Overview
overview
3Static
static
1kuaiwen/Md5.vbs
windows7-x64
1kuaiwen/Md5.vbs
windows10-2004-x64
1kuaiwen/ad.js
windows7-x64
3kuaiwen/ad.js
windows10-2004-x64
3kuaiwen/addhd.vbs
windows7-x64
1kuaiwen/addhd.vbs
windows10-2004-x64
1kuaiwen/addques.vbs
windows7-x64
1kuaiwen/addques.vbs
windows10-2004-x64
1kuaiwen/back.asp
windows7-x64
3kuaiwen/back.asp
windows10-2004-x64
3kuaiwen/change_wt.vbs
windows7-x64
1kuaiwen/change_wt.vbs
windows10-2004-x64
1kuaiwen/changinfo.vbs
windows7-x64
1kuaiwen/changinfo.vbs
windows10-2004-x64
1kuaiwen/changpsd.vbs
windows7-x64
1kuaiwen/changpsd.vbs
windows10-2004-x64
1kuaiwen/check.vbs
windows7-x64
1kuaiwen/check.vbs
windows10-2004-x64
1kuaiwen/chklogin.asp
windows7-x64
3kuaiwen/chklogin.asp
windows10-2004-x64
3kuaiwen/cn.vbs
windows7-x64
1kuaiwen/cn.vbs
windows10-2004-x64
1kuaiwen/cnhd.vbs
windows7-x64
1kuaiwen/cnhd.vbs
windows10-2004-x64
1kuaiwen/co...er.vbs
windows7-x64
1kuaiwen/co...er.vbs
windows10-2004-x64
1kuaiwen/co...wt.vbs
windows7-x64
1kuaiwen/co...wt.vbs
windows10-2004-x64
1kuaiwen/coco/ad.vbs
windows7-x64
1kuaiwen/coco/ad.vbs
windows10-2004-x64
1kuaiwen/coco/back.asp
windows7-x64
3kuaiwen/coco/back.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
kuaiwen/Md5.vbs
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
kuaiwen/Md5.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
kuaiwen/ad.js
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
kuaiwen/ad.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
kuaiwen/addhd.vbs
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
kuaiwen/addhd.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
kuaiwen/addques.vbs
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
kuaiwen/addques.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
kuaiwen/back.asp
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
kuaiwen/back.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
kuaiwen/change_wt.vbs
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
kuaiwen/change_wt.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
kuaiwen/changinfo.vbs
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
kuaiwen/changinfo.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
kuaiwen/changpsd.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
kuaiwen/changpsd.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
kuaiwen/check.vbs
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
kuaiwen/check.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
kuaiwen/chklogin.asp
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
kuaiwen/chklogin.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
kuaiwen/cn.vbs
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
kuaiwen/cn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
kuaiwen/cnhd.vbs
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
kuaiwen/cnhd.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
kuaiwen/coco/Kw_user.vbs
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
kuaiwen/coco/Kw_user.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
kuaiwen/coco/Kw_wt.vbs
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
kuaiwen/coco/Kw_wt.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
kuaiwen/coco/ad.vbs
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
kuaiwen/coco/ad.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
