Overview
overview
3Static
static
1admin/Channel.vbs
windows7-x64
1admin/Channel.vbs
windows10-2004-x64
1admin/UpLoadClass.vbs
windows7-x64
1admin/UpLoadClass.vbs
windows10-2004-x64
1admin/content.js
windows7-x64
3admin/content.js
windows10-2004-x64
3admin/err.asp
windows7-x64
3admin/err.asp
windows10-2004-x64
3admin/html.vbs
windows7-x64
1admin/html.vbs
windows10-2004-x64
1admin/index.asp
windows7-x64
3admin/index.asp
windows10-2004-x64
3admin/isadmin.vbs
windows7-x64
1admin/isadmin.vbs
windows10-2004-x64
1admin/kind...tor.js
windows7-x64
3admin/kind...tor.js
windows10-2004-x64
3admin/kind...t.html
windows7-x64
3admin/kind...t.html
windows10-2004-x64
3admin/kind...h.html
windows7-x64
3admin/kind...h.html
windows10-2004-x64
3admin/kind...e.html
windows7-x64
3admin/kind...e.html
windows10-2004-x64
3admin/kind...k.html
windows7-x64
3admin/kind...k.html
windows10-2004-x64
3admin/kind...a.html
windows7-x64
3admin/kind...a.html
windows10-2004-x64
1admin/kind...e.html
windows7-x64
3admin/kind...e.html
windows10-2004-x64
3admin/kind...e.html
windows7-x64
3admin/kind...e.html
windows10-2004-x64
3admin/kind...e.html
windows7-x64
3admin/kind...e.html
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
admin/Channel.vbs
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
admin/Channel.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
admin/UpLoadClass.vbs
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
admin/UpLoadClass.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
admin/content.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
admin/content.js
Resource
win10v2004-20240910-en
Behavioral task
behavioral7
Sample
admin/err.asp
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
admin/err.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
admin/html.vbs
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
admin/html.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
admin/index.asp
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
admin/index.asp
Resource
win10v2004-20240910-en
Behavioral task
behavioral13
Sample
admin/isadmin.vbs
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
admin/isadmin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
admin/kindeditor/kindeditor.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
admin/kindeditor/kindeditor.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
admin/kindeditor/plugins/about.html
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
admin/kindeditor/plugins/about.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
admin/kindeditor/plugins/flash.html
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
admin/kindeditor/plugins/flash.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
admin/kindeditor/plugins/image.html
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
admin/kindeditor/plugins/image.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
admin/kindeditor/plugins/link.html
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
admin/kindeditor/plugins/link.html
Resource
win10v2004-20240910-en
Behavioral task
behavioral25
Sample
admin/kindeditor/plugins/media.html
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
admin/kindeditor/plugins/media.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
admin/kindeditor/plugins/plainpaste.html
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
admin/kindeditor/plugins/plainpaste.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
admin/kindeditor/plugins/remote_image.html
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
admin/kindeditor/plugins/remote_image.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
admin/kindeditor/plugins/wordpaste.html
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
admin/kindeditor/plugins/wordpaste.html
Resource
win10v2004-20240802-en
General
-
Target
febc5e67f914122017799691b73c5fe4_JaffaCakes118
-
Size
239KB
-
MD5
febc5e67f914122017799691b73c5fe4
-
SHA1
04dba590b5edf08cb9a09693915585ce6272d399
-
SHA256
