Overview
overview
6Static
static
150sjv30/3html.htm
windows7-x64
650sjv30/3html.htm
windows10-2004-x64
150sjv30/ad...st.vbs
windows7-x64
150sjv30/ad...st.vbs
windows10-2004-x64
150sjv30/ad...l.html
windows7-x64
150sjv30/ad...l.html
windows10-2004-x64
150sjv30/ad...l2.vbs
windows7-x64
150sjv30/ad...l2.vbs
windows10-2004-x64
150sjv30/ad...23.vbs
windows7-x64
150sjv30/ad...23.vbs
windows10-2004-x64
150sjv30/ad...ll.vbs
windows7-x64
150sjv30/ad...ll.vbs
windows10-2004-x64
150sjv30/admin/Left.js
windows7-x64
350sjv30/admin/Left.js
windows10-2004-x64
350sjv30/ad...ut.asp
windows7-x64
350sjv30/ad...ut.asp
windows10-2004-x64
350sjv30/ad...in.vbs
windows7-x64
150sjv30/ad...in.vbs
windows10-2004-x64
150sjv30/ad...ge.asp
windows7-x64
350sjv30/ad...ge.asp
windows10-2004-x64
350sjv30/ad...sh.vbs
windows7-x64
150sjv30/ad...sh.vbs
windows10-2004-x64
150sjv30/ad...sh.vbs
windows7-x64
150sjv30/ad...sh.vbs
windows10-2004-x64
150sjv30/ad...ta.vbs
windows7-x64
150sjv30/ad...ta.vbs
windows10-2004-x64
150sjv30/ad...in.vbs
windows7-x64
150sjv30/ad...in.vbs
windows10-2004-x64
150sjv30/ad...ss.vbs
windows7-x64
150sjv30/ad...ss.vbs
windows10-2004-x64
150sjv30/ad...nn.vbs
windows7-x64
150sjv30/ad...nn.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
50sjv30/3html.htm
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
50sjv30/3html.htm
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
50sjv30/admin/CheckPost.vbs
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
50sjv30/admin/CheckPost.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
50sjv30/admin/Html_MakeClassAll.html
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
50sjv30/admin/Html_MakeClassAll.html
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
50sjv30/admin/Html_MakeClassAll2.vbs
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
50sjv30/admin/Html_MakeClassAll2.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
50sjv30/admin/Html_MakeClassAll23.vbs
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
50sjv30/admin/Html_MakeClassAll23.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
50sjv30/admin/Html_MakeClassAlll.vbs
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
50sjv30/admin/Html_MakeClassAlll.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
50sjv30/admin/Left.js
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
50sjv30/admin/Left.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
50sjv30/admin/Logout.asp
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
50sjv30/admin/Logout.asp
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
50sjv30/admin/Main.vbs
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
50sjv30/admin/Main.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
50sjv30/admin/Manage.asp
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
50sjv30/admin/Manage.asp
Resource
win10v2004-20240708-en
Behavioral task
behavioral21
Sample
50sjv30/admin/addflash.vbs
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
50sjv30/admin/addflash.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
50sjv30/admin/addflash.vbs
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
