Overview

overview

3

Static

static

1

so/admin.vbs

windows7-x64

1

so/admin.vbs

windows10-2004-x64

1

so/big5.asp

windows7-x64

3

so/big5.asp

windows10-2004-x64

3

so/client.vbs

windows7-x64

1

so/client.vbs

windows10-2004-x64

1

so/config.vbs

windows7-x64

1

so/config.vbs

windows10-2004-x64

1

so/data/zxsoudata.asp

windows7-x64

3

so/data/zxsoudata.asp

windows10-2004-x64

3

so/festival.asp

windows7-x64

3

so/festival.asp

windows10-2004-x64

3

so/getcode.js

windows7-x64

3

so/getcode.js

windows10-2004-x64

3

so/index.asp

windows7-x64

3

so/index.asp

windows10-2004-x64

3

so/js/change.js

windows7-x64

3

so/js/change.js

windows10-2004-x64

3

so/js/getc...pic.js

windows7-x64

3

so/js/getc...pic.js

windows10-2004-x64

3

so/js/search.js

windows7-x64

3

so/js/search.js

windows10-2004-x64

3

so/md5.vbs

windows7-x64

1

so/md5.vbs

windows10-2004-x64

1

so/notice.asp

windows7-x64

3

so/notice.asp

windows10-2004-x64

3

so/rank.vbs

windows7-x64

1

so/rank.vbs

windows10-2004-x64

1

so/search.vbs

windows7-x64

1

so/search.vbs

windows10-2004-x64

1

so/system.asp

windows7-x64

3

so/system.asp

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cb42c4314a573e9b727732d1e44d83f_JaffaCakes118

  • Size

    219KB

  • Sample

    240708-rvzt4swdja

  • MD5

    2cb42c4314a573e9b727732d1e44d83f

  • SHA1

    6fd6d8c646d71e896d513402eb24d649b0239fe2

  • SHA256

    6be8ae20fb8edb5dbdf0f9865d42c6ddad3384cc87914568f26202d72a22fee8

  • SHA512

    43f6eb2a13cabcd58a0ac3c55a3df4db4c9508ee4ce64f3bc115a1cfb5132a33a20a011d4027052d3985bd9ac77ff149af5b021821bf1e5a04ef7661e88ab995

  • SSDEEP

    3072:mG2EALKP62AT1IZZvHLSNflHA1U1GejwQVO8H4YFcY/Syen+kSAoKkvu+i2HiZbf:NsT1iF1U1zjwlEuYqyen+kM2+iXkAt

Score
3/10
execution

Malware Config

Targets

    • Target

      so/admin.asp

    • Size

      18KB

    • MD5

      afc310fc568af2cec6e4c5e535cc5097

    • SHA1

      f06b55f38827983075d07c9f262b2e4473a0637f

    • SHA256

      1551c0299b04b6c3417c682ac92cf13ab596905f1209f428813e4ac97976868a

    • SHA512

      6b238260676af73381ee0750d180cf7461cc869894e0b45e25e08b9db1cc10c27d5728495701a9b7e67b438c2e9588b1112796b813a21461c1fec9ea22527244

    • SSDEEP

      384:JbuxSam6I1oInrTL+fNU5+yOnubQmJSw1Ro8YgeIvbKR+whqobbsP4QBz/5fCBEh:Ji3I2SDuU5+yOnubQWSw1RoBgeIvbKRM

    Score
    1/10
    behavioral1behavioral2

    • Target

      so/big5.asp

    • Size

      1KB

    • MD5

      6c6f0c258c4181cded04d615350c8d45

    • SHA1

      7ef027c5d1adb71b09acf07a25d6f4f057c1251b

    • SHA256

      c8dd99a6fa06da8d7574518c6b4d5d43af36d89d34a427256f9461d31ec898ce

    • SHA512

      6e982e5fe2cbb6d69ed8eb538fb286cf3851c9d34821cb13468e728d39aea64c39e98ffbc105527f360e0ecbfb8b680c64fef70a5f61af4913f71170157002f6

    Score
    3/10
    behavioral3behavioral4

    • Target

      so/client.asp

    • Size

      1KB

    • MD5

      7d225a192bd7b4d8ddd160935269cced

    • SHA1

      f1e475482aad45fe860f0afefc2f4ddf8da91166

    • SHA256

      834a80a3b6dad7bde0f19b23f7f13bfabf927d2809d10ae9aa21d5b42e5ce933

    • SHA512

      7770671a76b224ae07863f2a7638195fba592204281280ef6b9a4bbbbe832995eff06f6710066b8e85e13f403463cea41e6895bdbeba1645fa5e85641396a735