37dd903bea701bec4803c8e66172b35cfc4deecbbbf18c44d486e5ab7496dace
-
SHA512
eaaaacef18c6e065bd61f066866381f573a72500ce8ee1f97a7fb37ea013585dff3fd2709346f69f3b12c637ac31275e0bae81c17566b3e28aba668f36e3733b
-
SSDEEP
6144:IV/3i7SWYTc80rrQVGoj87vygMY4sPlzDTJTDDul0ESGAWl0m:I/y1/80XQEoj8GefPlHlD20ESGAk0m
Malware Config
Signatures
Files
-
febc5e67f914122017799691b73c5fe4_JaffaCakes118.rar
-
#db.mdb
-
admin/Channel.asp.vbs
-
admin/UpLoadClass.asp.vbs
-
admin/content.asp.js
-
admin/err.asp
-
admin/html.asp.vbs
-
admin/index.asp
-
admin/isadmin.asp.vbs
-
admin/kindeditor/index.css
-
admin/kindeditor/kindeditor.js.js
-
admin/kindeditor/plugins/about.html.html
-
admin/kindeditor/plugins/emoticons/etc_01.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_02.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_03.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_04.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_05.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_06.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_07.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_08.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_09.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_10.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_11.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_12.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_13.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_14.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_15.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_16.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_17.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_18.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_19.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_20.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_21.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_22.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_23.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_24.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_25.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_26.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_27.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_28.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_29.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_30.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_31.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_32.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_33.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_34.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_35.gif.gif
-
admin/kindeditor/plugins/emoticons/etc_36.gif.gif
-
admin/kindeditor/plugins/flash.html.html
-
admin/kindeditor/plugins/image.html.html
-
admin/kindeditor/plugins/link.html.html
-
admin/kindeditor/plugins/media.html.html
-
admin/kindeditor/plugins/plainpaste.html.html
-
admin/kindeditor/plugins/remote_image.html.html
-
admin/kindeditor/plugins/wordpaste.html.html .js polyglot
-
admin/kindeditor/skins/Thumbs.db
-
admin/kindeditor/skins/default.css
-
admin/kindeditor/skins/default.gif.gif
-
admin/kindeditor/skins/div.gif.gif
-
admin/kindeditor/skins/dl.gif.gif
-
admin/kindeditor/skins/editor.css
-
admin/kindeditor/skins/ol.gif.gif
-
admin/kindeditor/skins/p.gif.gif
-
admin/kindeditor/skins/tinymce.css
-
admin/kindeditor/skins/tinymce.gif.gif
-
admin/kindeditor/skins/ul.gif.gif
-
admin/kindeditor/upload.asp.vbs
-
admin/kindeditor/upload.htm.asp
-
admin/login.asp.vbs
-
admin/logout.asp
-
admin/main.asp.vbs
-
admin/manage.asp
-
admin/md5.asp.vbs
-
admin/menu.asp.js
-
admin/other.asp.js
-
admin/styles/advanced/images/btn_bg.gif.gif
-
admin/styles/advanced/images/closed.gif.gif
-
admin/styles/advanced/images/configure.gif.gif
-
admin/styles/advanced/images/disabletiny.gif.gif
-
admin/styles/advanced/images/editablefile1.gif.gif
-
admin/styles/advanced/images/editablefile2.gif.gif
-
admin/styles/advanced/images/enabletiny.gif.gif
-
