Overview

overview

3

Static

static

1

Gbook.js

windows7-x64

3

Gbook.js

windows10-2004-x64

3

admin/addpz.asp

windows7-x64

3

admin/addpz.asp

windows10-2004-x64

3

admin/admin_login.asp

windows7-x64

3

admin/admin_login.asp

windows10-2004-x64

3

admin/changepwd.asp

windows7-x64

3

admin/changepwd.asp

windows10-2004-x64

3

admin/checklogin.vbs

windows7-x64

1

admin/checklogin.vbs

windows10-2004-x64

1

admin/chec...on.asp

windows7-x64

3

admin/chec...on.asp

windows10-2004-x64

3

admin/config.asp

windows7-x64

3

admin/config.asp

windows10-2004-x64

3

admin/editbumen.asp

windows7-x64

3

admin/editbumen.asp

windows10-2004-x64

3

admin/editqq.asp

windows7-x64

3

admin/editqq.asp

windows10-2004-x64

3

admin/frame.asp

windows7-x64

3

admin/frame.asp

windows10-2004-x64

3

admin/index.asp

windows7-x64

3

admin/index.asp

windows10-2004-x64

3

admin/main.asp

windows7-x64

3

admin/main.asp

windows10-2004-x64

3

admin/quit.asp

windows7-x64

3

admin/quit.asp

windows10-2004-x64

3

admin/showbook.asp

windows7-x64

3

admin/showbook.asp

windows10-2004-x64

3

admin/top.asp

windows7-x64

3

admin/top.asp

windows10-2004-x64

3

admin/upda...ne.vbs

windows7-x64

1

admin/upda...ne.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b29845a99bfc4818f31cfbfb77a09e3_JaffaCakes118

  • Size

    198KB

  • Sample

    240811-vbz8baxhrm

  • MD5

    8b29845a99bfc4818f31cfbfb77a09e3

  • SHA1

    0c76d3611d32659caf8baa6cce8172d33d76c58d

  • SHA256

    7cf2a6af48bf9b892438ccc4534e4fdbe4d79e223299e03bb214eac41049c52a

  • SHA512

    35365507fd50993c6437cf14f7905a555cb3eca40f6954819dc5d9956b40cb45268c1331a51b701333c457053ba7eb147bb1f37389a5852213385b33dbf6ca62

  • SSDEEP

    6144:hJ/HZNb4Ek7REWGyu5BOWgSCNjX7sxnVU03yt/:hxHnbo5awWgSCjX7WY

Score
3/10
execution

Malware Config

Targets

    • Target

      Gbook.js

    • Size

      9KB

    • MD5

      8710585eed449cf6b8601b69ce24a470

    • SHA1

      0451af165e9ea190381abdc60f201434e160e906

    • SHA256

      1ed5486f8f98d313ca45cff79d926f9e47c72d892b37a9e1645548cae2e29172

    • SHA512

      20430e988ee8421bef70de808202bf0a21d28ec9a807239062bcc29d9c26475a68be3f105ed8bd0c9038de26b134fd526d780e03ef6caf1b617af895932e3be8

    • SSDEEP

      192:vALB+qyLjUIkdfBkdgNvcW316TSzaUzECr9QaJrQa3Qhct/:vALBtyc5fl1z

    Score
    3/10
    execution
    behavioral1behavioral2

    • Target

      admin/addpz.asp

    • Size

      1KB

    • MD5

      8ad5e3e4cb450bf45576eb61916bb594

    • SHA1

      358d013e52f5d5e85081866d2ff6102c84fbadf3

    • SHA256

      a722e61deb979073d5b5fea7bcca86011545701afb5d4fb655379508c0180968

    • SHA512

      5e11999dab3dccac795f4593339e31e72bab94cf48b586aed8bdb57325f14f8109393cbf32b9dd5c38760d9c2ffd0b928b2868741b491262eead6b213e415ad9

    Score
    3/10
    behavioral3behavioral4

    • Target

      admin/admin_login.asp

    • Size

      2KB

    • MD5

      069a5f63e489f9924a2456ca51d16120

    • SHA1

      6f4285324acc45fe3dd936a850cc33196985d759

    • SHA256

      7fab2f0e072ef77c9323980eaee6e2793b7791ad211daa85d4ead6979c5ca1d6

    • SHA512

      5f58a8672d4414440941e1caeb7b63502b1ecceadac6004f99a70f43afd9ba0a5490d6caaa095624982c2c8c9f3e37bb5bcd34defb4f56dfc43fee954587b43c

