Overview
overview
3Static
static
1_admin/_in...te.vbs
windows7-x64
1_admin/_in...te.vbs
windows10-2004-x64
1_admin/_in...ex.vbs
windows7-x64
1_admin/_in...ex.vbs
windows10-2004-x64
1_admin/_in...ay.vbs
windows7-x64
1_admin/_in...ay.vbs
windows10-2004-x64
1_admin/_in...ta.vbs
windows7-x64
1_admin/_in...ta.vbs
windows10-2004-x64
1_admin/_in...te.vbs
windows7-x64
1_admin/_in...te.vbs
windows10-2004-x64
1_admin/adm...nt.vbs
windows7-x64
1_admin/adm...nt.vbs
windows10-2004-x64
1_admin/adm...le.vbs
windows7-x64
1_admin/adm...le.vbs
windows10-2004-x64
1_admin/adm..._g.vbs
windows7-x64
1_admin/adm..._g.vbs
windows10-2004-x64
1_admin/adm...ry.vbs
windows7-x64
1_admin/adm...ry.vbs
windows10-2004-x64
1_admin/adm...ck.asp
windows7-x64
3_admin/adm...ck.asp
windows10-2004-x64
3_admin/adm...es.vbs
windows7-x64
1_admin/adm...es.vbs
windows10-2004-x64
1_admin/adm...nt.vbs
windows7-x64
1_admin/adm...nt.vbs
windows10-2004-x64
1_admin/adm...ig.vbs
windows7-x64
1_admin/adm...ig.vbs
windows10-2004-x64
1_admin/admin_data.vbs
windows7-x64
1_admin/admin_data.vbs
windows10-2004-x64
1_admin/adm...se.vbs
windows7-x64
1_admin/adm...se.vbs
windows10-2004-x64
1_admin/admin_edit.js
windows7-x64
3_admin/admin_edit.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
_admin/_inc_if_cate.vbs
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
_admin/_inc_if_cate.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
_admin/_inc_if_index.vbs
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
_admin/_inc_if_index.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
_admin/_inc_if_show_play.vbs
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
_admin/_inc_if_show_play.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
_admin/_inc_make_data.vbs
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
_admin/_inc_make_data.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
_admin/_inc_make_data_cate.vbs
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
_admin/_inc_make_data_cate.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
_admin/admin_agent.vbs
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
_admin/admin_agent.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
_admin/admin_article.vbs
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
_admin/admin_article.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
_admin/admin_article_g.vbs
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
_admin/admin_article_g.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
_admin/admin_category.vbs
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
_admin/admin_category.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
_admin/admin_check.asp
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
_admin/admin_check.asp
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
_admin/admin_check_images.vbs
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
_admin/admin_check_images.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
_admin/admin_comment.vbs
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
_admin/admin_comment.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
_admin/admin_config.vbs
Resource
win7-20240611-en
Behavioral task
behavioral26
Sample
_admin/admin_config.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
_admin/admin_data.vbs
Resource
win7-20240220-en
Behavioral task
behavioral28
Sample
_admin/admin_data.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
_admin/admin_database.vbs
Resource
win7-20240419-en
Behavioral task
behavioral30
Sample
