Overview
overview
3Static
static
1Koreamail2....v2.js
windows7-x64
3Koreamail2....v2.js
windows10-2004-x64
3Koreamail2...Tpl.js
windows7-x64
3Koreamail2...Tpl.js
windows10-2004-x64
3Koreamail2...2.8.js
windows7-x64
3Koreamail2...2.8.js
windows10-2004-x64
3Koreamail2...a77.js
windows7-x64
3Koreamail2...a77.js
windows10-2004-x64
3Koreamail2...).html
windows7-x64
3Koreamail2...).html
windows10-2004-x64
3Koreamail2...).html
windows7-x64
3Koreamail2...).html
windows10-2004-x64
1Koreamail2..._dl.js
windows7-x64
3Koreamail2..._dl.js
windows10-2004-x64
3Koreamail2...510.js
windows7-x64
3Koreamail2...510.js
windows10-2004-x64
3Koreamail2...).html
windows7-x64
3Koreamail2...).html
windows10-2004-x64
1Koreamail2...).html
windows7-x64
3Koreamail2...).html
windows10-2004-x64
3Koreamail2...r.html
windows7-x64
3Koreamail2...r.html
windows10-2004-x64
3Koreamail2...7b5.js
windows7-x64
3Koreamail2...7b5.js
windows10-2004-x64
3Koreamail2...e.html
windows7-x64
3Koreamail2...e.html
windows10-2004-x64
3Koreamail2...ear.js
windows7-x64
3Koreamail2...ear.js
windows10-2004-x64
3Koreamail2...12.pdf
windows7-x64
3Koreamail2...12.pdf
windows10-2004-x64
3Koreamail2...ent.js
windows7-x64
3Koreamail2...ent.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Koreamail2/js6/main/home/chinafiles/ads.v2.js
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Koreamail2/js6/main/home/chinafiles/ads.v2.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Koreamail2/js6/main/home/chinafiles/bLoginTpl.js
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Koreamail2/js6/main/home/chinafiles/bLoginTpl.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Koreamail2/js6/main/home/chinafiles/ec2.2.8.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Koreamail2/js6/main/home/chinafiles/ec2.2.8.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Koreamail2/js6/main/home/chinafiles/index.ecb78a77.js
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Koreamail2/js6/main/home/chinafiles/index.ecb78a77.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Koreamail2/js6/main/home/chinafiles/index_dl(1).html
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Koreamail2/js6/main/home/chinafiles/index_dl(1).html
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Koreamail2/js6/main/home/chinafiles/index_dl(2).html
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Koreamail2/js6/main/home/chinafiles/index_dl(2).html
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Koreamail2/js6/main/home/chinafiles/index_dl.js
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Koreamail2/js6/main/home/chinafiles/index_dl.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Koreamail2/js6/main/home/chinafiles/message_170510.js
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
Koreamail2/js6/main/home/chinafiles/message_170510.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Koreamail2/js6/main/home/chinafiles/mp-agent-finger(1).html
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Koreamail2/js6/main/home/chinafiles/mp-agent-finger(1).html
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Koreamail2/js6/main/home/chinafiles/mp-agent-finger(2).html
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
Koreamail2/js6/main/home/chinafiles/mp-agent-finger(2).html
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Koreamail2/js6/main/home/chinafiles/mp-agent-finger.html
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Koreamail2/js6/main/home/chinafiles/mp-agent-finger.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Koreamail2/js6/main/home/chinafiles/pp_index_dl_a71106638236029ab83361e4e91f97b5.js
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
Koreamail2/js6/main/home/chinafiles/pp_index_dl_a71106638236029ab83361e4e91f97b5.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Koreamail2/js6/main/home/chinafiles/saved_resource.html
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
Koreamail2/js6/main/home/chinafiles/saved_resource.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Koreamail2/js6/main/home/chinafiles/year.js
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