admin/styles/advanced/images/folder1.gif.gif
-
admin/styles/advanced/images/folder2.gif.gif
-
admin/styles/advanced/images/folderforbidden1.gif.gif
-
admin/styles/advanced/images/folderforbidden2.gif.gif
-
admin/styles/advanced/images/folderup1.gif.gif
-
admin/styles/advanced/images/folderup2.gif.gif
-
admin/styles/advanced/images/gradient.gif.gif
-
admin/styles/advanced/images/header_bg.gif.gif
-
admin/styles/advanced/images/header_left.gif.gif
-
admin/styles/advanced/images/header_right.gif.gif
-
admin/styles/advanced/images/link.gif.gif
-
admin/styles/advanced/images/login.gif.gif
-
admin/styles/advanced/images/login_box_bottom.jpg.jpg
-
admin/styles/advanced/images/login_box_legal_bg.gif.gif
-
admin/styles/advanced/images/logo.gif.gif
-
admin/styles/advanced/images/logo.psd
-
admin/styles/advanced/images/magnifying_glass.gif.gif
-
admin/styles/advanced/images/menu_1.gif.gif
-
admin/styles/advanced/images/menu_2.gif.gif
-
admin/styles/advanced/images/menu_category_bg.gif.gif
-
admin/styles/advanced/images/notrash.gif.gif
-
admin/styles/advanced/images/open.gif.gif
-
admin/styles/advanced/images/section/section_bottom_bg.gif.gif
-
admin/styles/advanced/images/section/section_bottom_left.gif.gif
-
admin/styles/advanced/images/section/section_bottom_right.gif.gif
-
admin/styles/advanced/images/section/section_middle_left.gif.gif
-
admin/styles/advanced/images/section/section_middle_right.gif.gif
-
admin/styles/advanced/images/section/section_top_bg.gif.gif
-
admin/styles/advanced/images/section/section_top_bg2.gif.gif
-
admin/styles/advanced/images/section/section_top_left.gif.gif
-
admin/styles/advanced/images/section/section_top_left2.gif.gif
-
admin/styles/advanced/images/section/section_top_right.gif.gif
-
admin/styles/advanced/images/section/section_top_right2.gif.gif
-
admin/styles/advanced/images/section/td1_bottom.gif.gif
-
admin/styles/advanced/images/section/td1_top.gif.gif
-
admin/styles/advanced/images/section/td2_bottom.gif.gif
-
admin/styles/advanced/images/section/td2_top.gif.gif
-
admin/styles/advanced/images/trash.gif.gif
-
admin/styles/advanced/login.css
-
admin/styles/advanced/menu.css
-
admin/styles/advanced/style.css
-
admin/sys.asp.vbs
-
admin/upload.asp.vbs
-
admin/upload.htm.asp
-
admin/url.asp.vbs
-
admin/新云软件.url.url
-
diy.asp.vbs
-
fail.asp
-
guest.asp.vbs
-
images/163.gif.gif
-
images/Thumbs.db
-
images/chanpin.jpg.jpg
-
inc/Category.asp.vbs
-
inc/code.asp.vbs
-
inc/conn.asp.vbs
-
inc/const.asp
-
inc/do.asp.vbs
-
inc/get_re.asp.vbs
-
inc/hits.asp.asp
-
inc/js.asp.vbs
-
inc/news.asp.vbs
-
inc/pinyin.qcms
-
inc/review.asp.vbs
-
inc/s.asp.vbs
-
inc/sys.asp.vbs
-
inc/tfunction.asp.vbs
-
inc/utf.asp.asp
-
index.asp.vbs
-
list.asp.vbs
-
login.asp.vbs
-
plus/count/count.html.html
-
plus/count/counter.asp.vbs
-
plus/count/counter.qcms
-
plus/count/img/0.gif.gif
-
plus/count/img/1.gif.gif
-
plus/count/img/2.gif.gif
-
plus/count/img/3.gif.gif
-
plus/count/img/4.gif.gif
-
plus/count/img/5.gif.gif
-
plus/count/img/6.gif.gif
-
plus/count/img/7.gif.gif
-
plus/count/img/8.gif.gif
-
plus/count/img/9.gif.gif
-
qcms1.4_sp1_正式版.txt
-
reg.asp.js
-
review.asp.vbs
-
search.asp.vbs
-
tag.asp.vbs
-
templist/baidu_map.qcms.xml
-
templist/default/css.css
-
templist/default/footer.html
-
templist/default/guest.html.html .js polyglot
-
templist/default/header.html
-
templist/default/images/163.gif.gif
-
templist/default/images/_notes/dwsync.xml.xml
-
templist/default/images/bottMenuBg.jpg.jpg
-
templist/default/images/h4Bg.jpg.jpg
-
templist/default/images/headerBg.jpg.jpg
-
templist/default/images/menuBg.jpg.jpg
-
templist/default/images/notice-newsBg.jpg.jpg
-
templist/default/images/notice-newsLi.jpg.jpg
-
templist/default/images/tp.jpg.jpg
-
templist/default/index.html.html
-
templist/default/newslist.html.html
-
templist/default/one.html.html
-
templist/default/prolist.html.html
-
templist/default/view.html.html
-
templist/google_map.qcms.xml
-
templist/list_rss.qcms.xml
-
templist/rss.qcms.xml
-
view.asp.vbs