Overview
overview
3Static
static
1dgba/Addnote.js
windows7-x64
3dgba/Addnote.js
windows10-2004-x64
3dgba/about.htm
windows7-x64
3dgba/about.htm
windows10-2004-x64
3dgba/admin/List.htm
windows7-x64
3dgba/admin/List.htm
windows10-2004-x64
3dgba/admin...cp.vbs
windows7-x64
1dgba/admin...cp.vbs
windows10-2004-x64
1dgba/admin/conn.asp
windows7-x64
3dgba/admin/conn.asp
windows10-2004-x64
3dgba/admin...ge.vbs
windows7-x64
1dgba/admin...ge.vbs
windows10-2004-x64
1dgba/admin...lt.vbs
windows7-x64
1dgba/admin...lt.vbs
windows10-2004-x64
1dgba/admin...ai.vbs
windows7-x64
1dgba/admin...ai.vbs
windows10-2004-x64
1dgba/admin/dozhai.vbs
windows7-x64
1dgba/admin/dozhai.vbs
windows10-2004-x64
1dgba/admin/error.htm
windows7-x64
3dgba/admin/error.htm
windows10-2004-x64
1dgba/admin...ge.vbs
windows7-x64
1dgba/admin...ge.vbs
windows10-2004-x64
1dgba/admin/logout.asp
windows7-x64
3dgba/admin/logout.asp
windows10-2004-x64
3dgba/admin...e.html
windows7-x64
3dgba/admin...e.html
windows10-2004-x64
3dgba/admin...up.asp
windows7-x64
3dgba/admin...up.asp
windows10-2004-x64
3dgba/admin...ge.vbs
windows7-x64
1dgba/admin...ge.vbs
windows10-2004-x64
1dgba/admin...ge.vbs
windows7-x64
1dgba/admin...ge.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
dgba/Addnote.js
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dgba/Addnote.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
dgba/about.htm
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
dgba/about.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
dgba/admin/List.htm
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
dgba/admin/List.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
dgba/admin/admincp.vbs
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
dgba/admin/admincp.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
dgba/admin/conn.asp
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
dgba/admin/conn.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
dgba/admin/datamanage.vbs
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
dgba/admin/datamanage.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
dgba/admin/default.vbs
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
dgba/admin/default.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
dgba/admin/delzhai.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
dgba/admin/delzhai.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
dgba/admin/dozhai.vbs
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
dgba/admin/dozhai.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
dgba/admin/error.htm
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
dgba/admin/error.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
dgba/admin/linkmanage.vbs
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
dgba/admin/linkmanage.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
dgba/admin/logout.asp
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
dgba/admin/logout.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
dgba/admin/manage.html
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
dgba/admin/manage.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
dgba/admin/sitesetup.asp
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
dgba/admin/sitesetup.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
dgba/admin/usermanage.vbs
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
dgba/admin/usermanage.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
dgba/admin/zhaimanage.vbs
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
dgba/admin/zhaimanage.vbs
Resource
win10v2004-20240802-en
General
-
Target
da386edca97b34d604ca77619b9b8afb_JaffaCakes118
-
Size
380KB
-
MD5
da386edca97b34d604ca77619b9b8afb
-
SHA1
133f24d38745f2a0e5eb4b783c06ec450cc51654
-
SHA256
64019d8d685085d87a0cd37313e6be966a48e640c0c8ce71d290a8cf75bb86b6
-
SHA512
7d4e2ff14a729476daacc54d8ec3ec779642d3c31deb6cd9676c3e6a10f067950f1274a769e0c435e5f32ba65bfcf5876b63c611b82f910adcec5caf96ac9f92
-
SSDEEP
6144:R9h8ZRI3dG9XuUBs1M8s38MLsLGpPgH97U0FUjYzMFkbCk9QD6Pcwgh3:b+v+KVYMdsLGlgHBRLwFa9QD6053
Malware Config
Signatures
Files
-
da386edca97b34d604ca77619b9b8afb_JaffaCakes118.rar
-
dgba/Addnote.asp.js
-
dgba/about.htm.html
-
dgba/admin/List.htm.html
-
dgba/admin/admincp.asp.vbs
-
dgba/admin/conn.asp.asp .vbs polyglot
-
dgba/admin/datamanage.asp.vbs
-
dgba/admin/default.asp.vbs
-
dgba/admin/delzhai.asp.vbs
-
dgba/admin/dozhai.asp.vbs
-
dgba/admin/error.htm.html
-
dgba/admin/images/contract.gif.gif
-
dgba/admin/images/endnode.gif.gif
-
dgba/admin/images/expand.gif.gif
-
dgba/admin/linkmanage.asp.vbs
-
dgba/admin/logout.asp
-
dgba/admin/manage.asp.html
-
dgba/admin/sitesetup.asp
-
dgba/admin/usermanage.asp.vbs
-
dgba/admin/zhaimanage.asp.vbs
-
dgba/bottom.asp
-
dgba/click.htm.html .js polyglot
-
dgba/conn.asp.vbs
-
dgba/data/global.asa
-
dgba/delbookmark.asp.vbs
-
dgba/deltag.asp.vbs
-
dgba/delzhai.asp.vbs
-
dgba/down/RemovedgbaIE.reg
-
dgba/down/dgIE.reg
-
dgba/down/dgabi.xpi.zip
-
chrome/1zhai.jar.zip
-
content/1zhai/1zhaiOverlay.js.js
-
content/1zhai/1zhaiOverlay.xul.xml
-
content/1zhai/about.xul.xml
-
content/1zhai/contents.rdf.xml
-
skin/classic/1zhai/1zhai.png.png
-
skin/classic/1zhai/1zhaib.png.png
-
skin/classic/1zhai/contents.rdf.xml
-
install.js.js
-
install.rdf.xml
-
dgba/down/dgbaIE.reg
-
dgba/down/reg.rar.rar
-
7XMIE.reg
-
Remove7XMIE.reg
-
dgIE.reg
-
dgbaIE.reg
-
dgba/down/update.xml.xml
-
dgba/err.html.html
-
dgba/favicon.ico
-
dgba/head.asp.html .js polyglot
-
dgba/help.asp
-
dgba/help1.asp
-
dgba/icollect.asp.js
-
dgba/icollectok.asp.vbs
-
dgba/icon_public.gif.png
-
dgba/images/7xm.gif.gif
-
dgba/images/7xm122X33.gif.gif
-
dgba/images/7xm157X38.gif.gif
-
dgba/images/7xm88X31.gif.gif
-
dgba/images/7xm88X33.gif.gif
-
dgba/images/Notes.css
-
dgba/images/Notes.js.js
-
dgba/images/addtitle.gif.gif
-
dgba/images/agree_reg.gif.gif
-
dgba/images/arrow.gif.gif
-
dgba/images/bai.gif.gif
-
dgba/images/bg.css
-
dgba/images/bg_h.gif.gif
-
dgba/images/bg_l.gif.gif
-
dgba/images/bline.gif.gif
-
dgba/images/dgba.gif.gif
-
dgba/images/dgba122X33.gif.gif
-
dgba/images/dgba157X38.gif.gif
-
dgba/images/dgba88X31.gif.gif
-
dgba/images/dgba88X33.gif.gif
-
dgba/images/dotline2.gif.gif
-
dgba/images/font.htc.js
-
dgba/images/icon-js.gif.gif
-
dgba/images/icon-link.gif.gif
-
dgba/images/icon-rss.gif.gif
-
dgba/images/icon_mail.gif.gif
-
dgba/images/icon_public.gif.gif
-
dgba/images/icon_top.gif.gif
-
dgba/images/index_bg.gif.gif
-
dgba/images/index_bg1.gif.gif
-
dgba/images/logo.gif.gif
-
dgba/images/mini_query.gif.gif
-
dgba/images/news/xin_19208022211136871792239.jpg.jpg
-
dgba/images/news/xin_1920902120736953065013.jpg.jpg
-
dgba/images/news/xin_20209021113569682348250.jpg.jpg
-
dgba/images/news/xin_29209021208462961848067.jpg.jpg
-
dgba/images/news/xinsrc_262090210145231226862291.gif.gif
-
dgba/images/nitem.gif.gif
-
dgba/images/nizhai.gif.gif
-
dgba/images/notemenu.gif.gif
-
dgba/images/notice.gif.gif
-
dgba/images/ntitle.gif.gif
-
dgba/images/point.gif.gif
-
dgba/images/reg_do.gif.gif
-
dgba/images/spacer.gif.gif
-
dgba/images/tail.gif.gif
-
dgba/images/top_gift.gif.gif
-
dgba/images/top_help.gif.gif
-
dgba/images/top_home.gif.gif
-
dgba/images/top_log.gif.gif
-
dgba/images/top_reg.gif.gif
-
dgba/images/yitem.gif.gif
-
dgba/images/ytitle.gif.gif
-
dgba/images/zhai.js.js
-
dgba/include/function.asp.vbs
-
dgba/include/setup.asp
-
dgba/include/validatebody.fix
-
dgba/include/validatecode.asp.vbs
-
dgba/include/validatehead.fix
-
dgba/index.asp.vbs
-
dgba/index.htm.js
-
dgba/jsfeed.asp
-
dgba/listzhai.asp.vbs
-
dgba/login.asp.vbs
-
dgba/logout.asp
-
dgba/make_addnew.asp.vbs
-
dgba/make_all.asp.vbs
-
dgba/make_id.asp.vbs
-
dgba/make_index.asp.vbs
-
dgba/make_new1.asp.vbs
-
dgba/mysetup.asp.vbs
-
dgba/myzhai.asp.vbs
-
dgba/rank.asp.vbs
-
dgba/register.asp.js
-
dgba/rss2feed.asp.vbs
-
dgba/searchzhai.asp.vbs
-
dgba/showb.asp.vbs
-
dgba/style/default.css
-
dgba/tags.asp.vbs
-
dgba/tagzhai.asp.vbs
-
dgba/test1.asp.vbs
-
dgba/top.asp.js
-
dgba/topuser.asp.html .vbs polyglot
-
dgba/userzhai.asp.vbs
-
dgba/view.asp.vbs
-
dgba/viewjs.asp
-
dgba/zhai.asp.vbs
-
dgba/zhai.js.js
-
dgba/zhaishow.asp.vbs
-
dgba/下载说明.htm.html .js polyglot
-
dgba/使用说明.txt