Overview
overview
3Static
static
1sz100/aadmin.vbs
windows7-x64
1sz100/aadmin.vbs
windows10-2004-x64
1sz100/aboutus.asp
windows7-x64
3sz100/aboutus.asp
windows10-2004-x64
3sz100/admin.vbs
windows7-x64
1sz100/admin.vbs
windows10-2004-x64
1sz100/admin/admin.asp
windows7-x64
3sz100/admin/admin.asp
windows10-2004-x64
3sz100/admi...ta.vbs
windows7-x64
1sz100/admi...ta.vbs
windows10-2004-x64
1sz100/admi...ta.vbs
windows7-x64
1sz100/admi...ta.vbs
windows10-2004-x64
1sz100/admi...ta.vbs
windows7-x64
1sz100/admi...ta.vbs
windows10-2004-x64
1sz100/admi...er.vbs
windows7-x64
1sz100/admi...er.vbs
windows10-2004-x64
1sz100/admi...ql.vbs
windows7-x64
1sz100/admi...ql.vbs
windows10-2004-x64
1sz100/admi...it.vbs
windows7-x64
1sz100/admi...it.vbs
windows10-2004-x64
1sz100/admi...ge.vbs
windows7-x64
1sz100/admi...ge.vbs
windows10-2004-x64
1sz100/admi...in.vbs
windows7-x64
1sz100/admi...in.vbs
windows10-2004-x64
1sz100/admi...ig.vbs
windows7-x64
1sz100/admi...ig.vbs
windows10-2004-x64
1sz100/admin/conn.vbs
windows7-x64
1sz100/admin/conn.vbs
windows10-2004-x64
1sz100/admin/count.vbs
windows7-x64
1sz100/admin/count.vbs
windows10-2004-x64
1sz100/admi...in.vbs
windows7-x64
1sz100/admi...in.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
sz100/aadmin.vbs
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
sz100/aadmin.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
sz100/aboutus.asp
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
sz100/aboutus.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
sz100/admin.vbs
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
sz100/admin.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
sz100/admin/admin.asp
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
sz100/admin/admin.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
sz100/admin/admin_Compressdata.vbs
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
sz100/admin/admin_Compressdata.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
sz100/admin/admin_Redata.vbs
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
sz100/admin/admin_Redata.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
sz100/admin/admin_backupdata.vbs
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
sz100/admin/admin_backupdata.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
sz100/admin/admin_server.vbs
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
sz100/admin/admin_server.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
sz100/admin/admin_sql.vbs
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
sz100/admin/admin_sql.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
sz100/admin/adminedit.vbs
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
sz100/admin/adminedit.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
sz100/admin/amanage.vbs
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
sz100/admin/amanage.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
sz100/admin/chklogin.vbs
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
sz100/admin/chklogin.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
sz100/admin/config.vbs
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
