Overview
overview
3Static
static
1shop/Comm/CONN.vbs
windows7-x64
1shop/Comm/CONN.vbs
windows10-2004-x64
1shop/Comm/GG.asp
windows7-x64
3shop/Comm/GG.asp
windows10-2004-x64
3shop/Comm/SUBCONN.vbs
windows7-x64
1shop/Comm/SUBCONN.vbs
windows10-2004-x64
1shop/Comm/chkmsg.vbs
windows7-x64
1shop/Comm/chkmsg.vbs
windows10-2004-x64
1shop/Comm/dbase.asp
windows7-x64
3shop/Comm/dbase.asp
windows10-2004-x64
3shop/Comm/lksetup.asp
windows7-x64
3shop/Comm/lksetup.asp
windows10-2004-x64
3shop/Comm/page0.asp
windows7-x64
3shop/Comm/page0.asp
windows10-2004-x64
3shop/Comm/page1.asp
windows7-x64
3shop/Comm/page1.asp
windows10-2004-x64
3shop/Comm/page10.asp
windows7-x64
3shop/Comm/page10.asp
windows10-2004-x64
3shop/Comm/page11.asp
windows7-x64
3shop/Comm/page11.asp
windows10-2004-x64
3shop/Comm/page12.asp
windows7-x64
3shop/Comm/page12.asp
windows10-2004-x64
3shop/Comm/page13.asp
windows7-x64
3shop/Comm/page13.asp
windows10-2004-x64
3shop/Comm/page14.asp
windows7-x64
3shop/Comm/page14.asp
windows10-2004-x64
3shop/Comm/page15.asp
windows7-x64
3shop/Comm/page15.asp
windows10-2004-x64
3shop/Comm/page4.asp
windows7-x64
3shop/Comm/page4.asp
windows10-2004-x64
3shop/Comm/page5.asp
windows7-x64
3shop/Comm/page5.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
shop/Comm/CONN.vbs
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
shop/Comm/CONN.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
shop/Comm/GG.asp
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
shop/Comm/GG.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
shop/Comm/SUBCONN.vbs
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
shop/Comm/SUBCONN.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
shop/Comm/chkmsg.vbs
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
shop/Comm/chkmsg.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
shop/Comm/dbase.asp
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
shop/Comm/dbase.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
shop/Comm/lksetup.asp
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
shop/Comm/lksetup.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
shop/Comm/page0.asp
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
shop/Comm/page0.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
shop/Comm/page1.asp
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
shop/Comm/page1.asp
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
shop/Comm/page10.asp
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
shop/Comm/page10.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
shop/Comm/page11.asp
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
shop/Comm/page11.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
shop/Comm/page12.asp
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