    Score
    3/10
    behavioral5behavioral6

    • Target

      admin/changepwd.asp

    • Size

      3KB

    • MD5

      a03520ed46937106d3c51cca470944f0

    • SHA1

      da5d7c887f19ac552115216cbf64a0f304341df6

    • SHA256

      432288b61ba24b7832c8dcd1bd3ba286e315bc7d9d64b367d7d896f1400f8a91

    • SHA512

      e8e92eba2c66662a37ee0f7a1a209dc3260f49c3ead917abf4d2fcca418469942219a3b649378c8ea56215760f9bc82f6b4b3f103bc82208cb1c8cc444303f1e

    Score
    3/10
    behavioral7behavioral8

    • Target

      admin/checklogin.asp

    • Size

      893B

    • MD5

      0bdbdede3c7d7fbc30463a56acdb0d62

    • SHA1

      58e793f14351c42dc79d9b2ec03cb83db1faf904

    • SHA256

      3e84e73c23ed1b60331d4a569c2e47ba48f9cf54a249195485e940b176ab8709

    • SHA512

      dec2fe59c3b3b29fe720022f871b49c261f7e8f20890ffe86cadcde07e98e3578842199e4758024f7fe96999849459e5c72b30c4f185673ffb27f7f0856787b6

    Score
    1/10
    behavioral10behavioral9

    • Target

      admin/checklogin_session.asp

    • Size

      187B

    • MD5

      766a7e9ce40acf9d0951cbc19599827b

    • SHA1

      d36ef75b41a1d7dc7009ec4b7c438b6d43ea50eb

    • SHA256

      0b1242525f0318d675cd9d61dc0dc104532199922043b9146352246d02db4a42

    • SHA512

      1952c3556996f6492a9ec90746ca017078a6980b1d42e77e7cbd2b915f94a5c7b01722f67140c70bfbfb2a28e69a92b1234fa2244f8b1e35573665445e4d473c

    Score
    3/10
    behavioral11behavioral12

    • Target

      admin/config.asp

    • Size

      3KB

    • MD5

      6e7c5cd1c352888dddbaa665270e96f5

    • SHA1

      273292ef6926cb25d4a05f41da589b76e3ed4f27

    • SHA256

      1f46f4683b2870845205342beb7750134b43743c5a571b372dfa07b05056fa64

    • SHA512

      4fd322473f250fe0d90ce4f77c62d5a2ee6800147750d0ee77d3cd926a55131eb82d99f289f7d491ff74aacefc834e7cde59daacade5f076eae8b6f982441b66

    Score
    3/10
    behavioral13behavioral14

    • Target

      admin/editbumen.asp

    • Size

      4KB

    • MD5

      7443f38704f3a06ad9399518be61ba4d

    • SHA1

      b3a4f064072587206efe11bbd78bc731b9e946b8

    • SHA256

      cf5adaa9f383fb6d9046959c18ee71438445b4def52027f353ceb6a7d22bffca

    • SHA512

      c7bb9d1d0740f9bd0114754b9fce9c88ba665e71de3bd71327d0b60f8bf9510def75ea26e2fa08e4cfeceb094a87a5c0c15b59e55d5986d3a38160c9f610332d

    • SSDEEP

      96:XoOOP0yAFsk0c/60LoIWO2UUUo6vsHouKrLUtQhsxWUbhQhL2xg:q0Tyk//60sIWO21c2UGvu

    Score
    3/10
    behavioral15behavioral16

    • Target

      admin/editqq.asp

    • Size

      8KB

    • MD5

      5b0133fe7a23a6fdd57f72b389e8684b

    • SHA1

      f3168b0b4cb72648fb63aa5b613d1a6a6c711361

    • SHA256

      5ef712021818bb8798b8f3fb20d1aec6946b838534c8dc28199ffdaa4b115187

    • SHA512

      d13599ddab86fdc4a96aa52195c834449ee622512d4d6d6b23d00cdaa8acd98c8a16f59ea2b0b2ffcf3c36e26bd27dea92d3e1d2e6f073fd4ef104f901db3e1e

    • SSDEEP

      96:zqoOOEUu0LAP40IJUu0qoIWOPUHU094tdMGoJkwPHoRmL0zKrHUR6P9hzz7AhZTG:Ju0sP4rau0fIWOPqien/mYHG+obY