50sjv30/admin/addflash.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
50sjv30/admin/alldata.vbs
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
50sjv30/admin/alldata.vbs
Resource
win10v2004-20240708-en
Behavioral task
behavioral27
Sample
50sjv30/admin/checklogin.vbs
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
50sjv30/admin/checklogin.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral29
Sample
50sjv30/admin/class.vbs
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
50sjv30/admin/class.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral31
Sample
50sjv30/admin/conn.vbs
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
50sjv30/admin/conn.vbs
Resource
win10v2004-20240704-en
General
-
Target
2e2e4ca5c7bb8a36bb96c751714d7802_JaffaCakes118
-
Size
875KB
-
MD5
2e2e4ca5c7bb8a36bb96c751714d7802
-
SHA1
99a7ba4ff94b3b394bf06bc4a60609e2088e5fce
-
SHA256
2d84228081a20b6921a7d7d36862a48c920da03f87e7475d54d39cc4bb2917c4
-
SHA512
db0b44b3a4de7d894a9a70351cb6bf34cc6266a63530a6fbca4d33f941253e97f0fdb957dbe752a0580f6e6b2b3067f017ea614d532e5c809e693a4dc12130d7
-
SSDEEP
24576:k6cQAx1xxoSG0fe7vBROEiLeHPwse206l0PUqBJOdbGAeNva:kRQeodljkLoPwdX6oUqTOpG1c
Malware Config
Signatures
Files
-
2e2e4ca5c7bb8a36bb96c751714d7802_JaffaCakes118.rar
-
50sjv30/3html.htm.html
-
50sjv30/admin/CheckPost.asp.vbs
-
50sjv30/admin/Html_MakeClassAll.asp.html
-
50sjv30/admin/Html_MakeClassAll2.asp.vbs
-
50sjv30/admin/Html_MakeClassAll23.asp.vbs
-
50sjv30/admin/Html_MakeClassAlll.asp.vbs
-
50sjv30/admin/Images/adminbg.gif.gif
-
50sjv30/admin/Images/mp3.gif.gif
-
50sjv30/admin/Images/search2.gif.gif
-
50sjv30/admin/Images/title.gif.gif
-
50sjv30/admin/Left.asp.js
-
50sjv30/admin/Logout.asp
-
50sjv30/admin/Main.asp.vbs
-
50sjv30/admin/Manage.asp
-
50sjv30/admin/addflash.asp.vbs
-
50sjv30/admin/addflash.asp1.vbs
-
50sjv30/admin/alldata.asp.vbs
-
50sjv30/admin/checklogin.asp.vbs
-
50sjv30/admin/class.asp.vbs
-
50sjv30/admin/conn.asp.vbs
-
50sjv30/admin/cs.asp.vbs
-
50sjv30/admin/dellujing.asp.vbs
-
50sjv30/admin/deluser.asp.vbs
-
50sjv30/admin/editflash.asp.vbs
-
50sjv30/admin/error.asp.vbs
-
50sjv30/admin/fabu.asp.vbs
-
50sjv30/admin/flash.asp.vbs
-
50sjv30/admin/flashurl.asp
-
50sjv30/admin/gengxinall.asp.vbs
-
50sjv30/admin/hits.asp.js
-
50sjv30/admin/hostsearch.asp.vbs
-
50sjv30/admin/hostsearch2.asp.vbs
-
50sjv30/admin/html_makeclass.asp.vbs
-
50sjv30/admin/html_makeclass2.asp.html
-
50sjv30/admin/html_makeflash.asp
-
50sjv30/admin/html_makeflash2.asp.vbs
-
50sjv30/admin/html_makeflash3.asp.vbs
-
50sjv30/admin/html_makeflash4.asp.vbs
-
50sjv30/admin/html_makeflashall.asp.vbs
-
50sjv30/admin/html_makeflashall_all.asp
-
50sjv30/admin/html_makeindex.asp.vbs
-
50sjv30/admin/html_makemp3.asp
-
50sjv30/admin/html_makemp32.asp.vbs
-
50sjv30/admin/html_makemp33.asp.vbs
-
50sjv30/admin/html_makemp3all.asp
-
50sjv30/admin/html_makemp3all_all.asp
-
50sjv30/admin/inc/Head.Fix
-
50sjv30/admin/inc/NumCode.asp.vbs
-
50sjv30/admin/inc/STYLE3.CSS
-
50sjv30/admin/inc/Style.css
-
50sjv30/admin/inc/body.Fix
-
50sjv30/admin/inc/css.css
-
50sjv30/admin/inc/md5.asp.vbs
-
50sjv30/admin/inc/style2.css
-
50sjv30/admin/inc/wangguan.asp
-
50sjv30/admin/index.asp.html
