Overview
overview
3Static
static
1KehuSystem.../0.asp
windows7-x64
3KehuSystem.../0.asp
windows10-2004-x64
3KehuSystem...BS.vbs
windows7-x64
1KehuSystem...BS.vbs
windows10-2004-x64
1KehuSystem...do.vbs
windows7-x64
1KehuSystem...do.vbs
windows10-2004-x64
1KehuSystem...od.vbs
windows7-x64
1KehuSystem...od.vbs
windows10-2004-x64
1KehuSystem...nn.vbs
windows7-x64
1KehuSystem...nn.vbs
windows10-2004-x64
1KehuSystem...GG.vbs
windows7-x64
1KehuSystem...GG.vbs
windows10-2004-x64
1KehuSystem...dd.asp
windows7-x64
3KehuSystem...dd.asp
windows10-2004-x64
3KehuSystem...do.vbs
windows7-x64
1KehuSystem...do.vbs
windows10-2004-x64
1KehuSystem...od.vbs
windows7-x64
1KehuSystem...od.vbs
windows10-2004-x64
1KehuSystem...KH.vbs
windows7-x64
1KehuSystem...KH.vbs
windows10-2004-x64
1KehuSystem...st.vbs
windows7-x64
1KehuSystem...st.vbs
windows10-2004-x64
1KehuSystem...el.asp
windows7-x64
3KehuSystem...el.asp
windows10-2004-x64
3KehuSystem...ve.vbs
windows7-x64
1KehuSystem...ve.vbs
windows10-2004-x64
1KehuSystem...ve.vbs
windows7-x64
1KehuSystem...ve.vbs
windows10-2004-x64
1KehuSystem...er.vbs
windows7-x64
1KehuSystem...er.vbs
windows10-2004-x64
1KehuSystem...ch.vbs
windows7-x64
1KehuSystem...ch.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
KehuSystem/Admin/0.asp
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
KehuSystem/Admin/0.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
KehuSystem/Admin/BBS.vbs
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
KehuSystem/Admin/BBS.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
KehuSystem/Admin/BBS_do.vbs
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
KehuSystem/Admin/BBS_do.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
KehuSystem/Admin/BBS_mod.vbs
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
KehuSystem/Admin/BBS_mod.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
KehuSystem/Admin/Conn.vbs
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
KehuSystem/Admin/Conn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
KehuSystem/Admin/GG.vbs
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
KehuSystem/Admin/GG.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
KehuSystem/Admin/GG_add.asp
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
KehuSystem/Admin/GG_add.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
KehuSystem/Admin/GG_do.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
KehuSystem/Admin/GG_do.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
KehuSystem/Admin/GG_mod.vbs
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
KehuSystem/Admin/GG_mod.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
KehuSystem/Admin/KH.vbs
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
KehuSystem/Admin/KH.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