sz100/admin/config.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
sz100/admin/conn.vbs
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
sz100/admin/conn.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
sz100/admin/count.vbs
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
sz100/admin/count.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
sz100/admin/deladmin.vbs
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
sz100/admin/deladmin.vbs
Resource
win10v2004-20240709-en
General
-
Target
4a073afcab004c8ba93ddbea55aa41ee_JaffaCakes118
-
Size
424KB
-
MD5
4a073afcab004c8ba93ddbea55aa41ee
-
SHA1
16a679cb682ccb33c8c6ce9b070bca6f82122000
-
SHA256
4e26924ba167b97b974dd0cba7a52eaceafe6e7ab5a6d146549db6c413c59e53
-
SHA512
23067772f47a4c3c3076e5c9818a37aafe4502da13913a46258e0b1e121c41699e3727a89bef25b04d289c2036a9f127a45c9038e4c6c6ba4e61e0a8ca2cfb6f
-
SSDEEP
12288:fHEKdLxxx6ruHIYhSdFbEuLXg24db+PigieDAp:FUruoTdFbDE2K+Psp
Malware Config
Signatures
Files
-
4a073afcab004c8ba93ddbea55aa41ee_JaffaCakes118.rar
-
sz100/aadmin.asp.vbs
-
sz100/aboutus.asp
-
sz100/admin.asp.vbs
-
sz100/admin/admin.asp
-
sz100/admin/admin_Compressdata.asp.vbs
-
sz100/admin/admin_Redata.asp.vbs
-
sz100/admin/admin_backupdata.asp.vbs
-
sz100/admin/admin_server.asp.vbs
-
sz100/admin/admin_sql.asp.vbs
-
sz100/admin/adminedit.asp.vbs
-
sz100/admin/amanage.asp.vbs
-
sz100/admin/chklogin.asp.vbs
-
sz100/admin/config.asp.vbs
-
sz100/admin/conn.asp.vbs
-
sz100/admin/count.asp.vbs
-
sz100/admin/deladmin.asp.vbs
-
sz100/admin/delfl.asp.vbs
-
sz100/admin/dellink.asp.vbs
-
sz100/admin/delweb.asp.vbs
-
sz100/admin/delwz.asp.vbs
-
sz100/admin/editfl.asp.vbs
-
sz100/admin/editlink.asp.vbs
-
sz100/admin/editweb.asp.vbs
-
sz100/admin/editwz.asp.vbs
-
sz100/admin/end.asp
-
sz100/admin/errlink.asp.vbs
-
sz100/admin/error.asp
-
sz100/admin/errwz.asp.vbs
-
sz100/admin/fl.asp.vbs
-
sz100/admin/index.asp.vbs
-
sz100/admin/lanmu.asp.vbs
-
sz100/admin/link.asp.vbs
-
sz100/admin/linkvip.asp.vbs
-
sz100/admin/logout.asp
-
sz100/admin/manage.asp.vbs
-
sz100/admin/menu.asp.js
-
sz100/admin/menu2.asp.js
-
sz100/admin/newfl.asp.vbs
-
sz100/admin/newlink.asp.vbs
-
sz100/admin/newwz.asp.vbs
-
sz100/admin/num.asp
-
sz100/admin/shenfl.asp.vbs
-
sz100/admin/shenlink.asp.vbs
-
sz100/admin/shenwz.asp.vbs
-
sz100/admin/top.asp.html .js polyglot
-
sz100/admin/url_add.asp.vbs
-
sz100/admin/user_manager.asp.vbs
-
sz100/admin/web.asp.vbs
-
sz100/admin/welcome.asp.vbs
-
sz100/admin/wz.asp.vbs
-
sz100/cc.htm.html
-
sz100/contact.asp
-
sz100/data/#lansee_wangzhi.mdb
-
sz100/email.asp.vbs
-
sz100/errlink.asp.vbs
-
sz100/errwz.asp.vbs
-
sz100/guestbook.asp.vbs
-
sz100/images/01.swf
-
sz100/images/1.gif.gif
-
sz100/images/10.gif.gif
-
sz100/images/11.gif.gif
-
sz100/images/2.gif.gif
-
sz100/images/3.gif.gif
-
sz100/images/6.gif.gif
-
sz100/images/Delete.gif.gif
-
sz100/images/ad01.jpg.jpg
-
sz100/images/ad02.jpg.jpg
-
sz100/images/ban.gif.gif
-
sz100/images/bg.gif.gif
-
sz100/images/bg_01.gif.gif
-
sz100/images/bg_0101.gif.gif
-
sz100/images/bg_011.gif.gif
-
sz100/images/bg_02.gif.gif
-
sz100/images/bg_03.gif.gif
-
sz100/images/bg_10.gif.gif
-
sz100/images/bg_11.gif.gif
-
sz100/images/bg_gao.gif.gif
-
