Overview
overview
3Static
static
1Video/AjaxUploader.js
windows7-x64
3Video/AjaxUploader.js
windows10-2004-x64
3Video/CONFIG.vbs
windows7-x64
1Video/CONFIG.vbs
windows10-2004-x64
1Video/Inc/...me.vbs
windows7-x64
1Video/Inc/...me.vbs
windows10-2004-x64
1Video/Inc/conn.vbs
windows7-x64
1Video/Inc/conn.vbs
windows10-2004-x64
1Video/Inc/...er.vbs
windows7-x64
1Video/Inc/...er.vbs
windows10-2004-x64
1Video/Special.vbs
windows7-x64
1Video/Special.vbs
windows10-2004-x64
1Video/UpLo...ss.vbs
windows7-x64
1Video/UpLo...ss.vbs
windows10-2004-x64
1Video/asp/ADDFILE.vbs
windows7-x64
1Video/asp/ADDFILE.vbs
windows10-2004-x64
1Video/asp/ADMIN.asp
windows7-x64
3Video/asp/ADMIN.asp
windows10-2004-x64
3Video/asp/...et.vbs
windows7-x64
1Video/asp/...et.vbs
windows10-2004-x64
1Video/asp/...ti.vbs
windows7-x64
1Video/asp/...ti.vbs
windows10-2004-x64
1Video/asp/CONFIG.vbs
windows7-x64
1Video/asp/CONFIG.vbs
windows10-2004-x64
1Video/asp/INFO.asp
windows7-x64
3Video/asp/INFO.asp
windows10-2004-x64
3Video/asp/LOGIN.vbs
windows7-x64
1Video/asp/LOGIN.vbs
windows10-2004-x64
1Video/asp/...UT.asp
windows7-x64
3Video/asp/...UT.asp
windows10-2004-x64
3Video/asp/adminsh.vbs
windows7-x64
1Video/asp/adminsh.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Video/AjaxUploader.js
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Video/AjaxUploader.js
Resource
win10v2004-20240729-en
Behavioral task
behavioral3
Sample
Video/CONFIG.vbs
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Video/CONFIG.vbs
Resource
win10v2004-20240729-en
Behavioral task
behavioral5
Sample
Video/Inc/checkUserName.vbs
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Video/Inc/checkUserName.vbs
Resource
win10v2004-20240729-en
Behavioral task
behavioral7
Sample
Video/Inc/conn.vbs
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Video/Inc/conn.vbs
Resource
win10v2004-20240729-en
Behavioral task
behavioral9
Sample
Video/Inc/saveNRegUser.vbs
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Video/Inc/saveNRegUser.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
Video/Special.vbs
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Video/Special.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
Video/UpLoad_Class.vbs
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Video/UpLoad_Class.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
Video/asp/ADDFILE.vbs
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
Video/asp/ADDFILE.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
Video/asp/ADMIN.asp
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Video/asp/ADMIN.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
Video/asp/ADMINset.vbs
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Video/asp/ADMINset.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
Video/asp/ADMINzhuti.vbs
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
Video/asp/ADMINzhuti.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
Video/asp/CONFIG.vbs
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
Video/asp/CONFIG.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
