Overview
overview
3Static
static
1Ther CMS/adduser.vbs
windows7-x64
1Ther CMS/adduser.vbs
windows10-2004-x64
1Ther CMS/admin.html
windows7-x64
3Ther CMS/admin.html
windows10-2004-x64
3Ther CMS/a...it.vbs
windows7-x64
1Ther CMS/a...it.vbs
windows10-2004-x64
1Ther CMS/a...ve.vbs
windows7-x64
1Ther CMS/a...ve.vbs
windows10-2004-x64
1Ther CMS/a...er.vbs
windows7-x64
1Ther CMS/a...er.vbs
windows10-2004-x64
1Ther CMS/athers.vbs
windows7-x64
1Ther CMS/athers.vbs
windows10-2004-x64
1Ther CMS/char.vbs
windows7-x64
1Ther CMS/char.vbs
windows10-2004-x64
1Ther CMS/conn.vbs
windows7-x64
1Ther CMS/conn.vbs
windows10-2004-x64
1Ther CMS/const.asp
windows7-x64
3Ther CMS/const.asp
windows10-2004-x64
3Ther CMS/e...le.vbs
windows7-x64
1Ther CMS/e...le.vbs
windows10-2004-x64
1Ther CMS/foot.html
windows7-x64
3Ther CMS/foot.html
windows10-2004-x64
3Ther CMS/freeadd.vbs
windows7-x64
1Ther CMS/freeadd.vbs
windows10-2004-x64
1Ther CMS/head.asp
windows7-x64
3Ther CMS/head.asp
windows10-2004-x64
3Ther CMS/h...dit.js
windows7-x64
3Ther CMS/h...dit.js
windows10-2004-x64
3Ther CMS/h...r.html
windows7-x64
3Ther CMS/h...r.html
windows10-2004-x64
3Ther CMS/h...r.html
windows7-x64
3Ther CMS/h...r.html
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
Ther CMS/adduser.vbs
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Ther CMS/adduser.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Ther CMS/admin.html
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Ther CMS/admin.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Ther CMS/adminedit.vbs
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Ther CMS/adminedit.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Ther CMS/adminsave.vbs
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Ther CMS/adminsave.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Ther CMS/adminuser.vbs
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
Ther CMS/adminuser.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Ther CMS/athers.vbs
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Ther CMS/athers.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Ther CMS/char.vbs
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Ther CMS/char.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Ther CMS/conn.vbs
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Ther CMS/conn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Ther CMS/const.asp
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Ther CMS/const.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Ther CMS/editarticle.vbs
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
Ther CMS/editarticle.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Ther CMS/foot.html
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
Ther CMS/foot.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Ther CMS/freeadd.vbs
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
Ther CMS/freeadd.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Ther CMS/head.asp
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Ther CMS/head.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Ther CMS/htmledit/edit.js
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
Ther CMS/htmledit/edit.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Ther CMS/htmledit/editor.html
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
Ther CMS/htmledit/editor.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Ther CMS/htmledit/selcolor.html
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Ther CMS/htmledit/selcolor.html
Resource
win10v2004-20240802-en
General
-
Target
a5ee41867c794696d65a12e7d2da901c_JaffaCakes118
-
Size
96KB
-
MD5
a5ee41867c794696d65a12e7d2da901c
-
SHA1
57e88ca591f45ad3c25e1d58b3b44d72dd590cbf
-
SHA256
b118dcb6742c9f2e471e16f253839950c973c7707c574dfae5bbf235bfe459e3
-
SHA512
55423ce80bdf4dce7cf26d1fa2ebd7e490a686c5c2ac918ad84ed3501ed4bcc5a10144e9510b76159d20c2c64cc0aa2c8f5e1924e91c72d435fdaec328972116
-
SSDEEP
3072:BzaMdmSFN3/WbQ+K5eAR/oK8AhHoCTu/2cgBks:BzVb/mQ+adVN8AFoCXks
Malware Config
Signatures
Files
-
a5ee41867c794696d65a12e7d2da901c_JaffaCakes118.rar
-
Ther CMS/adduser.asp.vbs
-
Ther CMS/admin.asp.html
-
Ther CMS/adminedit.asp.vbs
-
Ther CMS/adminsave.asp.vbs
-
Ther CMS/adminuser.asp.vbs
-
Ther CMS/athers.asp.vbs
-
Ther CMS/char.asp.vbs
-
Ther CMS/code.asp.html .js polyglot
-
Ther CMS/conn.asp.vbs
-
Ther CMS/const.asp
-
Ther CMS/editarticle.asp.vbs
-
Ther CMS/foot.asp.html
-
Ther CMS/freeadd.asp.vbs
-
Ther CMS/head.asp
-
Ther CMS/htmledit/code.asp.html .js polyglot
-
Ther CMS/htmledit/edit.css
-
Ther CMS/htmledit/edit.js.js
-
Ther CMS/htmledit/editor.html.html
-
Ther CMS/htmledit/images/aleft.gif.gif
-
Ther CMS/htmledit/images/aright.gif.gif
-
Ther CMS/htmledit/images/bold.gif.gif
-
Ther CMS/htmledit/images/bullist.gif.gif
-
Ther CMS/htmledit/images/center.gif.gif
-
Ther CMS/htmledit/images/copy.gif.gif
-
Ther CMS/htmledit/images/cut.gif.gif
-
Ther CMS/htmledit/images/delete.gif.gif
-
Ther CMS/htmledit/images/fgcolor.gif.gif
-
Ther CMS/htmledit/images/help.gif.gif
-
Ther CMS/htmledit/images/hr.gif.gif
-
Ther CMS/htmledit/images/img.gif.gif
-
Ther CMS/htmledit/images/indent.gif.gif
-
Ther CMS/htmledit/images/italic.gif.gif
-
Ther CMS/htmledit/images/numlist.gif.gif
-
Ther CMS/htmledit/images/outdent.gif.gif
-
Ther CMS/htmledit/images/paste.gif.gif
-
Ther CMS/htmledit/images/redo.gif.gif
-
Ther CMS/htmledit/images/save.gif.gif
-
Ther CMS/htmledit/images/table.gif.gif
-
Ther CMS/htmledit/images/underline.gif.gif
-
Ther CMS/htmledit/images/undo.gif.gif
-
Ther CMS/htmledit/images/wlink.gif.gif
-
Ther CMS/htmledit/selcolor.html.html .js polyglot
-
Ther CMS/htmledit/table.html.html
-
Ther CMS/index.asp.vbs
-
Ther CMS/left.asp.html
-
Ther CMS/list.asp.vbs
-
Ther CMS/logout.asp
-
Ther CMS/look.txt
-
Ther CMS/manage.asp.html .vbs polyglot
-
Ther CMS/md5.asp.vbs
-
Ther CMS/online.asp.vbs
-
Ther CMS/ru_query.ASP.vbs
-
Ther CMS/saveuser.asp.vbs
-
Ther CMS/saveuser1.asp.vbs
-
Ther CMS/search.gif.gif
-
Ther CMS/style.css
-
Ther CMS/ther.asp
-
Ther CMS/thers.asp.vbs
-
Ther CMS/up_logo.gif.gif
-
Ther CMS/新云软件.url.url