shop/Comm/page12.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
shop/Comm/page13.asp
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
shop/Comm/page13.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
shop/Comm/page14.asp
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
shop/Comm/page14.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
shop/Comm/page15.asp
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
shop/Comm/page15.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
shop/Comm/page4.asp
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
shop/Comm/page4.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
shop/Comm/page5.asp
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
shop/Comm/page5.asp
Resource
win10v2004-20240709-en
General
-
Target
5f11126b181f473b9a6f571fd09f4caf_JaffaCakes118
-
Size
1.6MB
-
MD5
5f11126b181f473b9a6f571fd09f4caf
-
SHA1
ed6887edcfa0662324d430d9a7f416614b3776c5
-
SHA256
aa63883a7ef43761ba0c49b784829c8703e1fc7739ffa9e93cbfca26686fdc1e
-
SHA512
1e2426b98d74de24a8b730708d06b4f3760e7c25942840b1fc29c27d7c8040d79b60d31f064a696fcaa4ee221445997d7b9fdc50e34405fc624a52d759762041
-
SSDEEP
24576:3BeVWm56iNfbBbzVcRyjPT+T7Zr/s1CBAhhqL4+zonyrj2xb8BD3lvqL3J9M4yxG:1WbfbBbzV6Tx/s1C2hhqLtzgej9qfys
Malware Config
Signatures
Files
-
5f11126b181f473b9a6f571fd09f4caf_JaffaCakes118.rar
-
shop/163.gif.gif
-
shop/Comm/CONN.ASP.vbs
-
shop/Comm/GG.asp
-
shop/Comm/Head.Fix
-
shop/Comm/SUBCONN.ASP.vbs
-
shop/Comm/body.Fix
-
shop/Comm/chkmsg.asp.vbs
-
shop/Comm/dbase.asp
-
shop/Comm/lksetup.asp
-
shop/Comm/page0.asp
-
shop/Comm/page1.asp
-
shop/Comm/page10.asp
-
shop/Comm/page11.asp
-
shop/Comm/page12.asp
-
shop/Comm/page13.asp
-
shop/Comm/page14.asp
-
shop/Comm/page15.asp
-
shop/Comm/page4.asp
-
shop/Comm/page5.asp
-
shop/Comm/page7.asp
-
shop/Comm/shop.asp
-
shop/JSROOT/SCROLLER.JS.js
-
shop/JSROOT/checklogin.js
-
shop/JSROOT/date.js.js
-
shop/JSROOT/dhtmllib.js.js
-
shop/JSROOT/openwin.js.js
-
shop/JSROOT/order.js.html
-
shop/JSROOT/page.asp.vbs
-
shop/ORDER/Tab-logo.gif.gif
-
shop/ORDER/add.asp
-
shop/ORDER/md5.asp.vbs
-
shop/ORDER/order_check.asp.vbs
-
shop/ORDER/ordersent.asp.vbs
-
shop/ORDER/payment.asp.vbs
-
shop/ORDER/previeworder.asp.vbs
-
shop/PIC/DIGI/0001_sml.jpg
-
shop/PIC/DIGI/Thumbs.db
-
shop/PIC/NONE.GIF.gif
-
shop/PIC/NONE_D.GIF.gif
-
shop/PIC/Thumbs.db
-
shop/PIC2/DIGI/Thumbs.db
-
shop/PIC2/NONE.GIF.gif
-
shop/PIC2/NONE_D.GIF.gif
-
shop/PIC2/Thumbs.db
-
shop/admin/ADMIN.ASP.asp .vbs polyglot
-
shop/admin/ADMIN.CSS
-
shop/admin/CLEARALL.ASP.asp .vbs polyglot
-
shop/admin/CONFIG.ASP.html
-
shop/admin/QUANXIAN.ASP
-
shop/admin/QUIT.ASP.asp
-
shop/admin/UPLOAD.ASP.asp .vbs polyglot
-
shop/admin/admin_adv.asp.vbs
-
shop/admin/admin_client.asp.vbs
-