kuaiwen/coco/back.asp
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
kuaiwen/coco/back.asp
Resource
win10v2004-20240802-en
General
-
Target
d505f5505ed73cfce0025d1a83ef1571_JaffaCakes118
-
Size
621KB
-
MD5
d505f5505ed73cfce0025d1a83ef1571
-
SHA1
10f79eb00113dfb56cde423ceba9cfe22b3b6953
-
SHA256
9f8ba01522b98e6036540816fe9ae5e655c78eab0cad79e498f747056a0a04f0
-
SHA512
936c15f903cb6ad53063b2e63399d3b5bce38639bdd625f5ac08aaf7beafd7313d40819c1812142f0cc8450c56a8fd9159a3fc052c2e0870306e374e9051c41d
-
SSDEEP
12288:BHPsmYCuUc6fNYSPguLV5efFHcQU/gMTrQSrOXvqX7NthE5H:BvsmYCuUcevPzeMTr0f4RthE1
Malware Config
Signatures
Files
-
d505f5505ed73cfce0025d1a83ef1571_JaffaCakes118.rar
-
kuaiwen/Md5.asp.vbs
-
kuaiwen/ad.js.js
-
kuaiwen/addhd.asp.vbs
-
kuaiwen/addques.asp.vbs
-
kuaiwen/back.asp
-
kuaiwen/change_wt.asp.vbs
-
kuaiwen/changinfo.asp.vbs
-
kuaiwen/changpsd.asp.vbs
-
kuaiwen/check.asp.vbs
-
kuaiwen/chklogin.asp
-
kuaiwen/cn.asp.vbs
-
kuaiwen/cnhd.asp.vbs
-
kuaiwen/coco/Databackup/2006-7-29.asa
-
kuaiwen/coco/Kw_user.asp.vbs
-
kuaiwen/coco/Kw_wt.asp.vbs
-
kuaiwen/coco/ad.asp.vbs
-
kuaiwen/coco/back.asp
-
kuaiwen/coco/banner.asp.html
-
kuaiwen/coco/changpsd.asp.vbs
-
kuaiwen/coco/chklogin.asp
-
kuaiwen/coco/crhtml.asp.vbs
-
kuaiwen/coco/css.css
-
kuaiwen/coco/database.asp.vbs
-
kuaiwen/coco/datafunction.asp.vbs
-
kuaiwen/coco/html.asp.vbs
-
kuaiwen/coco/images/admin_list_bg.gif.gif
-
kuaiwen/coco/images/admin_title.gif.gif
-
kuaiwen/coco/images/bar.gif.gif
-
kuaiwen/coco/images/email.gif.gif
-
kuaiwen/coco/images/kw.gif.gif
-
kuaiwen/coco/images/kw_top.jpg.jpg
-
kuaiwen/coco/images/list_point.gif.gif
-
kuaiwen/coco/images/login_0.jpg.jpg
-
kuaiwen/coco/images/login_1.jpg.jpg
-
kuaiwen/coco/images/login_2.jpg.jpg
-
kuaiwen/coco/images/login_3.jpg.jpg
-
kuaiwen/coco/images/login_4.jpg.jpg
-
kuaiwen/coco/index.asp
-
kuaiwen/coco/info.asp.vbs
-
kuaiwen/coco/kw_dj.asp.vbs
-
kuaiwen/coco/kw_dl.asp.vbs
-
kuaiwen/coco/kw_xl.asp.js
-
kuaiwen/coco/left.asp.js
-
kuaiwen/coco/logTo.asp.vbs
-
kuaiwen/coco/login.asp
-
kuaiwen/coco/mail.asp
-
kuaiwen/coco/mail2.asp.vbs
-
kuaiwen/coco/manageadmin.asp.vbs
-
kuaiwen/coco/order.asp.vbs
-
kuaiwen/coco/sendmail.asp.vbs
-
kuaiwen/coco/showcode.asp.vbs
-
kuaiwen/coco/siteinfo.asp
-
kuaiwen/coco/top.asp.html
-
kuaiwen/coco/zhuan.asp.vbs
-
kuaiwen/config.asp
-
kuaiwen/conn.asp.vbs
-
kuaiwen/css.css
-
kuaiwen/css1.css
-
kuaiwen/daoqi.asp.vbs
-
kuaiwen/data/#mydata.mdb
-
kuaiwen/data/SQL.asp.vbs
-
kuaiwen/data/kw.sql
-
kuaiwen/dengji.asp
-
kuaiwen/end.asp
-
kuaiwen/err.asp.vbs
-
kuaiwen/face.asp.html
-
kuaiwen/getcode.asp.vbs
-
kuaiwen/help/ask_help.asp
-
kuaiwen/help/copyright.asp
-
kuaiwen/help/default.asp
-
kuaiwen/help/left.asp
-
kuaiwen/help/paihang.asp
-
kuaiwen/help/pingjia.asp
-
kuaiwen/help/reply_help.asp
-
kuaiwen/help/rules.asp
-
kuaiwen/help/score.asp
-
kuaiwen/help/score_detail.asp
-
kuaiwen/images/ask.gif.gif
-
kuaiwen/images/cn.gif.gif
-
kuaiwen/images/cn_point.gif.gif
-
kuaiwen/images/dl.gif.gif
-
kuaiwen/images/gq_point.gif.gif
-
kuaiwen/images/hd.gif.gif
-
kuaiwen/images/head.swf
-
kuaiwen/images/help_top.gif.gif
-
kuaiwen/images/hot_point.gif.gif
-
kuaiwen/images/hotpoint.jpg.jpg
-
kuaiwen/images/jf_point.gif.gif
-
kuaiwen/images/ks.gif.gif
-
kuaiwen/images/kw.gif.gif
-
kuaiwen/images/kw_top.jpg.jpg
-