_admin/admin_database.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
_admin/admin_edit.js
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
_admin/admin_edit.js
Resource
win10v2004-20240704-en
General
-
Target
25ceb7197fd699d1c94d5a85128a5f50_JaffaCakes118
-
Size
447KB
-
MD5
25ceb7197fd699d1c94d5a85128a5f50
-
SHA1
0b760288954b138035255166d0f74923a5d4ddf2
-
SHA256
bca35565a872168512a60d6021bdd8bdfab1e5573c002ddc3fdd050e06480ea7
-
SHA512
c3b78d2241a64a4df0e3d17aa3ba56e22a4b51ca11cb041e83be434784695b4a34360dec9cb1a97559202d8c6b0efd76ea1b1e56bb56aabc03f6088a2283d91f
-
SSDEEP
12288:ozCaPTVn/L5vi9bmQ9tnDcDCaMvKkMoE8etyIemw:omWZfg+DCaBkMX8/mw
Malware Config
Signatures
Files
-
25ceb7197fd699d1c94d5a85128a5f50_JaffaCakes118.rar
-
_admin/_inc_if_cate.asp.vbs
-
_admin/_inc_if_index.asp.vbs
-
_admin/_inc_if_show_play.asp.vbs
-
_admin/_inc_make_data.asp.vbs
-
_admin/_inc_make_data_cate.asp.vbs
-
_admin/admin_agent.asp.vbs
-
_admin/admin_article.asp.vbs
-
_admin/admin_article_g.asp.vbs
-
_admin/admin_category.asp.vbs
-
_admin/admin_check.asp
-
_admin/admin_check_images.asp.vbs
-
_admin/admin_comment.asp.vbs
-
_admin/admin_config.asp.vbs
-
_admin/admin_data.asp.vbs
-
_admin/admin_database.asp.vbs
-
_admin/admin_edit.asp.js
-
_admin/admin_get.asp.js
-
_admin/admin_html2js.html
-
_admin/admin_html_do.asp.vbs
-
_admin/admin_html_index.asp
-
_admin/admin_html_make.asp.vbs
-
_admin/admin_import_adn.asp.vbs
-
_admin/admin_import_lova.asp.js
-
_admin/admin_import_maxz.asp.vbs
-
_admin/admin_javascript.asp.vbs
-
_admin/admin_link.asp.vbs
-
_admin/admin_list.asp.vbs
-
_admin/admin_template.asp.vbs
-
_admin/do.asp.vbs
-
_admin/download.asp.vbs
-
_admin/fckeditor/editor/css/fck_editorarea.css
-
_admin/fckeditor/editor/css/fck_internal.css
-
_admin/fckeditor/editor/css/fck_showtableborders_gecko.css
-
_admin/fckeditor/editor/dialog/common/fck_dialog_common.css
-
_admin/fckeditor/editor/dialog/common/fck_dialog_common.js.js
-
_admin/fckeditor/editor/dialog/common/fcknumericfield.htc.js
-
_admin/fckeditor/editor/dialog/fck_about.html.html .js polyglot
-
_admin/fckeditor/editor/dialog/fck_about/logo_fckeditor.gif.gif
-
_admin/fckeditor/editor/dialog/fck_image.html.html
-
_admin/fckeditor/editor/dialog/fck_image/fck_image.js.js
-
_admin/fckeditor/editor/dialog/fck_link.html.html
-
_admin/fckeditor/editor/dialog/fck_link/fck_link.js.js
-
_admin/fckeditor/editor/dialog/fck_media.html.html
-
_admin/fckeditor/editor/dialog/fck_media/fck_media.js.js
-
_admin/fckeditor/editor/dialog/fck_table.html.html .js polyglot
-
_admin/fckeditor/editor/fckdialog.html.html .js polyglot
-
_admin/fckeditor/editor/fckeditor.html.html .js polyglot
-
_admin/fckeditor/editor/images/Thumbs.db
-
_admin/fckeditor/editor/images/spacer.gif.gif
-
_admin/fckeditor/editor/js/fckeditorcode_gecko.js.js
-
_admin/fckeditor/editor/js/fckeditorcode_ie.js.js
-
_admin/fckeditor/editor/lang/zh-cn.js
-
_admin/fckeditor/editor/plugins/insertcode/fck_insertcode.html.js
-
_admin/fckeditor/editor/plugins/insertcode/fckplugin.js.js
-
_admin/fckeditor/editor/skins/default/fck_dialog.css
-
_admin/fckeditor/editor/skins/default/fck_editor.css
-
_admin/fckeditor/editor/skins/default/fck_strip.gif.gif
-
_admin/fckeditor/editor/skins/default/images/toolbar.buttonarrow.gif.gif
-
_admin/fckeditor/editor/skins/default/images/toolbar.start.gif.gif
-
_admin/fckeditor/fckconfig.js
-
_admin/fckeditor/fckeditor.asp.vbs
-
_admin/frame.asp.js
-
_admin/help_tag.html.html
-
_admin/images/Thumbs.db
-
_admin/images/ad_03.jpg.jpg
-
_admin/images/ad_06.jpg.jpg
-
_admin/images/ad_11.jpg.jpg
-
