Overview
overview
3Static
static
1gezige/Spr...1.html
windows7-x64
3gezige/Spr...1.html
windows10-2004-x64
3gezige/Spr...AR.vbs
windows7-x64
1gezige/Spr...AR.vbs
windows10-2004-x64
1gezige/Spr...BB.vbs
windows7-x64
1gezige/Spr...BB.vbs
windows10-2004-x64
1gezige/adm...eft.js
windows7-x64
3gezige/adm...eft.js
windows10-2004-x64
3gezige/adm...ht.asp
windows7-x64
3gezige/adm...ht.asp
windows10-2004-x64
3gezige/adm...n.html
windows7-x64
3gezige/adm...n.html
windows10-2004-x64
3gezige/adm...dd.vbs
windows7-x64
1gezige/adm...dd.vbs
windows10-2004-x64
1gezige/adm...od.vbs
windows7-x64
1gezige/adm...od.vbs
windows10-2004-x64
1gezige/adm...dd.vbs
windows7-x64
1gezige/adm...dd.vbs
windows10-2004-x64
1gezige/adm...od.vbs
windows7-x64
1gezige/adm...od.vbs
windows10-2004-x64
1gezige/adm...ser.js
windows7-x64
3gezige/adm...ser.js
windows10-2004-x64
3gezige/adm...ss.asp
windows7-x64
3gezige/adm...ss.asp
windows10-2004-x64
3gezige/adm...om.asp
windows7-x64
3gezige/adm...om.asp
windows10-2004-x64
3gezige/adm...no.vbs
windows7-x64
1gezige/adm...no.vbs
windows10-2004-x64
1gezige/adm...yes.js
windows7-x64
3gezige/adm...yes.js
windows10-2004-x64
3gezige/admin/conn.vbs
windows7-x64
1gezige/admin/conn.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
gezige/Spread/PICON1.html
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
gezige/Spread/PICON1.html
Resource
win10v2004-20240730-en
Behavioral task
behavioral3
Sample
gezige/Spread/inc/CHAR.vbs
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
gezige/Spread/inc/CHAR.vbs
Resource
win10v2004-20240730-en
Behavioral task
behavioral5
Sample
gezige/Spread/inc/UBB.vbs
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
gezige/Spread/inc/UBB.vbs
Resource
win10v2004-20240730-en
Behavioral task
behavioral7
Sample
gezige/admin/Admin_left.js
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
gezige/admin/Admin_left.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral9
Sample
gezige/admin/Admin_right.asp
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
gezige/admin/Admin_right.asp
Resource
win10v2004-20240730-en
Behavioral task
behavioral11
Sample
gezige/admin/admin.html
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
gezige/admin/admin.html
Resource
win10v2004-20240730-en
Behavioral task
behavioral13
Sample
gezige/admin/admin_classadd.vbs
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
gezige/admin/admin_classadd.vbs
Resource
win10v2004-20240730-en
Behavioral task
behavioral15
Sample
gezige/admin/admin_classmod.vbs
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
gezige/admin/admin_classmod.vbs
Resource
win10v2004-20240730-en
Behavioral task
behavioral17
Sample
gezige/admin/admin_loginadd.vbs
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
gezige/admin/admin_loginadd.vbs
Resource
win10v2004-20240730-en
Behavioral task
behavioral19
Sample
gezige/admin/admin_loginmod.vbs
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
gezige/admin/admin_loginmod.vbs
Resource
win10v2004-20240730-en
Behavioral task
behavioral21
Sample
gezige/admin/admin_loginuser.js
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
gezige/admin/admin_loginuser.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral23
Sample
gezige/admin/admin_pass.asp
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
gezige/admin/admin_pass.asp
Resource
win10v2004-20240730-en
Behavioral task
behavioral25