kuaiwen/images/lc1.jpg.jpg
-
kuaiwen/images/lc2.jpg.jpg
-
kuaiwen/images/lc3.jpg.jpg
-
kuaiwen/images/lc4.jpg.jpg
-
kuaiwen/images/lc_point.gif.gif
-
kuaiwen/images/logo-zhidao.gif.gif
-
kuaiwen/images/no_an.gif.gif
-
kuaiwen/images/no_point.gif.gif
-
kuaiwen/images/spaci.gif.gif
-
kuaiwen/images/star.gif.gif
-
kuaiwen/images/strong.gif.gif
-
kuaiwen/images/top_bg.gif.gif
-
kuaiwen/images/top_logo.gif.gif
-
kuaiwen/images/tw.gif.gif
-
kuaiwen/images/userface/Image1.gif.gif
-
kuaiwen/images/userface/Image10.gif.gif
-
kuaiwen/images/userface/Image11.gif.gif
-
kuaiwen/images/userface/Image12.gif.gif
-
kuaiwen/images/userface/Image13.gif.gif
-
kuaiwen/images/userface/Image14.gif.gif
-
kuaiwen/images/userface/Image15.gif.gif
-
kuaiwen/images/userface/Image16.gif.gif
-
kuaiwen/images/userface/Image17.gif.gif
-
kuaiwen/images/userface/Image18.gif.gif
-
kuaiwen/images/userface/Image19.gif.gif
-
kuaiwen/images/userface/Image2.gif.gif
-
kuaiwen/images/userface/Image20.gif.gif
-
kuaiwen/images/userface/Image21.gif.gif
-
kuaiwen/images/userface/Image22.gif.gif
-
kuaiwen/images/userface/Image23.gif.gif
-
kuaiwen/images/userface/Image24.gif.gif
-
kuaiwen/images/userface/Image25.gif.gif
-
kuaiwen/images/userface/Image26.gif.gif
-
kuaiwen/images/userface/Image27.gif.gif
-
kuaiwen/images/userface/Image28.gif.gif
-
kuaiwen/images/userface/Image29.gif.gif
-
kuaiwen/images/userface/Image3.gif.gif
-
kuaiwen/images/userface/Image30.gif.gif
-
kuaiwen/images/userface/Image31.gif.gif
-
kuaiwen/images/userface/Image32.gif.gif
-
kuaiwen/images/userface/Image33.gif.gif
-
kuaiwen/images/userface/Image34.gif.gif
-
kuaiwen/images/userface/Image35.gif.gif
-
kuaiwen/images/userface/Image36.gif.gif
-
kuaiwen/images/userface/Image37.gif.gif
-
kuaiwen/images/userface/Image38.gif.gif
-
kuaiwen/images/userface/Image39.gif.gif
-
kuaiwen/images/userface/Image4.gif.gif
-
kuaiwen/images/userface/Image40.gif.gif
-
kuaiwen/images/userface/Image41.gif.gif
-
kuaiwen/images/userface/Image42.gif.gif
-
kuaiwen/images/userface/Image43.gif.gif
-
kuaiwen/images/userface/Image44.gif.gif
-
kuaiwen/images/userface/Image45.gif.gif
-
kuaiwen/images/userface/Image46.gif.gif
-
kuaiwen/images/userface/Image47.gif.gif
-
kuaiwen/images/userface/Image48.gif.gif
-
kuaiwen/images/userface/Image49.gif.gif
-
kuaiwen/images/userface/Image5.gif.gif
-
kuaiwen/images/userface/Image50.gif.gif
-
kuaiwen/images/userface/Image51.gif.gif
-
kuaiwen/images/userface/Image52.gif.gif
-
kuaiwen/images/userface/Image53.gif.gif
-
kuaiwen/images/userface/Image54.gif.gif
-
kuaiwen/images/userface/Image55.gif.gif
-
kuaiwen/images/userface/Image56.gif.gif
-
kuaiwen/images/userface/Image57.gif.gif
-
kuaiwen/images/userface/Image58.gif.gif
-
kuaiwen/images/userface/Image59.gif.gif
-
kuaiwen/images/userface/Image6.gif.gif
-
kuaiwen/images/userface/Image60.gif.gif
-
kuaiwen/images/userface/Image7.gif.gif
-
kuaiwen/images/userface/Image8.gif.gif
-
kuaiwen/images/userface/Image9.gif.gif
-
kuaiwen/images/userinfo.gif.gif
-
kuaiwen/images/userpop.gif.gif
-
kuaiwen/images/wu_point.gif.gif
-
kuaiwen/images/xs_point.gif.gif
-
kuaiwen/images/yes_point.gif.gif
-
kuaiwen/images/zc.gif.gif
-
kuaiwen/images/zhuan.gif.gif
-
kuaiwen/inc/function.asp.vbs
-
kuaiwen/index.asp.vbs
-
kuaiwen/index.html.html
-
kuaiwen/kuaiwen.bak
-
kuaiwen/list.asp.vbs
-
kuaiwen/list2.asp.vbs
-
kuaiwen/login.asp.html
-
kuaiwen/login1.asp.vbs
-
kuaiwen/loginchk.asp.vbs
-
kuaiwen/manyi.asp.vbs
-
kuaiwen/memo.asp.vbs
-
kuaiwen/myquestion.asp.vbs
-
kuaiwen/pic/1.gif.gif
-
kuaiwen/pic/ffff.jpg.jpg
-
kuaiwen/pic/ishere.jpg.jpg
-
kuaiwen/reg.asp.html
-
kuaiwen/regchk.asp.vbs
-
kuaiwen/show/20068/20068171623188406.html.html
-
kuaiwen/show/20068/20068171641579276.html.html
-
kuaiwen/show/20068/20068211436384253.html.html
-
kuaiwen/show/20068/20068211533482392.html.html
-
kuaiwen/show/20068/20068211538793265.html.html
-
kuaiwen/show/20068/200682115414453929.html.html
-
kuaiwen/show/20068/200682213552944897.html.html
-
kuaiwen/show/20068/20068221614343027.html.html
-
kuaiwen/show/20068/200682910403582274.html.html
-
kuaiwen/show/20068/200682910423484180.html.html
-
kuaiwen/show/20068/200682910442528162.html.html
-
kuaiwen/show/20068/20068291045947070.html.html
-
kuaiwen/show/20068/200682910463710079.html.html
-
kuaiwen/show/20068/20068291046471212.html.html
-
kuaiwen/show/20068/200682910481287642.html.html
-
kuaiwen/show/20068/200682910503290583.html.html
-
kuaiwen/show/20068/200682910512640282.html.html
-
kuaiwen/show/20068/200682910523545703.html.html
-
kuaiwen/show/20068/200682910525619354.html.html
-
kuaiwen/show/20068/20068291053893127.html.html
-
kuaiwen/show/20068/200682910554422167.html.html
-
kuaiwen/show/20068/20068291059352726.html.html
-
kuaiwen/show/20068/200682911115954038.html.html
-
kuaiwen/show/20068/20068291127660723.html.html
-
kuaiwen/show/20068/20068291141888378.html.html
-
kuaiwen/show/20068/20068291145458715.html.html
-
kuaiwen/show/20068/20068291162869390.html.html
-
kuaiwen/show/20068/200682912294022658.html.html
-
kuaiwen/show/20068/200682915505472035.html.html
-
kuaiwen/show/20068/200682916182758883.html.html
-
kuaiwen/show/20068/20068291728672621.html.html
-
kuaiwen/show/20068/200682920133628164.html.html
-
kuaiwen/show/20068/200683013322427470.html.html
-
kuaiwen/show/20069/20069110472025623.html.html
-
kuaiwen/show/20069/2006911054264798.html.html
-
kuaiwen/show/20069/20069114331993545.html.html
-
kuaiwen/show/20069/20069114412883803.html.html
-
kuaiwen/show/20069/2006911443320148.html.html
-
kuaiwen/show/20069/20069114441925695.html.html
-
kuaiwen/show/20069/20069114453415801.html.html
-
kuaiwen/show/20069/20069114463394062.html.html
-
kuaiwen/show/20069/20069114475252692.html.html
-
kuaiwen/show/20069/20069114483659723.html.html
-
kuaiwen/show/20069/20069114493031939.html.html
-
kuaiwen/show/20069/20069114502960300.html.html
-
kuaiwen/show/20069/2006911451261915.html.html
-
kuaiwen/show/20069/20069114513562607.html.html
-
kuaiwen/show/20069/20069114531380783.html.html
-
kuaiwen/show/20069/20069114541988171.html.html
-
kuaiwen/show/20069/2006911644741345.html.html
-
kuaiwen/showuser.asp.vbs
-
kuaiwen/slogin.asp.vbs
-
kuaiwen/template/index_temp.html.html
-
kuaiwen/template/list_temp.html.html
-
kuaiwen/template/show_temp.html.html
-
kuaiwen/template/skin1/index_temp.html.html
-
kuaiwen/template/skin1/list_temp.html.html
-
kuaiwen/template/skin1/show_temp.html.html
-
kuaiwen/top.asp
-
kuaiwen/upload.asp.vbs
-
kuaiwen/uppic.asp
-
kuaiwen/uptopic.asp.vbs
-
kuaiwen/user.asp.vbs
-
kuaiwen/userinfo.asp.js
-
kuaiwen/userlist.asp.vbs
-
kuaiwen/usermark.asp.vbs
-
kuaiwen/wttime.asp.vbs
-
kuaiwen/下载说明.htm.html .js polyglot
-
kuaiwen/安装须知.txt
-
kuaiwen/新云软件.url.url