Overview
overview
3Static
static
1zf3/APIARY...LE.vbs
windows7-x64
1zf3/APIARY...LE.vbs
windows10-2004-x64
1zf3/APIARY...LU.bat
windows7-x64
1zf3/APIARY...LU.bat
windows10-2004-x64
1zf3/APIARY...LF.com
windows7-x64
zf3/APIARY...LF.com
windows10-2004-x64
zf3/APIARY...A3A.js
windows7-x64
3zf3/APIARY...A3A.js
windows10-2004-x64
3zf3/CONTES...20.com
windows7-x64
zf3/CONTES...20.com
windows10-2004-x64
zf3/CONTES...RU.com
windows7-x64
zf3/CONTES...RU.com
windows10-2004-x64
zf3/ZF#3.exe
windows7-x64
zf3/ZF#3.exe
windows10-2004-x64
zf3/codeem...01.com
windows7-x64
zf3/codeem...01.com
windows10-2004-x64
zf3/codeem...02.com
windows7-x64
zf3/codeem...02.com
windows10-2004-x64
zf3/codeem...03.com
windows7-x64
zf3/codeem...03.com
windows10-2004-x64
zf3/codeem...04.com
windows7-x64
zf3/codeem...04.com
windows10-2004-x64
zf3/codeem...05.com
windows7-x64
zf3/codeem...05.com
windows10-2004-x64
zf3/codeem...06.com
windows7-x64
zf3/codeem...06.com
windows10-2004-x64
zf3/codeem...07.com
windows7-x64
zf3/codeem...07.com
windows10-2004-x64
zf3/codeem...08.com
windows7-x64
zf3/codeem...08.com
windows10-2004-x64
zf3/codeem...09.com
windows7-x64
zf3/codeem...09.com
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
zf3/APIARY/ARTICLE.vbs
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
zf3/APIARY/ARTICLE.vbs
Resource
win10v2004-20240910-en
Behavioral task
behavioral3
Sample
zf3/APIARY/BINARY/KTULU.bat
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
zf3/APIARY/BINARY/KTULU.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
zf3/APIARY/BINARY/MYSELF.com
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
zf3/APIARY/BINARY/MYSELF.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
zf3/APIARY/SOURCE/3APA3A.js
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
zf3/APIARY/SOURCE/3APA3A.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
zf3/CONTEST/PLY0D20.com
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
zf3/CONTEST/PLY0D20.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
zf3/CONTEST/PLY_RU.com
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
zf3/CONTEST/PLY_RU.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
zf3/ZF#3.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
zf3/ZF#3.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
zf3/codeem/BINARY/TREXP01.com
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
zf3/codeem/BINARY/TREXP01.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
zf3/codeem/BINARY/TREXP02.com
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
zf3/codeem/BINARY/TREXP02.com
Resource
win10v2004-20240910-en
Behavioral task
behavioral19
Sample
zf3/codeem/BINARY/TREXP03.com
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
zf3/codeem/BINARY/TREXP03.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
zf3/codeem/BINARY/TREXP04.com
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
zf3/codeem/BINARY/TREXP04.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
zf3/codeem/BINARY/TREXP05.com
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
zf3/codeem/BINARY/TREXP05.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
zf3/codeem/BINARY/TREXP06.com
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
zf3/codeem/BINARY/TREXP06.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
zf3/codeem/BINARY/TREXP07.com
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
zf3/codeem/BINARY/TREXP07.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
zf3/codeem/BINARY/TREXP08.com
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
