Overview
overview
3Static
static
1mlshe/admi...in.vbs
windows7-x64
1mlshe/admi...in.vbs
windows10-2004-x64
1mlshe/admin/conn.vbs
windows7-x64
1mlshe/admin/conn.vbs
windows10-2004-x64
1mlshe/admi...ml.asp
windows7-x64
3mlshe/admi...ml.asp
windows10-2004-x64
3mlshe/admi...lt.asp
windows7-x64
3mlshe/admi...lt.asp
windows10-2004-x64
3mlshe/admin/login.vbs
windows7-x64
1mlshe/admin/login.vbs
windows10-2004-x64
1mlshe/admi...ut.asp
windows7-x64
3mlshe/admi...ut.asp
windows10-2004-x64
3mlshe/admin/main.html
windows7-x64
3mlshe/admin/main.html
windows10-2004-x64
3mlshe/admin/menu.html
windows7-x64
3mlshe/admin/menu.html
windows10-2004-x64
3mlshe/admi...ig.asp
windows7-x64
3mlshe/admi...ig.asp
windows10-2004-x64
3mlshe/admi...tor.js
windows7-x64
3mlshe/admi...tor.js
windows10-2004-x64
3mlshe/admi...BB.asp
windows7-x64
3mlshe/admi...BB.asp
windows10-2004-x64
3mlshe/admi...HR.htm
windows7-x64
3mlshe/admi...HR.htm
windows10-2004-x64
3mlshe/admi...p.html
windows7-x64
3mlshe/admi...p.html
windows10-2004-x64
1mlshe/admi...ME.htm
windows7-x64
3mlshe/admi...ME.htm
windows10-2004-x64
3mlshe/admi...ex.vbs
windows7-x64
1mlshe/admi...ex.vbs
windows10-2004-x64
1mlshe/admi...le.asp
windows7-x64
3mlshe/admi...le.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
mlshe/admin/chklogin.vbs
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
mlshe/admin/chklogin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
mlshe/admin/conn.vbs
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
mlshe/admin/conn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
mlshe/admin/createhtml.asp
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
mlshe/admin/createhtml.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
mlshe/admin/default.asp
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
mlshe/admin/default.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
mlshe/admin/login.vbs
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
mlshe/admin/login.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
mlshe/admin/logout.asp
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
mlshe/admin/logout.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
mlshe/admin/main.html
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
mlshe/admin/main.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
mlshe/admin/menu.html
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
mlshe/admin/menu.html
Resource
win10v2004-20240910-en
Behavioral task
behavioral17
Sample
mlshe/admin/news/Config.asp
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
mlshe/admin/news/Config.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
mlshe/admin/news/Editor.js
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
mlshe/admin/news/Editor.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
mlshe/admin/news/HELP_UBB.asp
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
mlshe/admin/news/HELP_UBB.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
mlshe/admin/news/HR.htm
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
mlshe/admin/news/HR.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
mlshe/admin/news/Help.html
