Overview
overview
3Static
static
1phpsay/_te...n.html
windows7-x64
3phpsay/_te...n.html
windows10-2004-x64
1phpsay/_te...y.html
windows7-x64
3phpsay/_te...y.html
windows10-2004-x64
3phpsay/_te...y.html
windows7-x64
3phpsay/_te...y.html
windows10-2004-x64
3phpsay/_te...y.html
windows7-x64
3phpsay/_te...y.html
windows10-2004-x64
3phpsay/_te...e.html
windows7-x64
3phpsay/_te...e.html
windows10-2004-x64
3phpsay/_te...t.html
windows7-x64
3phpsay/_te...t.html
windows10-2004-x64
3phpsay/_te...r.html
windows7-x64
3phpsay/_te...r.html
windows10-2004-x64
1phpsay/_te...t.html
windows7-x64
3phpsay/_te...t.html
windows10-2004-x64
3phpsay/_te...m.html
windows7-x64
3phpsay/_te...m.html
windows10-2004-x64
1phpsay/_te...e.html
windows7-x64
3phpsay/_te...e.html
windows10-2004-x64
3phpsay/_te...t.html
windows7-x64
3phpsay/_te...t.html
windows10-2004-x64
3phpsay/_te...y.html
windows7-x64
3phpsay/_te...y.html
windows10-2004-x64
3phpsay/_te...d.html
windows7-x64
3phpsay/_te...d.html
windows10-2004-x64
3phpsay/_te...t.html
windows7-x64
3phpsay/_te...t.html
windows10-2004-x64
3phpsay/_te...t.html
windows7-x64
3phpsay/_te...t.html
windows10-2004-x64
3phpsay/_te...r.html
windows7-x64
3phpsay/_te...r.html
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
phpsay/_template/admin.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
phpsay/_template/admin.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
phpsay/_template/anonymity.html
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
phpsay/_template/anonymity.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
phpsay/_template/apply.html
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
phpsay/_template/apply.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
phpsay/_template/category.html
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
phpsay/_template/category.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
phpsay/_template/create.html
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
phpsay/_template/create.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
phpsay/_template/edit_insert.html
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
phpsay/_template/edit_insert.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
phpsay/_template/footer.html
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
phpsay/_template/footer.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
phpsay/_template/footer_copyright.html
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
phpsay/_template/footer_copyright.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
phpsay/_template/forum.html
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
phpsay/_template/forum.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
phpsay/_template/forum_abdicate.html
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
phpsay/_template/forum_abdicate.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
phpsay/_template/forum_blacklist.html
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
phpsay/_template/forum_blacklist.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
phpsay/_template/forum_category.html
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
phpsay/_template/forum_category.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
phpsay/_template/forum_friend.html
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
phpsay/_template/forum_friend.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
phpsay/_template/forum_manage_left.html
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
phpsay/_template/forum_manage_left.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
phpsay/_template/forum_set.html
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
phpsay/_template/forum_set.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