-
50sjv30/admin/index_mb.asp.vbs
-
50sjv30/admin/index_mb1.asp.vbs
-
50sjv30/admin/index_mb2.asp.vbs
-
50sjv30/admin/index_mb3.asp.vbs
-
50sjv30/admin/js.asp.vbs
-
50sjv30/admin/js/Function.js.js
-
50sjv30/admin/js/banner.js
-
50sjv30/admin/js/banner.txt
-
50sjv30/admin/js/bt.js
-
50sjv30/admin/js/bt.txt
-
50sjv30/admin/js/cai.htc.js
-
50sjv30/admin/js/f.js
-
50sjv30/admin/js/f.txt.html
-
50sjv30/admin/js/fbanner.js
-
50sjv30/admin/js/fbt.js
-
50sjv30/admin/js/ftop.js
-
50sjv30/admin/js/md.js
-
50sjv30/admin/js/md.txt
-
50sjv30/admin/js/sbanner.js
-
50sjv30/admin/js/stop.js
-
50sjv30/admin/js/stop.txt.html
-
50sjv30/admin/js/tj.js
-
50sjv30/admin/js/top.js
-
50sjv30/admin/js/top.txt
-
50sjv30/admin/js/tophits.js
-
50sjv30/admin/js/topnews.js
-
50sjv30/admin/lujing.asp.vbs
-
50sjv30/admin/menus.js
-
50sjv30/admin/moban.asp.vbs
-
50sjv30/admin/saveclass.asp.vbs
-
50sjv30/admin/savefabu.asp.vbs
-
50sjv30/admin/saveflash.asp
-
50sjv30/admin/saveflasht.asp
-
50sjv30/admin/savexitong.asp.vbs
-
50sjv30/admin/sc.asp.vbs
-
50sjv30/admin/sc2.asp.vbs
-
50sjv30/admin/scmp3.asp.vbs
-
50sjv30/admin/tophits.asp.vbs
-
50sjv30/admin/topnews.asp.vbs
-
50sjv30/admin/upload.asp.vbs
-
50sjv30/admin/upload111.asp.vbs
-
50sjv30/admin/upload222.asp.vbs
-
50sjv30/admin/upload_inc.asp.html .vbs polyglot
-
50sjv30/admin/user.asp.vbs
-
50sjv30/admin/xitong.asp.vbs
-
50sjv30/admin/yangzheng.asp.vbs
-
50sjv30/admin/yangzheng2.asp.vbs
-
50sjv30/admin/yangzheng3.asp.vbs
-
50sjv30/admin/原html_makeclass.asp.vbs
-
50sjv30/class/1_1.htm.html
-
50sjv30/class/1_2.htm.html .js polyglot
-
50sjv30/class/2_1.htm.html
-
50sjv30/class/3_1.htm.html
-
50sjv30/class/3_2.htm.html .js polyglot
-
50sjv30/class/4_1.htm.html
-
50sjv30/class/5_1.htm.html .js polyglot
-
50sjv30/class/pic/left_a1.gif.gif
-
50sjv30/class/pic/left_a2.gif.gif
-
50sjv30/class/pic/mp3.gif.gif
-
50sjv30/class/pic/mp3.psd
-
50sjv30/class/pic/yylb.gif.gif
-
50sjv30/class/pic/未标题-2.gif.gif
-
50sjv30/conn.asp.vbs
-
50sjv30/data/#50sj.mdb
-
50sjv30/flash/1.htm.html .js polyglot
-
50sjv30/flash/10.htm.html .js polyglot
-
50sjv30/flash/11.htm.html .js polyglot
-
50sjv30/flash/12.htm.html .js polyglot
-
50sjv30/flash/13.htm.html .js polyglot
-
50sjv30/flash/14.htm.html .js polyglot
-
50sjv30/flash/15.htm.html .js polyglot
-
50sjv30/flash/16.htm.html .js polyglot
-
50sjv30/flash/17.htm.html .js polyglot
-
50sjv30/flash/18.htm.html .js polyglot
-
50sjv30/flash/19.htm.html .js polyglot
-
50sjv30/flash/2.htm.html .js polyglot
-
50sjv30/flash/3.htm.html .js polyglot
-
50sjv30/flash/4.htm.html .js polyglot
-
50sjv30/flash/5.htm.html .js polyglot
-
50sjv30/flash/6.htm.html .js polyglot
-
50sjv30/flash/7.htm.html .js polyglot
-
50sjv30/flash/8.htm.html .js polyglot
-
50sjv30/flash/9.htm.html .js polyglot
-
50sjv30/image/1.gif.gif
-
50sjv30/image/2.gif.gif
-
50sjv30/image/3.gif.gif
-
50sjv30/image/Nophoto.gif.gif
-
50sjv30/image/bg1.gif.gif
-
50sjv30/image/bg11.gif.gif
-
50sjv30/image/bgw.gif.gif
-
50sjv30/image/botton1.gif.gif
-
50sjv30/image/botton2.gif.gif
-
50sjv30/image/botton3.gif.gif
-
50sjv30/image/botton4.gif.gif
-
50sjv30/image/index.css
-
50sjv30/image/index1.css
-
50sjv30/image/inpic_81.gif.gif