KehuSystem/Admin/KHList.vbs
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
KehuSystem/Admin/KHList.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
KehuSystem/Admin/KHList_redel.asp
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
KehuSystem/Admin/KHList_redel.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
KehuSystem/Admin/KHList_resave.vbs
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
KehuSystem/Admin/KHList_resave.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
KehuSystem/Admin/KH_Save.vbs
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
KehuSystem/Admin/KH_Save.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
KehuSystem/Admin/KH_byMember.vbs
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
KehuSystem/Admin/KH_byMember.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
KehuSystem/Admin/KH_bySearch.vbs
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
KehuSystem/Admin/KH_bySearch.vbs
Resource
win10v2004-20240910-en
General
-
Target
fe29fd3a527b1d825232f029b3abd5b8_JaffaCakes118
-
Size
439KB
-
MD5
fe29fd3a527b1d825232f029b3abd5b8
-
SHA1
68634a4c1079fe48e2663841ebfdc75e894918aa
-
SHA256
4e69b97fcb7e2d1bf1fdef8ae15c43719176b4e404c6f0b48187395327a05aae
-
SHA512
0dabd5feb05a364829a703d5fd122d881afcac498f198f792b3dda4e06ad9305ed4e6deb0a48f95ec1b9aef852124617390d0d841a8061deda2b0b166f391adc
-
SSDEEP
12288:BR77l0psFBfNzyYIS1cYdpPh6vGsAXbja8E78ZA:L772yPyYI6HdppKMjc7UA
Malware Config
Signatures
Files
-
fe29fd3a527b1d825232f029b3abd5b8_JaffaCakes118.rar
-
KehuSystem/Admin/0.asp
-
KehuSystem/Admin/BBS.asp.vbs
-
KehuSystem/Admin/BBS_do.asp.vbs
-
KehuSystem/Admin/BBS_mod.asp.vbs
-
KehuSystem/Admin/Conn.asp.vbs
-
KehuSystem/Admin/GG.asp.vbs
-
KehuSystem/Admin/GG_add.asp
-
KehuSystem/Admin/GG_do.asp.vbs
-
KehuSystem/Admin/GG_mod.asp.vbs
-
KehuSystem/Admin/KH.asp.vbs
-
KehuSystem/Admin/KHList.asp.vbs
-
KehuSystem/Admin/KHList_redel.asp
-
KehuSystem/Admin/KHList_resave.asp.vbs
-
KehuSystem/Admin/KH_Save.asp.vbs
-
KehuSystem/Admin/KH_byMember.asp.vbs
-
KehuSystem/Admin/KH_bySearch.asp.vbs
-
KehuSystem/Admin/KH_mod.asp.asp .vbs polyglot
-
KehuSystem/Admin/KHallmySelectTT.asp.vbs
-
KehuSystem/Admin/KHindex.asp.vbs
-
KehuSystem/Admin/Left.asp.js
-
KehuSystem/Admin/Link.asp.vbs
-
KehuSystem/Admin/LinkDo.asp.vbs
-
KehuSystem/Admin/Link_add.asp.asp
-
KehuSystem/Admin/Linkgo.asp.vbs
-
KehuSystem/Admin/Login.asp.vbs
-
KehuSystem/Admin/Member.asp.asp .vbs polyglot
-
KehuSystem/Admin/MemberList.asp.asp .js polyglot
-
KehuSystem/Admin/Member_add.asp.asp
-
KehuSystem/Admin/Member_do.asp.vbs
-
KehuSystem/Admin/Member_mod.asp.asp .vbs polyglot
-
KehuSystem/Admin/PrintPage.asp.vbs
-
KehuSystem/Admin/PrintToHtml.asp.vbs
-
KehuSystem/Admin/Sm.asp.vbs
-
KehuSystem/Admin/UpFileForm.asp.html
-
