Overview
overview
3Static
static
1admin/Function.vbs
windows7-x64
1admin/Function.vbs
windows10-2004-x64
1admin/HTMLJS.html
windows7-x64
3admin/HTMLJS.html
windows10-2004-x64
3admin/JSHTML.html
windows7-x64
3admin/JSHTML.html
windows10-2004-x64
3admin/admi...ig.vbs
windows7-x64
1admin/admi...ig.vbs
windows10-2004-x64
1admin/admi...de.vbs
windows7-x64
1admin/admi...de.vbs
windows10-2004-x64
1admin/admin_adjs.vbs
windows7-x64
1admin/admin_adjs.vbs
windows10-2004-x64
1admin/admin_admin.vbs
windows7-x64
1admin/admin_admin.vbs
windows10-2004-x64
1admin/admin_conn.vbs
windows7-x64
1admin/admin_conn.vbs
windows10-2004-x64
1admin/admin_data.vbs
windows7-x64
1admin/admin_data.vbs
windows10-2004-x64
1admin/admi...sg.vbs
windows7-x64
1admin/admi...sg.vbs
windows10-2004-x64
1admin/admin_html.vbs
windows7-x64
1admin/admin_html.vbs
windows10-2004-x64
1admin/admin_index.vbs
windows7-x64
1admin/admin_index.vbs
windows10-2004-x64
1admin/admin_ip.vbs
windows7-x64
1admin/admin_ip.vbs
windows10-2004-x64
1admin/admin_left.js
windows7-x64
3admin/admin_left.js
windows10-2004-x64
3admin/admin_link.vbs
windows7-x64
1admin/admin_link.vbs
windows10-2004-x64
1admin/admin_login.vbs
windows7-x64
1admin/admin_login.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
admin/Function.vbs
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
admin/Function.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
admin/HTMLJS.html
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
admin/HTMLJS.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
admin/JSHTML.html
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
admin/JSHTML.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
admin/admin_Config.vbs
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
admin/admin_Config.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
admin/admin_GetCode.vbs
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
admin/admin_GetCode.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
admin/admin_adjs.vbs
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
admin/admin_adjs.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
admin/admin_admin.vbs
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
admin/admin_admin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
admin/admin_conn.vbs
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
admin/admin_conn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
admin/admin_data.vbs
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
admin/admin_data.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
admin/admin_filmmsg.vbs
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
admin/admin_filmmsg.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
admin/admin_html.vbs
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
admin/admin_html.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
admin/admin_index.vbs
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
