Overview
overview
3Static
static
1MSMAX4.0/A...nn.vbs
windows7-x64
1MSMAX4.0/A...nn.vbs
windows10-2004-x64
1MSMAX4.0/A...d5.vbs
windows7-x64
1MSMAX4.0/A...d5.vbs
windows10-2004-x64
1MSMAX4.0/A...-4.asp
windows7-x64
3MSMAX4.0/A...-4.asp
windows10-2004-x64
3MSMAX4.0/A...me.vbs
windows7-x64
1MSMAX4.0/A...me.vbs
windows10-2004-x64
1MSMAX4.0/A...on.vbs
windows7-x64
1MSMAX4.0/A...on.vbs
windows10-2004-x64
1MSMAX4.0/A...it.vbs
windows7-x64
1MSMAX4.0/A...it.vbs
windows10-2004-x64
1MSMAX4.0/A...d.html
windows7-x64
1MSMAX4.0/A...d.html
windows10-2004-x64
1MSMAX4.0/A...t.html
windows7-x64
1MSMAX4.0/A...t.html
windows10-2004-x64
1MSMAX4.0/A...cle.js
windows7-x64
3MSMAX4.0/A...cle.js
windows10-2004-x64
3MSMAX4.0/A...ss.vbs
windows7-x64
1MSMAX4.0/A...ss.vbs
windows10-2004-x64
1MSMAX4.0/A...st.vbs
windows7-x64
1MSMAX4.0/A...st.vbs
windows10-2004-x64
1MSMAX4.0/A...st.vbs
windows7-x64
1MSMAX4.0/A...st.vbs
windows10-2004-x64
1MSMAX4.0/A...ex.vbs
windows7-x64
1MSMAX4.0/A...ex.vbs
windows10-2004-x64
1MSMAX4.0/A...ar.vbs
windows7-x64
1MSMAX4.0/A...ar.vbs
windows10-2004-x64
1MSMAX4.0/ADMIN/bj.asp
windows7-x64
3MSMAX4.0/ADMIN/bj.asp
windows10-2004-x64
3MSMAX4.0/A...wd.vbs
windows7-x64
1MSMAX4.0/A...wd.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
MSMAX4.0/ADMIN/Conn.vbs
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
MSMAX4.0/ADMIN/Conn.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
MSMAX4.0/ADMIN/Md5.vbs
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
MSMAX4.0/ADMIN/Md5.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
MSMAX4.0/ADMIN/Untitled-4.asp
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
MSMAX4.0/ADMIN/Untitled-4.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
MSMAX4.0/ADMIN/about_me.vbs
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
MSMAX4.0/ADMIN/about_me.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
MSMAX4.0/ADMIN/action.vbs
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
MSMAX4.0/ADMIN/action.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
MSMAX4.0/ADMIN/action_edit.vbs
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
MSMAX4.0/ADMIN/action_edit.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
MSMAX4.0/ADMIN/admin_head.html
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
MSMAX4.0/ADMIN/admin_head.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
MSMAX4.0/ADMIN/admin_right.html
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
MSMAX4.0/ADMIN/admin_right.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
MSMAX4.0/ADMIN/article.js
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
MSMAX4.0/ADMIN/article.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
MSMAX4.0/ADMIN/article_class.vbs
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
MSMAX4.0/ADMIN/article_class.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
MSMAX4.0/ADMIN/article_list.vbs