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
mlshe/admin/news/Help.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
mlshe/admin/news/IFRAME.htm
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
mlshe/admin/news/IFRAME.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
mlshe/admin/news/Index.vbs
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
mlshe/admin/news/Index.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
mlshe/admin/news/Upfile.asp
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
mlshe/admin/news/Upfile.asp
Resource
win10v2004-20240802-en
General
-
Target
e0510bf3283a66e55817582008eb31f3_JaffaCakes118
-
Size
157KB
-
MD5
e0510bf3283a66e55817582008eb31f3
-
SHA1
c8bb81ecbcc764be6c622ee747b92adeb18831e9
-
SHA256
af740d70a5e7b7d450df49c06679a0a037e580f897469e8812c4caa2e3a8fe4c
-
SHA512
d47aade019baac2a5278efd3b20f6cc61aabceff513711794a0dad83c0a01d9e3641e1f79079355dff42769f87dea5433618335eecbe13331b27e3dfeb916df2
-
SSDEEP
3072:fc5fewpHxGMoQSBoxZHf533re6JxZ5GGymVw6hvuvHtJAs1Z:+fewxxGMVLxZHf5zqBwvmtZT
Malware Config
Signatures
Files
-
e0510bf3283a66e55817582008eb31f3_JaffaCakes118.rar
-
mlshe/admin/chklogin.asp.vbs
-
mlshe/admin/conn.inc.vbs
-
mlshe/admin/createhtml.asp
-
mlshe/admin/default.asp.asp
-
mlshe/admin/login.asp.vbs
-
mlshe/admin/logout.asp
-
mlshe/admin/main.html.html
-
mlshe/admin/menu.asp.html
-
mlshe/admin/news/Config.asp
-
mlshe/admin/news/Edit.css
-
mlshe/admin/news/Editor.asp.js
-
mlshe/admin/news/HELP_UBB.ASP
-
mlshe/admin/news/HR.HTM.html
-
mlshe/admin/news/Help.asp.html
-
mlshe/admin/news/IFRAME.HTM.html
-
mlshe/admin/news/Image/Acenter.gif.gif
-
mlshe/admin/news/Image/Aleft.gif.gif
-
mlshe/admin/news/Image/Aright.gif.gif
-
mlshe/admin/news/Image/Thumbs.db
-
mlshe/admin/news/Image/bold.gif.gif
-
mlshe/admin/news/Image/clear.gif.gif
-
mlshe/admin/news/Image/copy.gif.gif
-
mlshe/admin/news/Image/cut.gif.gif
-
mlshe/admin/news/Image/del.gif.gif
-
mlshe/admin/news/Image/fgcolor.gif.gif
-
mlshe/admin/news/Image/fieldset.gif.gif
-
mlshe/admin/news/Image/flash.gif.gif
-
mlshe/admin/news/Image/help.gif.gif
-
mlshe/admin/news/Image/htm.gif.gif
-
mlshe/admin/news/Image/img.gif.gif
-
mlshe/admin/news/Image/indent.gif.gif
-
mlshe/admin/news/Image/italic.gif.gif
-
mlshe/admin/news/Image/line.gif.gif
-
mlshe/admin/news/Image/list.gif.gif
-
mlshe/admin/news/Image/nourl.gif.gif
-
mlshe/admin/news/Image/num.gif.gif
-
mlshe/admin/news/Image/outdent.gif.gif
-
mlshe/admin/news/Image/paste.gif.gif
-
mlshe/admin/news/Image/redo.gif.gif
-
mlshe/admin/news/Image/rm.gif.gif
-
mlshe/admin/news/Image/s.gif.gif
-
mlshe/admin/news/Image/save.gif.gif
-
mlshe/admin/news/Image/selectall.gif.gif
-
mlshe/admin/news/Image/sline.gif.gif
-
mlshe/admin/news/Image/sub.gif.gif
-
mlshe/admin/news/Image/sup.gif.gif
-
mlshe/admin/news/Image/table.gif.gif
-
mlshe/admin/news/Image/underline.gif.gif
-
mlshe/admin/news/Image/undo.gif.gif
-
mlshe/admin/news/Image/upload.gif.gif
-
mlshe/admin/news/Image/url.gif.gif
-
mlshe/admin/news/Image/wmv.gif.gif
-
mlshe/admin/news/Index.asp.vbs
-
mlshe/admin/news/SITE.CSS
-
mlshe/admin/news/Upfile.asp.asp .vbs polyglot
-
mlshe/admin/news/Upfile_Photo.asp.asp .vbs polyglot
