Overview
overview
3Static
static
1ad.asp
windows7-x64
3ad.asp
windows10-2004-x64
3add.vbs
windows7-x64
1add.vbs
windows10-2004-x64
1add_bclass.asp
windows7-x64
3add_bclass.asp
windows10-2004-x64
3add_bclass_save.asp
windows7-x64
3add_bclass_save.asp
windows10-2004-x64
3add_sclass.asp
windows7-x64
3add_sclass.asp
windows10-2004-x64
3add_sclass_save.asp
windows7-x64
3add_sclass_save.asp
windows10-2004-x64
3admin.vbs
windows7-x64
1admin.vbs
windows10-2004-x64
1ajax_select.vbs
windows7-x64
1ajax_select.vbs
windows10-2004-x64
1axingweb_z....0.asp
windows7-x64
3axingweb_z....0.asp
windows10-2004-x64
3by.asp
windows7-x64
3by.asp
windows10-2004-x64
3class.asp
windows7-x64
3class.asp
windows10-2004-x64
3class_co.vbs
windows7-x64
1class_co.vbs
windows10-2004-x64
1class_more.vbs
windows7-x64
1class_more.vbs
windows10-2004-x64
1class_url.vbs
windows7-x64
1class_url.vbs
windows10-2004-x64
1class_url.htm
windows7-x64
3class_url.htm
windows10-2004-x64
3dig.vbs
windows7-x64
1dig.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ad.asp
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ad.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
add.vbs
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
add.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
add_bclass.asp
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
add_bclass.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
add_bclass_save.asp
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
add_bclass_save.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
add_sclass.asp
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
add_sclass.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
add_sclass_save.asp
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
add_sclass_save.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
admin.vbs
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
admin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
ajax_select.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
ajax_select.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
axingweb_zidonglian_2.0.asp
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
axingweb_zidonglian_2.0.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
by.asp
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
by.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
class.asp
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
class.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
class_co.vbs
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
class_co.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
class_more.vbs
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
class_more.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
class_url.vbs
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
class_url.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
class_url.htm
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
class_url.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
dig.vbs
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
dig.vbs
Resource
win10v2004-20240802-en
General
-
Target
dea20cff88add00dd42cb4e80582c48e_JaffaCakes118
-
Size
391KB
-
MD5
dea20cff88add00dd42cb4e80582c48e
-
SHA1
c755eb2eff319697fd644a47c06566553d5e44c8
-
SHA256
486028ce4ee8bd6759bf30f710cb9322991de798c4ee38f0474ccc427da4048c
-
SHA512
d9617dcdb8b17b74c63966fac3fa5e6d451775fd06de3457a4176c4c7e6fbe7bf058813fa128b3c6594b2cbc65db4608a2643879b71cd7334d3ad7798b68bee6
-
SSDEEP
12288:Q9EEA6da76EPxCiis73ZWVVDCkrKNEX15T8b:aAGiVcvT7KSb0
Malware Config
Signatures
Files
-
dea20cff88add00dd42cb4e80582c48e_JaffaCakes118.rar
-
ad.asp
-
add.asp.vbs
-
add_bclass.asp.asp
-
add_bclass_save.asp.asp
-
add_sclass.asp.asp
-
add_sclass_save.asp.asp
-
admin.asp.vbs
-
ajax_select.asp.vbs
-
axingweb_zidonglian_2.0.asp
-
by.asp
-
class.asp.asp .vbs polyglot
-
class_co.asp.vbs
-
class_more.asp.vbs
-
class_url.asp.vbs
-
class_url.htm
-
dig.asp.vbs
-
do.asp.vbs
-
do_add.asp.vbs
-
dodo.asp.vbs
-
dododo.asp.vbs
-
faq.asp.js
-
foot.asp.vbs
-
html/1473.HTM.js
-
html/新云软件.url.url
-
id_test.asp.vbs
-
images/13.gif.gif
-
images/Thumbs.db
-
images/circle.gif.gif
-
images/jz.gif.gif
-
images/loading.gif.gif
-
images/plus_icon01.gif.gif
-
images/rss.gif.gif
-
images/wudilian.gif.gif
-
inc/conn.asp.vbs
-
inc/html.asp.vbs
-
inc/md5.asp.vbs
-
inc/sub.asp.vbs
-
index.asp.vbs
-
index002.asp.vbs
-
index_class.asp
-
index_class.htm
-
index_more.asp.vbs
-
index_pic.asp.vbs
-
index_pic.htm
-
js/Dig.js.js
-
js/Dig2.js
-
js/passwordstrength.js.js
-
js/scroll.js.js
-
js/xmlhttp.js.js
-
link_url.asp
-
link_xx.asp
-
login_content.asp.html
-
morekeywords.asp.vbs
-
my.asp.vbs
-
pic/20050129171936896.gif.gif
-
pic/31.png.png
-
pic/QQ001.gif.gif
-
pic/Thumbs.db
-
pic/bgh.gif.gif
-
pic/check01c.gif.gif
-
pic/ie.gif.gif
-
pic/load.gif.gif
-
pic/loading.gif.gif
-
pic/no.gif.gif
-
pic/sw_license_na.gif.gif
-
pic/tool_close.jpg.jpg
-
pic/tool_content.gif.gif
-
pic/up.gif.gif
-
pic/自动链.gif.gif
-
reg.asp
-
right.asp.vbs
-
right_admin.asp.html .vbs polyglot
-
right_js.asp.vbs
-
rss.asp.vbs
-
rss_read.asp.vbs
-
sc_index_class.asp.html .vbs polyglot
-
sc_index_class_url.asp.html .vbs polyglot
-
sc_index_pic.asp.html .vbs polyglot
-
sc_list.asp.js
-
skin/blue/images/Thumbs.db
-
skin/blue/images/ad.gif.gif
-
skin/blue/images/content_d.jpg.jpg
-
skin/blue/images/content_f.jpg.jpg
-
skin/blue/images/green.jpg.jpg
-
skin/blue/images/hui.jpg.jpg
-
skin/blue/images/jh_rz.jpg.jpg
-
skin/blue/images/jh_yj.jpg.jpg
-
skin/blue/images/right_side.jpg.jpg
-
skin/blue/images/top-bg.jpg.jpg
-
skin/blue/images/top_side.jpg.jpg
-
skin/blue/images/yuan.png.png
-
skin/blue/style.css
-
skin/dis/images/Thumbs.db
-
skin/dis/images/axingweblogo.gif.gif
-
skin/dis/images/header_bg.gif.gif
-
skin/dis/images/logo.gif.gif
-
skin/dis/images/menu_bg.gif.gif
-
skin/dis/images/top-bg.jpg.jpg
-
skin/dis/style.css
-
skin/dis/web.htm.js
-
so.asp.vbs
-
top.asp.js
-
web.asp.vbs
-
web_html.asp.vbs
-
zifu.asp.js
-
自动链2.0使用说明.txt