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
MSMAX4.0/ADMIN/article_list.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
MSMAX4.0/ADMIN/article_post.vbs
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
MSMAX4.0/ADMIN/article_post.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
MSMAX4.0/ADMIN/atindex.vbs
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
MSMAX4.0/ADMIN/atindex.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
MSMAX4.0/ADMIN/auto_bar.vbs
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
MSMAX4.0/ADMIN/auto_bar.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
MSMAX4.0/ADMIN/bj.asp
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
MSMAX4.0/ADMIN/bj.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
MSMAX4.0/ADMIN/change_pwd.vbs
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
MSMAX4.0/ADMIN/change_pwd.vbs
Resource
win10v2004-20240709-en
General
-
Target
4e027a39e36ed58e84e77688099480bf_JaffaCakes118
-
Size
766KB
-
MD5
4e027a39e36ed58e84e77688099480bf
-
SHA1
3504bd1a4f2cf9037d48432830c17159f204678c
-
SHA256
4339bf54fb7968a56e8c79b534fc7ba0fbca6067351618e7ca7b14f74784f122
-
SHA512
39553bc72db25d779192f6ec090a6307b0d059c629e1905aa110d26b0fcc6e6657c3bc25b343622a421bbed39ddf861689ee24054f2922fa5b729f05108e6acf
-
SSDEEP
12288:ABAbHoY/xKuLStqEkcLh59Nq8SCZUxGoUDif+Wis5/emTFC33gthJ2DJBikb2lXa:A8HoY/xKWHEtDS40sswmo33G2DJcM2e9
Malware Config
Signatures
Files
-
4e027a39e36ed58e84e77688099480bf_JaffaCakes118.rar
-
MSMAX4.0/ADMIN/Api_Uppic/2008-11-2/2008110241421517.jpg.jpg
-
MSMAX4.0/ADMIN/Api_Uppic/2008-9-22/2008092255287861.gif.gif
-
MSMAX4.0/ADMIN/Api_Uppic/2008-9-22/2008092255303753.gif.gif
-
MSMAX4.0/ADMIN/Api_Uppic/2008-9-23/2008092337626829.jpg.jpg
-
MSMAX4.0/ADMIN/Api_Uppic/2008-9-26/2008092631250345.jpg.jpg
-
MSMAX4.0/ADMIN/Api_Uppic/2008-9-26/2008092641288673.jpg.jpg
-
MSMAX4.0/ADMIN/Api_Uppic/2008-9-26/2008092641313781.jpg.jpg
-
MSMAX4.0/ADMIN/Api_Uppic/2008-9-26/2008092641350173.jpg.jpg
-
MSMAX4.0/ADMIN/Api_Uppic/2008-9-26/2008092641372093.jpg.jpg
-
MSMAX4.0/ADMIN/Conn.asp.vbs
-
MSMAX4.0/ADMIN/Edit.Inc
-
MSMAX4.0/ADMIN/Md5.Asp.vbs
-
MSMAX4.0/ADMIN/Untitled-4.asp.asp
-
MSMAX4.0/ADMIN/_notes/dwsync.xml.xml
-
MSMAX4.0/ADMIN/about_me.asp.vbs
-
MSMAX4.0/ADMIN/action.asp.vbs
-
MSMAX4.0/ADMIN/action_edit.asp.vbs
-
MSMAX4.0/ADMIN/admin_head.html.html
-
MSMAX4.0/ADMIN/admin_left.asp.html .js polyglot
-
MSMAX4.0/ADMIN/admin_right.html.html
-
MSMAX4.0/ADMIN/article.asp.js
-
MSMAX4.0/ADMIN/article_class.asp.vbs
-
MSMAX4.0/ADMIN/article_list.asp.vbs
-
MSMAX4.0/ADMIN/article_post.asp.vbs
-
MSMAX4.0/ADMIN/atindex.asp.vbs
-
MSMAX4.0/ADMIN/auto_bar.asp.vbs
-
MSMAX4.0/ADMIN/bj.asp
-
MSMAX4.0/ADMIN/change_pwd.asp.vbs
-
MSMAX4.0/ADMIN/comessage.asp.vbs
-
MSMAX4.0/ADMIN/comment.asp.vbs
-
MSMAX4.0/ADMIN/config/_notes/dwsync.xml.xml
-
MSMAX4.0/ADMIN/config/do_edit.asp.vbs
-
