Overview

overview

3

Static

static

1

091_cc_lad...ex.asp

windows7-x64

3

091_cc_lad...ex.asp

windows10-2004-x64

3

091_cc_lad...nn.vbs

windows7-x64

1

091_cc_lad...nn.vbs

windows10-2004-x64

1

091_cc_lad...ds.asp

windows7-x64

3

091_cc_lad...ds.asp

windows10-2004-x64

3

091_cc_lad...ig.vbs

windows7-x64

1

091_cc_lad...ig.vbs

windows10-2004-x64

1

091_cc_lad...ex.asp

windows7-x64

3

091_cc_lad...ex.asp

windows10-2004-x64

3

091_cc_lad...nk.asp

windows7-x64

3

091_cc_lad...nk.asp

windows10-2004-x64

3

091_cc_lad...er.asp

windows7-x64

3

091_cc_lad...er.asp

windows10-2004-x64

3

091_cc_lad...ck.vbs

windows7-x64

1

091_cc_lad...ck.vbs

windows10-2004-x64

1

091_cc_lad...ut.asp

windows7-x64

3

091_cc_lad...ut.asp

windows10-2004-x64

3

091_cc_lad...ds.asp

windows7-x64

3

091_cc_lad...ds.asp

windows10-2004-x64

3

091_cc_lad...og.asp

windows7-x64

3

091_cc_lad...og.asp

windows10-2004-x64

3

091_cc_lad...sm.asp

windows7-x64

3

091_cc_lad...sm.asp

windows10-2004-x64

3

091_cc_lad...ss.asp

windows7-x64

3

091_cc_lad...ss.asp

windows10-2004-x64

3

091_cc_lad...wu.asp

windows7-x64

3

091_cc_lad...wu.asp

windows10-2004-x64

3

091_cc_lad...lc.asp

windows7-x64

3

091_cc_lad...lc.asp

windows10-2004-x64

3

091_cc_lad...lc.asp

windows7-x64

3

091_cc_lad...lc.asp

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eacbf11102314807176d6fbb246faef7_JaffaCakes118

  • Size

    217KB

  • Sample

    240919-hnnc3awejq

  • MD5

    eacbf11102314807176d6fbb246faef7

  • SHA1

    ea7c9afb38c434be9132a8d113d46398686d3b90

  • SHA256

    176aa163ee317ab39a613117b7d66a391e6d56af9e92697cd01a486c2261a27f

  • SHA512

    015f7bcf8312e4ffb6af90694d0a630750338a474ccb1325a079ead0998e7d0d66e65d5af1d397defd4b722dc34e61463f665bc68293b7b286f01f01ccb00749

  • SSDEEP

    6144:HZD9+L+OxnvGyJqeO80aINdXCzQlIMGueZe1g4:HV9+LvnuyJqxd6Qm5V8O4

Score
3/10

Malware Config

Targets

    • Target

      091_cc_lady2011_free_v4.3.6/album_list/index.asp

    • Size

      3KB

    • MD5

      6836911bf4929f5500f30dc0d3e4fef6

    • SHA1

      538fe7e605e402e883bf9c9556c2faa85c90194d

    • SHA256

      d074891db28e032472697e240e3d438b51967610252292317965bb7a9382c518

    • SHA512

      1e2c6f8935b8fefaac482652f2542e683fc190d321abb57d9e4e51cfb1bb5a5b569b702ec6afe481872cdc47e111a2f364609d123fb3be4f6d71a47ac945e6b9

    Score
    3/10
    behavioral1behavioral2

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/Conn.asp

    • Size

      1KB

    • MD5

      fccf194a69a38f6476f9741d19d74cb8

    • SHA1

      a1b64531875486f9663a45ad5a4a473b16e4d40d

    • SHA256

      9c456020bb5044fa673df22674856e0e1bc0eaad354ed60ff7d7df948bb3c214

    • SHA512

      a073c029f3d08cac8afdb9c45ca1590acc5002e4a7081ef0477e0685fe284e171f204eb6969e05494cc97d4b8fd62d868c6d60308b8aebe278c4eacada930aa9

    Score
    1/10
    behavioral3behavioral4

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/admin_ads.asp

    • Size

      5KB

    • MD5

      6beb03635aaa89c74fbe53afaa4e6f73

    • SHA1

      ffd710063e80adef351ae2dfab4a375e4969bba2

    • SHA256

      d3ebf619eef721f7fbf171ff0faf35e67c1cd37752a00cafa87b9b5632540f33

    • SHA512

      fc2e931119bdb2af01bc52f48c02474dea46e60709fd22605ee9f2fe43a8d89b49b9b4c0215cf210ab5d08da97036876021b359a1f6dabff69b280a7fecc1e1b

