Overview
overview
3Static
static
1162100PhpT...ang.js
windows7-x64
3162100PhpT...ang.js
windows10-2004-x64
3Y_anzhuang.js
windows7-x64
3Y_anzhuang.js
windows10-2004-x64
3Y_beifen.js
windows7-x64
3Y_beifen.js
windows10-2004-x64
3Y_setsite.js
windows7-x64
3Y_setsite.js
windows10-2004-x64
3css/gray.js
windows7-x64
3css/gray.js
windows10-2004-x64
3index.js
windows7-x64
3index.js
windows10-2004-x64
3list.js
windows7-x64
3list.js
windows10-2004-x64
3list_contents.js
windows7-x64
3list_contents.js
windows10-2004-x64
3require/fu...all.js
windows7-x64
3require/fu...all.js
windows10-2004-x64
3require/fu..._js.js
windows7-x64
3require/fu..._js.js
windows10-2004-x64
3require/fu...tor.js
windows7-x64
3require/fu...tor.js
windows10-2004-x64
3require/js-edit.js
windows7-x64
3require/js-edit.js
windows10-2004-x64
3require/js-edit_.js
windows7-x64
3require/js-edit_.js
windows10-2004-x64
3require/js-enter.js
windows7-x64
3require/js-enter.js
windows10-2004-x64
3require/js...ell.js
windows7-x64
3require/js...ell.js
windows10-2004-x64
3require/li...ply.js
windows7-x64
3require/li...ply.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
162100PhpTxtForum3.2.7/anzhuang.js
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
162100PhpTxtForum3.2.7/anzhuang.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Y_anzhuang.js
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Y_anzhuang.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Y_beifen.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Y_beifen.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Y_setsite.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Y_setsite.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
css/gray.js
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
css/gray.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
index.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
list.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
list.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
list_contents.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
list_contents.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
require/function/all.js
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
require/function/all.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
require/function/get_choose_js.js
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
require/function/get_choose_js.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
require/function/get_editor.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
require/function/get_editor.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
require/js-edit.js
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
require/js-edit.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
require/js-edit_.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
require/js-edit_.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
require/js-enter.js
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
require/js-enter.js
Resource
win10v2004-20240910-en
Behavioral task
behavioral29
Sample
require/js-vote_sell.js
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
require/js-vote_sell.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
require/list/get-manage_reply.js
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
require/list/get-manage_reply.js
Resource
win10v2004-20240802-en
General
-
Target
fd6bdd76049d70ee065e5bf72ea90872_JaffaCakes118
-
Size
324KB
-
MD5
fd6bdd76049d70ee065e5bf72ea90872
-
SHA1
5d9a046292487a7f7218d63bfbc149ea4ae8c8d3
-
SHA256
9377275a0261beb46617c35f19eab356b23a549f50fe01efb74b7a7e632c757b
-
SHA512
1390693470a3bf6be60ea23677541a89c272337a2d2d6696de89c6d783d9a43e72a6dc80078aa9d056814885b9239df0ab096adabd80dd6f4a1164fed1ea77bc
-
SSDEEP
6144:LjgJ3/oM5qJCwRHf9g76JUZivjwmXaPF94Yk2bXHsZWe3h9xxwlHmU+dqE+qwprm:u3/oHJrh1s6OMFaPFcZWeZelGU+ditK
Malware Config
Signatures
Files
-
fd6bdd76049d70ee065e5bf72ea90872_JaffaCakes118.rar
-
162100PhpTxtForum3.2.7/anzhuang.php.js
-
162100PhpTxtForum3.2.7/forum.zip.zip
-
Y_anzhuang.php.js
-
Y_beifen.php.js
-
Y_setsite.php.js
-
css/blue.css
-
css/blue/head_a_bj.gif.gif
-
css/blue/head_bj.gif.gif
-
css/blue/line_bj.gif.gif
-
css/gray.css.js
-
css/gray/head_bj1.gif.gif
-
css/gray/head_bj2.gif.gif
-
css/gray/head_bj3.gif.gif
-
