Overview
overview
3Static
static
1LLFenxi3/A...��.url
windows7-x64
1LLFenxi3/A...��.url
windows10-2004-x64
1LLFenxi3/Chkadmin.vbs
windows7-x64
1LLFenxi3/Chkadmin.vbs
windows10-2004-x64
1LLFenxi3/Online.vbs
windows7-x64
1LLFenxi3/Online.vbs
windows10-2004-x64
1LLFenxi3/config.vbs
windows7-x64
1LLFenxi3/config.vbs
windows10-2004-x64
1LLFenxi3/d...P5.asp
windows7-x64
1LLFenxi3/d...P5.asp
windows10-2004-x64
1LLFenxi3/del.asp
windows7-x64
3LLFenxi3/del.asp
windows10-2004-x64
3LLFenxi3/i...ate.js
windows7-x64
3LLFenxi3/i...ate.js
windows10-2004-x64
3LLFenxi3/i...ip.asp
windows7-x64
3LLFenxi3/i...ip.asp
windows10-2004-x64
3LLFenxi3/index.html
windows7-x64
3LLFenxi3/index.html
windows10-2004-x64
3LLFenxi3/l...xi.vbs
windows7-x64
1LLFenxi3/l...xi.vbs
windows10-2004-x64
1LLFenxi3/login.asp
windows7-x64
3LLFenxi3/login.asp
windows10-2004-x64
3LLFenxi3/logout.asp
windows7-x64
3LLFenxi3/logout.asp
windows10-2004-x64
3LLFenxi3/s...ng.vbs
windows7-x64
1LLFenxi3/s...ng.vbs
windows10-2004-x64
1LLFenxi3/s...ay.vbs
windows7-x64
1LLFenxi3/s...ay.vbs
windows10-2004-x64
1LLFenxi3/s...al.vbs
windows7-x64
1LLFenxi3/s...al.vbs
windows10-2004-x64
1LLFenxi3/s...ne.vbs
windows7-x64
1LLFenxi3/s...ne.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
LLFenxi3/ASP 来路分析系统V3.2正式版 功能演示.url
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
LLFenxi3/ASP 来路分析系统V3.2正式版 功能演示.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
LLFenxi3/Chkadmin.vbs
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
LLFenxi3/Chkadmin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
LLFenxi3/Online.vbs
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
LLFenxi3/Online.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
LLFenxi3/config.vbs
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
LLFenxi3/config.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
LLFenxi3/data/sjmp5.llfenxi_%$#^%$#DFFGF$##@^SJMP5.asp
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
LLFenxi3/data/sjmp5.llfenxi_%$#^%$#DFFGF$##@^SJMP5.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
LLFenxi3/del.asp
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
LLFenxi3/del.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
LLFenxi3/images/date.js
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
LLFenxi3/images/date.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
LLFenxi3/images/sjmp5_ip.asp
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
LLFenxi3/images/sjmp5_ip.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
LLFenxi3/index.html
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
LLFenxi3/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
LLFenxi3/lailufenxi.vbs
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
LLFenxi3/lailufenxi.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
LLFenxi3/login.asp
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
