Overview
overview
3Static
static
1wellss/wel...ex.htm
windows7-x64
3wellss/wel...ex.htm
windows10-2004-x64
3wellss/wel...dun.js
windows7-x64
3wellss/wel...dun.js
windows10-2004-x64
3wellss/wel...s-6.js
windows7-x64
3wellss/wel...s-6.js
windows10-2004-x64
3wellss/wel...y-3.js
windows7-x64
3wellss/wel...y-3.js
windows10-2004-x64
3wellss/wel...efs.js
windows7-x64
3wellss/wel...efs.js
windows10-2004-x64
3wellss/wel.../nd.js
windows7-x64
3wellss/wel.../nd.js
windows10-2004-x64
3wellss/wel...tag.js
windows7-x64
3wellss/wel...tag.js
windows10-2004-x64
3wellss/wel...002.js
windows7-x64
3wellss/wel...002.js
windows10-2004-x64
3wellss/wel...x.html
windows7-x64
3wellss/wel...x.html
windows10-2004-x64
3wellss/wel...1.html
windows7-x64
3wellss/wel...1.html
windows10-2004-x64
3wellss/wel...2.html
windows7-x64
3wellss/wel...2.html
windows10-2004-x64
3wellss/wel...3.html
windows7-x64
3wellss/wel...3.html
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
wellss/wells/Index.htm
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
wellss/wells/Index.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
wellss/wells/images/atadun.js
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
wellss/wells/images/atadun.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
wellss/wells/images/conutils-6.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
wellss/wells/images/conutils-6.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
wellss/wells/images/jquery-3.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
wellss/wells/images/jquery-3.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
wellss/wells/images/login-userprefs.js
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
wellss/wells/images/login-userprefs.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
wellss/wells/images/nd.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
wellss/wells/images/nd.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
wellss/wells/images/utag.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
wellss/wells/images/utag.js
Resource
win10v2004-20240910-en
Behavioral task
behavioral15
Sample
wellss/wells/images/utag_002.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
wellss/wells/images/utag_002.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
wellss/wells/index.html
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
wellss/wells/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
wellss/wells/step1.html
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
wellss/wells/step1.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
wellss/wells/step2.html
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
wellss/wells/step2.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
wellss/wells/step3.html
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
wellss/wells/step3.html
Resource
win10v2004-20240802-en
General
-
Target
da5c703f087919407941badbc8b4b6a8_JaffaCakes118
-
Size
1.1MB
-
MD5
da5c703f087919407941badbc8b4b6a8
-
SHA1
41da893d52375eaa4914483759dc8114e86fd8dc
-
SHA256
0fe598e9a6034021aecd53f54bd1198d25fd758e0b8af0d40940579a140d1e93
-
SHA512
1c0b20ac8be1ade73b6616664d4d744e0d5561ae9018091bc7914874c628d8fe0f6313a74d0287107789e74d13a2a6aa4a4b468e774f0a1adf9102346bfd368a
-
SSDEEP
24576:YAcBrRa4TvQXTXSPUP+4I9cHTYkkbwIcnGuVG4kJZ+xppGqbw6y:CFa4TvQXTA4IaTVuwIcxCZ+xHwn
Malware Config
Signatures
Files
-
da5c703f087919407941badbc8b4b6a8_JaffaCakes118.zip
-
wellss/wells/Index.htm.js
