Overview

overview

6

Static

static

6

VX CHAOS F...es.url

windows7-x64

1

VX CHAOS F...es.url

windows10-2004-x64

1

batch tdss/studio.bat

windows7-x64

1

batch tdss/studio.bat

windows10-2004-x64

1

studio.bat...re.url

windows7-x64

1

studio.bat...re.url

windows10-2004-x64

1

studio.bat...rg.pdf

windows7-x64

1

studio.bat...rg.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    05b622e2154f4f1c4634e6137db28fc3_JaffaCakes118

  • Size

    417KB

  • MD5

    05b622e2154f4f1c4634e6137db28fc3

  • SHA1

    e527eabcd4fbe42b3d998bc40cbd9c0da09cf161

  • SHA256

    609d6259ec661fc5e6ad24dd37baee39a1b7496436002d17f4f94b273ecd9bad

  • SHA512

    775f4506c336d6d4ab29266be5d6cacd80bdad614960917da117455e7405e8a90395df29885067e06898b98d644c829ebaef8e2bb918eea1d25b4c6a4ae4b6db

  • SSDEEP

    6144:vD4eprVnRu/7UCAu/lesYsEJoeo8/dFb6lQMhyDoJEaQdf3uclCR5SYWMkdTzv5s:9rp2wCmv13Noh6asft2TWMkVvG

Score
6/10
pdflinkjavascript

Malware Config

Signatures

  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • 05b622e2154f4f1c4634e6137db28fc3_JaffaCakes118
    .rar
  • VX CHAOS FILE SERVER - Virii, Worms, Anti-Virus, Hacker Tools, Warez, Codes.url
  • VX CHAOS.nfo
  • VX CHAOS.txt
  • batch tdss/VX CHAOS.txt
  • batch tdss/studio.bat
  • studio.bat MD55e6faf1f44bfa6f6e1eb077732a628f8 - VirSCAN.org 8% Scanner(s) (3-36) found malware.url
    .url
  • studio.bat MD5_5e6faf1f44bfa6f6e1eb077732a628f8 - VirSCAN.org.pdf
    .pdf

    • http://VirSCAN.org

    • http://virscan.org/

    • http://virscan.org/about.php

    • http://virscan.org/bug.php

    • http://virscan.org/contacts.php

    • http://virscan.org/helpus.php

    • http://virscan.org/policy.php

    • http://virscan.org/report/a14573756cce19dd98c3126aeb714dba.html

    • http://virscan.org/report/a14573756cce19dd98c3126aeb714dba.html#

    • Show all
  • <embedded content>
  • vxchaos or die.jpg
    .jpg