    • SSDEEP

      96:hxWHJLqJviu12IsWsppikyluugj9cX+ggNXvd5tGx2Ij/S9Yl9u8UWP:rmQi/IJ2yrXGujnG8rP

    Score
    3/10
    behavioral5behavioral6

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/admin_config.asp

    • Size

      10KB

    • MD5

      52839f2d51a5b6af408f086166ad2188

    • SHA1

      be4c8946dafe1ace8761a1442b515d02181c9de7

    • SHA256

      6e18e20c078b269361dc55a0eb5e7c9f57485fda5b73f70fff47413b3bad15d5

    • SHA512

      1eb1da5db2d6562769d18a70a4e960ce8fe8bc4497cda6b0d5beb0318b656bd637631b0d5e7b6110b82e99508ffe73ac383d847331a2abc5efecc366a074d1f9

    • SSDEEP

      96:lxkpf2ibccMT84neMsaZ1nqj1YavSe0zQMDPzjB57e7FPRodtO9bz1nPfL8XNfHh:/a7t4eMK0zxPzneBP4dnHfAmUhWnIgsk

    Score
    1/10
    behavioral7behavioral8

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/admin_index.asp

    • Size

      13KB

    • MD5

      ea185a8d86b471653d4f8bcd17ca872c

    • SHA1

      0d6ccf2df03f081f59c64a0593bd13228c9a35f6

    • SHA256

      7df6c2d10b342bdcdc60a42af9eb74a124b629d341b733089c6d1b257eab8f29

    • SHA512

      98dd02ff5507ddc887b5ef6c663ab0cd2033abd450a48694684ca025da72f462a705678bb451f950bfa565ebc04cfaa2e0c0449166d773e901443a196f6b1c31

    • SSDEEP

      384:rmAzaQyGXcrRn/RXqrV6ObON15CgmGhF7z:rpmfnlRewCgmiF7z

    Score
    3/10
    behavioral10behavioral9

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/admin_link.asp

    • Size

      1KB

    • MD5

      3ac6dc5f7d00028497db1c8ab13e8229

    • SHA1

      10d20bbade22cd9eacd1d4c1074e1df12606e17a

    • SHA256

      89f3c57c0ef020f169062db16db1e4322831f35fce26fee003a342c19c103e85

    • SHA512

      e3939f2481aa4e6b6e61fd23fda4748e9fef640af9cbaa8f1224915a0031fac3f4826dc929a7032d5c01fc59f1f0091f7693698aad37f8680423a5f2ffdcc3f9

    Score
    3/10
    behavioral11behavioral12

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/admin_webmaster.asp

    • Size

      10KB

    • MD5

      8410098ba2351acb31d23d87ac859fbb

    • SHA1

      4f050ef96b122d79e40f0eb2fb79b24945910cb3

    • SHA256

      ffc814fc8fc114423d62413c72da219c0b1e60ae0acc1acd6d9bbcf37a9c8c85

    • SHA512

      eb78d0d43032d0828ade8e237e9522666fe983561eb66dc90cd113ef0186b87ca01bc8a330ac8ed3602a5585b88430f4eb048e514887a2637a612d5d52d2c04c

    • SSDEEP

      192:rmnrlRoZWM/YeRYjmV9aVbf2gTyu6xBoQtEE4UF8cF6u1Qra1o92I:rmnrl+JQ2wmV9aVbdyukBF8cF5Q21oF

    Score
    3/10
    behavioral13behavioral14

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/check.asp

    • Size

      2KB

    • MD5

      e6850e86774336251722787537d5d029

    • SHA1

      92ecff94bc4e3d0751d37c075e6f4041167dc531

    • SHA256

      f625b54a8b0bfeade05ebef164de25a3132d2dcbb55d0a823c4b5bd14311aa21

    • SHA512

      f2a8e3169465c1eba97e8e583635f8ff548409c32a57cb25569876287fe52e7351fdd24920854f70ac0151d7179684d1f61c672d2c5acdf2db6290d4fd6fb92a

    Score
    1/10
    behavioral15behavioral16

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_about.asp

    • Size

      1KB

    • MD5

      2d5dc3408d5d6795a967f53456876e6a

    • SHA1

      3336ba6c7ea8c17b53b86ddc1e32527bb6f3b2bc

    • SHA256

      274f9116b4b1c92afc104be78fccfe0ea5faed1d3f48461a8d91550d2d994956

    • SHA512

      f68da748e4f1e889bb52da877ea75941bd96dd23be8a2ba05f9a17138be7ab96d175e483cdbfaa054a2afc73ace71a6b46721380884226afbae39576d4fb4280