KehuSystem/Admin/UpFileForm2.asp.html .vbs polyglot
-
KehuSystem/Admin/admin_do.asp.vbs
-
KehuSystem/Admin/admin_name.asp.asp .vbs polyglot
-
KehuSystem/Admin/admin_pass_mod.asp.asp
-
KehuSystem/Admin/admin_pass_mod_save.asp.vbs
-
KehuSystem/Admin/checkin.asp.vbs
-
KehuSystem/Admin/index.asp
-
KehuSystem/Admin/islogin.asp.vbs
-
KehuSystem/Admin/out.asp
-
KehuSystem/Admin/ubb.asp.vbs
-
KehuSystem/Admin/ubb_help.html.html
-
KehuSystem/Admin/uptoweb/editfile.asp.vbs
-
KehuSystem/Admin/uptoweb/images/0.gif.gif
-
KehuSystem/Admin/uptoweb/images/1.gif.gif
-
KehuSystem/Admin/uptoweb/images/10.gif.gif
-
KehuSystem/Admin/uptoweb/images/11.gif.gif
-
KehuSystem/Admin/uptoweb/images/12.gif.gif
-
KehuSystem/Admin/uptoweb/images/13.gif.gif
-
KehuSystem/Admin/uptoweb/images/2.gif.gif
-
KehuSystem/Admin/uptoweb/images/3.gif.gif
-
KehuSystem/Admin/uptoweb/images/4.gif.gif
-
KehuSystem/Admin/uptoweb/images/5.gif.gif
-
KehuSystem/Admin/uptoweb/images/5xsoft.gif.gif
-
KehuSystem/Admin/uptoweb/images/6.gif.gif
-
KehuSystem/Admin/uptoweb/images/7.gif.gif
-
KehuSystem/Admin/uptoweb/images/8.gif.gif
-
KehuSystem/Admin/uptoweb/images/9.gif.gif
-
KehuSystem/Admin/uptoweb/images/Thumbs.db
-
KehuSystem/Admin/uptoweb/images/about.gif.gif
-
KehuSystem/Admin/uptoweb/images/about.htm.html
-
KehuSystem/Admin/uptoweb/images/close.gif.gif
-
KehuSystem/Admin/uptoweb/images/copy.gif.gif
-
KehuSystem/Admin/uptoweb/images/cut.gif.gif
-
KehuSystem/Admin/uptoweb/images/del.gif.gif
-
KehuSystem/Admin/uptoweb/images/edit.gif.gif
-
KehuSystem/Admin/uptoweb/images/folder.gif.gif
-
KehuSystem/Admin/uptoweb/images/folder1.jpg.jpg
-
KehuSystem/Admin/uptoweb/images/paste.gif.gif
-
KehuSystem/Admin/uptoweb/images/refresh.gif.gif
-
KehuSystem/Admin/uptoweb/images/rename.gif.gif
-
KehuSystem/Admin/uptoweb/include.asp.vbs
-
KehuSystem/Admin/uptoweb/index.asp.vbs
-
KehuSystem/Admin/uptoweb/upfile.asp.vbs
-
KehuSystem/Admin/uptoweb/upload.asp.vbs
-
KehuSystem/Admin/uptoweb/upload_5xsoft.inc.html .vbs polyglot
-
KehuSystem/Admin/uptoweb/viewclip.asp.html .vbs polyglot
-
KehuSystem/Admin/uptoweb/webedit.css
-
KehuSystem/Database/Database.mdb
-
KehuSystem/Error/error.asp
-
KehuSystem/GOTO.asp
-
KehuSystem/Images/0.gif.gif
-
KehuSystem/Images/1.gif.gif
-
KehuSystem/Images/2.gif.gif
-
KehuSystem/Images/3.gif.gif
-
KehuSystem/Images/ANI_080.gif.gif
-
KehuSystem/Images/QQpic.bmp
-
KehuSystem/Images/Thumbs.db
-
KehuSystem/Images/a.gif.gif
-
KehuSystem/Images/aa.gif.gif
-
KehuSystem/Images/addbg.jpg.jpg
-
KehuSystem/Images/admin_bg_2.gif.gif
-
KehuSystem/Images/arow_down.jpg.jpg
-
KehuSystem/Images/arrow.gif.gif
-
KehuSystem/Images/bg.gif.gif
-
KehuSystem/Images/bg2.gif.gif
-
KehuSystem/Images/bg_3.gif.gif
-
KehuSystem/Images/bg_td_23.gif.gif
-
KehuSystem/Images/bullet.gif.gif
-
KehuSystem/Images/c.gif.gif
