Overview
overview
3Static
static
1ChkUser.vbs
windows7-x64
1ChkUser.vbs
windows10-2004-x64
1GetCode.vbs
windows7-x64
1GetCode.vbs
windows10-2004-x64
1conn.vbs
windows7-x64
1conn.vbs
windows10-2004-x64
1data/新云软件.url
windows7-x64
1data/新云软件.url
windows10-2004-x64
1db_from_help.asp
windows7-x64
3db_from_help.asp
windows10-2004-x64
3db_tb_td.vbs
windows7-x64
1db_tb_td.vbs
windows10-2004-x64
1db_tb_value.vbs
windows7-x64
1db_tb_value.vbs
windows10-2004-x64
1dialog.html
windows7-x64
3dialog.html
windows10-2004-x64
3enpas.vbs
windows7-x64
1enpas.vbs
windows10-2004-x64
1file_incupload.vbs
windows7-x64
1file_incupload.vbs
windows10-2004-x64
1file_list.vbs
windows7-x64
1file_list.vbs
windows10-2004-x64
1file_list_right.vbs
windows7-x64
1file_list_right.vbs
windows10-2004-x64
1file_select.asp
windows7-x64
3file_select.asp
windows10-2004-x64
3file_select_left.vbs
windows7-x64
1file_select_left.vbs
windows10-2004-x64
1file_selec...ub.vbs
windows7-x64
1file_selec...ub.vbs
windows10-2004-x64
1file_select_right.vbs
windows7-x64
1file_select_right.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ChkUser.vbs
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ChkUser.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
GetCode.vbs
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
GetCode.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
conn.vbs
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
conn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
data/新云软件.url
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
data/新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
db_from_help.asp
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
db_from_help.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
db_tb_td.vbs
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
db_tb_td.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
db_tb_value.vbs
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
db_tb_value.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
dialog.html
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
dialog.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
enpas.vbs
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
enpas.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
file_incupload.vbs
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
file_incupload.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
file_list.vbs
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
file_list.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
file_list_right.vbs
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
file_list_right.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
file_select.asp
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
file_select.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
file_select_left.vbs
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
file_select_left.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
file_select_left_sub.vbs
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
file_select_left_sub.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
file_select_right.vbs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
file_select_right.vbs
Resource
win10v2004-20240802-en
General
-
Target
9729e71b09ec897d3044aed0de032af5_JaffaCakes118
-
Size
127KB
-
MD5
9729e71b09ec897d3044aed0de032af5
-
SHA1
e4f56cc57a6e3b7aaac17d9330f392430055c1f3
-
SHA256
024ce89f8bc6d78779b890d4954c03afa39dcc0ddcc8f0647061707c86554f81
-
SHA512
5f4b8f48e8c45c5b46175650fc0b68b48828b71eb645ad06ef8440cea386164797d1c84e4b75a47081e8c092fae1103409013e093673463dc9540b5774c779b2
-
SSDEEP
3072:xVTakijkWEdlyjV9syxiGp/aoUXsvZELxWK2EXPil:xVTaCvdC9esU6eIK2x
Malware Config
Signatures
Files
-
9729e71b09ec897d3044aed0de032af5_JaffaCakes118.rar
-
ChkUser.asp.vbs
-
GetCode.asp.vbs
-
conn.asp.vbs
-
data/global.asa
-
data/新云软件.url.url
-
db_from_Access_left.asp.html .vbs polyglot
-
db_from_help.asp
-
db_tb_td.asp.vbs
-
db_tb_value.asp.vbs
-
dialog.asp.html
-
enpas.asp.vbs
-
file_incupload.vbs.vbs
-
file_list.asp.vbs
-
file_list_right.asp.vbs
-
file_select.asp
-
file_select_left.asp.vbs
-
file_select_left_sub.asp.vbs
-
file_select_right.asp.vbs
-
file_select_sub.asp.js
-
file_upfile.asp
-
file_upfile_save.asp.vbs
-
fun.asp.vbs
-
images/FOOT.gif.gif
-
images/Thumbs.db
-
images/asp.gif.gif
-
images/avi.gif
-
images/back.gif.gif
-
images/bg.gif.gif
-
images/bgbrick.gif.gif
-
images/bmp.gif.gif
-
images/but_save.gif.gif
-
images/button_login.gif.gif
-
images/close.gif.gif
-
images/copy.gif.gif
-
images/cut.gif.gif
-
images/del.gif.gif
-
images/doc.gif.gif
-
images/folder.gif.gif
-
images/gif.gif.gif
-
images/go.gif.gif
-
images/htm.gif.gif
-
images/html.gif.gif
-
images/ini.gif.gif
-
images/jpg.gif
-
images/leadbottom.gif.gif
-
images/leadtop.gif.gif
-
images/line.gif.gif
-
images/line2.gif.gif
-
images/logo.gif.gif
-
images/mdb.gif.gif
-
images/mp3.gif.gif
-
images/paste.gif.gif
-
images/php.gif.gif
-
images/ppt.gif.gif
-
images/psd.gif.gif
-
images/rar.gif.gif
-
images/refresh.gif.gif
-
images/rm.gif.gif
-
images/tb.gif.gif
-
images/title.gif.gif
-
images/txt.gif.gif
-
images/unknown.gif.gif
-
images/up.gif.gif
-
images/up1.gif.gif
-
images/urlGo.gif.gif
-
images/xls.gif.gif
-
images/zhishi_01.gif.gif
-
images/zhishi_02.gif.gif
-
images/zhishi_03.gif.gif
-
images/zhishi_04.gif.gif
-
images/zhishi_05.gif.gif
-
images/zip.gif.gif
-
index.asp
-
ja.gif.gif
-
jan.gif.gif
-
js/file_list_right.js.js
-
js/file_select_left.js.js
-
login.asp.vbs
-
login_sub.asp.html
-
main.asp.html
-
public.asp.html .js polyglot
-
session.asp.vbs
-
user.asp.vbs