    Score
    3/10
    behavioral17behavioral18

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_ads.asp

    • Size

      992B

    • MD5

      2caa05e55290c017016b2d6688aafad9

    • SHA1

      7f3d224dfe939ebdc5952354a07b6715a0cfda27

    • SHA256

      28779980306c7f062f3f941394c7d2acf0d471f19dc78de226310641e7f2205a

    • SHA512

      54645bb009b898dad756e7f521841d7be9b046f9623ed406e41884221ac5acf10b26f3244c727699a1429d732546d3b5d800bd46f911f3dcacfa2a0a8f1f1305

    Score
    3/10
    behavioral19behavioral20

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_blog.asp

    • Size

      1KB

    • MD5

      1dcd864f592da8fdceb9635488783957

    • SHA1

      083eb11697878f5b80c50d4e5901ad99ea1d0113

    • SHA256

      74b678be167da282b182558694bd0a959ab598748746b24e8d8e01fdc6c60086

    • SHA512

      f148ce42699688a8b7b740e76ce23e3a47d8ee69ac0e3b9233b56caf465fafe6ad4ceb4307834917e88e6e28c79b1d179f1d3ec2dde399ac7975201dc05881e0

    Score
    3/10
    behavioral21behavioral22

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_bqsm.asp

    • Size

      1KB

    • MD5

      a8c206f02aebfb3607063cbea6218f01

    • SHA1

      4b70edb7e91701abfcf50a26024680ccb099ea5a

    • SHA256

      3ea7bbf1a7af5e3f13afbc2411eeeed4920d07fae1573bd893525a5dc3d133ef

    • SHA512

      f2e6757736551fcc489feb33eef1d3033c3eef269cd5a16d4d704906676e1b9b02a62ee84a4c16b54adbdc5d3dcc9588ea781f716435cd953d5a25ecf2f028db

    Score
    3/10
    behavioral23behavioral24

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_class.asp

    • Size

      830B

    • MD5

      4741165ecb546984e734de3671602750

    • SHA1

      14b4eb032d41a902146251506b9450b1f744de4a

    • SHA256

      6848d001818dd0326afed01370e1ef7c492d6d497141821390ae0ce440bb754e

    • SHA512

      2b05ec7347cdac44f7859dfe214427db7cdc567d30fe946c367fa17d861abcc4af0f6c4372bb4098039037a48e01236c645bf369481804e32009ed2b540a1e48

    Score
    3/10
    behavioral25behavioral26

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_fuwu.asp

    • Size

      993B

    • MD5

      a472aeb028b2adeda706836d90c9936b

    • SHA1

      4f508ea2fa7a8214ed1644166b8349f55c1937ab

    • SHA256

      57854562f29b278c4f09304491e45cc40fad0a60f1e503102bf9d3b23e1f5d7f

    • SHA512

      673ca1eeb1bb615a35c6615e48f3f3b50a94c1204a0a687b6f92a4a151d79990564c2272a482bd958070e1e58bc06629a97074582527452eaee32ba7a965e065

    Score
    3/10
    behavioral27behavioral28

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_fzlc.asp

    • Size

      993B

    • MD5

      1dbbad5a6beb09a415d3884b6e8f21d6

    • SHA1

      a3588fd9a51ed0220ba90ac28fdcc9933ba41710

    • SHA256

      b7a17d7e6a3af61b6d1ea3a19708bd4421a32a68b90f8253da08f15c88d91baa

    • SHA512

      df5edd7d9b75d934dc6cf434e1f58c9fc75e59eda6be90231d77014761757db22b0018b3eaceae10280a9805b1b0a2054229eb06eef73a2214d0b44634724e1f

    Score
    3/10
    behavioral29behavioral30

    • Target

      091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_gmlc.asp

    • Size

      1KB

    • MD5

      cd0a369657300de8937c212d30dd1c98

    • SHA1

      350efab88f510cdf022475ddcd63be684ae29dcb

    • SHA256

      cef4e9fa9190567f61d1a690290f5d0630c9575d6cd9fdd43cd7fab4249ae63b

    • SHA512

      303b7973014b1ee7e4d5a6cfb510022813aac5ec939a49bc8088b5ff09587559524307456c2512c5777bae1d47b9c775dfd86209065f70b9c116d55ccbc988aa

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks