Overview
overview
3Static
static
1Confirmati...S.html
windows7-x64
3Confirmati...S.html
windows10-2004-x64
3Confirmati...put.js
windows7-x64
3Confirmati...put.js
windows10-2004-x64
3Confirmati...r-2.js
windows7-x64
3Confirmati...r-2.js
windows10-2004-x64
3Confirmati...pli.js
windows7-x64
3Confirmati...pli.js
windows10-2004-x64
3Confirmati...rap.js
windows7-x64
3Confirmati...rap.js
windows10-2004-x64
3Confirmati...ery.js
windows7-x64
3Confirmati...ery.js
windows10-2004-x64
3Confirmati...ins.js
windows7-x64
3Confirmati...ins.js
windows10-2004-x64
3Confirmati..._pa.js
windows7-x64
3Confirmati..._pa.js
windows10-2004-x64
3Confirmati...892.js
windows7-x64
3Confirmati...892.js
windows10-2004-x64
3Confirmati...unt.js
windows7-x64
3Confirmati...unt.js
windows10-2004-x64
3Confirmati...w.html
windows7-x64
3Confirmati...w.html
windows10-2004-x64
3Confirmati...uth.js
windows7-x64
3Confirmati...uth.js
windows10-2004-x64
3Confirmati...tom.js
windows7-x64
3Confirmati...tom.js
windows10-2004-x64
3Confirmati...min.js
windows7-x64
3Confirmati...min.js
windows10-2004-x64
3Confirmati...uth.js
windows7-x64
3Confirmati...uth.js
windows10-2004-x64
3Confirmati...unt.js
windows7-x64
3Confirmati...unt.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Confirmation/signin/RZT/FuLLz_YS.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Confirmation/signin/RZT/FuLLz_YS.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/jquery.maskedinput.js
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/jquery.maskedinput.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/modernizr-2.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/modernizr-2.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_appli.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_appli.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_bootstrap.js
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_bootstrap.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_dowira_jquery.js
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_dowira_jquery.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_dowira_plugins.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_dowira_plugins.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_pa.js
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_pa.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_ppl_647892.js
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_ppl_647892.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Confirmation/signin/YASS_DARK_WEB/accessaccount.js
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
Confirmation/signin/YASS_DARK_WEB/accessaccount.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Confirmation/signin/YASS_DARK_WEB/css/jquery.filer-icons/jquery-filer-preview.html
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
Confirmation/signin/YASS_DARK_WEB/css/jquery.filer-icons/jquery-filer-preview.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Confirmation/signin/YASS_DARK_WEB/identityauth.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Confirmation/signin/YASS_DARK_WEB/identityauth.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Confirmation/signin/YASS_DARK_WEB/js/custom.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Confirmation/signin/YASS_DARK_WEB/js/custom.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Confirmation/signin/YASS_DARK_WEB/js/jquery.filer.min.js
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Confirmation/signin/YASS_DARK_WEB/js/jquery.filer.min.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
Confirmation/signin/YASS_DARK_WEB/loginauth.js
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Confirmation/signin/YASS_DARK_WEB/loginauth.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
Confirmation/signin/YASS_DARK_WEB/myaccount.js
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Confirmation/signin/YASS_DARK_WEB/myaccount.js
Resource
win10v2004-20241007-en
General
-
Target
2d229cb2d84856a49bbb3b38156be263_JaffaCakes118
-
Size
634KB
-
MD5
2d229cb2d84856a49bbb3b38156be263
-
SHA1
390987676ca7f361b95bd5894cf1d57fc35665dd
-
SHA256
44cdca2c043b13f7e0eb8d07b1cfd138fd8e22b7aa9b5ef0b837581fd898794d
-
SHA512
9b1ceb39effd0215c1468324307863716401fd95dd0a8b92ecbe4dc8f329d2e13cd7efdf20338a88842ee2b5d8920cd2f629ef33ed1b05bd7cc96c9dd0fa0aba
-
SSDEEP
12288:17t5Fknxaha9/1XsRB6QvXRFIJGzVwSMKmy2B8s93QC62x5OX6Q:ltLkxam9XifI6VOy2BH3p6aMR