Video/asp/INFO.asp
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Video/asp/INFO.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
Video/asp/LOGIN.vbs
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Video/asp/LOGIN.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
Video/asp/LOGINOUT.asp
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
Video/asp/LOGINOUT.asp
Resource
win10v2004-20240729-en
Behavioral task
behavioral31
Sample
Video/asp/adminsh.vbs
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
Video/asp/adminsh.vbs
Resource
win10v2004-20240709-en
General
-
Target
76f2708d8a87395499007dafcd86be05_JaffaCakes118
-
Size
1.3MB
-
MD5
76f2708d8a87395499007dafcd86be05
-
SHA1
8177d46a12b8fdd58983b4c71228e16ec7b774e3
-
SHA256
64b809b2bf0f69a44efea40fc95bb78e42604ea6925f3857a32be29ff89a4d15
-
SHA512
3c14271e96363a089a8a46b8e12f1606c63d236c65c0c5a6c7fdd617a49bb8c29a139d9960c05dfac04d2a2dfdddc46fe99a170912fd02537cf735fac44aa8b9
-
SSDEEP
24576:ts/6cvsqANZHPY4eSdC/v8AGWUzcxM7PAkKB7VGXtFELs0:yvsqANFReI5A1Uzcxs4dRVGXzET
Malware Config
Signatures
Files
-
76f2708d8a87395499007dafcd86be05_JaffaCakes118.rar
-
Video/AjaxUploader.js.js
-
Video/CONFIG.ASP.vbs
-
Video/CSS/u_reg.css
-
Video/INDEX.css
-
Video/Inc/checkUserName.inc.vbs
-
Video/Inc/conn.inc.vbs
-
Video/Inc/saveNRegUser.inc.vbs
-
Video/Special.asp.vbs
-
Video/Thumbs.db
-
Video/UpLoad_Class.inc.vbs
-
Video/asp/ADDFILE.ASP.vbs
-
Video/asp/ADMIN.ASP.asp .vbs polyglot
-
Video/asp/ADMINset.ASP.vbs
-
Video/asp/ADMINzhuti.ASP.vbs
-
Video/asp/CONFIG.ASP.vbs
-
Video/asp/INFO.ASP
-
Video/asp/LOGIN.ASP.vbs
-
Video/asp/LOGINOUT.ASP
-
Video/asp/Search.asp.html .vbs polyglot
-
Video/asp/adminsh.asp.vbs
-
Video/asp/admintop.asp
-
Video/asp/admintype.ASP.vbs
-
Video/asp/check.asp.vbs
-
Video/asp/foot.asp.html
-
Video/asp/lyadmin.asp.vbs
-
Video/asp/pass.asp.asp .vbs polyglot
-
Video/asp/photohot.asp.vbs
-
Video/asp/saveadmintype.asp.vbs
-
Video/asp/saveadminzhuanti.asp.vbs
-
Video/asp/top.asp
-
Video/asp/zhuantiadd.asp.vbs
-
Video/asp/zhuantiedit.asp.vbs
-
Video/check.asp.vbs
-
Video/checkUser.asp.asp
-
Video/checkUserName.inc.vbs
-
Video/control.asp.vbs
-
Video/flvplay.swf
-
Video/footer.asp
-
Video/formValidator.js.js
-
Video/formValidatorRegex.js.js
-
Video/getProcess.asp
-
Video/header.asp.asp
-
Video/images/00.GIF.gif
-
Video/images/01.GIF.gif
-
Video/images/15.swf
-
Video/images/I1.gif.gif
-
Video/images/Lb.jpg.jpg
-
Video/images/Thumbs.db
-
Video/images/bar.jpg.jpg
-
Video/images/bg.jpg.jpg
-
Video/images/end.gif.gif
-
Video/images/f.gif.gif
-
Video/images/flash_bg_top.png.png
-
Video/images/fol.gif.gif
-
Video/images/foll.gif.gif
-
Video/images/foot.jpg.jpg
-
Video/images/hb.gif.gif
-
Video/images/heng.jpg.jpg
-
Video/images/hengm.jpg.jpg
-
Video/images/login.gif.gif
-
Video/images/logo.gif.gif
-
Video/images/msn.gif.gif
-
Video/images/n.gif.gif
-
Video/images/nopic1.jpg.jpg
-
Video/images/reg_no_07.gif.jpg
-
Video/images/reg_ok_07.gif.gif
-
Video/images/tb.gif.gif
-
Video/images/up.png.png
-
Video/images/zfb.gif.gif
-