admin/admin_index.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
admin/admin_ip.vbs
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
admin/admin_ip.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
admin/admin_left.js
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
admin/admin_left.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
admin/admin_link.vbs
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
admin/admin_link.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
admin/admin_login.vbs
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
admin/admin_login.vbs
Resource
win10v2004-20240802-en
General
-
Target
b3598e172e695398bb87a8ed192767da_JaffaCakes118
-
Size
2.3MB
-
MD5
b3598e172e695398bb87a8ed192767da
-
SHA1
13af30ae92dbad3fe29ebf32964ea06b656b0147
-
SHA256
2fdf685d566039dffdf26cae2fefcff43124e6490ab27a98b66ae5e5137db104
-
SHA512
049065b8cb0772149cf1d4d3b985aa7b5955833fec3209fa80d37172af17b8f7ef452b39671531c21ae17e34f1344a11ab11259a357820380c1316af57a3144d
-
SSDEEP
49152:yrKIZFa8j3ZFw9vKeqD6Dl7iq5TH87n6zlAyWLQf74msDT1LJJhjk2:GFFK9vKWxdTHs75LCcDxfhjD
Malware Config
Signatures
Files
-
b3598e172e695398bb87a8ed192767da_JaffaCakes118.rar
-
Install.asp.html .vbs polyglot
-
V3.2.jpg.jpg
-
admin/Function.asp.vbs
-
admin/HTMLJS.html.html
-
admin/JSHTML.html.html
-
admin/Thumbs.db
-
admin/admin.css
-
admin/admin_Config.asp.vbs
-
admin/admin_GetCode.asp.vbs
-
admin/admin_adjs.asp.vbs
-
admin/admin_admin.asp.vbs
-
admin/admin_conn.asp.vbs
-
admin/admin_data.asp.vbs
-
admin/admin_filmmsg.asp.vbs
-
admin/admin_html.asp.vbs
-
admin/admin_index.asp.vbs
-
admin/admin_ip.asp.vbs
-
admin/admin_left.asp.js
-
admin/admin_link.asp.vbs
-
admin/admin_login.asp.vbs
-
admin/admin_main.asp
-
admin/admin_makeclass.asp.vbs
-
admin/admin_makehtml.asp.vbs
-
admin/admin_makehtml1.asp.vbs
-
admin/admin_makeid.asp.vbs
-
admin/admin_mb.asp.vbs
-
admin/admin_movadd.asp.vbs
-
admin/admin_movclass.asp.vbs
-
admin/admin_movedit.asp.vbs
-
admin/admin_moverr.asp.vbs
-
admin/admin_movie.asp.vbs
-
admin/admin_movmod.asp.vbs
-
admin/admin_movmod1.asp.vbs
-
admin/admin_movsave.asp.vbs
-
admin/admin_probe.asp.vbs
-
admin/admin_sql.ASP.vbs
-
admin/admin_sqlin.asp.vbs
-
admin/admin_sqlin1.asp.vbs
-
admin/admin_talk.asp.vbs
-
admin/admin_top.asp.vbs
-
admin/admin_upload.asp.vbs
-
admin/admin_uppic.asp.vbs
-
admin/admin_userlook.asp.vbs
-
admin/buy_ico_tips.gif.gif
-
admin/images/1.gif.gif
-
admin/images/2.gif.gif
-
admin/images/Rect.gif.gif
-
admin/images/Thumbs.db
-
admin/images/a_r1_c1.gif.gif
-
admin/images/a_r2_c1.gif.gif
-
admin/images/a_r2_c2.gif.gif
-
admin/images/a_r2_c5.gif.gif
-
admin/images/a_r2_c7.gif.gif
-
admin/images/a_r3_c5.gif.gif
-
admin/images/a_r3_c6.gif.gif
-
admin/images/a_r4_c2.gif.gif
-
admin/images/a_r4_c3.gif.gif
-
admin/images/a_r4_c4.gif.gif
-
admin/images/a_r5_c5.gif.gif
-
admin/images/a_r6_c2.gif.gif
-
admin/images/a_r6_c5.gif.gif
-
admin/images/a_r7_c2.gif.gif
-
admin/images/a_r8_c2.gif.gif
-
admin/images/admin_bg_1.jpg.jpg
-