_admin/images/admin_bg_menu.gif.gif
-
_admin/images/admin_bg_menu_a.gif.gif
-
_admin/images/admin_button_bg.gif.gif
-
_admin/images/admin_header.gif.gif
-
_admin/images/admin_header_bg.gif.gif
-
_admin/images/admin_menu_bar.gif.gif
-
_admin/images/bg.png.png
-
_admin/images/bg_repno.gif.gif
-
_admin/images/bg_repx.gif.gif
-
_admin/images/bg_repx_hb.gif.gif
-
_admin/images/bg_repx_hc.gif.gif
-
_admin/images/btn_login.png.png
-
_admin/images/f1.gif.gif
-
_admin/images/f2.gif.gif
-
_admin/images/f3.gif.gif
-
_admin/images/f4.gif.gif
-
_admin/images/html_no.gif.gif
-
_admin/images/html_ok.gif.gif
-
_admin/images/input_reg_corner.gif.gif
-
_admin/images/login.gif.gif
-
_admin/images/login_header_b.jpg.jpg
-
_admin/images/logo.gif.gif
-
_admin/images/mainForm.png.png
-
_admin/images/reg.gif.gif
-
_admin/images/rline.gif.gif
-
_admin/images/spinner.gif.gif
-
_admin/images/style.css
-
_admin/images/title.png.png
-
_admin/images/warning.gif.gif
-
_admin/index.asp.vbs
-
_admin/javascript/Html_Js.js
-
_admin/javascript/common.js.js
-
_admin/javascript/jquery.js.js
-
_admin/javascript/setday.js.js
-
_admin/javascript/showtime.js.js
-
_admin/left.asp.js
-
_admin/login.asp.vbs
-
_admin/upload/upload.asp.vbs
-
_admin/upload/upload.htm
-
_admin/upload/upsave.inc.vbs
-
_admin/welcome.asp.vbs
-
_data/#2008#0613.mdb
-
_include/code.asp
-
_include/conn.asp.vbs
-
_include/dbcache.asp.vbs
-
_include/func_common.asp.vbs
-
_include/func_faststring.asp
-
_include/func_file.asp.vbs
-
_include/func_get.asp.vbs
-
_include/func_page.asp.vbs
-
_include/func_sys.asp.vbs
-
_include/sha1.asp.html .js polyglot
-
_include/sql.asp.vbs
-
asp/code.asp
-
asp/gb.asp.vbs
-
asp/gb.js.js
-
asp/hits.asp.vbs
-
asp/jquery.js.js
-
asp/link.asp.vbs
-
asp/play.asp.vbs
-
asp/search.asp.vbs
-
asp/新云软件.url.url
-
images/20091281551796864.gif
-
images/Thumbs.db
-
install/default.css
-
install/img/Thumbs.db
-
install/img/bg.gif.gif
-
install/img/bgcode.gif.gif
-
install/img/bgfooter.gif.gif
-
install/img/bgmain.gif.gif
-
install/img/li.gif.gif
-
install/img/nav_li.gif.gif
-
install/img/quote.gif.gif
-
install/img/topleft.gif.gif
-
install/index.asp.html .vbs polyglot
-
javascript/all_bot_950_90.js.js
-
javascript/all_top_468_60.js.js
-
javascript/all_top_950_90.js.js
-
javascript/movie_play_120_450.js.js
-
javascript/movie_play_250_250.js.js
-
javascript/movie_show_250_250.js.js
-
javascript/movie_show_468_60.js.js
-
javascript/tj.js.js
-
javascript/tudou.htm.html .js polyglot
-
javascript/xunlei.htm.js
-
rss/rsstyle.css
-
template/default/article_category.html.html
-
template/default/article_show.html.html
-
template/default/common.js.js
-
template/default/foot.html
-
template/default/gb.html.html
-
template/default/head.html
-
template/default/images/560.gif.gif
-
template/default/images/Thumbs.db
-
template/default/images/c3.gif.gif
-
template/default/images/foot_ad.gif.gif
-
template/default/images/header_menu_0604.gif.gif
-
template/default/images/header_menu_0604.png.png
-
template/default/images/list.gif.gif
-
template/default/images/logo.gif.gif
-
template/default/images/nopic.gif.gif
-
template/default/images/setup_bg.png.png
-
template/default/images/setup_logo.gif.gif
-
template/default/images/thead_bg.gif.gif
-
template/default/images/title.gif.gif
-
template/default/images/xml.gif.gif
-
template/default/index.html.html
-
template/default/main.css
-
template/default/movie_category.html.html
-
template/default/movie_play.html.html
-
template/default/movie_show.html.html
-
template/default/search.html.html
-
template/default/分类专版_电影.html.html
-
安装说明.txt