    Score
    3/10
    behavioral17behavioral18

    • Target

      admin/frame.asp

    • Size

      752B

    • MD5

      715c7385bd3dc73425b18e01ca243d37

    • SHA1

      ff1fa584541ebabd3ad2d069bb40110a08791a7d

    • SHA256

      058bf14164089c27935f586649b028b03c42340435d4e8908b4d8d9053b9d333

    • SHA512

      16d98b7a2cc4313b4487df443824324be9b8cc1591f0c47b109b564460c8207975806e6471cc2d627d160f019212d267140add5f60c02592c9702759b730fa9f

    Score
    3/10
    behavioral19behavioral20

    • Target

      admin/index.asp

    • Size

      3KB

    • MD5

      420db7c8021333866fcb9c178570e0dc

    • SHA1

      d0188b86707f3d6751b3ba722f711ead1a8e7ac5

    • SHA256

      afb5edbd3a74376e4f712bbfa370e0e29ccc4e5298f804ad7965e85e0db04614

    • SHA512

      15b5721a2b642e5e5802117374f567ac8c986ae898bcb2048a31176c0164c37bd703da1c70c3f0828f94c2a9353bddd00e446e2eee4af5255372acd38b5716f6

    Score
    3/10
    behavioral21behavioral22

    • Target

      admin/main.asp

    • Size

      806B

    • MD5

      b5d6f3b954859dccc43535f076603c8e

    • SHA1

      c7edc26e1cd7af66153f61aed48e449d82d39a0d

    • SHA256

      6a43ad730dd11647e83e248680bbbd9a472bafbad77e1b8b1985b76e40c30dc3

    • SHA512

      4465041ba7dda4da649c0cc9e52cd09d0a142215b644382257339c47c95aadc1b6c4faf9ab91af870468673f11c7d4ee26118b3c4d69dd56fe94a00ef75f21e0

    Score
    3/10
    behavioral23behavioral24

    • Target

      admin/quit.asp

    • Size

      256B

    • MD5

      5b833a6d784994620e622169c6402cf0

    • SHA1

      fb09a89dc09c965d659f9a73f4112b3f81fa52de

    • SHA256

      30f5faafac006e250ebfbe13f6b599c241fd74cc72d8b5ccb2dbbf2eece578d9

    • SHA512

      78c14a1cf35b2ab30f1b685239adb7ea97a389afca8fa979a1299bcad1db1501875a272f50e0e040e9d305e400ad98dc3f3e957066133baa23d08fdd02e7d490

    Score
    3/10
    behavioral25behavioral26

    • Target

      admin/showbook.asp

    • Size

      4KB

    • MD5

      974f72eb3c5a5071e63ae00b7bf44f77

    • SHA1

      b5137b9e321e4ae641bce5367cd497483ff2dc40

    • SHA256

      8dc280db7b8c633ea52c3791008e51b6413847446f56e65048a08c3975acaa2c

    • SHA512

      aeaf5e52caa97639681383ec8fa684e370781c3470b7fa27897d68024754ce4e2c26a38fd78add7e45571afa8b638cf4a9d76802fe26460e03d2bd00f012c3cd

    • SSDEEP

      96:UHAZf00d/dM8I4nF54zv/zvDgWbTtfbhaxfZp8irLFtMTB:NZf0Q/dM8I4nrAv7vDgAtGFt8

    Score
    3/10
    behavioral27behavioral28

    • Target

      admin/top.asp

    • Size

      400B

    • MD5

      f2fdb75ea4a7cf7f5b8e34eb4b8304d3

    • SHA1

      398896ea35aacc66c77966c7c253748c12629127

    • SHA256

      bc8c513834f5d06425fcc8d0525651d501723aeb1cc62d796ff4297f7734a996

    • SHA512

      d492850bad175b8d87aa0baba857f7be4f6c951ed1479ec67ccfe5571e476657c6b70a809788996d28d26a8d383c32d9475a7f05012803b3b13e9877963f1500

    Score
    3/10
    behavioral29behavioral30

    • Target

      admin/updateonline.asp

    • Size

      3KB

    • MD5

      63db1f3491d7c89862a335ecd93ed020

    • SHA1

      89bda84eb8815c0e6927bedd8997dbfb2493c3bf

    • SHA256

      0d974982b859f2f2de120a54ed75d951dce937f5d7526aaa30eae305757e9f85

    • SHA512

      f187d25e24f971433018f248eda73ffc04d2b5520c621c2dbbf3d825747ea21fbae201e826faf17ceb2f1ee2c9f2716f4c80799a07faa3c20ee049369f1a9d23

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks