Overview
overview
3Static
static
1wpxt/checktime.vbs
windows7-x64
1wpxt/checktime.vbs
windows10-2004-x64
1wpxt/conn.vbs
windows7-x64
1wpxt/conn.vbs
windows10-2004-x64
1wpxt/content.js
windows7-x64
3wpxt/content.js
windows10-2004-x64
3wpxt/dd.asp
windows7-x64
3wpxt/dd.asp
windows10-2004-x64
3wpxt/fun.vbs
windows7-x64
1wpxt/fun.vbs
windows10-2004-x64
1wpxt/fun.js
windows7-x64
3wpxt/fun.js
windows10-2004-x64
3wpxt/inc/Config.asp
windows7-x64
3wpxt/inc/Config.asp
windows10-2004-x64
3wpxt/inc/u...ss.vbs
windows7-x64
1wpxt/inc/u...ss.vbs
windows10-2004-x64
1wpxt/index.vbs
windows7-x64
1wpxt/index.vbs
windows10-2004-x64
1wpxt/md5.asp
windows7-x64
3wpxt/md5.asp
windows10-2004-x64
3wpxt/view.vbs
windows7-x64
1wpxt/view.vbs
windows10-2004-x64
1wpxt/新云软件.url
windows7-x64
1wpxt/新云软件.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
wpxt/checktime.vbs
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
wpxt/checktime.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
wpxt/conn.vbs
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
wpxt/conn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
wpxt/content.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
wpxt/content.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
wpxt/dd.asp
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
wpxt/dd.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
wpxt/fun.vbs
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
wpxt/fun.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
wpxt/fun.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
wpxt/fun.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
wpxt/inc/Config.asp
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
wpxt/inc/Config.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
wpxt/inc/upfile_class.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
wpxt/inc/upfile_class.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
wpxt/index.vbs
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
wpxt/index.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
wpxt/md5.asp
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
wpxt/md5.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
wpxt/view.vbs
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
wpxt/view.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
wpxt/新云软件.url
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
wpxt/新云软件.url
Resource
win10v2004-20240802-en
General
-
Target
d52da311cefd699dab1d820950e65213_JaffaCakes118
-
Size
2.4MB
-
MD5
d52da311cefd699dab1d820950e65213
-
SHA1
1aa5992cc1c25f62882c8a2300c558dda8dd0fe1
-
SHA256
3491e7d806ed856e5aebd65e2a2e8afc001721f91490c5ee70c92871f4c8f75c
-
SHA512
42d07229e4ee3e5f53ec4c66d1d101a84171784259d56542ef7c4e3559eaa89b688bb015e24a846b8211e2929c0543333a09a69d2000f0b02dc266f7340521fc
-
SSDEEP
49152:oT7j70cjGeZD/2Pj0ada+4KH3YZSbj/246+c0baNYmBDMokLRz6tPAu:sjgqZD/24adaAYZSbbrvDaNdBDMoC6Cu
Malware Config
Signatures
Files
-
d52da311cefd699dab1d820950e65213_JaffaCakes118.rar
-
wpxt/2.mdb
-
wpxt/UploadFiles/20091214121523147.gif.gif
-
wpxt/UploadFiles/2009121412241455.gif.gif
-
wpxt/UploadFiles/2009121412333264.gif.gif
-
wpxt/UploadFiles/2009121412350224.gif.gif
-
wpxt/UploadFiles/20091214123536636.gif.gif
-
wpxt/UploadFiles/20091214123540507.gif.gif
-
wpxt/UploadFiles/20091214123612341.gif.gif
-
wpxt/UploadFiles/2009121412367510.gif.gif
-
wpxt/UploadFiles/2009121412440698.gif.gif
-
wpxt/UploadFiles/20091214125011237.gif.gif
-
wpxt/UploadFiles/2009121412504162.gif.gif
-
wpxt/UploadFiles/2009121412716890.gif.gif
-
wpxt/UploadFiles/2009121412727501.gif.gif
-
wpxt/UploadFiles/2009121412731539.gif.gif
-
wpxt/UploadFiles/2009121412737161.gif.gif
-
wpxt/UploadFiles/2009121412759785.gif.gif
-
wpxt/UploadFiles/2009121412811461.gif.gif
-
wpxt/UploadFiles/2009121412811680.gif.gif
-
wpxt/UploadFiles/2009121412815731.gif.gif
-
wpxt/UploadFiles/2009121412816572.gif.gif
-
wpxt/UploadFiles/2009121412834311.gif.gif
-
wpxt/UploadFiles/2009121412837503.gif.gif
-
wpxt/UploadFiles/200912141283770.gif.gif
-
wpxt/UploadFiles/2009121412842109.gif.gif
-
wpxt/UploadFiles/2009121412843969.gif.gif
-
wpxt/UploadFiles/200912141287473.gif.gif
-
wpxt/UploadFiles/2009121412937702.gif.gif
-
wpxt/UploadFiles/2009121412940119.gif.gif
-
wpxt/UploadFiles/20091214131029551.gif.gif
-
wpxt/UploadFiles/20091214131045548.gif.gif
-
wpxt/UploadFiles/20091214131258655.gif.gif
-
wpxt/UploadFiles/2009121413131412.gif.gif
-
wpxt/UploadFiles/20091214135413406.gif.gif
-
wpxt/UploadFiles/20091214143512949.gif.gif
-
wpxt/UploadFiles/2009121414351717.gif.gif
-
wpxt/UploadFiles/20091214175043710.gif.gif
-
wpxt/UploadFiles/20091214175044665.gif.gif
-
wpxt/UploadFiles/20091214191017723.gif.gif
-
wpxt/UploadFiles/20091214191127196.gif.gif
-
wpxt/UploadFiles/2009121419120157.gif.gif
-
wpxt/UploadFiles/20091214191253972.gif.gif
-
wpxt/UploadFiles/2009121419928607.gif.gif
-
wpxt/UploadFiles/2009121514370902.png.png
-
wpxt/UploadFiles/20091215144121969.png.png
-
wpxt/UploadFiles/20091215154734462.png.png
-
wpxt/UploadFiles/2009121517722983.png.png
-
wpxt/UploadFiles/20091215192157364.png.png
-
wpxt/UploadFiles/20091215192446696.png.png
-
wpxt/UploadFiles/2009121520118946.png.png
-
wpxt/UploadFiles/20091216162959670.jpg.jpg
-
wpxt/UploadFiles/20091216163024937.jpg.jpg
-
wpxt/UploadFiles/20091216165042844.gif.gif
-
wpxt/UploadFiles/20091216174334564.gif.gif
-
wpxt/UploadFiles/20091216174338208.gif.gif
-
wpxt/UploadFiles/20091217132712442.gif.gif
-
wpxt/UploadFiles/20091217132841427.gif.gif
-
wpxt/UploadFiles/2009121792655306.gif.gif
-
wpxt/UploadFiles/2009121819444656.gif.gif
-
wpxt/UploadFiles/2009121819749648.gif.gif
-
wpxt/UploadFiles/2010127164014998.jpg.jpg
-
wpxt/UploadFiles/2010127164148299.jpg.jpg
-
wpxt/UploadFiles/201012717170142.gif.gif
-
wpxt/UploadFiles/201012717180556.gif.gif
-
wpxt/UploadFiles/201025164022861.gif.gif
-
wpxt/UploadFiles/201041151127372.jpg.jpg
-
wpxt/UploadFiles/201041151625601.jpg.jpg
-
wpxt/UploadFiles/20104115291801.jpg.jpg
-
wpxt/UploadFiles/201041155331361.jpg.jpg
-
wpxt/UploadFiles/201041155655897.jpg.jpg
-
wpxt/UploadFiles/201041161540894.jpg.jpg
-
wpxt/UploadFiles/201041162345808.jpg.jpg
-
wpxt/UploadFiles/201041162427346.jpg.jpg
-
wpxt/UploadFiles/201041163110909.jpg.jpg
-
wpxt/UploadFiles/20104116353796.jpg.jpg
-
wpxt/UploadFiles/20104116375736.jpg.jpg
-
wpxt/UploadFiles/201041164241819.jpg.jpg
-
wpxt/UploadFiles/20104116433372.jpg.jpg
-
wpxt/UploadFiles/201041164730614.jpg.jpg
-
wpxt/UploadFiles/201041164849490.jpg.jpg
-
wpxt/UploadFiles/201041165111585.jpg.jpg
-
wpxt/UploadFiles/201041165620386.jpg.jpg
-
wpxt/UploadFiles/201041165741392.jpg.jpg
-
wpxt/UploadFiles/20104116620980.jpg.jpg
-
wpxt/UploadFiles/201041171139327.jpg.jpg
-
wpxt/UploadFiles/201041171141802.jpg.jpg
-
wpxt/UploadFiles/20104117118618.jpg.jpg
-
wpxt/UploadFiles/201041171714238.jpg.jpg
-
wpxt/UploadFiles/20104117171780.jpg.jpg
-
wpxt/UploadFiles/2010411728527.jpg.jpg
-
wpxt/UploadFiles/20104117650200.jpg.jpg
-
wpxt/UploadFiles/20104117727862.jpg.jpg
-
wpxt/UploadFiles/2010413142239160.jpg.jpg
-
wpxt/UploadFiles/2010413142720323.jpg.jpg
-
wpxt/UploadFiles/2010413143223842.jpg.jpg
-
wpxt/UploadFiles/201041314357561.jpg.jpg
-
wpxt/UploadFiles/2010413143841733.jpg.jpg
-
wpxt/UploadFiles/2010413144139829.jpg.jpg
-
wpxt/UploadFiles/2010413144415960.jpg.jpg
-
wpxt/UploadFiles/2010413144640360.jpg.jpg
-
wpxt/UploadFiles/2010413145244122.jpg.jpg
-
wpxt/UploadFiles/2010413161618444.jpg.jpg
-
wpxt/UploadFiles/2010413161835731.jpg.jpg
-
wpxt/UploadFiles/2010413162024747.jpg.jpg
-
wpxt/UploadFiles/2010413162237928.jpg.jpg
-
wpxt/UploadFiles/2010413162531516.jpg.jpg
-
wpxt/UploadFiles/2010413162854365.jpg.jpg
-
wpxt/UploadFiles/2010415171130630.jpg.jpg
-
wpxt/UploadFiles/201041517151223.jpg.jpg
-
wpxt/UploadFiles/201041517750211.jpg.jpg
-
wpxt/UploadFiles/201041616498191.jpg.jpg
-
wpxt/UploadFiles/2010419163220584.jpg.jpg
-
wpxt/UploadFiles/20104211213970.jpg.jpg
-
wpxt/UploadFiles/201042116033850.jpg.jpg
-
wpxt/UploadFiles/2010428583557.jpg.jpg
-
wpxt/UploadFiles/20104285932912.jpg.jpg
-
wpxt/UploadFiles/20104291158311.jpg.jpg
-
wpxt/UploadFiles/2010429121447.jpg.jpg
-
wpxt/UploadFiles/2010429156261.jpg.jpg
-
wpxt/UploadFiles/20104291617240.jpg.jpg
-
wpxt/UploadFiles/20104291849386.jpg.jpg
-
wpxt/UploadFiles/20104291924825.jpg.jpg
-
wpxt/UploadFiles/20104292323370.jpg.jpg
-
wpxt/UploadFiles/20104292633126.jpg.jpg
-
wpxt/UploadFiles/20104292817898.jpg.jpg
-
wpxt/UploadFiles/2010429319432.jpg.jpg
-
wpxt/UploadFiles/20104293332582.jpg.jpg
-
wpxt/UploadFiles/2010429341270.jpg.jpg
-
wpxt/UploadFiles/20104293730635.jpg.jpg
-
wpxt/UploadFiles/20104294012144.jpg.jpg
-
wpxt/UploadFiles/20104294146591.jpg.jpg
-
wpxt/UploadFiles/20104294433958.jpg.jpg
-
wpxt/UploadFiles/20104294612425.jpg.jpg
-
wpxt/UploadFiles/2010429515831.jpg.jpg
-
wpxt/UploadFiles/2010429576268.jpg.jpg
-
wpxt/UploadFiles/201042972936.jpg.jpg
-
wpxt/checktime.asp.vbs
-
wpxt/conn.asp.vbs
-
wpxt/content.asp.js
-
wpxt/css.css
-
wpxt/dd.asp.asp
-
wpxt/fun.asp.vbs
-
wpxt/fun.js.js
-
wpxt/images/2.swf
-
wpxt/images/211.swf
-
wpxt/images/222534.gif.gif
-
wpxt/images/bg_body_sub.gif.gif
-
wpxt/images/jiemian_05.gif.gif
-
wpxt/images/jiemian_07.gif.gif
-
wpxt/images/jiemian_13.jpg.jpg
-
wpxt/images/jiemian_15.gif.gif
-
wpxt/images/jiemian_17.gif.gif
-
wpxt/images/jiemian_19.gif.gif
-
wpxt/images/jiemian_22.gif.gif
-
wpxt/images/jiemian_25.gif.gif
-
wpxt/images/jiemian_27-12.gif.gif
-
wpxt/images/jiemian_27.gif.gif
-
wpxt/images/jiemian_29.gif.gif
-
wpxt/images/jiemian_32.gif.gif
-
wpxt/images/pingtai_06.gif.gif
-
wpxt/images/pingtai_09.gif.gif
-
wpxt/images/pingtai_12.gif.gif
-
wpxt/images/pingtai_121111.gif.gif
-
wpxt/images/pingtai_15.gif.gif
-
wpxt/images/pingtai_17.gif.gif
-
wpxt/images/pingtai_19.gif.gif
-
wpxt/images/pingtai_23.gif.gif
-
wpxt/images/pingtai_26.gif.gif
-
wpxt/images/pingtai_28.gif.gif
-
wpxt/images/pingtai_30.gif.gif
-
wpxt/images/pingtai_32.gif.gif
-
wpxt/images/pingtai_34.gif.gif
-
wpxt/images/pingtai_36.gif.gif
-
wpxt/images/pingtai_38.gif.gif
-
wpxt/images/pingtai_40.gif.gif
-
wpxt/images/top.gif.gif
-
wpxt/images/top111111.gif.gif
-
wpxt/images/分隔符.gif.gif
-
wpxt/inc/Config.asp
-
wpxt/inc/upfile_class.asp.vbs
-
wpxt/index.asp.vbs
-
wpxt/md5.asp
-
wpxt/view.asp.vbs
-
wpxt/免费淘宝全套旺铺装修模板系统v1.0.txt
-
wpxt/新云软件.url.url