css/gray/title_line_bj.gif.gif
-
css/green.css
-
css/green/head_bj.jpg.jpg
-
css/green/line_bj.gif.gif
-
css/red.css
-
data/index_high_list
-
data/index_high_online
-
data/index_rss20
-
data/list/1_1/id.txt
-
data/list/1_1/today.txt
-
data/list/1_1/topic.txt
-
data/list/1_1/topic/C2
-
data/list/1_1/total.txt
-
data/member/admin/file.php
-
data/member/admin/index.txt
-
data/member/admin/my_messageget
-
data/member/admin/my_topic
-
data/member/index.txt
-
images/admin.gif.gif
-
images/admin_big.gif.gif
-
images/alipay.gif.gif
-
images/announce.gif.gif
-
images/area_hasnew.gif.gif
-
images/area_hasnews.gif.gif
-
images/area_limit.gif.gif
-
images/area_lock.gif.gif
-
images/area_no.gif.gif
-
images/area_read.gif.gif
-
images/bit.gif.gif
-
images/column_line.gif.gif
-
images/diamond_1.gif.gif
-
images/diamond_2.gif.gif
-
images/diamond_3.gif.gif
-
images/diamond_4.gif.gif
-
images/diamond_5.gif.gif
-
images/friendship.gif.gif
-
images/gold.gif.gif
-
images/gold_l.gif.gif
-
images/gold_r.gif.gif
-
images/i.gif.gif
-
images/icon.gif.gif
-
images/icon_minus.gif.gif
-
images/icon_plus.gif.gif
-
images/imcode.gif.gif
-
images/iron.gif.gif
-
images/iron_l.gif.gif
-
images/iron_r.gif.gif
-
images/key.gif.gif
-
images/list_essence.gif.gif
-
images/list_hasenc.gif.gif
-
images/list_hasfil.gif.gif
-
images/list_hasimg.gif.gif
-
images/list_hot.gif.gif
-
images/list_lock.gif.gif
-
images/list_open.gif.gif
-
images/list_open_no.gif.gif
-
images/login.gif.gif
-
images/logo.gif.gif
-
images/m.gif.gif
-
images/manager.gif.gif
-
images/mark.gif.gif
-
images/member.gif.gif
-
images/none.gif.gif
-
images/ok.gif.gif
-
images/pagecode.gif.gif
-
images/rss.gif.gif
-
images/sell_bj.gif.gif
-
images/show01.gif.gif
-
images/sign.gif.gif
-
images/silver.gif.gif
-
images/silver_l.gif.gif
-
images/silver_r.gif.gif
-
images/smiley/1.gif.gif
-
images/smiley/10.gif.gif
-
images/smiley/11.gif.gif
-
images/smiley/12.gif.gif
-
images/smiley/13.gif.gif
-
images/smiley/14.gif.gif
-
images/smiley/15.gif.gif
-
images/smiley/16.gif.gif
-
images/smiley/17.gif.gif
-
images/smiley/18.gif.gif
-
images/smiley/19.gif.gif
-
images/smiley/2.gif.gif
-
images/smiley/20.gif.gif
-
images/smiley/21.gif.gif
-
images/smiley/22.gif.gif
-
images/smiley/23.gif.gif
-
images/smiley/24.gif.gif
-
images/smiley/25.gif.gif
-
images/smiley/26.gif.gif
-
images/smiley/27.gif.gif
-
images/smiley/28.gif.gif
-
images/smiley/29.gif.gif
-
images/smiley/3.gif.gif
-
images/smiley/30.gif.gif
-
images/smiley/31.gif.gif
-
images/smiley/32.gif.gif
-
images/smiley/33.gif.gif
-
images/smiley/34.gif.gif
-
images/smiley/35.gif.gif
-
images/smiley/36.gif.gif
-
images/smiley/37.gif.gif
-
images/smiley/38.gif.gif
-
images/smiley/39.gif.gif
-
images/smiley/4.gif.gif
-
images/smiley/40.gif.gif
-
images/smiley/41.gif.gif
-
images/smiley/42.gif.gif
-
images/smiley/43.gif.gif
-
images/smiley/44.gif.gif
-
images/smiley/45.gif.gif
-
images/smiley/46.gif.gif
-
images/smiley/47.gif.gif
-
images/smiley/48.gif.gif
-
images/smiley/49.gif.gif
-
images/smiley/5.gif.gif
-
images/smiley/50.gif.gif
-
images/smiley/6.gif.gif
-
images/smiley/7.gif.gif
-
images/smiley/8.gif.gif
-
images/smiley/9.gif.gif
-
images/tools/15.gif.gif
-
images/tools/16.gif.gif
-
images/tools/17.gif.gif
-
images/tools/18.gif.gif
-
images/tools/19.gif.gif
-
images/tools/20.gif.gif
-
images/tools/21.gif.gif
-
images/tools/about.gif.gif
-
images/tools/bold.gif.gif
-
images/tools/copy.gif.gif
-
images/tools/createlink.gif.gif
-
images/tools/cut.gif.gif
-
images/tools/delete.gif.gif
-
images/tools/indent.gif.gif
-
images/tools/inserthorizontalrule.gif.gif
-
images/tools/insertmarquee.gif.gif
-
images/tools/insertorderedlist.gif.gif
-
images/tools/insertunorderedlist.gif.gif
-
images/tools/italic.gif.gif
-
images/tools/justifycenter.gif.gif
-
images/tools/justifyfull.gif.gif
-
images/tools/justifyleft.gif.gif
-
images/tools/justifyright.gif.gif
-
images/tools/outdent.gif.gif
-
images/tools/paste.gif.gif
-
images/tools/removeformat.gif.gif
-
images/tools/strikethrough.gif.gif
-
images/tools/subscript.gif.gif
-
images/tools/superscript.gif.gif
-
images/tools/underline.gif.gif
-
images/tools/unlink.gif.gif
-
images/top.gif.gif
-
images/vote_bj.gif.gif
-
images/write_ok.gif.gif
-
images/x.gif.gif
-
index.php.js
-
index_.php
-
isset.php
-
list.php.js
-
list_contents.php.js
