Overview
overview
3Static
static
1Vod/ChangePwd.asp
windows7-x64
3Vod/ChangePwd.asp
windows10-2004-x64
3Vod/CheckLogin.asp
windows7-x64
3Vod/CheckLogin.asp
windows10-2004-x64
3Vod/Description.asp
windows7-x64
3Vod/Description.asp
windows10-2004-x64
3Vod/Function.vbs
windows7-x64
1Vod/Function.vbs
windows10-2004-x64
1Vod/Index.asp
windows7-x64
3Vod/Index.asp
windows10-2004-x64
3Vod/Login.asp
windows7-x64
3Vod/Login.asp
windows10-2004-x64
3Vod/Logout.asp
windows7-x64
3Vod/Logout.asp
windows10-2004-x64
3Vod/Play.asp
windows7-x64
3Vod/Play.asp
windows10-2004-x64
3Vod/ShowMovie.asp
windows7-x64
3Vod/ShowMovie.asp
windows10-2004-x64
3Vod/ShowPlay.asp
windows7-x64
3Vod/ShowPlay.asp
windows10-2004-x64
3Vod/Step1.asp
windows7-x64
3Vod/Step1.asp
windows10-2004-x64
3Vod/Step2.asp
windows7-x64
3Vod/Step2.asp
windows10-2004-x64
3Vod/Type.asp
windows7-x64
3Vod/Type.asp
windows10-2004-x64
3Vod/bottom.asp
windows7-x64
3Vod/bottom.asp
windows10-2004-x64
3Vod/clsThief.vbs
windows7-x64
1Vod/clsThief.vbs
windows10-2004-x64
1Vod/conn.vbs
windows7-x64
1Vod/conn.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Vod/ChangePwd.asp
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Vod/ChangePwd.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Vod/CheckLogin.asp
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
Vod/CheckLogin.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Vod/Description.asp
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Vod/Description.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Vod/Function.vbs
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Vod/Function.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Vod/Index.asp
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Vod/Index.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Vod/Login.asp
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
Vod/Login.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Vod/Logout.asp
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Vod/Logout.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Vod/Play.asp
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Vod/Play.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Vod/ShowMovie.asp
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Vod/ShowMovie.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Vod/ShowPlay.asp
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
Vod/ShowPlay.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Vod/Step1.asp
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
Vod/Step1.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Vod/Step2.asp
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Vod/Step2.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Vod/Type.asp
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Vod/Type.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Vod/bottom.asp
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
Vod/bottom.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Vod/clsThief.vbs
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
Vod/clsThief.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Vod/conn.vbs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Vod/conn.vbs
Resource
win10v2004-20240802-en
General
-
Target
94f4f9912ae38fcd3a527d865b3e397a_JaffaCakes118
-
Size
286KB
-
MD5
94f4f9912ae38fcd3a527d865b3e397a
-
SHA1
eb5a02d90b1b7691a29409265fca3259e5d6774b
-
SHA256
5155f5dff839dbfdd961cf7e913fa4589d086f2bb25991d7fd80cc8fe00e3a27
-
SHA512
ee006f640115683ac010e90e4cd0915ace9b338af015be9d5b509d27d51eb0dff441e78437a8d522e964261e1e85f154d26fa99b9d63043291581360e1e4cfe4
-
SSDEEP
6144:AZ89zgTdVjAa24vWRnahOBOLwe3hR2fKRv48wFLBR6nfjZl1a:AZ89zgTjjAnoW5a8A/Q82LLaVl1a
Malware Config
Signatures
Files
-
94f4f9912ae38fcd3a527d865b3e397a_JaffaCakes118.rar
-
Vod/ChangePwd.asp.asp .vbs polyglot
-
Vod/CheckLogin.asp.asp .vbs polyglot
-
Vod/Description.asp.asp
-
Vod/Function.asp.vbs
-
Vod/Index.asp.asp .vbs polyglot
-
Vod/Login.asp.asp
-
Vod/Logout.asp
-
Vod/Play.asp.asp .js polyglot
-
Vod/ShowMovie.asp.asp .js polyglot
-
Vod/ShowPlay.asp.asp .vbs polyglot
-
Vod/Step1.asp.asp
-
Vod/Step2.asp.asp .vbs polyglot
-
Vod/Type.asp
-
Vod/bottom.asp
-
Vod/clsThief.asp.vbs
-
Vod/conn.asp.vbs
-
Vod/cookies.asp
-
Vod/css.css
-
Vod/image/Thumbs.db
-
Vod/image/bg1.gif.gif
-
Vod/image/bg2.gif.gif
-
Vod/image/qq.gif.gif
-
Vod/js/56.js.js
-
Vod/js/6rooms.js.js
-
Vod/js/Thumbs.db
-
Vod/js/flash_player.js.js
-
Vod/js/tudou.htm.html .js polyglot
-
Vod/js/tudou.js.js
-
Vod/js/youku.js.js
-
Vod/md5.asp.vbs
-
Vod/mydata.mdb
-
Vod/picture/20085317182245065.jpg.jpg
-
Vod/picture/20085317215944511.jpg.jpg
-
Vod/picture/Thumbs.db
-
Vod/temp.css
-
Vod/thief_yvmv.asp.asp .vbs polyglot
-
Vod/top.asp
-
Vod/新云软件.url.url