Overview
overview
3Static
static
1cnscu.cn/ADD.asp
windows7-x64
3cnscu.cn/ADD.asp
windows10-2004-x64
3cnscu.cn/ADDLINK.vbs
windows7-x64
1cnscu.cn/ADDLINK.vbs
windows10-2004-x64
1cnscu.cn/A...LY.vbs
windows7-x64
1cnscu.cn/A...LY.vbs
windows10-2004-x64
1cnscu.cn/A...CK.vbs
windows7-x64
1cnscu.cn/A...CK.vbs
windows10-2004-x64
1cnscu.cn/A...NN.vbs
windows7-x64
1cnscu.cn/A...NN.vbs
windows10-2004-x64
1cnscu.cn/A...EX.asp
windows7-x64
3cnscu.cn/A...EX.asp
windows10-2004-x64
3cnscu.cn/A...D5.vbs
windows7-x64
1cnscu.cn/A...D5.vbs
windows10-2004-x64
1cnscu.cn/A...LE.vbs
windows7-x64
1cnscu.cn/A...LE.vbs
windows10-2004-x64
1cnscu.cn/A...AD.vbs
windows7-x64
1cnscu.cn/A...AD.vbs
windows10-2004-x64
1cnscu.cn/A...AD.vbs
windows7-x64
1cnscu.cn/A...AD.vbs
windows10-2004-x64
1cnscu.cn/A...le.vbs
windows7-x64
1cnscu.cn/A...le.vbs
windows10-2004-x64
1cnscu.cn/A...ss.vbs
windows7-x64
1cnscu.cn/A...ss.vbs
windows10-2004-x64
1cnscu.cn/A...in.vbs
windows7-x64
1cnscu.cn/A...in.vbs
windows10-2004-x64
1cnscu.cn/A...bs.vbs
windows7-x64
1cnscu.cn/A...bs.vbs
windows10-2004-x64
1cnscu.cn/A...le.vbs
windows7-x64
1cnscu.cn/A...le.vbs
windows10-2004-x64
1cnscu.cn/A...le.vbs
windows7-x64
1cnscu.cn/A...le.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
cnscu.cn/ADD.asp
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cnscu.cn/ADD.asp
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
cnscu.cn/ADDLINK.vbs
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
cnscu.cn/ADDLINK.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
cnscu.cn/ADMIN/ADMIN_LY.vbs
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
cnscu.cn/ADMIN/ADMIN_LY.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
cnscu.cn/ADMIN/ASPCHECK.vbs
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
cnscu.cn/ADMIN/ASPCHECK.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
cnscu.cn/ADMIN/CONN.vbs
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
cnscu.cn/ADMIN/CONN.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
cnscu.cn/ADMIN/INDEX.asp
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
cnscu.cn/ADMIN/INDEX.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
cnscu.cn/ADMIN/MD5.vbs
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
cnscu.cn/ADMIN/MD5.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
cnscu.cn/ADMIN/UPFILE.vbs
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
cnscu.cn/ADMIN/UPFILE.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
cnscu.cn/ADMIN/UPLOAD.vbs
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
cnscu.cn/ADMIN/UPLOAD.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
cnscu.cn/ADMIN/UPLOAD.vbs
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
cnscu.cn/ADMIN/UPLOAD.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
cnscu.cn/ADMIN/admin_add_btitle.vbs
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
cnscu.cn/ADMIN/admin_add_btitle.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
cnscu.cn/ADMIN/admin_add_class.vbs
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
cnscu.cn/ADMIN/admin_add_class.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
cnscu.cn/ADMIN/admin_add_main.vbs
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
cnscu.cn/ADMIN/admin_add_main.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
cnscu.cn/ADMIN/admin_bbs.vbs
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
cnscu.cn/ADMIN/admin_bbs.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
cnscu.cn/ADMIN/admin_bbs_file.vbs