-
KehuSystem/Images/c_07_01.gif.gif
-
KehuSystem/Images/c_07_02.gif.gif
-
KehuSystem/Images/c_07_04.gif.gif
-
KehuSystem/Images/class_t.gif.gif
-
KehuSystem/Images/copyright.jpg.jpg
-
KehuSystem/Images/css.css
-
KehuSystem/Images/d1.jpg.jpg
-
KehuSystem/Images/d2.jpg.jpg
-
KehuSystem/Images/d3.jpg.jpg
-
KehuSystem/Images/d4.jpg.jpg
-
KehuSystem/Images/dot1.gif.gif
-
KehuSystem/Images/dot2.gif.gif
-
KehuSystem/Images/e.gif.gif
-
KehuSystem/Images/fon_bot.gif.gif
-
KehuSystem/Images/geren.jpg.jpg
-
KehuSystem/Images/goback.gif.gif
-
KehuSystem/Images/green-arrow.gif.gif
-
KehuSystem/Images/h1.gif.gif
-
KehuSystem/Images/i_new.gif.gif
-
KehuSystem/Images/ico_info.png.png
-
KehuSystem/Images/index_11.jpg.jpg
-
KehuSystem/Images/index_14.jpg.jpg
-
KehuSystem/Images/index_4.jpg.jpg
-
KehuSystem/Images/index_5.jpg.jpg
-
KehuSystem/Images/kefu_middle.gif.gif
-
KehuSystem/Images/keh.jpg.jpg
-
KehuSystem/Images/l_13.gif.gif
-
KehuSystem/Images/lbg.gif.gif
-
KehuSystem/Images/logo_ali.gif.gif
-
KehuSystem/Images/logo_baidu.gif.gif
-
KehuSystem/Images/logo_google.gif.gif
-
KehuSystem/Images/m.gif.gif
-
KehuSystem/Images/mbg.jpg.jpg
-
KehuSystem/Images/menubg.gif.gif
-
KehuSystem/Images/mod.gif.gif
-
KehuSystem/Images/more.bmp
-
KehuSystem/Images/more.gif.gif
-
KehuSystem/Images/mores.gif.gif
-
KehuSystem/Images/nbhtml.com.gif.gif
-
KehuSystem/Images/new.gif.gif .js polyglot
-
KehuSystem/Images/new_03.gif.gif
-
KehuSystem/Images/new_07.gif.gif
-
KehuSystem/Images/no.gif.gif
-
KehuSystem/Images/qq.css
-
KehuSystem/Images/r.gif.gif
-
KehuSystem/Images/search_input.gif.gif
-
KehuSystem/Images/spacer.gif.gif
-
KehuSystem/Images/stat.htm.js
-
KehuSystem/Images/style.css
-
KehuSystem/Images/t_bg.gif.gif
-
KehuSystem/Images/tb_bg.jpg.jpg
-
KehuSystem/Images/tb_bg_x.jpg.jpg
-
KehuSystem/Images/tb_bg_z.jpg.jpg
-
KehuSystem/Images/title1.gif.gif
-
KehuSystem/Images/title2.gif.gif
-
KehuSystem/Images/title3.gif.gif
-
KehuSystem/Images/title4.gif.gif
-
KehuSystem/Images/top_bg.gif.gif
-
KehuSystem/Images/top_bg.jpg.jpg
-
KehuSystem/Images/topnav.gif.gif
-
KehuSystem/Images/tuijian.gif.gif
-
KehuSystem/Images/ubbpic/Thumbs.db
-
KehuSystem/Images/ubbpic/bold.gif.gif
-
KehuSystem/Images/ubbpic/center.gif.gif
-
KehuSystem/Images/ubbpic/fly.gif.gif
-
KehuSystem/Images/ubbpic/glow.gif.gif
-
KehuSystem/Images/ubbpic/image.gif.gif
-
KehuSystem/Images/ubbpic/italic.gif.gif
-
KehuSystem/Images/ubbpic/move.gif
-
KehuSystem/Images/ubbpic/mpeg.gif.gif
-
KehuSystem/Images/ubbpic/rm.gif.gif
-
KehuSystem/Images/ubbpic/swf.gif.gif
-
KehuSystem/Images/ubbpic/underline.gif.gif
-
KehuSystem/Images/ubbpic/url.gif.gif
-
KehuSystem/Images/user.jpg.jpg
-
KehuSystem/Images/wenz.jpg.jpg
-
KehuSystem/Images/x_21.gif.gif
-
KehuSystem/Images/xitongp.jpg.jpg
-
KehuSystem/Images/xuexi.jpg.jpg