-
mlshe/admin/news/Upfile_commend.asp.asp .vbs polyglot
-
mlshe/admin/news/Upload.asp.html .js polyglot
-
mlshe/admin/news/Upload_Photo.asp.html .js polyglot
-
mlshe/admin/news/Upload_commend.asp.html .js polyglot
-
mlshe/admin/news/add.asp.vbs
-
mlshe/admin/news/class.asp.vbs
-
mlshe/admin/news/createhtml.asp
-
mlshe/admin/news/default.asp
-
mlshe/admin/news/del.asp
-
mlshe/admin/news/fieldset.htm.html
-
mlshe/admin/news/flash.HTMl.html
-
mlshe/admin/news/media.HTMl.html
-
mlshe/admin/news/menu.asp.html
-
mlshe/admin/news/modiy.asp.vbs
-
mlshe/admin/news/pic.HTMl.html
-
mlshe/admin/news/rm.HTMl.html
-
mlshe/admin/news/upfile_class.asp.vbs
-
mlshe/admin/news/upload.inc.html .vbs polyglot
-
mlshe/admin/photo/Config.asp
-
mlshe/admin/photo/Edit.css
-
mlshe/admin/photo/Editor.asp.js
-
mlshe/admin/photo/HELP_UBB.ASP
-
mlshe/admin/photo/HR.HTM.html
-
mlshe/admin/photo/Help.asp.html
-
mlshe/admin/photo/IFRAME.HTM.html
-
mlshe/admin/photo/Image/Acenter.gif.gif
-
mlshe/admin/photo/Image/Aleft.gif.gif
-
mlshe/admin/photo/Image/Aright.gif.gif
-
mlshe/admin/photo/Image/Thumbs.db
-
mlshe/admin/photo/Image/bold.gif.gif
-
mlshe/admin/photo/Image/clear.gif.gif
-
mlshe/admin/photo/Image/copy.gif.gif
-
mlshe/admin/photo/Image/cut.gif.gif
-
mlshe/admin/photo/Image/del.gif.gif
-
mlshe/admin/photo/Image/fgcolor.gif.gif
-
mlshe/admin/photo/Image/fieldset.gif.gif
-
mlshe/admin/photo/Image/flash.gif.gif
-
mlshe/admin/photo/Image/help.gif.gif
-
mlshe/admin/photo/Image/htm.gif.gif
-
mlshe/admin/photo/Image/img.gif.gif
-
mlshe/admin/photo/Image/indent.gif.gif
-
mlshe/admin/photo/Image/italic.gif.gif
-
mlshe/admin/photo/Image/line.gif.gif
-
mlshe/admin/photo/Image/list.gif.gif
-
mlshe/admin/photo/Image/nourl.gif.gif
-
mlshe/admin/photo/Image/num.gif.gif
-
mlshe/admin/photo/Image/outdent.gif.gif
-
mlshe/admin/photo/Image/paste.gif.gif
-
mlshe/admin/photo/Image/redo.gif.gif
-
mlshe/admin/photo/Image/rm.gif.gif
-
mlshe/admin/photo/Image/s.gif.gif
-
mlshe/admin/photo/Image/save.gif.gif
-
mlshe/admin/photo/Image/selectall.gif.gif
-
mlshe/admin/photo/Image/sline.gif.gif
-
mlshe/admin/photo/Image/sub.gif.gif
-
mlshe/admin/photo/Image/sup.gif.gif
-
mlshe/admin/photo/Image/table.gif.gif
-
mlshe/admin/photo/Image/underline.gif.gif
-
mlshe/admin/photo/Image/undo.gif.gif
-
mlshe/admin/photo/Image/upload.gif.gif
-
mlshe/admin/photo/Image/url.gif.gif
-
mlshe/admin/photo/Image/wmv.gif.gif
-
mlshe/admin/photo/Index.asp.vbs
-
mlshe/admin/photo/SITE.CSS
-
mlshe/admin/photo/Upfile.asp.asp .vbs polyglot
-
mlshe/admin/photo/Upfile_Photo.asp.asp .vbs polyglot
-
mlshe/admin/photo/Upfile_commend.asp.asp .vbs polyglot
-
mlshe/admin/photo/Upload.asp.html .js polyglot
-
mlshe/admin/photo/Upload_Photo.asp.html .js polyglot
-
mlshe/admin/photo/Upload_commend.asp.html .js polyglot
-
mlshe/admin/photo/add.asp.vbs
-
mlshe/admin/photo/createhtml.asp
-
mlshe/admin/photo/default.asp
-
mlshe/admin/photo/del.asp
-
mlshe/admin/photo/fieldset.htm.html
-
mlshe/admin/photo/flash.HTMl.html
-
mlshe/admin/photo/media.HTMl.html
-
mlshe/admin/photo/menu.asp.html
-
mlshe/admin/photo/modiy.asp.vbs
-
mlshe/admin/photo/next.asp.vbs
-
mlshe/admin/photo/nextindex.asp.vbs