Koreamail2/js6/main/home/chinafiles/year.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Koreamail2/js6/main/home/files/Revised PI of all confirmed items 20161212.pdf
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
Koreamail2/js6/main/home/files/Revised PI of all confirmed items 20161212.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Koreamail2/js6/main/home/files/element.js
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
Koreamail2/js6/main/home/files/element.js
Resource
win10v2004-20240802-en
General
-
Target
bad71b11aaea5be80695721f22a48587_JaffaCakes118
-
Size
1.2MB
-
MD5
bad71b11aaea5be80695721f22a48587
-
SHA1
2d132a649df47ea3d17473c6c0787a41411a1bd9
-
SHA256
78438cfce3baf9575fc71b70042b3052a148991692f7d87a13fd835a0412a734
-
SHA512
f3fc33be3614e1bbcb62d09f99f7aefe9e203cc93b0e2d37a1cf1e7d0f693b1498295d6ee793ec7e436eb1b2e8756a3943704b97ceb8bddf0d92125bec98b186
-
SSDEEP
24576:g2DwXrSTBVhg4SisSpVTxe8yQNmUxbcBK9ffHcv95RQsb7ZdE:BwOTi43vdu+79ffcx/bzE
Malware Config
Signatures
Files
-
bad71b11aaea5be80695721f22a48587_JaffaCakes118.zip
-
Koreamail2/.DS_Store
-
Koreamail2/js6/.DS_Store
-
Koreamail2/js6/main/.DS_Store
-
Koreamail2/js6/main/blocker.php
-
Koreamail2/js6/main/detect.php
-
Koreamail2/js6/main/error_log
-
Koreamail2/js6/main/function.php
-
Koreamail2/js6/main/home/.DS_Store
-
Koreamail2/js6/main/home/chinafiles/ads.v2.js.js
-
Koreamail2/js6/main/home/chinafiles/bLoginTpl.js.js
-
Koreamail2/js6/main/home/chinafiles/ec2.2.8.js.js
-
Koreamail2/js6/main/home/chinafiles/get.do
-
Koreamail2/js6/main/home/chinafiles/index.ecb78a77.js.js
-
Koreamail2/js6/main/home/chinafiles/index_dl(1).html.html .js polyglot
-
Koreamail2/js6/main/home/chinafiles/index_dl(2).html.html .js polyglot
-
Koreamail2/js6/main/home/chinafiles/index_dl.php.js
-
Koreamail2/js6/main/home/chinafiles/message_170510.js.js
-
Koreamail2/js6/main/home/chinafiles/mp-agent-finger(1).html.js
-
Koreamail2/js6/main/home/chinafiles/mp-agent-finger(2).html.js
-
Koreamail2/js6/main/home/chinafiles/mp-agent-finger.html.js
-
Koreamail2/js6/main/home/chinafiles/ntes_logo.png.png
-
Koreamail2/js6/main/home/chinafiles/pp_index_dl_a71106638236029ab83361e4e91f97b5.js.js
-
Koreamail2/js6/main/home/chinafiles/quan.png.png
-
Koreamail2/js6/main/home/chinafiles/result.php
-
Koreamail2/js6/main/home/chinafiles/saved_resource.html
-
Koreamail2/js6/main/home/chinafiles/stat(1).gif.gif
-
Koreamail2/js6/main/home/chinafiles/stat(2).gif.gif
-
Koreamail2/js6/main/home/chinafiles/stat.gif.gif
-
Koreamail2/js6/main/home/chinafiles/style.8c347e13.css
-
Koreamail2/js6/main/home/chinafiles/year.js.js
-
Koreamail2/js6/main/home/files/Autoalert-upgrade+logo+copy.png.png
-
Koreamail2/js6/main/home/files/Revised PI of all confirmed items 20161212.pdf.pdf
-
Koreamail2/js6/main/home/files/bootstrap.css
-
Koreamail2/js6/main/home/files/element.js.js
-
Koreamail2/js6/main/home/files/errors.css
-
Koreamail2/js6/main/home/files/i.css
-
Koreamail2/js6/main/home/files/ii.css
-
Koreamail2/js6/main/home/files/john.js.js
-
Koreamail2/js6/main/home/files/john1.css
-
Koreamail2/js6/main/home/files/load.gif.gif
-
Koreamail2/js6/main/home/files/loader.gif.gif
-
Koreamail2/js6/main/home/files/notice-error.png.png
-
Koreamail2/js6/main/home/files/postmaster.png.png
-
Koreamail2/js6/main/home/files/signin.css
-
Koreamail2/js6/main/home/go.php
-
Koreamail2/js6/main/home/img/bkground.780232e8.jpg.jpg
-
Koreamail2/js6/main/home/img/global.04d31afe.png.png
-
Koreamail2/js6/main/home/index.php
-
Koreamail2/js6/main/home/index1.php.js
-
Koreamail2/js6/main/home/index2.php.js
-
Koreamail2/js6/main/home/loader.gif.gif
-
Koreamail2/js6/main/home/loader.php.js
-
Koreamail2/js6/main/home/login_files/bottom.png.png
-
Koreamail2/js6/main/home/login_files/generatedDefaults.js
-
Koreamail2/js6/main/home/login_files/is
-
Koreamail2/js6/main/home/login_files/loginAdvanced.css
-
Koreamail2/js6/main/home/login_files/loginBasic.css
-
Koreamail2/js6/main/home/login_files/loginDialog.js.js
-
Koreamail2/js6/main/home/login_files/logo.png.png
-
Koreamail2/js6/main/home/login_files/top.png.png
-
Koreamail2/js6/main/home/postmaster.png.png
-
Koreamail2/js6/main/home/result.php
-
Koreamail2/js6/main/home/result2.php
-
Koreamail2/js6/main/index.php