Overview

overview

3

Static

static

1

2740/wzxt/2.vbs

windows7-x64

1

2740/wzxt/2.vbs

windows10-2004-x64

1

2740/wzxt/DELE.vbs

windows7-x64

1

2740/wzxt/DELE.vbs

windows10-2004-x64

1

2740/wzxt/Review.vbs

windows7-x64

1

2740/wzxt/Review.vbs

windows10-2004-x64

1

2740/wzxt/...el.vbs

windows7-x64

1

2740/wzxt/...el.vbs

windows10-2004-x64

1

2740/wzxt/adduser.asp

windows7-x64

3

2740/wzxt/adduser.asp

windows10-2004-x64

3

2740/wzxt/...er.vbs

windows7-x64

1

2740/wzxt/...er.vbs

windows10-2004-x64

1

2740/wzxt/...nn.vbs

windows7-x64

1

2740/wzxt/...nn.vbs

windows10-2004-x64

1

2740/wzxt/backup.vbs

windows7-x64

1

2740/wzxt/backup.vbs

windows10-2004-x64

1

2740/wzxt/config.asp

windows7-x64

3

2740/wzxt/config.asp

windows10-2004-x64

3

2740/wzxt/copy.asp

windows7-x64

3

2740/wzxt/copy.asp

windows10-2004-x64

3

2740/wzxt/creak.vbs

windows7-x64

1

2740/wzxt/creak.vbs

windows10-2004-x64

1

2740/wzxt/edit.vbs

windows7-x64

1

2740/wzxt/edit.vbs

windows10-2004-x64

1

2740/wzxt/ggad.asp

windows7-x64

3

2740/wzxt/ggad.asp

windows10-2004-x64

3

2740/wzxt/ggdel.vbs

windows7-x64

1

2740/wzxt/ggdel.vbs

windows10-2004-x64

1

2740/wzxt/gglb.vbs

windows7-x64

1

2740/wzxt/gglb.vbs

windows10-2004-x64

1

2740/wzxt/ggsc.vbs

windows7-x64

1

2740/wzxt/ggsc.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    42b9a0e5f6c28c2ff914c74be8993572_JaffaCakes118

  • Size

    688KB

  • MD5

    42b9a0e5f6c28c2ff914c74be8993572

  • SHA1

    18269c986f40bb668dd31b07ac6b6d576b380c7a

  • SHA256

    1bfc61863cc7d002b18c23dda3b975836b19c17d48071191e6b93bb9b9107436

  • SHA512

    acccbf8f122542ae41470cd45074ee6a0e6484b6fec8f9420e0471cd43f18c9bfdcaf02f09301bdedc7807e0e655b1cde135a82dcee72ce071a153376768c8b0

  • SSDEEP

    12288:WcPyR5Nulp54UjXvkkGvkwHS/OxNOgx6HSGxRulKXeoAi/ishCVNCw2SXWPiO9RZ:NPyR5Ulsa8kckwHS/OxNOgxChad2eWqm