phpsay/_template/header.html
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
phpsay/_template/header.html
Resource
win10v2004-20240802-en
General
-
Target
f012e5564eb3f79bc77101f9517d530d_JaffaCakes118
-
Size
402KB
-
MD5
f012e5564eb3f79bc77101f9517d530d
-
SHA1
05979d1f020cb0864a981e5b6883be5156317755
-
SHA256
3b3bf27d870ac0756893809873bbe180b5c13242fbf062e9adfcdb490abc36d9
-
SHA512
ca7acb794e404c91656e403da03ec1e3488bf4cb9d794deb3464bdaee6dd83bfcf597e006f608b3175a788a24612532c66a0bbc627d865365bbe99c7f54a8abc
-
SSDEEP
12288:1lfPSNg7xgaHlgDYc7OU/nN0SLtwuRWxwTsQp:D3SK/lLhUl0JuRW0sy
Malware Config
Signatures
Files
-
f012e5564eb3f79bc77101f9517d530d_JaffaCakes118.rar
-
phpsay/.htaccess
-
phpsay/_template/admin.html.html
-
phpsay/_template/anonymity.html
-
phpsay/_template/apply.html
-
phpsay/_template/category.html.html
-
phpsay/_template/create.html.html
-
phpsay/_template/edit_insert.html
-
phpsay/_template/footer.html
-
phpsay/_template/footer_copyright.html.js
-
phpsay/_template/forum.html.html .js polyglot
-
phpsay/_template/forum_abdicate.html.html
-
phpsay/_template/forum_blacklist.html.html
-
phpsay/_template/forum_category.html.html .js polyglot
-
phpsay/_template/forum_friend.html.html
-
phpsay/_template/forum_manage_left.html
-
phpsay/_template/forum_set.html.html
-
phpsay/_template/header.html
-
phpsay/_template/header_links.html
-
phpsay/_template/index.html.html
-
phpsay/_template/login.html
-
phpsay/_template/member.html.html
-
phpsay/_template/profile.html.html
-
phpsay/_template/recoverpass.html
-
phpsay/_template/register.html
-
phpsay/_template/report.html
-
phpsay/_template/search.html.html
-
phpsay/_template/topic.html.html .js polyglot
-
phpsay/admin.php
-
phpsay/admin/_static/phpsay.js.js
-
phpsay/admin/_static/style.css
-
phpsay/admin/_template/bm_apply.html.html
-
phpsay/admin/_template/category.html.html .js polyglot
-
phpsay/admin/_template/db_export.html.html
-
phpsay/admin/_template/db_import.html.html
-
phpsay/admin/_template/db_manage.html.html
-
phpsay/admin/_template/foot.html
-
phpsay/admin/_template/forum_category.html.html
-
phpsay/admin/_template/forum_edit.html.html .js polyglot
-
phpsay/admin/_template/forum_list.html.html
-
phpsay/admin/_template/forum_temp.html.html
-
phpsay/admin/_template/head.html
-
phpsay/admin/_template/index.html.html
-
phpsay/admin/_template/left.html
-
phpsay/admin/_template/post_list.html.html
-
phpsay/admin/_template/report_list.html.html
-
phpsay/admin/_template/set_filter.html.html
-
phpsay/admin/_template/set_links.html.html
-
phpsay/admin/_template/set_mail.html.html
-
phpsay/admin/_template/set_secure.html.html .js polyglot
-
phpsay/admin/_template/set_site.html.html
-
phpsay/admin/_template/topic_list.html.html
-
phpsay/admin/_template/user_black.html.html
-
phpsay/admin/_template/user_edit.html.html .js polyglot
-
phpsay/admin/_template/user_group.html.html
-
phpsay/admin/_template/user_list.html.html
-
phpsay/admin/bm_apply.php
-
phpsay/admin/category.php
-
phpsay/admin/class/class_Query.php
-
phpsay/admin/db_export.php
-
phpsay/admin/db_import.php
-
phpsay/admin/db_manage.php
-
phpsay/admin/forum_category.php
-
phpsay/admin/forum_edit.php
-
phpsay/admin/forum_list.php
-
phpsay/admin/forum_temp.php
-
phpsay/admin/global.php
-
phpsay/admin/include/config.php
-
phpsay/admin/include/db.zone.php
-
phpsay/admin/include/function.php
-
phpsay/admin/index.php
-
phpsay/admin/post_list.php
-
phpsay/admin/report_list.php
-
phpsay/admin/set_filter.php
-
phpsay/admin/set_links.php
-
phpsay/admin/set_mail.php
-
phpsay/admin/set_secure.php
-
phpsay/admin/set_site.php
-
phpsay/admin/topic_list.php
-
phpsay/admin/user_black.php
-
phpsay/admin/user_edit.php
-
phpsay/admin/user_group.php
-
phpsay/admin/user_list.php
-
phpsay/anonymity.php