MSMAX4.0/ADMIN/config/function.asp.vbs
-
MSMAX4.0/ADMIN/config/lib.asp.vbs
-
MSMAX4.0/ADMIN/config/tablefunction.asp.vbs
-
MSMAX4.0/ADMIN/config/ubbfunction.asp.vbs
-
MSMAX4.0/ADMIN/do_edit.asp.vbs
-
MSMAX4.0/ADMIN/edit.asp.vbs
-
MSMAX4.0/ADMIN/edit_message.asp.vbs
-
MSMAX4.0/ADMIN/editor/_notes/dwsync.xml.xml
-
MSMAX4.0/ADMIN/editor/all.js.js
-
MSMAX4.0/ADMIN/editor/comm.css
-
MSMAX4.0/ADMIN/editor/editor.js.js
-
MSMAX4.0/ADMIN/editor/editor_toolbar.js.js
-
MSMAX4.0/ADMIN/editor/images/editoricon.gif.gif
-
MSMAX4.0/ADMIN/editor/upapi/UpLoadClass.asp.vbs
-
MSMAX4.0/ADMIN/editor/upapi/upfile.asp.vbs
-
MSMAX4.0/ADMIN/editor/upapi/upload.asp.js
-
MSMAX4.0/ADMIN/images/Thumbs.db
-
MSMAX4.0/ADMIN/images/bg_list.gif.gif
-
MSMAX4.0/ADMIN/images/bg_menu.gif.gif
-
MSMAX4.0/ADMIN/images/del.png.png
-
MSMAX4.0/ADMIN/images/edit.png.png
-
MSMAX4.0/ADMIN/images/logo.jpg.jpg
-
MSMAX4.0/ADMIN/images/ok.png.png
-
MSMAX4.0/ADMIN/images/png-0017.png.png
-
MSMAX4.0/ADMIN/images/tableft.gif.gif
-
MSMAX4.0/ADMIN/images/tableftJ.gif.gif
-
MSMAX4.0/ADMIN/images/tabright.gif.gif
-
MSMAX4.0/ADMIN/images/tabrightJ.gif.gif
-
MSMAX4.0/ADMIN/images/talk.gif.gif
-
MSMAX4.0/ADMIN/index.asp.html .vbs polyglot
-
MSMAX4.0/ADMIN/ip.asp.vbs
-
MSMAX4.0/ADMIN/jczz.asp
-
MSMAX4.0/ADMIN/kill.asp.vbs
-
MSMAX4.0/ADMIN/link.asp.vbs
-
MSMAX4.0/ADMIN/link_add.asp.vbs
-
MSMAX4.0/ADMIN/log_out.asp
-
MSMAX4.0/ADMIN/me_action.asp.vbs
-
MSMAX4.0/ADMIN/message.asp.vbs
-
MSMAX4.0/ADMIN/music.asp.js
-
MSMAX4.0/ADMIN/music_co.asp.html
-
MSMAX4.0/ADMIN/my_img.asp
-
MSMAX4.0/ADMIN/my_img_form.asp.asp
-
MSMAX4.0/ADMIN/my_info.asp.vbs
-
MSMAX4.0/ADMIN/photo.asp.js
-
MSMAX4.0/ADMIN/photo_co.asp.vbs
-
MSMAX4.0/ADMIN/server_infomation.asp.asp .vbs polyglot
-
MSMAX4.0/ADMIN/settop.asp.vbs
-
MSMAX4.0/ADMIN/tab.css
-
MSMAX4.0/ADMIN/testedit.asp.html
-
MSMAX4.0/ADMIN/upfile.asp.vbs
-
MSMAX4.0/ADMIN/upfile_form.asp.vbs
-
MSMAX4.0/ADMIN/upload_5xsoft.inc.html .vbs polyglot
-
MSMAX4.0/ADMIN/users.asp.vbs
-
MSMAX4.0/Blog_Class_Rss.Asp.vbs
-
MSMAX4.0/Conn.asp.vbs
-
MSMAX4.0/DownFile.aSpx.html
-
MSMAX4.0/Emost.html
-
MSMAX4.0/Emot/001.gif.gif
-
MSMAX4.0/Emot/002.gif.gif
-
MSMAX4.0/Emot/003.gif.gif
-
MSMAX4.0/Emot/004.gif.gif
-
MSMAX4.0/Emot/005.gif.gif
-
MSMAX4.0/Emot/006.gif.gif
-
MSMAX4.0/Emot/007.gif.gif
-
MSMAX4.0/Emot/008.gif.gif
-
MSMAX4.0/Emot/009.gif.gif
-
MSMAX4.0/Emot/010.gif.gif
-
MSMAX4.0/Emot/011.gif.gif
-
MSMAX4.0/Emot/012.gif.gif
-
MSMAX4.0/Emot/013.gif.gif
-
MSMAX4.0/Emot/014.gif.gif
-
MSMAX4.0/Emot/015.gif.gif
-
MSMAX4.0/UBBencode.ini.vbs
-
MSMAX4.0/_notes/showpie.asp.mno
-
MSMAX4.0/about_me.asp.vbs
-
MSMAX4.0/action.asp.vbs
-
MSMAX4.0/addnew.asp.vbs
-
MSMAX4.0/addnew_message.asp.vbs
-
MSMAX4.0/addnew_pro.asp.vbs
-
MSMAX4.0/admin_chk_login.asp.vbs
-
MSMAX4.0/article.asp.js
-
MSMAX4.0/article_list.asp.vbs
-
MSMAX4.0/bd.asp.asp
-
MSMAX4.0/blog_post.asp.vbs
-
MSMAX4.0/boba/editor/all.js.js
-
