Overview
overview
3Static
static
1FlvFiles/�...��.url
windows7-x64
1FlvFiles/�...��.url
windows10-2004-x64
1config.vbs
windows7-x64
1config.vbs
windows10-2004-x64
1conn.vbs
windows7-x64
1conn.vbs
windows10-2004-x64
1delete.vbs
windows7-x64
1delete.vbs
windows10-2004-x64
1deletePL.vbs
windows7-x64
1deletePL.vbs
windows10-2004-x64
1index.asp
windows7-x64
3index.asp
windows10-2004-x64
3left.vbs
windows7-x64
1left.vbs
windows10-2004-x64
1loginout.asp
windows7-x64
3loginout.asp
windows10-2004-x64
3main.vbs
windows7-x64
1main.vbs
windows10-2004-x64
1setconfig.vbs
windows7-x64
1setconfig.vbs
windows10-2004-x64
1upload.vbs
windows7-x64
1upload.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
FlvFiles/新云软件.url
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
FlvFiles/新云软件.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
config.vbs
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
config.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
conn.vbs
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
conn.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
delete.vbs
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
delete.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
deletePL.vbs
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
deletePL.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
index.asp
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
index.asp
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
left.vbs
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
left.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
loginout.asp
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
loginout.asp
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
main.vbs
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
main.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
setconfig.vbs
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
setconfig.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
upload.vbs
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
upload.vbs
Resource
win10v2004-20240508-en
General
-
Target
086416384cabfe259a47cee9e9c0e928_JaffaCakes118
-
Size
2.3MB
-
MD5
086416384cabfe259a47cee9e9c0e928
-
SHA1
f47b0b2f088242c91d10da2fa08f5bb0d728367f
-
SHA256
02b8c6a69bb9146b13c8864f7d208fcf8edbce5806dd12447f3eaee57d4917b2
-
SHA512
5dddd5f98571eaac1525d44368254155e73fca15801254d8919006191d09b583a2b4ecf4e720dec4c6629d3638222a2d0f5c02d9061d706b4c31f335b4875332
-
SSDEEP
49152:Whb8xnbGi8yYPaXk7qeJFnAONmnUbJUmqw8oK+hcmB826S8l474uHLSVYtJ:Whw+yYpJAOIn68o/hnES8WHLS+7
Malware Config
Signatures
Files
-
086416384cabfe259a47cee9e9c0e928_JaffaCakes118.rar
-
Flv.mdb
-
FlvFiles/因为你不爱我.flv
-
FlvFiles/新云软件.url.url
-
config.asp.vbs
-
conn.asp.vbs
-
delete.asp.vbs
-
deletePL.asp.vbs
-
index.asp
-
left.asp.vbs
-
loginout.asp
-
main.asp.vbs
-
setconfig.asp.vbs
-
upfile.asp.html .js polyglot
-
upload.asp.vbs
-
upload_5xsoft.inc.html .vbs polyglot
-
vcastr3.swf
-
使用说明.txt
-
更新说明.txt