sz100/images/bottom.gif.gif
-
sz100/images/boy.gif.gif
-
sz100/images/cha.gif.gif
-
sz100/images/city.gif.gif
-
sz100/images/commend_arrow.gif.gif
-
sz100/images/commend_round.gif.gif
-
sz100/images/dj_bg.gif.gif
-
sz100/images/edit.gif.gif
-
sz100/images/email.gif.gif
-
sz100/images/first.gif.gif
-
sz100/images/fu.gif.gif
-
sz100/images/girl.gif.gif
-
sz100/images/gt.gif.gif
-
sz100/images/home.gif.gif
-
sz100/images/ip.gif.gif
-
sz100/images/left_01.gif.gif
-
sz100/images/link2.gif.gif
-
sz100/images/logo.gif.gif
-
sz100/images/lt.gif.gif
-
sz100/images/nav.gif.gif
-
sz100/images/none.gif.gif
-
sz100/images/pic_arrow_01.gif.gif
-
sz100/images/qq.gif.gif
-
sz100/images/reply.gif.gif
-
sz100/images/right_01.gif.gif
-
sz100/images/right_02.gif.gif
-
sz100/images/right_03.gif.gif
-
sz100/images/s3.gif.gif
-
sz100/images/top1_bg.gif.gif
-
sz100/images/top_bg.gif.gif
-
sz100/images/top_close.gif.gif
-
sz100/images/top_open.gif.gif
-
sz100/images/web.gif.gif
-
sz100/images/weblogo.gif.gif
-
sz100/images/xs01.gif.gif
-
sz100/images/xs010.gif.gif
-
sz100/images/xs02.gif.gif
-
sz100/images/xs03.gif.gif
-
sz100/images/xs04.gif.gif
-
sz100/images/xs05.gif.gif
-
sz100/images/xs06.gif.gif
-
sz100/images/xs07.gif.gif
-
sz100/images/xs08.gif.gif
-
sz100/images/xs09.gif.gif
-
sz100/images/xu_bg.gif.gif
-
sz100/images/yao.gif.gif
-
sz100/inc/TOP009.GIF.gif
-
sz100/inc/TOP010.GIF.gif
-
sz100/inc/cc.htm.html
-
sz100/inc/config.asp.vbs
-
sz100/inc/config0.asp.vbs
-
sz100/inc/config1.asp.vbs
-
sz100/inc/config2.asp.vbs
-
sz100/inc/djcss
-
sz100/inc/link_body.asp.vbs
-
sz100/inc/linkadd_body.asp.vbs
-
sz100/inc/linktop_body.asp.vbs
-
sz100/inc/linkvip_body.asp.vbs
-
sz100/inc/mail.asp
-
sz100/inc/mail0.asp
-
sz100/inc/sc_body.asp.vbs
-
sz100/inc/search.files/css.css
-
sz100/inc/search.files/css02.css
-
sz100/inc/search.files/search.gif.gif
-
sz100/inc/search.files/search.js
-
sz100/inc/search.files/t3.gif.gif
-
sz100/inc/search.htm.html .vbs polyglot
-
sz100/inc/wzadd_body.asp.vbs
-
sz100/index.asp
-
sz100/link.asp
-
sz100/linkadd.asp
-
sz100/linktop.asp
-
sz100/linkvip.asp
-
sz100/mail.gif.gif
-
sz100/mdb.asp.vbs
-
sz100/mouse.ani
-
sz100/sc.asp
-
sz100/search.files/css.css
-
sz100/search.files/css02.css
-
sz100/search.files/search.gif.gif
-
sz100/search.files/search.js
-
sz100/search.files/t3.gif.gif
-
sz100/search.htm.html .vbs polyglot
-
sz100/service.asp.vbs
-
sz100/showlink.asp.vbs
-
sz100/showurl.asp.vbs
-
sz100/tongji/Connections.asp.asp .vbs polyglot
-
sz100/tongji/admin.asp.vbs
-
sz100/tongji/adminadmin.asp.vbs
-
sz100/tongji/bq.asp
-
sz100/tongji/conn.asp.vbs
-
sz100/tongji/count.asp.js
-
sz100/tongji/fycome.asp.vbs
-
sz100/tongji/fyday.asp.vbs
-
sz100/tongji/fydetal.asp.vbs
-
sz100/tongji/fyhour.asp.vbs
-
sz100/tongji/fymonth.asp.vbs
-
sz100/tongji/fysystem.asp.vbs
-
sz100/tongji/fyurl.asp.vbs
-
sz100/tongji/fyweek.asp.vbs
-
sz100/tongji/image/announce.gif.gif
-
sz100/tongji/image/b1.gif.gif
-
sz100/tongji/image/b2.gif.gif
-
sz100/tongji/index.asp.vbs
-
sz100/tongji/login.asp
-
sz100/tongji/logout.asp.js
-
sz100/tongji/stat.asp.vbs
-
sz100/tongji/style.css.html
-
sz100/tongji/top.asp.vbs
-
sz100/wzadd.asp
-
sz100/下载说明.htm.html .js polyglot