MSMAX4.0/boba/editor/comm.css
-
MSMAX4.0/boba/editor/editor.js.js
-
MSMAX4.0/boba/editor/editor_toolbar.js.js
-
MSMAX4.0/boba/editor/images/editoricon.gif.gif
-
MSMAX4.0/boba/editor/upapi/UpLoadClass.asp.vbs
-
MSMAX4.0/boba/editor/upapi/upfile.asp.vbs
-
MSMAX4.0/boba/editor/upapi/upload.asp.js
-
MSMAX4.0/boba/index.asp.js
-
MSMAX4.0/car.asp.js
-
MSMAX4.0/classimg.asp.vbs
-
MSMAX4.0/comm.js.js
-
MSMAX4.0/data/msmax.mdb
-
MSMAX4.0/delbook.asp
-
MSMAX4.0/edit.asp.vbs
-
MSMAX4.0/edit_touxiang.asp.asp .js polyglot
-
MSMAX4.0/editor/_notes/dwsync.xml.xml
-
MSMAX4.0/editor/all.js.js
-
MSMAX4.0/editor/comm.css
-
MSMAX4.0/editor/editor.js.js
-
MSMAX4.0/editor/editor_toolbar.js.js
-
MSMAX4.0/editor/images/editoricon.gif.gif
-
MSMAX4.0/editor/upapi/UpLoadClass.asp.vbs
-
MSMAX4.0/editor/upapi/upfile.asp.vbs
-
MSMAX4.0/editor/upapi/upload.asp.js
-
MSMAX4.0/function.asp.vbs
-
MSMAX4.0/function1.asp.vbs
-
MSMAX4.0/hd.css
-
MSMAX4.0/image.asp.vbs
-
MSMAX4.0/images/Blog_Rss.png.png
-
MSMAX4.0/images/LOGO.jpg.jpg
-
MSMAX4.0/images/LOGObg.gif.jpg
-
MSMAX4.0/images/Thumbs.db
-
MSMAX4.0/images/bd.gif.gif
-
MSMAX4.0/images/bn_next.gif.gif
-
MSMAX4.0/images/bn_prev.gif.gif
-
MSMAX4.0/images/buy.jpg.jpg
-
MSMAX4.0/images/first.gif.gif
-
MSMAX4.0/images/fosan.jpg.jpg
-
MSMAX4.0/images/h_next_no.gif.gif
-
MSMAX4.0/images/h_prev_no.gif.gif
-
MSMAX4.0/images/index_bg.jpg.jpg
-
MSMAX4.0/images/input_bg.gif.gif
-
MSMAX4.0/images/laba.jpg.gif
-
MSMAX4.0/images/last.gif.gif
-
MSMAX4.0/images/lm.jpg.jpg
-
MSMAX4.0/images/loading.gif.gif
-
MSMAX4.0/images/mav_r1_c12.jpg.jpg
-
MSMAX4.0/images/menu_bg.jpg.jpg
-
MSMAX4.0/images/menu_down.jpg.jpg
-
MSMAX4.0/images/menu_hover.jpg.jpg
-
MSMAX4.0/images/mover.jpg.jpg
-
MSMAX4.0/images/png-0044.png.png
-
MSMAX4.0/images/png-0099.png.png
-
MSMAX4.0/images/png-0407.png.png
-
MSMAX4.0/images/png-0787.png.png
-
MSMAX4.0/images/py.png.png
-
MSMAX4.0/images/right.gif.gif
-
MSMAX4.0/images/sf.gif.gif
-
MSMAX4.0/images/tabbar_level1_slice_left_bk.gif.gif
-
MSMAX4.0/images/talk.gif.gif
-
MSMAX4.0/images/zifubao3.gif.gif
-
MSMAX4.0/img/2008112161456.jpg.jpg
-
MSMAX4.0/img/Thumbs.db
-
MSMAX4.0/index.asp.vbs
-
MSMAX4.0/link.asp.vbs
-
MSMAX4.0/log_out.asp
-
MSMAX4.0/login.asp.html
-
MSMAX4.0/logout.asp
-
MSMAX4.0/me.asp.vbs
-
MSMAX4.0/message.asp.vbs
-
MSMAX4.0/mymessage.asp.vbs
-
MSMAX4.0/mypost.asp.vbs
-
MSMAX4.0/post.asp.vbs
-
MSMAX4.0/reg.asp.js
-
MSMAX4.0/reg_action.asp.vbs
-
MSMAX4.0/show.asp.vbs
-
MSMAX4.0/show_me_ajax.asp.vbs
-
MSMAX4.0/showmessage.asp.js
-
MSMAX4.0/showpie.asp.vbs
-
MSMAX4.0/site.css
-
MSMAX4.0/slt/2008112161456.jpg.jpg
-
MSMAX4.0/slt/Thumbs.db
-
MSMAX4.0/suc.asp.vbs
-
MSMAX4.0/top.asp
-
MSMAX4.0/ubb.asp.vbs
-
MSMAX4.0/ubbfunction.asp.vbs
-
MSMAX4.0/upfile.asp.vbs
-
MSMAX4.0/upfile_有组件上传的.asp.vbs
-
MSMAX4.0/upload_5xsoft.inc.html .vbs polyglot
-
MSMAX4.0/users.asp.js
-
MSMAX4.0/新云软件.url.url
-
MSMAX4.0/更新的内容.txt