shop/admin/admin_config.asp.vbs
-
shop/admin/admin_conn.asp.vbs
-
shop/admin/admin_delmsg.asp.vbs
-
shop/admin/admin_faq.asp.vbs
-
shop/admin/admin_feedback.asp.vbs
-
shop/admin/admin_hand.asp.vbs
-
shop/admin/admin_hf.asp.vbs
-
shop/admin/admin_left.asp.vbs
-
shop/admin/admin_link.asp.vbs
-
shop/admin/admin_mail.asp.vbs
-
shop/admin/admin_manager.asp.vbs
-
shop/admin/admin_mesage.asp.vbs
-
shop/admin/admin_msg.asp.vbs
-
shop/admin/admin_news.asp.vbs
-
shop/admin/admin_order.asp.vbs
-
shop/admin/admin_page.asp.vbs
-
shop/admin/admin_paytype.asp.vbs
-
shop/admin/admin_pg.asp.vbs
-
shop/admin/admin_prod.asp.vbs
-
shop/admin/checkadmin.asp.vbs
-
shop/admin/index.htm.html
-
shop/admin/shoppsd#ccc.asa
-
shop/admin/shoppsd#ccc.mdb
-
shop/admin/upload_5xsoft.inc.html .vbs polyglot
-
shop/admin/uploadsave.asp.asp .vbs polyglot
-
shop/admin/xuke.asp
-
shop/admin_left.asp.vbs
-
shop/baidu.gif.gif
-
shop/bottom.asp
-
shop/chinacom_logo.gif.gif
-
shop/config.asp.html
-
shop/cp/1.gif.gif
-
shop/cp/10.gif.gif
-
shop/cp/11.gif.gif
-
shop/cp/12.gif.gif
-
shop/cp/13.gif.gif
-
shop/cp/14.gif.gif
-
shop/cp/15.gif.gif
-
shop/cp/16.gif.gif
-
shop/cp/17.gif.gif
-
shop/cp/18.gif.gif
-
shop/cp/19.gif.gif
-
shop/cp/2.gif.gif
-
shop/cp/20.gif.gif
-
shop/cp/21.gif.gif
-
shop/cp/22.gif.gif
-
shop/cp/23.gif.gif
-
shop/cp/24.gif.gif
-
shop/cp/25.gif.gif
-
shop/cp/4.gif.gif
-
shop/cp/5.gif.gif
-
shop/cp/6.gif.gif
-
shop/cp/7.gif.gif
-
shop/cp/8.gif.gif
-
shop/cp/9.gif.gif
-
shop/cp/Thumbs.db
-
shop/cp/hz433s.gif.gif
-
shop/cp/xtp/1.gif.gif
-
shop/cp/xtp/10.gif.gif
-
shop/cp/xtp/11.gif.gif
-
shop/cp/xtp/12.gif.gif
-
shop/cp/xtp/13.gif.gif
-
shop/cp/xtp/14.gif.gif
-
shop/cp/xtp/15.gif.gif
-
shop/cp/xtp/16.gif.gif
-
shop/cp/xtp/17.gif.gif
-
shop/cp/xtp/18.gif.gif
-
shop/cp/xtp/19.gif.gif
-
shop/cp/xtp/2.gif.gif
-
shop/cp/xtp/20.gif.gif
-
shop/cp/xtp/21.gif.gif
-
shop/cp/xtp/22.gif.gif
-
shop/cp/xtp/23.gif.gif
-
shop/cp/xtp/24.gif.gif
-
shop/cp/xtp/25.gif.gif
-
shop/cp/xtp/4.gif.gif
-
shop/cp/xtp/5.gif.gif
-
shop/cp/xtp/6.gif.gif
-
shop/cp/xtp/7.gif.gif
-
shop/cp/xtp/8.gif.gif
-
shop/cp/xtp/9.gif.gif
-
shop/cp/xtp/Thumbs.db
-
shop/css/01.css
-
shop/error.asp.asp
-
shop/feedback.asp.vbs
-
shop/feedbackconfig.asp.html
-
shop/filemore.asp.asp .vbs polyglot
-
shop/flash/top.fla
-
shop/flash/top.swf
-
shop/fukuan.asp.vbs
-
shop/help/x1.gif.gif
-
shop/help/x2.gif.gif
-
shop/help/x3.gif.gif
-
shop/help/x4.gif.gif
-
shop/help/x5.gif.gif
-
shop/help/x6.gif.gif
-
shop/help/说明.txt
-
shop/helpcenter.asp
-
shop/images/169.gif.gif
-
shop/images/3.swf
-
shop/images/BIGPIC.JPG.jpg
-
shop/images/MYBUY.GIF.gif
-
shop/images/MYBUY_02.GIF.gif
-
shop/images/SEARCH.GIF.gif
-
shop/images/TOP00.GIF.gif
-
shop/images/Thumbs.db
-
shop/images/al.jpg.jpg
-
shop/images/b.gif
-
shop/images/bg.jpg.jpg
