Overview
overview
3Static
static
1agnews/adm...ss.vbs
windows7-x64
1agnews/adm...ss.vbs
windows10-2004-x64
1agnews/adm...do.vbs
windows7-x64
1agnews/adm...do.vbs
windows10-2004-x64
1agnews/adm...od.asp
windows7-x64
3agnews/adm...od.asp
windows10-2004-x64
3agnews/adm...do.vbs
windows7-x64
1agnews/adm...do.vbs
windows10-2004-x64
1agnews/adm...od.asp
windows7-x64
3agnews/adm...od.asp
windows10-2004-x64
3agnews/admin/Left.js
windows7-x64
3agnews/admin/Left.js
windows10-2004-x64
3agnews/adm...in.asp
windows7-x64
3agnews/adm...in.asp
windows10-2004-x64
3agnews/adm...ht.asp
windows7-x64
3agnews/adm...ht.asp
windows10-2004-x64
3agnews/admin/Sm.vbs
windows7-x64
1agnews/admin/Sm.vbs
windows10-2004-x64
1agnews/adm...m.html
windows7-x64
3agnews/adm...m.html
windows10-2004-x64
3agnews/adm...do.vbs
windows7-x64
1agnews/adm...do.vbs
windows10-2004-x64
1agnews/adm...me.asp
windows7-x64
3agnews/adm...me.asp
windows10-2004-x64
3agnews/adm...od.asp
windows7-x64
3agnews/adm...od.asp
windows10-2004-x64
3agnews/adm...ve.vbs
windows7-x64
1agnews/adm...ve.vbs
windows10-2004-x64
1agnews/adm...le.vbs
windows7-x64
1agnews/adm...le.vbs
windows10-2004-x64
1agnews/adm...dd.vbs
windows7-x64
1agnews/adm...dd.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
agnews/admin/Class.vbs
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
agnews/admin/Class.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
agnews/admin/Class_big_do.vbs
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
agnews/admin/Class_big_do.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
agnews/admin/Class_big_mod.asp
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
agnews/admin/Class_big_mod.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
agnews/admin/Class_do.vbs
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
agnews/admin/Class_do.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
agnews/admin/Class_mod.asp
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
agnews/admin/Class_mod.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
agnews/admin/Left.js
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
agnews/admin/Left.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
agnews/admin/Login.asp
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
agnews/admin/Login.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
agnews/admin/Right.asp
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
agnews/admin/Right.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
agnews/admin/Sm.vbs
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
agnews/admin/Sm.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
agnews/admin/UpFileForm.html
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
agnews/admin/UpFileForm.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
agnews/admin/admin_do.vbs
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
agnews/admin/admin_do.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
agnews/admin/admin_name.asp
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
agnews/admin/admin_name.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
agnews/admin/admin_pass_mod.asp
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
agnews/admin/admin_pass_mod.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
agnews/admin/admin_pass_mod_save.vbs
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
agnews/admin/admin_pass_mod_save.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
agnews/admin/article.vbs
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
agnews/admin/article.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
agnews/admin/article_add.vbs
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
agnews/admin/article_add.vbs
Resource
win10v2004-20240709-en
General
-
Target
724484bef37556352505d6311632349d_JaffaCakes118
-
Size
379KB
-
MD5
724484bef37556352505d6311632349d
-
SHA1
8f3d4b2e2453e3a339d83c323665e5244705ad70
-
SHA256
d6b7feb9ba4f388af5d7856d7a89c5a82ad72522b9aeb9743d3f0edc93db7842
-
SHA512
601016586efe21dc65e1d2bd268b359b7adabb874f77fdd602717d135017ba844b3423fdffbe42f43ac0c8751f93510020aa90db214817a0e1ff3ec2b99c8b4d
-
SSDEEP
6144:+g0WODE04ufrlne6qLug2bSiWi2Nufmrr95QQ6L0AYLzr1bTkSkDKGbaPXb0MAY+:+gDODEUfZeVl2nWJEmr9+pL0X9aKGbWU
Malware Config
Signatures
Files
-
724484bef37556352505d6311632349d_JaffaCakes118.rar
-
agnews/admin/Class.asp.vbs
-
agnews/admin/Class_big_do.asp.vbs
-
agnews/admin/Class_big_mod.asp
-
agnews/admin/Class_do.asp.vbs
-
agnews/admin/Class_mod.asp
-