-
KehuSystem/Images/xueyuan.jpg.jpg
-
KehuSystem/Images/xx2.gif.gif
-
KehuSystem/Include/Format_Time.asp
-
KehuSystem/Include/UPLOAD.INC.html .vbs polyglot
-
KehuSystem/Include/farmatdatetime.asp
-
KehuSystem/Include/foot.js
-
KehuSystem/Include/md5.asp.vbs
-
KehuSystem/Include/ubb.asp.vbs
-
KehuSystem/Index.asp
-
KehuSystem/Member/2KHall.asp.vbs
-
KehuSystem/Member/BBS.asp.vbs
-
KehuSystem/Member/BBSList.asp.vbs
-
KehuSystem/Member/BBSList_resave.asp.vbs
-
KehuSystem/Member/BBS_Post.asp
-
KehuSystem/Member/BBS_Post_Save.asp.vbs
-
KehuSystem/Member/Conn.asp.vbs
-
KehuSystem/Member/KHList.asp.vbs
-
KehuSystem/Member/KHList_redel.asp
-
KehuSystem/Member/KHList_resave.asp.vbs
-
KehuSystem/Member/KH_Save.asp.vbs
-
KehuSystem/Member/KH_Search.asp.js
-
KehuSystem/Member/KH_Search2.asp.vbs
-
KehuSystem/Member/KH_add.asp.js
-
KehuSystem/Member/KH_add2.asp.vbs
-
KehuSystem/Member/KH_add3.asp
-
KehuSystem/Member/KH_mod.asp.asp .vbs polyglot
-
KehuSystem/Member/KHall.asp.vbs
-
KehuSystem/Member/KHallmy.asp.vbs
-
KehuSystem/Member/KHallmyIndex.asp.js
-
KehuSystem/Member/KHallmySelectTT.asp.vbs
-
KehuSystem/Member/Left.asp.js
-
KehuSystem/Member/Link.asp.vbs
-
KehuSystem/Member/Linkgo.asp.vbs
-
KehuSystem/Member/Login.asp.html .js polyglot
-
KehuSystem/Member/LoginShowsubmit.js.js
-
KehuSystem/Member/MemberData.asp.asp .vbs polyglot
-
KehuSystem/Member/MemberData_mod.asp.asp .vbs polyglot
-
KehuSystem/Member/MemberData_mod_save.asp.vbs
-
KehuSystem/Member/MemberList.asp.asp .js polyglot
-
KehuSystem/Member/Member_pass_mod.asp.asp
-
KehuSystem/Member/Member_pass_mod_save.asp.vbs
-
KehuSystem/Member/MenuRight.asp.html .js polyglot
-
KehuSystem/Member/Out.asp
-
KehuSystem/Member/Report.asp.vbs
-
KehuSystem/Member/ReportAdd.asp.vbs
-
KehuSystem/Member/ReportAddDo.asp.vbs
-
KehuSystem/Member/ReportForAdmin.asp.vbs
-
KehuSystem/Member/ReportForAdminRe.asp.asp .vbs polyglot
-
KehuSystem/Member/ReportForAdminReDo.asp.vbs
-
KehuSystem/Member/ReportList.asp.vbs
-
KehuSystem/Member/Right.asp.vbs
-
KehuSystem/Member/RightNews.asp.vbs
-
KehuSystem/Member/RightNewsList.asp.vbs
-
KehuSystem/Member/UpFileForm.asp.html
-
KehuSystem/Member/UpFileForm2.asp.html .vbs polyglot
-
KehuSystem/Member/checkin.asp.vbs
-
KehuSystem/Member/index.asp
-
KehuSystem/Member/islogin.asp.vbs
-
KehuSystem/Member/isloginForadmin.asp.vbs
-
KehuSystem/Member/ubb.asp.vbs
-
KehuSystem/Member/分页显示代码/Conn.asp.vbs
-
KehuSystem/Member/分页显示代码/savefile.asp.html .js polyglot
-
KehuSystem/Member/分页显示代码/test.asp.vbs
-
KehuSystem/Member/分页显示代码/test2.asp.vbs
-
KehuSystem/Member/分页显示代码/test3.asp.vbs
-
KehuSystem/Member/分页显示代码/test4.asp.vbs
-
KehuSystem/Style/admin.css
-
KehuSystem/Style/main.css
-
KehuSystem/css/main.css
-
KehuSystem/css/styles.css
-
KehuSystem/使用前必读.txt
-
KehuSystem/新云软件.url.url