admin/images/admin_bg_2.gif
-
admin/images/admin_left.gif.gif
-
admin/images/admin_left.jpg.jpg
-
admin/images/admin_left_1.gif.gif
-
admin/images/admin_left_1.jpg.jpg
-
admin/images/admin_left_2.gif.gif
-
admin/images/admin_left_3.gif.gif
-
admin/images/admin_left_4.gif.gif
-
admin/images/admin_left_5.gif.gif
-
admin/images/admin_login_r1_c1.jpg.jpg
-
admin/images/admin_login_r2_c1.jpg.jpg
-
admin/images/admin_login_r4_c1.jpg.jpg
-
admin/images/admin_logo.gif.gif
-
admin/images/admin_logo_1.gif.gif
-
admin/images/admin_logo_2.gif.gif
-
admin/images/admin_title.gif.gif
-
admin/images/admin_top_bg.gif
-
admin/images/arrow.gif.gif
-
admin/images/bar1.gif.gif
-
admin/images/bar2.gif.gif
-
admin/images/bbk.gif.gif
-
admin/images/bg.gif.gif
-
admin/images/bullet.gif.gif
-
admin/images/email.gif.gif
-
admin/images/err.gif.gif
-
admin/images/folder.gif.gif
-
admin/images/gotop.gif.gif
-
admin/images/help.gif.gif
-
admin/images/hotfolder.gif.gif
-
admin/images/i_home.gif.gif
-
admin/images/img_r2_c2.gif.gif
-
admin/images/isbest.gif.gif
-
admin/images/istop.gif.gif
-
admin/images/jing.gif.gif
-
admin/images/lock.gif.gif
-
admin/images/lockfolder.gif.gif
-
admin/images/locks.gif.gif
-
admin/images/minus.gif.gif
-
admin/images/pic/BMP.GIF.gif
-
admin/images/pic/Btn_Backward.gif.gif
-
admin/images/pic/Btn_Forward.gif.gif
-
admin/images/pic/Btn_Up.gif.gif
-
admin/images/pic/ClosedFolder.gif.gif
-
admin/images/pic/DOC.GIF.gif
-
admin/images/pic/HTM.GIF.gif
-
admin/images/pic/JPG.GIF.gif
-
admin/images/pic/LOG.GIF.gif
-
admin/images/pic/SWF.GIF.gif
-
admin/images/pic/TXT.GIF.gif
-
admin/images/pic/Thumbs.db
-
admin/images/pic/WAV.GIF.gif
-
admin/images/pic/XLS.GIF.gif
-
admin/images/pic/asp.gif.gif
-
admin/images/pic/chm.GIF.gif
-
admin/images/pic/css.gif.gif
-
admin/images/pic/exe.gif.gif
-
admin/images/pic/gif.gif.gif
-
admin/images/pic/mdb.gif.gif
-
admin/images/pic/mediafolder.gif.gif
-
admin/images/pic/none.gif.gif
-
admin/images/pic/updir.gif.gif
-
admin/images/pic/zip.gif.gif
-
admin/images/plus.gif.gif
-
admin/images/pview.gif.gif
-
admin/images/spacer.gif.gif
-
admin/images/succ.gif.gif
-
admin/images/title_bg_hide.gif.gif
-
admin/images/title_bg_quit.gif.gif
-
admin/images/title_bg_show.gif.gif
-
admin/images/titlebg.gif.gif
-
admin/images/welcome.gif.gif
-
admin/images/z.gif.gif
-
admin/images/z.png.png
-
admin/img/Head.Fix
-
admin/img/Thumbs.db
-
admin/img/admin_bg_1.gif
-
admin/img/bar9.gif.gif
-
admin/img/bbk.gif.gif
-
admin/img/body.Fix
-
admin/img/change.gif.gif
-
admin/img/del.gif.gif
-
admin/img/delete.gif.gif
-
admin/img/edit.gif.gif
-
admin/img/left_fold1.gif.gif
-
admin/img/left_fold2.gif.gif
-
admin/img/menu_1.gif.gif
-
admin/img/ok.gif.gif
-
admin/img/ping.gif.gif
-
admin/index.asp
-
admin/login.asp
-
admin/md5.asp.vbs
-
admin/style.css
-
admin/新云软件.url.url
-
allmovie.asp.vbs
-
config.asp
-
foot.asp
-
imgs/1pix.gif.gif
-
imgs/Head.Fix
-
imgs/Thumbs.db
-
imgs/XBG1.gif.gif
-
imgs/XBG2.GIF.gif
-
imgs/XBG3.gif.gif
-
imgs/admin.css
-
imgs/admin_bg_1.gif
-
imgs/bar.gif.jpg
-
imgs/bar9.gif.gif
-
imgs/bj.gif.gif
-
imgs/book.css
-
imgs/bt_go.gif.gif
-
imgs/bul.gif.gif
-
imgs/cook.js.js
-
imgs/css.css
-
imgs/dot.gif.gif
-
imgs/dot_02.gif.gif
-
imgs/exe.gif.gif
-
imgs/get.js.js
-
imgs/home.gif.gif
-
imgs/hot.gif.gif
-
imgs/hot/0.jpg.jpg
-
imgs/hot/1.jpg.jpg
-
imgs/hot/2.jpg.jpg
-
imgs/hot/3.jpg.jpg
-
imgs/hot/4.jpg.jpg
-
imgs/hot/Thumbs.db
-
imgs/hot/js.js.js
-
imgs/hot/pic.swf
-
imgs/hot/pic.xml.xml
-
imgs/hot1.gif.gif
-
imgs/ico.gif.gif
-
imgs/ico3.gif.gif
-
imgs/ico4.gif.gif
-
imgs/ico5.gif.gif
-
imgs/ico_disc.gif.gif
-
imgs/ico_view.gif.gif
-
imgs/icon_01.gif.gif
-
imgs/icon_02.gif.gif
-
imgs/img_xx.gif.gif
-
imgs/img_xxx.gif.gif
-
imgs/index_bg.gif.gif
-
imgs/index_tagleft.gif.gif
-
imgs/index_tagright.gif.gif
-
imgs/inputso.gif.gif
-
imgs/layer.gif.gif
-
imgs/link-bg.gif.gif
-
imgs/link2.gif.gif
-
imgs/loading.gif.gif
-
imgs/logo.gif.gif
-
imgs/look.gif.gif
-
imgs/look1.gif.gif
-
imgs/mail.gif.gif
-
imgs/main.js.js
-
imgs/memua.gif.gif
-
imgs/memubg.gif.gif
-
imgs/menu-bg.gif.gif
-
imgs/mini_Header_01.gif.gif
-
imgs/mini_Header_02.gif.gif
-
imgs/mini_Header_03.gif.gif
-
imgs/mood.gif.gif
-
imgs/more.jpg.jpg
-
imgs/moviebz.gif.gif
-
imgs/nav-bg.gif.gif
-
imgs/new.gif.gif
-
imgs/nopic.GIF.gif
-
imgs/qq.gif.gif
-
imgs/qq_n01.gif.gif
-
imgs/remen.gif.gif
-
imgs/show_ads.js.js
-
imgs/sort_play.gif.gif
-
imgs/spacer.gif.gif
-
imgs/style.css
-
imgs/tj.js.js
-
imgs/toole_15.gif.gif
-
imgs/wide-bg.gif.gif
-
index.asp.vbs
-
js/AD.gif.gif
-
js/Thumbs.db
-
js/foot.js.js
-
js/ggs1.js.js
-
js/index1.js
-
js/index2.js
-
js/index3.js.js
-
js/item1.js.js
-
js/item2.js.js
-
js/main.js.js
-
js/play.js.js
-
js/play1.js.js
-
js/shuqian.js
-
js/tj.js
-
js/top.js
-
js/view1.js.js
-
js/view2.js.js
-
js/view3.js.js
-
js/view4.js.js
-
js/xmlhttp1.js.js
-
klso-pic/Thumbs.db
-
klso_cai/8k2cn_cj.asp.asp
-
klso_cai/8k2cn_cj_Dday.asp.asp
-
klso_cai/8k2cn_cj_Dday1.asp.asp
-
klso_cai/8k2cn_cj_Sql_Function.asp.vbs
-
klso_cai/8k2cn_cj_conn.asp.vbs
-
klso_cai/8k2cn_cj_i.asp.asp
-
klso_cai/8k2cn_cj_id.asp.asp
-
klso_cai/8k2cn_cj_now.asp.asp
-
klso_cai/8k2cn_cj_now1.asp.asp
-
klso_cai/inc.asp.vbs
-
klso_cai/klso_56.asp.asp
-
klso_cai/klso_6.asp.asp
-
klso_cai/klso_bobo.asp.asp
-
klso_cai/klso_tudou.asp.asp
-
klso_cai/klso_youku.asp.asp
-
klso_data/#klso#vip#.asa
-
klso_inc/Conn.asp.vbs
-
klso_inc/Install_conn.asp.vbs
-
klso_inc/articleconn.asp.vbs
-
klso_inc/checkpost.asp.vbs
-
klso_inc/gonggao.asp.vbs
-
klso_inc/hits.asp.js
-
klso_inc/md5.asp.vbs
-
klso_inc/sendeoff.asp.vbs
-
klso_inc/sqlin.asp.vbs
-
klso_list.asp.vbs
-
klso_movie.asp.vbs
-
klso_search.asp.vbs
-
movie_data/Install.asp.html .vbs polyglot
-
movie_data/allmovie.asp.vbs
-
movie_data/foot.asp
-
movie_data/index.asp.vbs
-
movie_data/klso_list.asp.vbs
-
movie_data/klso_movie.asp.vbs
-
movie_data/klso_search.asp.vbs
-
movie_data/play.asp.vbs
-
movie_data/top.asp.vbs
-
play.asp.vbs
-
top.asp.vbs
-
程序说明.txt