agnews/admin/Left.asp.js
-
agnews/admin/Login.asp
-
agnews/admin/Right.asp
-
agnews/admin/Sm.asp.vbs
-
agnews/admin/UpFileForm.asp.html
-
agnews/admin/UpFileForm2.asp.html .vbs polyglot
-
agnews/admin/admin_do.asp.vbs
-
agnews/admin/admin_name.asp.asp .vbs polyglot
-
agnews/admin/admin_pass_mod.asp.asp
-
agnews/admin/admin_pass_mod_save.asp.vbs
-
agnews/admin/article.asp.vbs
-
agnews/admin/article_add.asp.vbs
-
agnews/admin/article_add_class.asp.vbs
-
agnews/admin/article_do.asp.vbs
-
agnews/admin/article_mod.asp.vbs
-
agnews/admin/article_s.asp.vbs
-
agnews/admin/checkin.asp.vbs
-
agnews/admin/class_big.asp.vbs
-
agnews/admin/conn.asp.vbs
-
agnews/admin/div.htm
-
agnews/admin/index.asp
-
agnews/admin/islogin.asp.vbs
-
agnews/admin/log.asp.vbs
-
agnews/admin/log/2006511054854.htm.html
-
agnews/admin/log/2006517040758.htm.html
-
agnews/admin/log/2006518195534.htm.html
-
agnews/admin/log_10000.asp.vbs
-
agnews/admin/log_clear.asp
-
agnews/admin/log_get.asp.vbs
-
agnews/admin/moban.asp.vbs
-
agnews/admin/moban_add.asp
-
agnews/admin/moban_do.asp.vbs
-
agnews/admin/moban_mod.asp.vbs
-
agnews/admin/out.asp
-
agnews/admin/ubb.asp.vbs
-
agnews/admin/ubb_help.html.html
-
agnews/article.asp.js
-
agnews/conn.asp.vbs
-
agnews/data_articles/nnso.net.article.mdb
-
agnews/error/error.asp
-
agnews/html/1/2006523022528.html.html .vbs polyglot
-
agnews/html/1/2006523022621.html.html
-
agnews/html/1/2006523022856.html.html
-
agnews/html/1/2006523022924.html.html
-
agnews/html/1/2006523022950.html.html
-
agnews/html/1/2006523023019.html.html
-
agnews/html/1/2006523023115.html.html .vbs polyglot
-
agnews/html/1/2006529144049.html.html
-
agnews/html/10/2006523023252.html.html
-
agnews/html/10/2006523024056.html.html
-
agnews/html/10/2006523024125.html.html
-
agnews/html/10/2006523024206.html.html
-
agnews/html/10/2006523024233.html.html
-
agnews/html/10/2006523024300.html.html .js polyglot
-
agnews/html/10/2006523024319.html.html .js polyglot
-
agnews/html/11/2006523024926.html.html
-
agnews/html/11/2006523025004.html.html
-
agnews/html/11/2006523025046.html.html
-
agnews/html/11/2006523025109.html.html
-
agnews/html/11/2006523025201.html.html
-
agnews/html/11/2006523025239.html.html
-
agnews/html/11/2006523025407.html.html
-
agnews/html/11/2006523025432.html.html
-
agnews/html/11/2006523025459.html.html
-
agnews/html/11/2006523025559.html.html
-
agnews/html/2/200652894856.html.html
-
agnews/html/2/200652895149.html.html
-
agnews/html/7/2006523024415.html.html
-
agnews/html/7/2006523024444.html.html
-
agnews/html/7/2006523024503.html.html
-
agnews/html/7/2006523024527.html.html
-
agnews/html/7/2006523024609.html.html
-
agnews/html/7/2006523024641.html.html
-
agnews/html/7/2006523024716.html.html
-
agnews/images/admin_bg_2.gif.gif
-
agnews/images/arrow.gif.gif
-
agnews/images/bg_3.gif.gif
-
agnews/images/bg_td_23.gif.gif
-
agnews/images/bullet.gif.gif
-
agnews/images/c.gif.gif
-
agnews/images/class_t.gif.gif
-
agnews/images/copyright.jpg.jpg
-
agnews/images/e.gif.gif
-
agnews/images/green-arrow.gif.gif
-
agnews/images/h1.gif.gif
-
agnews/images/ico_info.png.png
-
agnews/images/logo.psd
-
agnews/images/m.gif.gif
-
agnews/images/more.bmp
-
agnews/images/more.gif.gif
-
agnews/images/mores.gif.gif
-
agnews/images/nnso.gif.gif
-
agnews/images/nnsologo.jpg.jpg
-
agnews/images/qita.jpg.jpg
-
agnews/images/r.gif.gif
-
agnews/images/search_icon.gif.gif
-
agnews/images/search_input.gif.gif
-
agnews/images/so.gif.gif
-
agnews/images/t_bg.gif.gif
-
agnews/images/tb_bg.jpg.jpg
-
agnews/images/tb_bg_x.jpg.jpg
-
agnews/images/tb_bg_z.jpg.jpg
-
agnews/images/topnav.gif.gif
-
agnews/images/ubbpic/bold.gif.gif
-
agnews/images/ubbpic/center.gif.gif
-
agnews/images/ubbpic/fly.gif.gif
-
agnews/images/ubbpic/glow.gif.gif
-
agnews/images/ubbpic/image.gif.gif
-
agnews/images/ubbpic/italic.gif.gif
-
agnews/images/ubbpic/move.gif
-
agnews/images/ubbpic/mpeg.gif.gif
-
agnews/images/ubbpic/rm.gif.gif
-
agnews/images/ubbpic/swf.gif.gif
-
agnews/images/ubbpic/underline.gif.gif
-
agnews/images/ubbpic/url.gif.gif
-
agnews/images/wenz.jpg.jpg
-
agnews/images/xitongp.jpg.jpg
-
agnews/include/UPLOAD.INC.html .vbs polyglot
-
agnews/include/foot.js
-
agnews/include/md5.asp.vbs
-
agnews/index.asp.vbs
-
agnews/moban.html.html
-
agnews/more.asp.vbs
-
agnews/mycodes.net说明.txt
-
agnews/pl.asp.asp .vbs polyglot
-
agnews/pl_do.asp
-
agnews/style/admin.css
-
agnews/style/main.css
-
agnews/upload/2006516210244.gif.gif
-
agnews/upload/2006523022524.gif.gif
-
agnews/关于该程序说明.txt
-
agnews/源码之家.url.url