Static task
static1
Behavioral task
behavioral1
Sample
525a/footer.js
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
525a/footer.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
525a/lock.js
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
525a/lock.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
525a/rmplay.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
525a/rmplay.js
Resource
win10v2004-20240709-en
General
-
Target
4713004c66453a10b0446e31c4f66980_JaffaCakes118
-
Size
152KB
-
MD5
4713004c66453a10b0446e31c4f66980
-
SHA1
bc60095e9e9af5b2f37a3cee754338172a3f70ac
-
SHA256
025ee0b84db831c37610ca2f27583ef2e23bb4482cd9fe648dde84cb36ab46ff
-
SHA512
7585e045409a9dbf641e7d53fe27f6aed78d196a1a6eaab971e4528e3981c04ac3685ea09748972a18b9d7672c2beabbc252d05f7529e4e09370a6c0f0d15173
-
SSDEEP
3072:BPL2MNIpBh0kUCjPUiyfSo1SzqsulT1qZpcHeQJx9TrLEVrmmmSYIsqsmLM:Bj2MNKikUkxyao1S2suloIeC1rLLVhqS
Malware Config
Signatures
Files
-
4713004c66453a10b0446e31c4f66980_JaffaCakes118.rar
-
525a/cont.php
-
525a/cont/山崩地裂-7-cont
-
525a/cont/打电话s-8-cont
-
525a/cont/神奇四侠-5-cont
-
525a/data/山崩地裂-7
-
525a/data/打电话s-8
-
525a/data/神奇四侠-5
-
525a/flplay.php
-
525a/footer.php.js
-
525a/haohao.php
-
525a/header.php
-
525a/img/0.gif.gif
-
525a/img/12.gif.gif
-
525a/img/ARROW.gif.gif
-
525a/img/back.gif.gif
-
525a/img/bg.gif.gif
-
525a/img/bg1.gif.gif
-
525a/img/flash.gif.gif
-
525a/img/liangdian.gif.gif
-
525a/img/liangdian.jpg.jpg
-
525a/img/lmhengfu2.jpg.jpg
-
525a/img/login.gif.gif
-
525a/img/more2.gif.gif
-
525a/img/mpeg.gif.gif
-
525a/img/realplayer.gif
-
525a/img/rm.gif.gif
-
525a/img/star.gif.gif
-
525a/img/tablebg.gif.gif
-
525a/img/tdbg.gif.gif
-
525a/img/wma.gif.gif
-
525a/img/z2.jpg.jpg
-
525a/img/使用说明.txt
-
525a/index.php.html .js polyglot
-
525a/index_info.php
-
525a/indexaa.php
-
525a/info.txt
-
525a/info/info.txt
-
525a/ip.php
-
525a/ipdata/0.txt
-
525a/ipdata/10.txt
-
525a/ipdata/202.txt
-
525a/ipdata/210.txt
-
525a/ipdata/61.txt
-
525a/ipdata/ip.txt
-
525a/lock.js.js
-
525a/log/60.20.140.184
-
525a/login.php
-
525a/mess.php
-
525a/msplay.php
-
525a/php.php
-
525a/post.php
-
525a/reg_user.php
-
525a/rmplay.php.js
-
525a/sys.php
-
525a/top.php
-
525a/user/525a.php
-
525a/view.php
-
525a/下载说明.htm.html .js polyglot
-
525a/使用说明.txt