Score
1/10

Malware Config

Signatures

Files

  • 42b9a0e5f6c28c2ff914c74be8993572_JaffaCakes118
    .rar
  • 2740/wzxt/2.asp
    .vbs
  • 2740/wzxt/6.jpg
    .jpg
  • 2740/wzxt/DELE.ASP
    .vbs
  • 2740/wzxt/Review.asp
    .vbs
  • 2740/wzxt/Reviewdel.asp
    .vbs
  • 2740/wzxt/UBB.asp
    .html .js polyglot
  • 2740/wzxt/adduser.asp
  • 2740/wzxt/adminuser.asp
    .vbs
  • 2740/wzxt/articleconn.asp
    .vbs
  • 2740/wzxt/backup.asp
    .vbs
  • 2740/wzxt/config.asp
  • 2740/wzxt/copy.asp
  • 2740/wzxt/creak.asp
    .vbs
  • 2740/wzxt/db.mdb
  • 2740/wzxt/edit.asp
    .vbs
  • 2740/wzxt/ggad.asp
  • 2740/wzxt/ggdel.asp
    .vbs
  • 2740/wzxt/gglb.asp
    .vbs
  • 2740/wzxt/ggsc.asp
    .vbs
  • 2740/wzxt/ggxg.asp
    .vbs
  • 2740/wzxt/ggxg2.asp
    .vbs
  • 2740/wzxt/gl.asp
    .vbs
  • 2740/wzxt/images/bar.gif
    .gif
  • 2740/wzxt/images/fish.swf
  • 2740/wzxt/images/gpkl.gif
    .gif
  • 2740/wzxt/images/ubbpic/Shockwave.gif
    .gif
  • 2740/wzxt/images/ubbpic/baidu.gif
    .gif
  • 2740/wzxt/images/ubbpic/bold.gif
    .gif
  • 2740/wzxt/images/ubbpic/center.gif
    .gif
  • 2740/wzxt/images/ubbpic/email.gif
    .gif
  • 2740/wzxt/images/ubbpic/fly.gif
    .gif
  • 2740/wzxt/images/ubbpic/glow.gif
    .gif
  • 2740/wzxt/images/ubbpic/icon_editor_url.gif
    .gif
  • 2740/wzxt/images/ubbpic/image.gif
    .gif
  • 2740/wzxt/images/ubbpic/italicize.gif
    .gif
  • 2740/wzxt/images/ubbpic/move.gif
    .gif
  • 2740/wzxt/images/ubbpic/mp.gif
    .gif
  • 2740/wzxt/images/ubbpic/qt.gif
    .gif
  • 2740/wzxt/images/ubbpic/quote.gif
    .gif
  • 2740/wzxt/images/ubbpic/rm.gif
    .gif
  • 2740/wzxt/images/ubbpic/shadow.gif
    .gif
  • 2740/wzxt/images/ubbpic/swf.gif
    .gif
  • 2740/wzxt/images/ubbpic/underline.gif
    .gif
  • 2740/wzxt/img.asp
    .vbs
  • 2740/wzxt/img/1.gif
    .gif
  • 2740/wzxt/img/2.gif
    .gif
  • 2740/wzxt/img/2.htm
    .html
  • 2740/wzxt/img/3.gif
    .gif
  • 2740/wzxt/img/MU.gif
    .gif
  • 2740/wzxt/img/Snap2.GIF
  • 2740/wzxt/img/Snap2.jpg
    .jpg
  • 2740/wzxt/img/bg.gif
    .gif
  • 2740/wzxt/img/email.gif
    .gif
  • 2740/wzxt/img/gpkl.gif
    .gif
  • 2740/wzxt/img/home.gif
    .gif
  • 2740/wzxt/img/ip.gif
    .gif
  • 2740/wzxt/img/italicize.gif
    .gif
  • 2740/wzxt/img/kirsty3.JPG
    .jpg
  • 2740/wzxt/img/logo.gif
    .gif
  • 2740/wzxt/img/m.gif
    .gif
  • 2740/wzxt/img/top1.jpg
    .jpg
  • 2740/wzxt/inc/char.asp
    .vbs
  • 2740/wzxt/inc/md5.asp
    .vbs
  • 2740/wzxt/inc_upload.asp
    .html .vbs polyglot
  • 2740/wzxt/index.htm
    .html
  • 2740/wzxt/index3.asp
    .vbs
  • 2740/wzxt/index8.asp
    .vbs
  • 2740/wzxt/info.asp
  • 2740/wzxt/jsubb.asp
    .js
  • 2740/wzxt/k.asp
  • 2740/wzxt/k1.asp
    .vbs
  • 2740/wzxt/k2.asp
  • 2740/wzxt/lgok.html
  • 2740/wzxt/login.asp
    .vbs
  • 2740/wzxt/logout.asp
  • 2740/wzxt/makeindex.asp
    .vbs
  • 2740/wzxt/makeindexsave.asp
    .vbs
  • 2740/wzxt/md5.asp
    .vbs
  • 2740/wzxt/myaddarticle.asp
    .vbs
  • 2740/wzxt/mysavearticle.asp
    .vbs
  • 2740/wzxt/newschk.asp
    .vbs
  • 2740/wzxt/pin.asp
    .vbs
  • 2740/wzxt/pt.asp
    .vbs
  • 2740/wzxt/putong.asp
    .vbs
  • 2740/wzxt/rd.asp
    .vbs
  • 2740/wzxt/rdl.asp
    .vbs
  • 2740/wzxt/restore.asp
    .vbs
  • 2740/wzxt/savagg.asp
    .vbs
  • 2740/wzxt/saveedit.asp
    .vbs
  • 2740/wzxt/savereview.asp
    .vbs
  • 2740/wzxt/saveupload.asp
    .vbs
  • 2740/wzxt/saveuser.asp
    .vbs
  • 2740/wzxt/saveuser1.asp
    .vbs
  • 2740/wzxt/shenghe.asp
    .vbs
  • 2740/wzxt/show.asp
    .vbs
  • 2740/wzxt/showgg.asp
    .vbs
  • 2740/wzxt/sj.asp
    .vbs
  • 2740/wzxt/soso.asp
    .vbs
  • 2740/wzxt/sql.asp
    .vbs
  • 2740/wzxt/style.css
  • 2740/wzxt/top.asp
    .html .vbs polyglot
  • 2740/wzxt/topnews.asp
    .vbs
  • 2740/wzxt/type.asp
    .vbs
  • 2740/wzxt/type1.asp
    .asp .vbs polyglot
  • 2740/wzxt/typefrom.asp
    .asp .vbs polyglot
  • 2740/wzxt/ubb1.asp
  • 2740/wzxt/ubbcode.asp
    .vbs
  • 2740/wzxt/ubbcode.js
    .html .js polyglot
  • 2740/wzxt/upload.asp
  • 2740/wzxt/使用说明.txt
  • 2740/说明.htm
    .html
  • 2740/说明.txt