-
shop/images/bgb.gif.gif
-
shop/images/buy.gif.gif
-
shop/images/cc.gif.vbs
-
shop/images/chinasearchlogo.gif.gif
-
shop/images/chuxiao.gif.gif
-
shop/images/db.gif.gif
-
shop/images/detail.gif.gif
-
shop/images/gwzl.gif.gif
-
shop/images/hot.gif.gif
-
shop/images/huozhuo.gif.gif
-
shop/images/left_join.gif.gif
-
shop/images/left_login.gif.gif
-
shop/images/left_login_ID.gif.gif
-
shop/images/left_login_PW.gif.gif
-
shop/images/left_login_bg.gif.gif
-
shop/images/left_login_edge.gif.gif
-
shop/images/lianxi.gif.gif
-
shop/images/line.gif.gif
-
shop/images/link.gif.gif
-
shop/images/liucheng.gif.gif
-
shop/images/load.gif.gif
-
shop/images/login.gif.gif
-
shop/images/more.gif.gif
-
shop/images/movie-line.swf
-
shop/images/newsbarb.GIF.gif
-
shop/images/newsbarm.GIF.gif
-
shop/images/newsbart.gif.gif
-
shop/images/serset.gif.gif
-
shop/images/sohulogo.gif.gif
-
shop/images/spacer.gif.gif
-
shop/images/srch.gif.gif
-
shop/images/top.swf
-
shop/images/topbggreen.gif.gif
-
shop/images/tp_1.gif.gif
-
shop/images/tp_10.gif.gif
-
shop/images/tp_11.gif.gif
-
shop/images/tp_12.gif.gif
-
shop/images/tp_13.gif.gif
-
shop/images/tp_14.gif.gif
-
shop/images/tp_15.gif.gif
-
shop/images/tp_2.gif.gif
-
shop/images/tp_3.gif.gif
-
shop/images/tp_4.gif.gif
-
shop/images/tp_5.gif.gif
-
shop/images/tp_6.gif.gif
-
shop/images/tp_7.gif.gif
-
shop/images/tp_8.gif.gif
-
shop/images/tp_9.gif.gif
-
shop/images/tree.gif.gif
-
shop/images/wylogo.gif.gif
-
shop/images/xm_img036.gif.gif
-
shop/images/zc.gif.gif
-
shop/images/zhizhao.gif.gif
-
shop/images/复件 tp_4.gif.gif
-
shop/index.asp.vbs
-
shop/indexconfig.asp.html
-
shop/lianxi.asp.vbs
-
shop/link.asp.vbs
-
shop/loginbox.asp
-
shop/my_accounts.asp.vbs
-
shop/my_accounts_menu.asp
-
shop/my_info.asp.asp .vbs polyglot
-
shop/my_info_save.asp.asp .vbs polyglot
-
shop/my_msg.asp.asp .vbs polyglot
-
shop/my_order.asp.vbs
-
shop/my_order_detail.asp.vbs
-
shop/mymsg_delmsg.asp.asp .vbs polyglot
-
shop/mymsg_hand.asp.asp .vbs polyglot
-
shop/newmember.asp
-
shop/news_detail.asp.html .vbs polyglot
-
shop/news_home.asp.vbs
-
shop/news_two.asp.vbs
-
shop/page.asp.vbs
-
shop/proddetail.asp.vbs
-
shop/prodgood.asp.vbs
-
shop/prodhot.asp.vbs
-
shop/prodlist.asp.vbs
-
shop/prodnew.asp.vbs
-
shop/prodshow.asp.asp .vbs polyglot
-
shop/prodtejia.asp.vbs
-
shop/prodtree.asp.vbs
-
shop/prodtree_bak.asp.vbs
-
shop/reg_preview.asp.js
-
shop/reg_save.asp.vbs
-
shop/search.asp.vbs
-
shop/searchlist.asp.vbs
-
shop/shop.css
-
shop/shopmdb#mdb#3333.mdb
-
shop/sina.gif.gif
-
shop/skyj.gif.gif
-
shop/sohu.gif.gif
-
shop/sublist.asp.vbs
-
shop/topbar.asp.html .vbs polyglot
-
shop/userlogin.asp.vbs
-
shop/userlogout.asp
-
shop/verifycode.asp.vbs
-
shop/xuke.asp
-
shop/youkemsg.asp.asp .vbs polyglot
-
shop/使用说明.txt
-
shop/数据库变量说明.txt