zf3/codeem/BINARY/TREXP08.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
zf3/codeem/BINARY/TREXP09.com
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
zf3/codeem/BINARY/TREXP09.com
Resource
win10v2004-20240802-en
General
-
Target
049cc6d9ae6e611eb99353f4856d65b2_JaffaCakes118
-
Size
315KB
-
MD5
049cc6d9ae6e611eb99353f4856d65b2
-
SHA1
745a94ccce0b95d7619d256aa016464e16a6dcf1
-
SHA256
a602da20fde6e217aff2a8cbb16e67450f09cbe1b98530bbf29746d3db46ad05
-
SHA512
02c272020d02040ed879eca5adf485bd5260d275fdcd6d6a362da8f04f458a436cf5303f09e11693b73c41cc9cb8c1ab825e20c09ffe21e0550a9b3f5067c7d7
-
SSDEEP
6144:EIwATcCeueh0zpflrq4X5SGvTX31+mBjF01VlVhGctGaNSGVWG:EtWcHueWptFX5Sur1x01V0cI4WG
Malware Config
Signatures
Files
-
049cc6d9ae6e611eb99353f4856d65b2_JaffaCakes118.zip
-
zf3/--------.---
-
zf3/APIARY/ARTICLE.TXT.vbs
-
zf3/APIARY/BINARY/KTULU.BAT
-
zf3/APIARY/BINARY/MYSELF.COM
-
zf3/APIARY/SOURCE/3APA3A.PAS.js
-
zf3/APIARY/SOURCE/SRCVIR.ASM
-
zf3/CONTEST/PLY.ASM
-
zf3/CONTEST/PLY0D20.COM
-
zf3/CONTEST/PLY0D20.EAS
-
zf3/CONTEST/PLY0D20.SIG
-
zf3/CONTEST/PLY_RU.COM
-
zf3/CONTEST/PLY_RU.EAS
-
zf3/FERSHAL.000
-
zf3/FERSHAL.011
-
zf3/FERSHAL.012
-
zf3/FERSHAL.013
-
zf3/FERSHAL.015
-
zf3/FERSHAL.WWW
-
zf3/ZF#3.EXE
-
zf3/ZF3.TXT
-
zf3/codeem/BINARY/TREXP01.COM
-
zf3/codeem/BINARY/TREXP02.COM
-
zf3/codeem/BINARY/TREXP03.COM
-
zf3/codeem/BINARY/TREXP04.COM
-
zf3/codeem/BINARY/TREXP05.COM
-
zf3/codeem/BINARY/TREXP06.COM
-
zf3/codeem/BINARY/TREXP07.COM
-
zf3/codeem/BINARY/TREXP08.COM
-
zf3/codeem/BINARY/TREXP09.COM
-
zf3/codeem/BINARY/TREXP10.COM
-
zf3/codeem/BINARY/TREXP11.COM
-
zf3/codeem/BINARY/TREXP12.COM
-
zf3/codeem/BINARY/TREXP13.COM
-
zf3/codeem/BINARY/TREXP14.COM
-
zf3/codeem/BINARY/TREXP15.COM
-
zf3/codeem/BINARY/TREXP16.COM
-
zf3/codeem/BINARY/TREXP17.COM
-
zf3/codeem/BINARY/TREXP18.COM
-
zf3/codeem/BINARY/TREXP19.COM
-
zf3/codeem/SOURCE/TREXP.INC
-
zf3/codeem/SOURCE/TREXP01.ASM
-
zf3/codeem/SOURCE/TREXP02.ASM
-
zf3/codeem/SOURCE/TREXP03.ASM
-
zf3/codeem/SOURCE/TREXP04.ASM
-
zf3/codeem/SOURCE/TREXP05.ASM
-
zf3/codeem/SOURCE/TREXP06.ASM
-
zf3/codeem/SOURCE/TREXP07.ASM
-
zf3/codeem/SOURCE/TREXP08.ASM
-
zf3/codeem/SOURCE/TREXP09.ASM
-
zf3/codeem/SOURCE/TREXP10.ASM
-
zf3/codeem/SOURCE/TREXP11.ASM
-
zf3/codeem/SOURCE/TREXP12.ASM
-
zf3/codeem/SOURCE/TREXP13.ASM
-
zf3/codeem/SOURCE/TREXP14.ASM
-
zf3/codeem/SOURCE/TREXP15.ASM
-
zf3/codeem/SOURCE/TREXP16.ASM
-
zf3/codeem/SOURCE/TREXP17.ASM
-
zf3/codeem/SOURCE/TREXP18.ASM
-
zf3/codeem/SOURCE/TREXP19.ASM
-
zf3/fershal.001
-
zf3/fershal.002
-
zf3/fershal.003
-
zf3/fershal.004
-
zf3/fershal.005
-
zf3/fershal.006
-
zf3/fershal.007
-
zf3/fershal.008
-
zf3/fershal.009
-
zf3/fershal.010
-
zf3/fershal.014
-
zf3/fershal.016
-
zf3/fershal.017
-
zf3/fershal.018.vbs
-
zf3/fershal.019
-
zf3/fershal.020
-
zf3/fershal.021
-
zf3/fershal.022
-
zf3/fershal.023
-
zf3/fershal.024
-
zf3/fershal.025
-
zf3/fershal.026
-
zf3/melissa/MELISSA.001
-
zf3/melissa/MELISSA.A
-
zf3/melissa/MELISSA.B
-
zf3/melissa/MELISSA.FAQ
-
zf3/melissa/MELISSA.MAC.vbs
-
zf3/melissa/melissa.002
-
zf3/usefull/AVP_CRK.HTM.html
-
zf3/usefull/FILE_ID.DIZ
-
zf3/usefull/IDA_TUT.HTM.html
-
zf3/vcg/AVIR/PRJATKI.ASM
-
zf3/vcg/AVIR/PRJATKI.COM
-
zf3/vcg/FILE_ID.DIZ
-
zf3/vcg/READ.ME
-
zf3/vcg/TEST1.COM
-
zf3/vcg/VCG_TEST.COM
-
zf3/virii98/CIH.TXT
-
zf3/virii98/FILE_ID.DIZ
-
zf3/virii98/ICQ.TXT
-
zf3/virii98/JAVA.TXT
-
zf3/wildlist/199901.TXT
-
zf3/wildlist/199902.TXT
-
zf3/wildlist/199903.TXT
-
zf3/wildlist/rus/0199.TXT
-
zf3/wildlist/rus/0299.TXT
-
zf3/wildlist/rus/0399.TXT