    Score
    1/10
    behavioral5behavioral6

    • Target

      so/config.asp

    • Size

      1KB

    • MD5

      a4ad3b273bd3938027ae490c4c7ed081

    • SHA1

      b40d4d4560e993390562de2b32e5a7212e980962

    • SHA256

      0262fc762d29963a2347625928f2b9e0544b87900e8cb8ca9d585932ca8e4e1a

    • SHA512

      a638236e4c0a20898886247fa574e30091ae722b7c1e680989d92d29495eb9da7efe9afde9551a078f78b08a474a2502488faa1e4d7342d5356a4ab8d463705e

    Score
    1/10
    behavioral7behavioral8

    • Target

      so/data/zxsoudata.asp

    • Size

      204KB

    • MD5

      1e21e55f7aee67aad477f05949a829be

    • SHA1

      c62e6cd05fc87a01f1fb8bf0623a5a4a14af0278

    • SHA256

      72539d44f7c860f6d2871e558f72b15ef9c7877663fe3e5e376d7920385e62e4

    • SHA512

      5c412510d211980795a504677be1df26e776ac90be4b8b3403cc83bd584e3e993c9f6afec9763507f0d80e41b02fd2fe802e13efb97a23299d8930787e92aa49

    • SSDEEP

      768:calVXN9NvNkNGNnNtNRNWf2TcqJYtdmhtApQuiteaC:calFBwmkCC

    Score
    3/10
    behavioral10behavioral9

    • Target

      so/festival.asp

    • Size

      858B

    • MD5

      deb4b4f468f3148d813117476db90a5b

    • SHA1

      965dcf756873708aa5247ff3402318b991652e5e

    • SHA256

      aee73c5dc9779794eb330bad46c82689af5e52eb65994f946890d96000ca86b8

    • SHA512

      90108f2dd918cdc0fe61a2cc3b41fd36b0018bc3b1f4e778d10e72b3ecc9bfa6d6ea4b4a2253f836114c4b980d3b6d52c781ccd95c6f2ac5c44070b3b16ab5fa

    Score
    3/10
    behavioral11behavioral12

    • Target

      so/getcode.asp

    • Size

      23KB

    • MD5

      6081a84ba437a0719f6edacd9ad09299

    • SHA1

      f749b7cd6bf18bdb1fb4088452c5f22a335cdc2d

    • SHA256

      7c4141cf8a23f9f2018b3e49730c681e6c33d95b4037c1b55ba2b08a97ee97e0

    • SHA512

      079ee4955bfe8d820cf6904fdf474f8a2ebc034f1970156b25b12c7129ba1969f6e50f89ba76f077ef8b7f0107a93f71bfc0745a7722b0e12dedcb27dcdccc47

    • SSDEEP

      384:PS2Rt1LEUU5PhXmaYClU43Wp8+wHxSdaLRAnKq060HarIcffYiDQzTUyJ5tCK5dN:PS2R7iPhBYClAGLHg0SKq0zwIwDATL9z

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      so/index.asp

    • Size

      6KB

    • MD5

      d48bee88bc814188b47a4b31285e1559

    • SHA1

      33a5e7d70684953d4ab3bda32953d7996e52a446

    • SHA256

      5e31617f25e032c6cb9bfdc5e2d88167995107964201bae683e705f72f07af1b

    • SHA512

      0525c2434a61b0c0a7abaaf96c73567a01860df0d38d726c2c3f17a248cf7fe4de7ab0daf8268b3b181b607d11038d11a8096cc896df060a750bec768e02ec13

    • SSDEEP

      96:J23s158jXFL3fHlzF/s+K72YneWN6pTipeMMj6JpcIAbDdo3avbAGeDHWra:J2815E17PlRkaHPAPPrae

    Score
    3/10
    behavioral15behavioral16

    • Target

      so/js/change.js

    • Size

      10KB

    • MD5

      00c51d44031408ac053125d4202d14e4

    • SHA1

      7434823a35eea6e443f9887181344fc6410742fe

    • SHA256

      969605b93933fa290204094290fab9b80f84a82d1f513cf50997aab871c298db

    • SHA512

      f686150667960d38010b0937c9e474f213392b1043fa4df253fb99e13a77f831bd000ee14d6732ed45976bac0600ec07cf734255cb20b01e8fb9f475408871e7

    • SSDEEP

      192:miNkitbHmOU3FtQmIT8tvZiDsf7Qc0OEZctTIFVx+5RUtrnc6ihpuO/Oh:DN7ZnU3Ftrg8s4Qy8Q5IgrpuO/Oh