Malware Config
Signatures
Files
-
2d229cb2d84856a49bbb3b38156be263_JaffaCakes118.zip
-
Confirmation/signin/-- HOW TO USE --.txt
-
Confirmation/signin/ABOUT.php
-
Confirmation/signin/RZT/FuLLz_YS.html
-
Confirmation/signin/RZT/debug.log
-
Confirmation/signin/VISITORS.txt
-
Confirmation/signin/YASS_DARK_WEB/.htaccess
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/css/app_ys.css
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/css/app_ys_redi.css
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/css/ys_app.css
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/css/ys_app.ltr.css
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/css/ys_ppl-sans.css
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/css/ys_rotate.css
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/css/ys_summary.ltr.css
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/YS_Lock.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/YS_attempts.gif
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/YS_favicon.ico
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/YS_paypal-logo-129x32.svg.xml
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/YS_pp114.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/YS_pp144.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/YS_pp196.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/YS_pp32.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/YS_pp64.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/YS_pp72.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/information.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/worning.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/ys_icon_input.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/ys_serieidentity.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/ys_valid.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/ys_valid2.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/img/ys_zbilal9ithaBTdzabi.png.png
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/jquery.maskedinput.js.js
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/modernizr-2.js.js
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_appli.js.js
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_bootstrap.js.js
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_dowira_jquery.js.js
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_dowira_plugins.js.js
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_pa.js.js
-
Confirmation/signin/YASS_DARK_WEB/YSASSETS/js/ys_ppl_647892.js.js
-
Confirmation/signin/YASS_DARK_WEB/YSFUNCTIONS/YSANTIBOTS.php
-
Confirmation/signin/YASS_DARK_WEB/YSFUNCTIONS/YSFUNCTIONS.php
-
Confirmation/signin/YASS_DARK_WEB/YSFUNCTIONS/YS_CONTROLS_YS.php
-
Confirmation/signin/YASS_DARK_WEB/YSSEND/YS_BILLING.php
-
Confirmation/signin/YASS_DARK_WEB/YSSEND/YS_CARDING.php
-
Confirmation/signin/YASS_DARK_WEB/YSSEND/YS_IDENTITY.php
-
Confirmation/signin/YASS_DARK_WEB/YSSEND/YS_LOGIN.php
-
Confirmation/signin/YASS_DARK_WEB/accessaccount.php.js
-
Confirmation/signin/YASS_DARK_WEB/css/jquery.filer-dragdropbox-theme.css
-
Confirmation/signin/YASS_DARK_WEB/css/jquery.filer-icons/jquery-filer-preview.html.html .js polyglot
-
Confirmation/signin/YASS_DARK_WEB/css/jquery.filer-icons/jquery-filer.css
-
Confirmation/signin/YASS_DARK_WEB/css/jquery.filer-icons/jquery-filer.eot
-
Confirmation/signin/YASS_DARK_WEB/css/jquery.filer-icons/jquery-filer.svg.xml
-
Confirmation/signin/YASS_DARK_WEB/css/jquery.filer-icons/jquery-filer.ttf
-
Confirmation/signin/YASS_DARK_WEB/css/jquery.filer-icons/jquery-filer.woff
-
Confirmation/signin/YASS_DARK_WEB/css/jquery.filer.css
-
Confirmation/signin/YASS_DARK_WEB/error_log
-
Confirmation/signin/YASS_DARK_WEB/identityauth.php.js
-
Confirmation/signin/YASS_DARK_WEB/index.php
-
Confirmation/signin/YASS_DARK_WEB/js/custom.js.js
-
Confirmation/signin/YASS_DARK_WEB/js/jquery.filer.min.js.js
-
Confirmation/signin/YASS_DARK_WEB/loginauth.php.js
-
Confirmation/signin/YASS_DARK_WEB/myaccount.php.js
-
Confirmation/signin/YASS_DARK_WEB/php/ajax_remove_file.php
-
Confirmation/signin/YASS_DARK_WEB/php/ajax_upload_file.php
-
Confirmation/signin/YASS_DARK_WEB/php/class.uploader.php.ps1
-
Confirmation/signin/YASS_DARK_WEB/updatebilling.php.js
-
Confirmation/signin/YASS_DARK_WEB/updatecarding.php.js
-
Confirmation/signin/YSDIR.php
-
Confirmation/signin/YSRN.php
-
Confirmation/signin/index.php