Overview
overview
3Static
static
1.vbs
windows7-x64
1.vbs
windows10-2004-x64
1app/authentication.js
windows7-x64
3app/authentication.js
windows10-2004-x64
3app/captcha.js
windows7-x64
3app/captcha.js
windows10-2004-x64
3app/identity.js
windows7-x64
3app/identity.js
windows10-2004-x64
3app/lib/js...min.js
windows7-x64
3app/lib/js...min.js
windows10-2004-x64
3app/lib/js...lid.js
windows7-x64
3app/lib/js...lid.js
windows10-2004-x64
3app/lib/js...min.js
windows7-x64
3app/lib/js...min.js
windows10-2004-x64
3app/lib/js...min.js
windows7-x64
3app/lib/js...min.js
windows10-2004-x64
3app/lib/js/xsecx.js
windows7-x64
3app/lib/js/xsecx.js
windows10-2004-x64
3app/process.js
windows7-x64
3app/process.js
windows10-2004-x64
3app/processcard.js
windows7-x64
3app/processcard.js
windows10-2004-x64
3app/signin.js
windows7-x64
3app/signin.js
windows10-2004-x64
3app/signin.js
windows7-x64
3app/signin.js
windows10-2004-x64
3app/unusua...ity.js
windows7-x64
3app/unusua...ity.js
windows10-2004-x64
3prevents/anti8.ps1
windows7-x64
3prevents/anti8.ps1
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
.vbs
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
app/authentication.js
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
app/authentication.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
app/captcha.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
app/captcha.js
Resource
win10v2004-20240910-en
Behavioral task
behavioral7
Sample
app/identity.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
app/identity.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
app/lib/js/jquery-3.3.1.min.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
app/lib/js/jquery-3.3.1.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
app/lib/js/jquery.ccvalid.js
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
app/lib/js/jquery.ccvalid.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
app/lib/js/jquery.mask.min.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
app/lib/js/jquery.mask.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
app/lib/js/jquery.min.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
app/lib/js/jquery.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
app/lib/js/xsecx.js
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
app/lib/js/xsecx.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
app/process.js
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
app/process.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
app/processcard.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
app/processcard.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
app/signin.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
app/signin.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
app/signin.js
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
app/signin.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
app/unusual_activity.js
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
app/unusual_activity.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
prevents/anti8.ps1
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
prevents/anti8.ps1
Resource
win10v2004-20240802-en
General
-
Target
eb44377b683e5454dc40168335eeaf7f_JaffaCakes118
-
Size
2.4MB
-
MD5
eb44377b683e5454dc40168335eeaf7f
-
SHA1
f236a7beba0173eeefad9b49d91853d25d2b5afa
-
SHA256
2f5ec07a18b88381590ac37f141b3a5a61a9b632ed89886294af3a4d9ebab15f
-
SHA512
6ecca3602c112894701c5315e2bd47b421feec15cb56c95381e27c7d0b6778e3ac12ad1ea0b8b98cc3940731a598f15ce871e29435ba5b5ee9e93bae3fbf8ad1
-
SSDEEP
49152:C5ftvPWt6DK9Cs/OZjBexPpWae2cW7Q70rIGUNfCDp7ogalEbbNHB2/FEbbNHB24:C5ftvut6mijAlBcW7Q7nG4lUNkUNL
Malware Config
Signatures
Files
-
eb44377b683e5454dc40168335eeaf7f_JaffaCakes118.zip
-
.htaccess.vbs
-
H3ATSTR0K3.txt
-
app/authentication.php.js
-
app/bank.php
-
app/captcha.php.js
-
app/captured.txt
-
app/identity.php.js
-
app/index.php
-
app/lib/css/1.png.png
-
app/lib/css/3D_SH33NZ0.css
-
app/lib/css/btn.css