-
mlshe/admin/photo/nextmodiy.asp.vbs
-
mlshe/admin/photo/pic.HTMl.html
-
mlshe/admin/photo/rm.HTMl.html
-
mlshe/admin/photo/upfile_class.asp.vbs
-
mlshe/admin/photo/upload.inc.html .vbs polyglot
-
mlshe/admin/temp.asp.html .vbs polyglot
-
mlshe/admin/test/Config.asp
-
mlshe/admin/test/Edit.css
-
mlshe/admin/test/Editor.asp.js
-
mlshe/admin/test/HELP_UBB.ASP
-
mlshe/admin/test/HR.HTM.html
-
mlshe/admin/test/Help.asp.html
-
mlshe/admin/test/IFRAME.HTM.html
-
mlshe/admin/test/Image/Acenter.gif.gif
-
mlshe/admin/test/Image/Aleft.gif.gif
-
mlshe/admin/test/Image/Aright.gif.gif
-
mlshe/admin/test/Image/Thumbs.db
-
mlshe/admin/test/Image/bold.gif.gif
-
mlshe/admin/test/Image/clear.gif.gif
-
mlshe/admin/test/Image/copy.gif.gif
-
mlshe/admin/test/Image/cut.gif.gif
-
mlshe/admin/test/Image/del.gif.gif
-
mlshe/admin/test/Image/fgcolor.gif.gif
-
mlshe/admin/test/Image/fieldset.gif.gif
-
mlshe/admin/test/Image/flash.gif.gif
-
mlshe/admin/test/Image/help.gif.gif
-
mlshe/admin/test/Image/htm.gif.gif
-
mlshe/admin/test/Image/img.gif.gif
-
mlshe/admin/test/Image/indent.gif.gif
-
mlshe/admin/test/Image/italic.gif.gif
-
mlshe/admin/test/Image/line.gif.gif
-
mlshe/admin/test/Image/list.gif.gif
-
mlshe/admin/test/Image/nourl.gif.gif
-
mlshe/admin/test/Image/num.gif.gif
-
mlshe/admin/test/Image/outdent.gif.gif
-
mlshe/admin/test/Image/paste.gif.gif
-
mlshe/admin/test/Image/redo.gif.gif
-
mlshe/admin/test/Image/rm.gif.gif
-
mlshe/admin/test/Image/s.gif.gif
-
mlshe/admin/test/Image/save.gif.gif
-
mlshe/admin/test/Image/selectall.gif.gif
-
mlshe/admin/test/Image/sline.gif.gif
-
mlshe/admin/test/Image/sub.gif.gif
-
mlshe/admin/test/Image/sup.gif.gif
-
mlshe/admin/test/Image/table.gif.gif
-
mlshe/admin/test/Image/underline.gif.gif
-
mlshe/admin/test/Image/undo.gif.gif
-
mlshe/admin/test/Image/upload.gif.gif
-
mlshe/admin/test/Image/url.gif.gif
-
mlshe/admin/test/Image/wmv.gif.gif
-
mlshe/admin/test/Index.asp.vbs
-
mlshe/admin/test/SITE.CSS
-
mlshe/admin/test/Upfile.asp.asp .vbs polyglot
-
mlshe/admin/test/Upfile_Photo.asp.asp .vbs polyglot
-
mlshe/admin/test/Upfile_commend.asp.asp .vbs polyglot
-
mlshe/admin/test/Upload.asp.html .js polyglot
-
mlshe/admin/test/Upload_Photo.asp.html .js polyglot
-
mlshe/admin/test/Upload_commend.asp.html .js polyglot
-
mlshe/admin/test/add.asp.vbs
-
mlshe/admin/test/createhtml.asp
-
mlshe/admin/test/default.asp
-
mlshe/admin/test/del.asp
-
mlshe/admin/test/fieldset.htm.html
-
mlshe/admin/test/flash.HTMl.html
-
mlshe/admin/test/media.HTMl.html
-
mlshe/admin/test/menu.asp.html
-
mlshe/admin/test/modiy.asp.vbs
-
mlshe/admin/test/next.asp.vbs
-
mlshe/admin/test/nextindex.asp.vbs
-
mlshe/admin/test/nextmodiy.asp.vbs
-
mlshe/admin/test/pic.HTMl.html
-
mlshe/admin/test/rm.HTMl.html
-
mlshe/admin/test/upfile_class.asp.vbs
-
mlshe/admin/test/upload.inc.html .vbs polyglot
-
mlshe/css/ie6.css
-
mlshe/css/style.css
-
mlshe/data/abc_Data.MDF
-
mlshe/data/abc_Log.LDF
-
mlshe/default.asp
-
mlshe/inc/bottom.asp
-
mlshe/inc/classics.js
-
mlshe/inc/fun.asp.vbs
-
mlshe/inc/head.asp
-
mlshe/inc/ph.js.js
-
mlshe/inc/ubbcode.asp.vbs
-
mlshe/inc/up.js.html .js polyglot
-
mlshe/使用说明.txt
-
mlshe/新云软件.url.url