Sample
gezige/admin/admin_popedom.asp
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
gezige/admin/admin_popedom.asp
Resource
win10v2004-20240730-en
Behavioral task
behavioral27
Sample
gezige/admin/admin_webno.vbs
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
gezige/admin/admin_webno.vbs
Resource
win10v2004-20240730-en
Behavioral task
behavioral29
Sample
gezige/admin/admin_webyes.js
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
gezige/admin/admin_webyes.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral31
Sample
gezige/admin/conn.vbs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
gezige/admin/conn.vbs
Resource
win10v2004-20240730-en
General
-
Target
83508607af079d6c53371a1cb4848397_JaffaCakes118
-
Size
119KB
-
MD5
83508607af079d6c53371a1cb4848397
-
SHA1
0e4a0e986a90d2fc4d0ccecd215f0bd7d475c59a
-
SHA256
2a64ca92ad1d10a381a20c7d9b3b7b49fbb89aba6e352bfb2834d0433346d794
-
SHA512
d68f8ce732d28f62e8ef243ba94bb23ded2d12c8099f7c616dfb6eea72190ac2bbf7521f2fd28d7a9f4f4b6d5935c7c39e1bd19278fb627781e53c0913461d67
-
SSDEEP
3072:OTOD1rSaQY502vpt9/YFEj1N8JNAWi8YkSiqYD:/v02DuiN8JNA0Yriqq
Malware Config
Signatures
Files
-
83508607af079d6c53371a1cb4848397_JaffaCakes118.rar
-
gezige/Spread/PICON1.ASP.html
-
gezige/Spread/PICON2.ASP.html .vbs polyglot
-
gezige/Spread/inc/CHAR.INC.vbs
-
gezige/Spread/inc/UBB.INC.vbs
-
gezige/Spread/inc/UPLOAD.INC.html .vbs polyglot
-
gezige/Spread/inc/upload_5xsoft.inc.html .vbs polyglot
-
gezige/Spread/webshow/200631921311.gif.gif
-
gezige/Spread/webshow/200631921416.gif.gif
-
gezige/Spread/webshow/200631921631.gif.gif
-
gezige/Spread/webshow/200631925134.gif.gif
-
gezige/Spread/webshow/200631925415.gif.gif
-
gezige/Spread/webshow/200631925561.gif.gif
-
gezige/Spread/webshow/200631925732.gif.gif
-
gezige/Spread/webshow/200631925925.gif.gif
-
gezige/Spread/webshow/200631930131.gif.gif
-
gezige/Spread/webshow/200631930444.gif.gif
-
gezige/admin/Admin_left.asp.js
-
gezige/admin/Admin_right.asp
-
gezige/admin/admin.asp.html
-
gezige/admin/admin_classadd.asp.vbs
-
gezige/admin/admin_classmod.asp.vbs
-
gezige/admin/admin_loginadd.asp.vbs
-
gezige/admin/admin_loginmod.asp.vbs
-
gezige/admin/admin_loginuser.asp.js
-
gezige/admin/admin_pass.asp.asp .vbs polyglot
-
gezige/admin/admin_popedom.asp
-
gezige/admin/admin_webno.asp.vbs
-
gezige/admin/admin_webyes.asp.js
-
gezige/admin/conn.asp.vbs
-
gezige/admin/images/admin1.gif.gif
-
gezige/admin/images/admin2.gif.gif
-
gezige/admin/images/admin3.gif.gif
-
gezige/admin/images/admin4.gif.gif
-
gezige/admin/images/adminbg.gif.gif
-
gezige/admin/images/key01.gif.gif
-
gezige/admin/images/key02.gif.gif
-
gezige/admin/images/login01.gif.gif
-
gezige/admin/images/login02.gif.gif
-
gezige/admin/images/login03.gif.gif
-
gezige/admin/index.asp.asp
-
gezige/bottom.asp
-
gezige/class.asp.asp .vbs polyglot
-
gezige/conn.asp.vbs
-
gezige/css/css.css
-
gezige/gezige.asp
-
gezige/gezigedata/maomao.mdb
-
gezige/images/120x60.gif.gif
-
gezige/images/468x60.gif.gif
-
gezige/images/68x60.gif.gif
-
gezige/images/88x31.gif.gif
-
gezige/images/gezi.gif.gif
-
gezige/images/logo.gif.gif
-
gezige/images/logo1.gif.gif
-
gezige/index.asp.asp .vbs polyglot
-
gezige/join.asp.asp .vbs polyglot
-
gezige/login.asp.asp .vbs polyglot
-
gezige/md5.asp.vbs
-
gezige/top.asp.vbs
-
gezige/user_pass.asp.asp .vbs polyglot
-
gezige/下载说明.htm.html .js polyglot
-
gezige/使用说明.txt