Video/index.asp.vbs
-
Video/info.asp.vbs
-
Video/ip.do.vbs
-
Video/jquery.js.js
-
Video/js/AjaxUploader.js.js
-
Video/js/AnPlus.js.js
-
Video/js/MD5.js.js
-
Video/js/mailCheck.js.js
-
Video/js/mobileCheck.js.js
-
Video/js/n_userReg.js.js
-
Video/js/passCheck.js.js
-
Video/js/setInnerHTML.js.js
-
Video/js/setValue.js.js
-
Video/js/userCheck.js.js
-
Video/js/xmlHttpRequest.js.js
-
Video/loading.gif.gif
-
Video/login.asp.vbs
-
Video/logout.asp
-
Video/md5.asp.vbs
-
Video/mdb/conn.asp.vbs
-
Video/mdb/photo#.mdb
-
Video/mod.asp.vbs
-
Video/modinfo.asp.vbs
-
Video/myinfo.asp.vbs
-
Video/myvideo.asp.vbs
-
Video/new.css
-
Video/paladin/20094543127.jpg
-
Video/paladin/20094912569.gif
-
Video/paladin/200949222956.jpg.jpg
-
Video/paladin/2009723233649.jpg.jpg
-
Video/paladin/200972341821.jpg.jpg
-
Video/paladin/20097234248.jpg.jpg
-
Video/paladin/200972431652.jpg.jpg
-
Video/paladin/Thumbs.db
-
Video/paladin/s_20094543127.jpg.jpg
-
Video/paladin/s_2009464053.jpg.jpg
-
Video/paladin/s_20094685717.jpg.jpg
-
Video/paladin/s_20094694530.jpg.jpg
-
Video/paladin/s_200949222956.jpg.jpg
-
Video/paladin/s_20094922658.jpg.jpg
-
Video/paladin/s_2009723233649.jpg.jpg
-
Video/paladin/s_20097234248.jpg.jpg
-
Video/paladin/s_200972431652.jpg.jpg
-
Video/paladin/s_nopic1.jpg.jpg
-
Video/paladin/s_s_nopic1.jpg.jpg
-
Video/play.asp.asp .vbs polyglot
-
Video/proc_comments.asp.vbs
-
Video/reg.asp
-
Video/saveNRegUser.asp.vbs
-
Video/sys_getcode.asp.vbs
-
Video/type.asp.vbs
-
Video/up.asp.js
-
Video/upload.asp.vbs
-
Video/upload.inc.html .vbs polyglot
-
Video/upok.asp.vbs
-
httpd.ini
-
readme.txt
-
skin/DefaultSkin.css
-
skin/gamesp/HotArticle_bg.gif.gif
-
skin/gamesp/HotArticle_footer.gif.gif
-
skin/gamesp/HotArticle_title.gif.gif
-
skin/gamesp/Original_center.jpg.jpg
-
skin/gamesp/Original_left.jpg.jpg
-
skin/gamesp/Original_right.jpg.jpg
-
skin/gamesp/Searchbg.gif.gif
-
skin/gamesp/Searchkbg.gif.gif
-
skin/gamesp/Searchtijiao.gif.gif
-
skin/gamesp/ShowPath_bg.jpg.jpg
-
skin/gamesp/ShowPath_left.gif.gif
-
skin/gamesp/ShowPath_right.gif.gif
-
skin/gamesp/Thumbs.db
-
skin/gamesp/bg.jpg.jpg
-
skin/gamesp/bottom_bg.jpg.jpg
-
skin/gamesp/bottom_right.jpg.jpg
-
skin/gamesp/cat_banner.jpg.jpg
-
skin/gamesp/cat_more.gif.gif
-
skin/gamesp/cat_picbg.jpg.jpg
-
skin/gamesp/chrome.js.js
-
skin/gamesp/index_18.jpg.jpg
-
skin/gamesp/index_22.jpg.jpg
-
skin/gamesp/index_26.jpg.jpg
-
skin/gamesp/index_54.jpg.jpg
-
skin/gamesp/login.gif.gif
-
skin/gamesp/logo.jpg.jpg
-
skin/gamesp/main_left_bg.jpg.jpg
-
skin/gamesp/main_right_bg.jpg.jpg
-
skin/gamesp/menu_bg.jpg.jpg
-
skin/gamesp/menu_left.jpg.jpg
-
skin/gamesp/menu_right.jpg.jpg
-
skin/gamesp/menubg.gif.gif
-
skin/gamesp/menubg2.gif.gif
-
skin/gamesp/menubg3.gif.gif
-
skin/gamesp/menubg4.gif.gif
-
skin/gamesp/menubg5.gif.gif
-
skin/gamesp/name.gif.gif
-
skin/gamesp/nopic1.jpg.jpg
-
skin/gamesp/other_main_footer.jpg.jpg
-
skin/gamesp/other_main_header.jpg.jpg
-
skin/gamesp/other_main_left_header.gif.gif
-
skin/gamesp/page_on.gif.gif
-
skin/gamesp/page_over.gif.gif
-
skin/gamesp/pw.gif.gif
-
skin/新云软件.url.url