/edit_user.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/editmsg.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/help.asp.html
-
留溪网上传文系统 v3.01/images/cat.gif.gif
-
留溪网上传文系统 v3.01/images/cat1.gif.gif
-
留溪网上传文系统 v3.01/images/file.gif.gif
-
留溪网上传文系统 v3.01/images/file1.gif.gif
-
留溪网上传文系统 v3.01/images/file2.gif.gif
-
留溪网上传文系统 v3.01/images/file3.gif.gif
-
留溪网上传文系统 v3.01/images/fujian.gif.gif
-
留溪网上传文系统 v3.01/images/index.jpg.jpg
-
留溪网上传文系统 v3.01/images/locktop.gif.gif
-
留溪网上传文系统 v3.01/images/top.jpg.jpg
-
留溪网上传文系统 v3.01/index.asp.html
-
留溪网上传文系统 v3.01/index_bottom.asp
-
留溪网上传文系统 v3.01/index_top.asp.html
-
留溪网上传文系统 v3.01/list.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/md5.inc.vbs
-
留溪网上传文系统 v3.01/menu.asp
-
留溪网上传文系统 v3.01/quit.asp
-
留溪网上传文系统 v3.01/readme.txt
-
留溪网上传文系统 v3.01/send_message.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/serch.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/temp.asp.html .vbs polyglot
-
留溪网上传文系统 v3.01/top.asp
-
留溪网上传文系统 v3.01/updata1.asp.vbs
-
留溪网上传文系统 v3.01/updata2.asp.vbs
-
留溪网上传文系统 v3.01/upfile1.asp.vbs
-
留溪网上传文系统 v3.01/upload1.asp
-
留溪网上传文系统 v3.01/user_login.asp.vbs
-
留溪网上传文系统 v3.01/下载说明.htm.html .js polyglot