-
phpsay/apply.php
-
phpsay/category.php
-
phpsay/class/class_Discuss.php
-
phpsay/class/class_Main.php
-
phpsay/class/class_Mysql.php
-
phpsay/class/class_Smtp.php.js
-
phpsay/class/class_Template.php.js
-
phpsay/class/class_Xxtea.php
-
phpsay/class/phpSayTemplateExtensions/avatar.php
-
phpsay/class/phpSayTemplateExtensions/datetime.php
-
phpsay/class/phpSayTemplateExtensions/intercept.php
-
phpsay/class/phpSayTemplateExtensions/rewrite_category.php
-
phpsay/class/phpSayTemplateExtensions/rewrite_forum.php
-
phpsay/class/phpSayTemplateExtensions/rewrite_member.php
-
phpsay/class/phpSayTemplateExtensions/rewrite_topic.php
-
phpsay/create.php
-
phpsay/css/bar.css
-
phpsay/css/div.css
-
phpsay/css/imgareaselect.css
-
phpsay/css/index.css
-
phpsay/css/thickbox.css
-
phpsay/css/w3c.css
-
phpsay/database/config_group.php
-
phpsay/database/config_mail.php
-
phpsay/database/config_mysql.php
-
phpsay/database/config_secure.php
-
phpsay/database/config_site.php
-
phpsay/database/db.filter.php
-
phpsay/database/db.links.php
-
phpsay/database/db.smile.php
-
phpsay/favicon.ico
-
phpsay/forum.php
-
phpsay/forum_abdicate.php
-
phpsay/forum_blacklist.php
-
phpsay/forum_category.php
-
phpsay/forum_friend.php
-
phpsay/forum_set.php
-
phpsay/function.php.ps1
-
phpsay/getimage.php
-
phpsay/global.php
-
phpsay/images/bar_bg03.gif.gif
-
phpsay/images/bar_li01.gif.gif
-
phpsay/images/bar_paper_bg01.gif.gif
-
phpsay/images/border-h.gif.gif
-
phpsay/images/border-v.gif.gif
-
phpsay/images/class_bg02.gif.gif
-
phpsay/images/courbd.ttf
-
phpsay/images/divclose.gif.gif
-
phpsay/images/editorIcons_1.gif.gif
-
phpsay/images/email-ico.gif.gif
-
phpsay/images/face/1.gif.gif
-
phpsay/images/face/10.gif.gif
-
phpsay/images/face/11.gif.gif
-
phpsay/images/face/12.gif.gif
-
phpsay/images/face/13.gif.gif
-
phpsay/images/face/14.gif.gif
-
phpsay/images/face/15.gif.gif
-
phpsay/images/face/16.gif.gif
-
phpsay/images/face/17.gif.gif
-
phpsay/images/face/18.gif.gif
-
phpsay/images/face/19.gif.gif
-
phpsay/images/face/2.gif.gif
-
phpsay/images/face/20.gif.gif
-
phpsay/images/face/21.gif.gif
-
phpsay/images/face/22.gif.gif
-
phpsay/images/face/23.gif.gif
-
phpsay/images/face/24.gif.gif
-
phpsay/images/face/25.gif.gif
-
phpsay/images/face/26.gif.gif
-
phpsay/images/face/27.gif.gif
-
phpsay/images/face/28.gif.gif
-
phpsay/images/face/29.gif.gif
-
phpsay/images/face/3.gif.gif
-
phpsay/images/face/30.gif.gif
-
phpsay/images/face/4.gif.gif
-
phpsay/images/face/5.gif.gif
-
phpsay/images/face/6.gif.gif
-
phpsay/images/face/7.gif.gif
-
phpsay/images/face/8.gif.gif
-
phpsay/images/face/9.gif.gif
-
phpsay/images/group_face_0.gif.gif
-
phpsay/images/group_face_1.gif.gif
-
phpsay/images/img_error.gif.gif
-
phpsay/images/index_bg.jpg.jpg
-
phpsay/images/left_view.gif.gif
-
phpsay/images/loadingAnimation.gif.gif
-
phpsay/images/login_close.gif.gif
-
phpsay/images/login_title_bg.gif.gif
-
phpsay/images/macFFBgHack.png.png
-
phpsay/images/manage_icon.gif.gif
-
phpsay/images/password-ico.gif.gif
-
phpsay/images/password-ico2.gif.gif
-
phpsay/images/slogo.gif.gif
-
phpsay/images/vp_bazhu.gif.gif
-
phpsay/images/vp_generalAdmin.gif.gif
-
phpsay/images/vp_highAdmin.gif.gif
-
phpsay/images/vp_mingbo.gif.gif
-
phpsay/index.php
-
phpsay/install.php
-
phpsay/install.sql
-
phpsay/js/avatar.js.js
-
phpsay/js/form.js.js
-
phpsay/js/imgareaselect.js.js
-
phpsay/js/index.js.js
-
phpsay/js/jquery.js.js
-
phpsay/js/phpsay.js.js
-
phpsay/js/thickbox.js.js
-
phpsay/login.php.ps1
-
phpsay/manage.php
-
phpsay/member.php
-
phpsay/post.php
-
phpsay/profile.php
-
phpsay/readme.txt
-
phpsay/recoverpass.php
-
phpsay/redirect.php
-
phpsay/register.php
-
phpsay/report.php
-
phpsay/rss.php
-
phpsay/search.php
-
phpsay/topic.php
-
phpsay/update.php
-
phpsay/upload.php
-
phpsay/新云软件.url.url