LLFenxi3/login.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
LLFenxi3/logout.asp
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
LLFenxi3/logout.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
LLFenxi3/sjmp5_Byvisiting.vbs
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
LLFenxi3/sjmp5_Byvisiting.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
LLFenxi3/sjmp5_Byvisiting_day.vbs
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
LLFenxi3/sjmp5_Byvisiting_day.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
LLFenxi3/sjmp5_Byvisiting_total.vbs
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
LLFenxi3/sjmp5_Byvisiting_total.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
LLFenxi3/sjmp5_Online.vbs
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
LLFenxi3/sjmp5_Online.vbs
Resource
win10v2004-20240802-en
General
-
Target
add24c802b36d40879bd78b8771dbc18_JaffaCakes118
-
Size
2.6MB
-
MD5
add24c802b36d40879bd78b8771dbc18
-
SHA1
e502f96d381b320ff914f124a6499e6e1d02c023
-
SHA256
a414816d0620758dff422871ca98177233ec01fb6edc41d6061a52e33530c828
-
SHA512
353b12d7242262217a9370b489edc13d968a690a115eb1fecad16e32af94cbbe9039e61e9d6830042411c4d498d2b7279e2990ab30474ee6cdaff42f64dd52c7
-
SSDEEP
49152:3lONOlcgZStcWjHF3Af4C7/e8J1npSEeJslwcD7F+7y:3lH8cIHF3oWi1pSEemN1+m
Malware Config
Signatures
Files
-
add24c802b36d40879bd78b8771dbc18_JaffaCakes118.rar
-
LLFenxi3/ASP 来路分析系统V3.2正式版 功能演示.url.url
-
LLFenxi3/Chkadmin.asp.vbs
-
LLFenxi3/Online.asp.vbs
-
LLFenxi3/config.asp.vbs
-
LLFenxi3/data/sjmp5.llfenxi_%$#^%$#DFFGF$##@^SJMP5.asp
-
LLFenxi3/del.asp
-
LLFenxi3/images/01.gif.gif
-
LLFenxi3/images/02.gif.gif
-
LLFenxi3/images/03.gif.gif
-
LLFenxi3/images/B0DY.Fix
-
LLFenxi3/images/FOOT_BG1.gif.gif
-
LLFenxi3/images/Head.Fix
-
LLFenxi3/images/Thumbs.db
-
LLFenxi3/images/an_01.gif.gif
-
LLFenxi3/images/an_02.gif.gif
-
LLFenxi3/images/an_03.gif.gif
-
LLFenxi3/images/an_04.gif.gif
-
LLFenxi3/images/button_bg.gif.gif
-
LLFenxi3/images/css.css
-
LLFenxi3/images/date.gif.gif
-
LLFenxi3/images/date.js.js
-
LLFenxi3/images/eeec.gif.gif
-
LLFenxi3/images/eeed.gif.gif
-
LLFenxi3/images/eeeeee.gif.gif
-
LLFenxi3/images/home_01.gif.gif
-
LLFenxi3/images/home_02.gif.gif
-
LLFenxi3/images/home_03.gif.gif
-
LLFenxi3/images/hot_01_01.gif.gif
-
LLFenxi3/images/hot_01_02.gif.gif
-
LLFenxi3/images/hot_01_03.gif.gif
-
LLFenxi3/images/hot_02_01.gif.gif
-
LLFenxi3/images/hot_02_02.gif.gif
-
LLFenxi3/images/hot_02_03.gif.gif
-
LLFenxi3/images/hot_03.gif.gif
-
LLFenxi3/images/hot_03s.gif.gif
-
LLFenxi3/images/k_01.gif.gif
-
LLFenxi3/images/k_02.gif.gif
-
LLFenxi3/images/k_03.gif.gif
-
LLFenxi3/images/l.gif.gif
-
LLFenxi3/images/list_bg.gif.gif
-
LLFenxi3/images/list_bg_hover.gif.gif
-
LLFenxi3/images/logo.jpg.jpg
-
LLFenxi3/images/qqon.gif.gif
-
LLFenxi3/images/sjmp5_ip.asp
-
LLFenxi3/images/sjmp5_logo.jpg.jpg
-
LLFenxi3/images/smallbg.jpg.jpg
-
LLFenxi3/images/tab_bg_foot.gif.gif
-
LLFenxi3/images/tab_bg_foot2.gif.gif
-
LLFenxi3/images/tab_bg_top.gif.gif
-
LLFenxi3/images/tab_bg_top2.gif.gif
-
LLFenxi3/images/tab_bg_top22.gif.gif
-
LLFenxi3/images/tab_bg_top2s.gif.gif
-
LLFenxi3/images/tab_topbg_1.gif.gif
-
LLFenxi3/images/top_01.gif.gif
-
LLFenxi3/images/top_02.gif.gif
-
LLFenxi3/images/top_03.gif.gif
-
LLFenxi3/images/top_04.gif.gif
-
LLFenxi3/images/ts_01s.gif.gif
-
LLFenxi3/images/ts_04s.gif.gif
-
LLFenxi3/images/说明.txt
-
LLFenxi3/index.asp.html
-
LLFenxi3/lailufenxi.asp.vbs
-
LLFenxi3/login.asp
-
LLFenxi3/logout.asp
-
LLFenxi3/sjmp5_Byvisiting.asp.vbs
-
LLFenxi3/sjmp5_Byvisiting_day.asp.vbs
-
LLFenxi3/sjmp5_Byvisiting_total.asp.vbs
-
LLFenxi3/sjmp5_Online.asp.vbs
-
LLFenxi3/sjmp5_Source.asp.vbs
-
LLFenxi3/sjmp5_Source_day.asp.vbs
-
LLFenxi3/sjmp5_Source_log.asp.vbs
-
LLFenxi3/sjmp5_Source_total.asp.vbs
-
LLFenxi3/sjmp5_System_Config.asp.vbs
-
LLFenxi3/sjmp5_System_pass.asp.vbs
-
LLFenxi3/sjmp5_System_pass_ser.asp.vbs
-
LLFenxi3/sjmp5_del.asp.vbs
-
LLFenxi3/sjmp5_del_ser.asp
-
LLFenxi3/sjmp5_ie_Ranking.asp.vbs
-
LLFenxi3/sjmp5_ie_day.asp.vbs
-
LLFenxi3/sjmp5_ie_log.asp.vbs
-
LLFenxi3/sjmp5_ie_months.asp.vbs
-
LLFenxi3/sjmp5_ie_total.asp.vbs
-
LLFenxi3/sjmp5_inc/Sjmp5_Foot.asp
-
LLFenxi3/sjmp5_inc/ips.asp.vbs
-
LLFenxi3/sjmp5_inc/md5.asp.vbs
-
LLFenxi3/sjmp5_inc/mdb.asp
-
LLFenxi3/sjmp5_inc/sjmp5_checkcode.asp.vbs
-
LLFenxi3/sjmp5_inc/sjmp5_code.asp.vbs
-
LLFenxi3/sjmp5_inc/sjmp5_keyword.asp.vbs
-
LLFenxi3/sjmp5_inc/sjmp5_llfenxi.asp.vbs
-
LLFenxi3/sjmp5_inc/sjmp5_llfenxiser.asp
-
LLFenxi3/sjmp5_inc/sjmp5_page.asp.vbs
-
LLFenxi3/sjmp5_inc/sjmp5_top.asp
-
LLFenxi3/sjmp5_inc/说明.txt
-
LLFenxi3/sjmp5_ip_Ranking.asp.vbs
-
LLFenxi3/sjmp5_ip_day.asp.vbs
-
LLFenxi3/sjmp5_ip_log.asp.vbs
-
LLFenxi3/sjmp5_ip_months.asp.vbs
-
LLFenxi3/sjmp5_ip_total.asp.vbs
-
LLFenxi3/sjmp5_keyword_Ranking.asp.vbs
-
LLFenxi3/sjmp5_keyword_day.asp.vbs
-
LLFenxi3/sjmp5_keyword_hist.asp.vbs
-
LLFenxi3/sjmp5_keyword_months.asp.vbs
-
LLFenxi3/sjmp5_keyword_total.asp.vbs
-
LLFenxi3/sjmp5_log.asp.vbs
-
LLFenxi3/sjmp5_log_day.asp.vbs
-
LLFenxi3/sjmp5_log_total.asp.vbs
-
LLFenxi3/sjmp5_pass_edit.asp.vbs
-
LLFenxi3/sjmp5_resolution_Ranking.asp.vbs
-
LLFenxi3/sjmp5_resolution_day.asp.vbs
-
LLFenxi3/sjmp5_resolution_log.asp.vbs
-
LLFenxi3/sjmp5_resolution_months.asp.vbs
-
LLFenxi3/sjmp5_resolution_total.asp.vbs
-
LLFenxi3/sjmp5_system_Ranking.asp.vbs
-
LLFenxi3/sjmp5_system_day.asp.vbs
-
LLFenxi3/sjmp5_system_log.asp.vbs
-
LLFenxi3/sjmp5_system_months.asp.vbs
-
LLFenxi3/sjmp5_system_total.asp.vbs
-
LLFenxi3/sjmp5_table_day.asp
-
LLFenxi3/sjmp5_table_month.asp
-
LLFenxi3/sjmp5_table_year.asp
-
LLFenxi3/sjmp5_top.asp
-
LLFenxi3/sjmp5_visits_Ranking.asp.vbs
-
LLFenxi3/sjmp5_visits_day.asp.vbs
-
LLFenxi3/sjmp5_ysmdb.asp.vbs
-
LLFenxi3/使用说明.txt
-
LLFenxi3/新云软件.url.url
-
LLFenxi3/显完整IP地址补丁说明.txt
-
LLFenxi3/登陆查看分析系统数据补丁_config.rar.rar
-
config.asp.vbs
-
LLFenxi3/说明.txt