-
app/lib/css/codex.authentication.css
-
app/lib/css/custom.css
-
app/lib/css/xappx.css
-
app/lib/fonts/icons_sans.eot
-
app/lib/fonts/icons_sans.svg.xml
-
app/lib/fonts/icons_sans.ttf
-
app/lib/fonts/icons_sans.woff
-
app/lib/fonts/p_big_light.eot
-
app/lib/fonts/p_big_light.svg.xml
-
app/lib/fonts/p_big_light.woff
-
app/lib/fonts/p_big_sans.eot
-
app/lib/fonts/p_big_sans.svg.xml
-
app/lib/fonts/p_big_sans.woff
-
app/lib/fonts/p_big_sans.woff2
-
app/lib/fonts/p_small_light.eot
-
app/lib/fonts/p_small_light.svg.xml
-
app/lib/fonts/p_small_light.woff
-
app/lib/fonts/p_small_regular.eot
-
app/lib/fonts/p_small_regular.svg.xml
-
app/lib/fonts/p_small_regular.woff
-
app/lib/img/fav.ico
-
app/lib/img/logo.png.png
-
app/lib/img/mastercard-securecode.png.png
-
app/lib/img/[email protected].png
-
app/lib/img/processing.gif.gif
-
app/lib/img/safe-key.png.png
-
app/lib/img/ssl.png.png
-
app/lib/img/verified-by-visa.png.png
-
app/lib/index.php
-
app/lib/js/jquery-3.3.1.min.js.js
-
app/lib/js/jquery.ccvalid.js.js
-
app/lib/js/jquery.mask.min.js.js
-
app/lib/js/jquery.min.js.js
-
app/lib/js/xsecx.js.js
-
app/lib/pics/alert_list.png.png
-
app/lib/pics/both_pass.svg
-
app/lib/pics/both_sides.svg
-
app/lib/pics/check_list.png.png
-
app/lib/pics/favi.ico
-
app/lib/pics/favi.png.png
-
app/lib/pics/fingers_not.svg
-
app/lib/pics/glaesses_not.svg
-
app/lib/pics/id_lic.svg
-
app/lib/pics/id_n.svg
-
app/lib/pics/id_p.svg
-
app/lib/pics/img-upload.svg
-
app/lib/pics/list_c.png.png
-
app/lib/pics/logo.svg
-
app/lib/pics/logo_official.png.png
-
app/lib/pics/logo_official.svg.xml
-
app/lib/pics/noti.svg.xml
-
app/lib/pics/rotate.png.png
-
app/lib/pics/scan_id.svg
-
app/lib/pics/settings.svg.xml
-
app/lib/pics/success.svg.xml
-
app/lib/pics/take_s.svg
-
app/lib/pics/up_slf.svg
-
app/lib/providers/comcast.com.png.png
-
app/lib/providers/comcast.net.png.png
-
app/lib/providers/fiber.com.png.png
-
app/lib/providers/gmail.com.png.png
-
app/lib/providers/gmx.com.png.png
-
app/lib/providers/icloud.com.png.png
-
app/lib/providers/kpn.com.png.png
-
app/lib/providers/live.com.png.jpg
-
app/lib/providers/live.de.png.jpg
-
app/lib/providers/live.es.png.jpg
-
app/lib/providers/live.fr.png.jpg
-
app/lib/providers/mail.com.png.png
-
app/lib/providers/mail.ru.png.png
-
app/lib/providers/online.nl.png.png
-
app/lib/providers/outlook.com.png.jpg
-
app/lib/providers/t-mobile.com.png.png
-
app/lib/providers/tele2.com.png.png
-
app/lib/providers/telfort.nl.png.png
-
app/lib/providers/yahoo.com.png.png
-
app/lib/providers/yandex.com.png.png
-
app/lib/providers/yandex.ru.png.png
-
app/lib/providers/zoho.com.png.png
-
app/lib/styles/process.css
-
app/lib/styles/signin.css
-
app/lib/styles/unusual.css
-
app/mailprovider.php
-
app/process.php.js
-
app/processcard.php.js
-
app/signin.js.js
-
app/signin.php.js
-
app/thanks.php
-
app/unusual_activity.php.js
-
extra/algo.php
-
extra/bot.php
-
extra/languages/cz.php
-
extra/languages/de.php
-
extra/languages/en.php
-
extra/languages/es.php
-
extra/languages/fr.php
-
extra/languages/he.php
-
extra/languages/index.php
-
extra/languages/it.php
-
extra/languages/pt.php
-
extra/languages/ru.php
-
extra/mine.php
-
extra/stockers/index.php
-
extra/stockers/step1.php
-
extra/stockers/step2.php
-
extra/stockers/step3.php
-
extra/stockers/step4.php
-
extra/stockers/step5.php
-
extra/stockers/step6.php
-
extra/stockers/step7.php
-
extra/stockers/step8.php
-
index.php
-
log.txt
-
news/index.php
-
news/news-0.txt
-
news/news-1.txt
-
news/news-2.txt
-
news/news-3.txt
-
news/news-4.txt
-
news/news-5.txt
-
news/news-6.txt
-
news/news-7.txt
-
news/news-8.txt
-
news/news-9.txt
-
prevents/anti1.php
-
prevents/anti2.php
-
prevents/anti3.php
-
prevents/anti4.php
-
prevents/anti5.php
-
prevents/anti6.php
-
prevents/anti7.php
-
prevents/anti8.php.ps1
-
prevents/filter.php
-
prevents/index.php
-
proof/.htaccess
-
proof/8811dc6bb96005a1f826537316c91ef1.jpeg.jpg
-
proof/bcce592108d8ec029aa75f951662de2e.jpeg.jpg
-
robots.txt