-
wellss/wells/action.php
-
wellss/wells/antibots.php
-
wellss/wells/blocker.php
-
wellss/wells/bt.php
-
wellss/wells/images/ae24.png.png
-
wellss/wells/images/atadun.js.js
-
wellss/wells/images/buton.png.png
-
wellss/wells/images/college-students-group-steps-970x485.jpg.jpg
-
wellss/wells/images/conutils-6.js.js
-
wellss/wells/images/couple-computer-table-970x485.jpg.jpg
-
wellss/wells/images/couple-smiling-water-970x485.jpg.jpg
-
wellss/wells/images/footi.png.png
-
wellss/wells/images/ghead.png.png
-
wellss/wells/images/header.png.png
-
wellss/wells/images/homepage-NBA-college-off-193x119.jpg.jpg
-
wellss/wells/images/homepage-NBA-fraud-off-193x119.jpg.jpg
-
wellss/wells/images/homepage-NBA-homelending-off-193x119.jpg.jpg
-
wellss/wells/images/homepage-NBA-investing-off-193x119.jpg.jpg
-
wellss/wells/images/homepage-NBA-retirement-off-193x119.jpg.jpg
-
wellss/wells/images/homepage-caret-selector.svg
-
wellss/wells/images/homepage-footer-stagecoach.png.png
-
wellss/wells/images/homepage-image-sprite-2.png.png
-
wellss/wells/images/homepage-image-sprite.png.png
-
wellss/wells/images/homepage-image-sprite_002.png.png
-
wellss/wells/images/homepage-lock-signon.svg.xml
-
wellss/wells/images/homepage-lock.svg.xml
-
wellss/wells/images/homepage-logo-horz.svg.xml
-
wellss/wells/images/homepage-marquee-dot-active.svg.xml
-
wellss/wells/images/homepage-marquee-dot-inactive.svg.xml
-
wellss/wells/images/homepage_per.css
-
wellss/wells/images/icon-equal-housing.png.png
-
wellss/wells/images/icon-makeappt_50x50.png.png
-
wellss/wells/images/icon-rate_percent_50x50.png.png
-
wellss/wells/images/jquery-3.js.js
-
wellss/wells/images/loading.gif.gif
-
wellss/wells/images/login-userprefs.js.js
-
wellss/wells/images/man-moving-plant-shelf-970x485.jpg.jpg
-
wellss/wells/images/man-sitting-phone-computer-970x485.jpg.jpg
-
wellss/wells/images/man-woman-handshake-office-lobby-stagecoach-414x240.jpg.jpg
-
wellss/wells/images/nd.js
-
wellss/wells/images/next.png.png
-
wellss/wells/images/payingwithphone-beach_193x119.jpg.jpg
-
wellss/wells/images/payingwithphone-beach_970x485.jpg.jpg
-
wellss/wells/images/stagecoach-two-drivers-field-green-414x240.jpg.jpg
-
wellss/wells/images/three-men-volunteer-house-414x240.jpg.jpg
-
wellss/wells/images/utag.js.js
-
wellss/wells/images/utag_002.js.js
-
wellss/wells/images/viewing_FICAscore_193x119.jpg.jpg
-
wellss/wells/images/viewing_FICAscore_on_tablet_970x485.jpg.jpg
-
wellss/wells/images/w1.png.png
-
wellss/wells/images/wellsfargo-volunteers-building-house-414x240.jpg.jpg
-
wellss/wells/images/wfi000_ic_b-building-house2-w_50x50.png.png
-
wellss/wells/images/wfi000_ic_b-graduation-hat-w_50x50.png.png
-
wellss/wells/images/wfi111_ic_nba_default2_50x50.png.png
-
wellss/wells/images/wfi111_ph_hre_default3_304x194.jpg.jpg
-
wellss/wells/images/wfia081_ph_b7007_00117_304x194.jpg.jpg
-
wellss/wells/images/wfia432_ph_g132269213_304x194.jpg.jpg
-
wellss/wells/images/wfic239_ph_g-672544960_1200x532.jpg.jpg
-
wellss/wells/images/wfic254_ph_g-186678901-cc002_1200x532.jpg.jpg
-
wellss/wells/images/wfic264_ph_g-debitonoff_489x234.jpg.jpg
-
wellss/wells/images/wfic419_ph_a-brand-anthem_1200x532.jpg.jpg
-
wellss/wells/images/woman-sitting-chair-tablet-screenshot-414x240.jpg.jpg
-
wellss/wells/index.html.html
-
wellss/wells/next.php
-
wellss/wells/quest.php
-
wellss/wells/step1.html.html .js polyglot
-
wellss/wells/step2.html.html .js polyglot
-
wellss/wells/step3.html.html .js polyglot