    Score
    3/10
    execution
    behavioral17behavioral18

    • Target

      so/js/getcode_showpic.js

    • Size

      2KB

    • MD5

      23077b32994a3f75f93c9d9487d9057f

    • SHA1

      46163aca227aa51a332b2346eacdd5c2f3e42fdf

    • SHA256

      66dc48f50c82b79c050bedebc86a3d4486fae7c46026856e531bb8cfb04875cc

    • SHA512

      db3b4e3a2dd23280adb19bd546a06e603602b26e0b51c5b04f260982b9520ffb96bc39b1cfa0a587095909ad9b9445a2cf2bf1736ef01ecfdee4ddb3f82f86ba

    Score
    3/10
    execution
    behavioral19behavioral20

    • Target

      so/js/search.js

    • Size

      1KB

    • MD5

      bafb6566184ab1fddaf5dd4c0608a7da

    • SHA1

      c2ba57c146b203ae327ab954ace017e8c123f71f

    • SHA256

      c1e63ca81fc4ddae1d57c952b83677d246fc29d330b3f3866d0181a90cd36b4a

    • SHA512

      6dc4a4d043b22a2727f8e10f991a643ab77b84fac0002911826137d94da261cf4684baa89285b24b6888cef307ac6ec5f34ec4f038f9e96c13709c7bb85aa9e2

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      so/md5.asp

    • Size

      11KB

    • MD5

      e7660fea390510f19f2282656d92a63b

    • SHA1

      8d6b6b89394591c43b6f3b81fc3c627f3232d3a6

    • SHA256

      d219e411937c30d7765fdffead09c0c9bb92b3a3a3c54da7deb212da6a9ca2f3

    • SHA512

      2e30b84293d08dda64e09e58f340157cd439dc0fa709af966977625029d18e285d07f95c35734cac4648262c2f7fcc056f34fcd5de82af339c231924cca6b463

    • SSDEEP

      192:fvioOa+9Y7D8MzYn4zVnt0fjj/+jGguhFYv0VjoVM4eaaYxkZDd:OSFYOgFYvWjoVnF9xKDd

    Score
    1/10
    behavioral23behavioral24

    • Target

      so/notice.asp

    • Size

      1KB

    • MD5

      bcda6e10848200607311a9fe3b84031f

    • SHA1

      d42d5f11b2509efd98cd0a226429cfe3aca24213

    • SHA256

      87a9490fdae97808e4dae93cc78d870ba2fe4f39b28a7aa3162b8a784aa83c72

    • SHA512

      b6ccb6e598bb4b048986a1698f731e76e699e956194e25db5be24e5bb0287fc953f1e037dc42c26417604d7d6ac27911c22480e53761a9a4891d4e1f0863bb3d

    Score
    3/10
    behavioral25behavioral26

    • Target

      so/rank.asp

    • Size

      3KB

    • MD5

      456da2d30e3b25ba5d7e0a7f266fffe0

    • SHA1

      0a43376fb94208885deb88c1d81811ab09f70932

    • SHA256

      c335c55b435e07cff8573e49069bc5ff250e992048bc2602e261712b6eb630a7

    • SHA512

      9b92d209a7ace052d3fe2aae897f18a795044ac7e123021697f131524698f887b27668bba84350fc777622d0e77060cddf3b88f7b902e8cb5ca272cc46289cec

    Score
    1/10
    behavioral27behavioral28

    • Target

      so/search.asp

    • Size

      1KB

    • MD5

      bc1c24b2d4440711f47bf196d04a86da

    • SHA1

      7cc9de84ea640df38d1dbfcebb1dd2edb892dd02

    • SHA256

      ad6a8deebc992d9c1977817a6791f4334677f7e3ccebb1d594a4d7636e9b7e7d

    • SHA512

      4e0ae7a2e0bf43de717211ca60458bd351f8013d1d82f6c0d76ea7b7222c5a97a7adb3df1687c8de9032781019159db7d259021b947aa0742d1f3bdd6944564b

    Score
    1/10
    behavioral29behavioral30

    • Target

      so/system.asp

    • Size

      1KB

    • MD5

      2730d01fe9c2a5e3f5b29052b73a9799

    • SHA1

      6ad830e1110c3e4295b6a8e3c6536f9c20a654ac

    • SHA256

      e302574528fda5e50a17f539a9b2c3ffa3a3dcadb60492b8a7481f5ad31499c6

    • SHA512

      50cd2a12b1c63ad1be8ad53fe21942e489f5bd7a4b1cb7d4cd95f1188d11cd6d6f7498d8533d0e9bdc44215cc77b0bb76b9ec8d67c8cf5c39794271048e27148

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
3/10

behavioral32

Score
3/10