-
list_search.php
-
member_enter.php
-
member_page.php
-
require/function/all.php.js
-
require/function/filter1.php
-
require/function/filter2.php
-
require/function/get_admin.php
-
require/function/get_choose_js.php.js
-
require/function/get_editor.php.js
-
require/function/get_link.php
-
require/js-edit.js.js
-
require/js-edit_.js.js
-
require/js-enter.js.js
-
require/js-vote_sell.js.js
-
require/list/get-add_essence.php
-
require/list/get-manage_reply.php.js
-
require/list/get-manage_topic.php.js
-
require/list/post-add_reply.php
-
require/list/post-add_topic.php.js
-
require/list/post-manage_reply.php
-
require/list/post-manage_topic.php.ps1
-
require/list/safe.php
-
require/list/sell.php
-
require/list/sell_payto.php
-
require/list/vote.php.js
-
require/member_enter/_door.php
-
require/member_enter/_menu.php
-
require/member_enter/get-help.php
-
require/member_enter/get-logout.php
-
require/member_enter/get-reg_door.php
-
require/member_enter/help_law1.html.html
-
require/member_enter/help_law2.html.html
-
require/member_enter/post-for_password.php
-
require/member_enter/post-login.php
-
require/member_enter/post-register.php
-
require/member_enter/reg_chk.php
-
require/member_enter/reg_imcode.php
-
require/member_page/condition.php
-
require/member_page/condition_onliners.php
-
require/member_page/nosession/_door.php
-
require/member_page/nosession/_menu.php
-
require/member_page/nosession/get-add_my_messagerefuse.php
-
require/member_page/nosession/get-add_my_sitefriend.php
-
require/member_page/nosession/get-send_mail.php
-
require/member_page/nosession/get-send_message.php
-
require/member_page/nosession/get-send_suit.php.js
-
require/member_page/nosession/get-set_class.php
-
require/member_page/nosession/get-set_limit.php
-
require/member_page/nosession/post-add_my_sitefriend.php
-
require/member_page/nosession/post-send_mail.php
-
require/member_page/nosession/post-send_message.php
-
require/member_page/nosession/post-send_suit.php
-
require/member_page/nosession/post-set_class.php
-
require/member_page/nosession/post-set_limit.php
-
require/member_page/session/_door.php
-
require/member_page/session/_menu.php
-
require/member_page/session/get-del_member.php
-
require/member_page/session/get-del_upload.php
-
require/member_page/session/get-modify_file.php.js
-
require/member_page/session/get-my_award.php
-
require/member_page/session/get-my_collection.php
-
require/member_page/session/get-my_collection_add.php
-
require/member_page/session/get-my_draft.php.js
-
require/member_page/session/get-my_essen.php
-
require/member_page/session/get-my_fine.php
-
require/member_page/session/get-my_messageget.php
-
require/member_page/session/get-my_messagerefuse.php
-
require/member_page/session/get-my_messagesend.php
-
require/member_page/session/get-my_pointget.php
-
require/member_page/session/get-my_power.php
-
require/member_page/session/get-my_regfile.php.js
-
require/member_page/session/get-my_reply.php
-
require/member_page/session/get-my_sell.php
-
require/member_page/session/get-my_sitecoin.php
-
require/member_page/session/get-my_sitefriends.php
-
require/member_page/session/get-my_suit.php
-
require/member_page/session/get-my_topic.php
-
require/member_page/session/get-my_vote.php
-
require/member_page/session/get-send_announce.php.js
-
require/member_page/session/get-send_groupmessage.php.js
-
require/member_page/session/get-send_mailtofriend.php
-
require/member_page/session/get-send_message.php
-
require/member_page/session/get-send_web_mails.php.js
-
require/member_page/session/get-set_limit.php
-
require/member_page/session/get-set_news.php.js
-
require/member_page/session/post-del.php
-
require/member_page/session/post-modify_file.php
-
require/member_page/session/post-my_del.php
-
require/member_page/session/post-my_draft_save.php
-
require/member_page/session/post-my_regfile_modify.php
-
require/member_page/session/post-send_groupmessage.php.ps1
-
require/member_page/session/post-send_web_mails.php
-
require/member_page/session/post-set_news.php
-
rss.php
-
style.php
-
tmp/sess_5d35d7ddf4c8064071e262165ecbdd1d
-
upload.php.js
-
upmyface.php
-
usertrack.php
-
162100PhpTxtForum3.2.7/主页导航.url
-
162100PhpTxtForum3.2.7/数据库释义.txt
-
162100PhpTxtForum3.2.7/新云软件.url.url
-
162100PhpTxtForum3.2.7/程序说明.txt