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
cnscu.cn/ADMIN/admin_bbs_file.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral31
Sample
cnscu.cn/ADMIN/admin_btitle.vbs
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
cnscu.cn/ADMIN/admin_btitle.vbs
Resource
win10v2004-20240709-en
General
-
Target
4ba69fcdf7bb11175127cdac7e974423_JaffaCakes118
-
Size
103KB
-
MD5
4ba69fcdf7bb11175127cdac7e974423
-
SHA1
1685d64e38b3678e54a965e96dbd8b4a476cbbd9
-
SHA256
f2d5cd47d43d8cad01f104354908b6230c6bbd184a741f473242b3905d04001d
-
SHA512
060e2794921b6dd90bfa128623ce3d6f15540d1fa018479e3fc2ab1fb9b243f5638d306b496fe6478db5100865fda410abce3198b068dc2e16ed7a48bad6805f
-
SSDEEP
3072:ThOG+NWhWKhPP4Cp3CknsWEYyyyhgf6XTM:TIGIqft4gnz+giM
Malware Config
Signatures
Files
-
4ba69fcdf7bb11175127cdac7e974423_JaffaCakes118.rar
-
cnscu.cn/ADD.ASP
-
cnscu.cn/ADDLINK.ASP.vbs
-
cnscu.cn/ADMIN/ADMIN_LY.ASP.vbs
-
cnscu.cn/ADMIN/ASPCHECK.ASP.vbs
-
cnscu.cn/ADMIN/CONN.ASP.vbs
-
cnscu.cn/ADMIN/IMAGES/PICS/NAV_M.GIF.gif
-
cnscu.cn/ADMIN/IMAGES/PICS/TILE_SUB.GIF.gif
-
cnscu.cn/ADMIN/IMAGES/PICS/TITLE.GIF.gif
-
cnscu.cn/ADMIN/IMAGES/PICS/tile_back.gif.gif
-
cnscu.cn/ADMIN/IMAGES/PICS/title_bar.gif.gif
-
cnscu.cn/ADMIN/IMAGES/PICS/title_bg_hide.gif.gif
-
cnscu.cn/ADMIN/IMAGES/PICS/title_bg_quit.gif.gif
-
cnscu.cn/ADMIN/IMAGES/PICS/title_bg_show.gif.gif
-
cnscu.cn/ADMIN/INDEX.ASP
-
cnscu.cn/ADMIN/MD5.ASP.vbs
-
cnscu.cn/ADMIN/UPFILE.ASP.vbs
-
cnscu.cn/ADMIN/UPLOAD.ASP.vbs
-
cnscu.cn/ADMIN/UPLOAD.ASP1##11.vbs
-
cnscu.cn/ADMIN/admin_add_btitle.asp.vbs
-
cnscu.cn/ADMIN/admin_add_class.asp.vbs
-
cnscu.cn/ADMIN/admin_add_main.asp.vbs
-
cnscu.cn/ADMIN/admin_bbs.asp.vbs
-
cnscu.cn/ADMIN/admin_bbs_file.asp.vbs
-
cnscu.cn/ADMIN/admin_body.htm.html .js polyglot
-
cnscu.cn/ADMIN/admin_btitle.asp.vbs
-
cnscu.cn/ADMIN/admin_class.asp.vbs
-
cnscu.cn/ADMIN/admin_config.asp.vbs
-
cnscu.cn/ADMIN/admin_db_backup.asp.vbs
-
cnscu.cn/ADMIN/admin_db_compact.asp.vbs
-
cnscu.cn/ADMIN/admin_db_executesql.asp.vbs
-
cnscu.cn/ADMIN/admin_db_space.asp.vbs
-
cnscu.cn/ADMIN/admin_db_ubackup.asp.vbs
-
cnscu.cn/ADMIN/admin_gonggo.asp.vbs
-
cnscu.cn/ADMIN/admin_index.asp
-
cnscu.cn/ADMIN/admin_link.asp.vbs
-
cnscu.cn/ADMIN/admin_login.asp.vbs
-
cnscu.cn/ADMIN/admin_login_che.asp.vbs
-
cnscu.cn/ADMIN/admin_login_check.asp.vbs
-
cnscu.cn/ADMIN/admin_login_out.asp
-
cnscu.cn/ADMIN/admin_menu.asp.vbs
-
cnscu.cn/ADMIN/admin_show_verifycode.asp
-
cnscu.cn/ADMIN/admin_splitter.htm.html .js polyglot
-
cnscu.cn/ADMIN/admin_title.asp.vbs
-
cnscu.cn/ADMIN/admin_upfile.asp.vbs
-
cnscu.cn/ADMIN/admin_user.asp.vbs
-
cnscu.cn/ADMIN/admin_utitle.asp.vbs
-
cnscu.cn/ADMIN/adminuser.asp.vbs
-
cnscu.cn/ADMIN/upload_5xsoft.inc.html .vbs polyglot
-
cnscu.cn/CONN.ASP.vbs
-
cnscu.cn/D.ASP.vbs
-
cnscu.cn/DATA.ASP
-
cnscu.cn/DOWN.ASP.vbs
-
cnscu.cn/Database/#data.mdb
-
cnscu.cn/GO.ASP.vbs
-
cnscu.cn/GONGGO.ASP.vbs
-
cnscu.cn/KIDFILE.ASP.vbs
-
cnscu.cn/KIDTITLE.ASP.vbs
-
cnscu.cn/LINK.ASP.vbs
-
cnscu.cn/LY.ASP.vbs
-
cnscu.cn/NEWFILE.ASP.vbs
-
cnscu.cn/NEWTITLE.ASP.vbs
-
cnscu.cn/SAVE.ASP.vbs
-
cnscu.cn/SEARCH.ASP.vbs
-
cnscu.cn/TITLE.ASP.vbs
-
cnscu.cn/UBB.ASP.vbs
-
cnscu.cn/UPFILE.ASP.vbs
-
cnscu.cn/VIEW.ASP.vbs
-
cnscu.cn/bbs_add.asp.vbs
-
cnscu.cn/bbs_view.asp.vbs
-
cnscu.cn/index.asp.vbs
-
cnscu.cn/logo.gif.gif
-
cnscu.cn/mycol.asp.vbs
-
cnscu.cn/mycol_do.asp.vbs
-
cnscu.cn/mz.asp
-
cnscu.cn/news.gif.gif
-
cnscu.cn/reg.asp.vbs
-
cnscu.cn/新云软件.url.url
-
cnscu.cn/本程序说明.txt
-
本程序说明.txt
-
舞曲下载中心.url.url