-
50sjv30/image/inpic_82.gif.gif
-
50sjv30/image/inpic_83.gif.gif
-
50sjv30/image/logo.gif.gif
-
50sjv30/image/rm.gif.gif
-
50sjv30/image/searchform.js.js
-
50sjv30/image/searchform2.js.js
-
50sjv30/image/searh.gif.gif
-
50sjv30/img/background1.jpg.jpg
-
50sjv30/img/background2.jpg.jpg
-
50sjv30/img/background3.jpg.jpg
-
50sjv30/img/background4.jpg.jpg
-
50sjv30/img/background5.jpg.jpg
-
50sjv30/img/css.css
-
50sjv30/img/dj.gif.gif
-
50sjv30/img/mp3.css
-
50sjv30/img/play.jpg.jpg
-
50sjv30/img/rm.gif.gif
-
50sjv30/inc/cssl.css
-
50sjv30/inc/lrc_Media.js.js
-
50sjv30/inc/upfile1.asp.vbs
-
50sjv30/inc/upload1.asp.html
-
50sjv30/inc/upload1.inc.vbs
-
50sjv30/index.htm.html
-
50sjv30/js/Function.js.js
-
50sjv30/js/background.js.js
-
50sjv30/js/banner.js
-
50sjv30/js/banner.txt
-
50sjv30/js/bt.js
-
50sjv30/js/bt.txt
-
50sjv30/js/cai.htc.js
-
50sjv30/js/f.js
-
50sjv30/js/f.txt.html
-
50sjv30/js/fbanner.js
-
50sjv30/js/fbt.js
-
50sjv30/js/ftop.js
-
50sjv30/js/inc.js.js
-
50sjv30/js/md.js
-
50sjv30/js/md.txt
-
50sjv30/js/sbanner.js
-
50sjv30/js/stop.js
-
50sjv30/js/stop.txt.html
-
50sjv30/js/tj.js
-
50sjv30/js/top.js
-
50sjv30/js/top.txt
-
50sjv30/js/tophits.js
-
50sjv30/js/topnews.js
-
50sjv30/mp3/1.htm.html .js polyglot
-
50sjv30/mp3/10.htm.html .js polyglot
-
50sjv30/mp3/11.htm.html .js polyglot
-
50sjv30/mp3/12.htm.html .js polyglot
-
50sjv30/mp3/13.htm.html .js polyglot
-
50sjv30/mp3/14.htm.html .js polyglot
-
50sjv30/mp3/15.htm.html .js polyglot
-
50sjv30/mp3/16.htm.html .js polyglot
-
50sjv30/mp3/17.htm.html .js polyglot
-
50sjv30/mp3/18.htm.html .js polyglot
-
50sjv30/mp3/19.htm.html .js polyglot
-
50sjv30/mp3/2.htm.html .js polyglot
-
50sjv30/mp3/3.htm.html .js polyglot
-
50sjv30/mp3/4.htm.html .js polyglot
-
50sjv30/mp3/5.htm.html .js polyglot
-
50sjv30/mp3/6.htm.html .js polyglot
-
50sjv30/mp3/7.htm.html .js polyglot
-
50sjv30/mp3/8.htm.html .js polyglot
-
50sjv30/mp3/9.htm.html .js polyglot
-
50sjv30/mp3/img/mp3.css
-
50sjv30/mp3/img/rm.gif.gif
-
50sjv30/mp3/sf_200833203621.txt
-
50sjv30/mp3/sf_20083320517.txt
-
50sjv30/mp3/sf_200833205427.txt
-
50sjv30/mp3/sf_200833223954.txt
-
50sjv30/mp3/sf_200835182330.txt
-
50sjv30/mp3/sf_20083518729.txt
-
50sjv30/mp3/sf_200835195913.txt
-
50sjv30/mp3/sf_200835215631.txt
-
50sjv30/mp3/sf_200836211347.txt
-
50sjv30/mp3/sf_200837193627.txt
-
50sjv30/mp3/sf_200837194420.txt
-
50sjv30/mp3/sf_20083720409.txt
-
50sjv30/mp3/sf_20083720458.txt
-
50sjv30/mp3/sf_200837204928.txt
-
50sjv30/mp3/sf_200837213210.txt
-
50sjv30/mp3/sf_200837214526.txt
-
50sjv30/mp3/sf_20083722592.txt
-
50sjv30/mp3/sf_20083823453.txt
-
50sjv30/mp3/sf_20083904241.txt
-
50sjv30/mp3/sf_2008391343.txt
-
50sjv30/pic/background1.jpg.jpg
-
50sjv30/pic/background2.jpg.jpg
-
50sjv30/pic/background3.jpg.jpg
-
50sjv30/pic/background4.jpg.jpg
-
50sjv30/pic/background5.jpg.jpg
-
50sjv30/pic/left_a1.gif.gif
-
50sjv30/pic/left_a2.gif.gif
-
50sjv30/pic/li-2.gif.gif
-
50sjv30/pic/mp3.gif.gif
-
50sjv30/pic/so.gif.gif
-
50sjv30/pic/top_bg.gif.gif
-
50sjv30/pic/top_logo.jpg.jpg
-
50sjv30/pic/yyss.gif.gif
-
50sjv30/search.asp.vbs
-
50sjv30/style.css
-
50sjv30/top.htm
-
50sjv30/新云软件.url.url
-
50sjv30/说明.txt