Overview
overview
3Static
static
1jiyu/@shuj...��.url
windows7-x64
1jiyu/@shuj...��.url
windows10-2004-x64
1jiyu/Admin/TOP.asp
windows7-x64
3jiyu/Admin/TOP.asp
windows10-2004-x64
3jiyu/Admin...log.js
windows7-x64
1jiyu/Admin...log.js
windows10-2004-x64
1jiyu/Admin...rea.js
windows7-x64
1jiyu/Admin...rea.js
windows10-2004-x64
1jiyu/Admin.../en.js
windows7-x64
1jiyu/Admin.../en.js
windows10-2004-x64
1jiyu/Admin...div.js
windows7-x64
1jiyu/Admin...div.js
windows10-2004-x64
1jiyu/Admin...t.html
windows7-x64
1jiyu/Admin...t.html
windows10-2004-x64
1jiyu/Admin...k.html
windows7-x64
1jiyu/Admin...k.html
windows10-2004-x64
1jiyu/Admin...2.html
windows7-x64
1jiyu/Admin...2.html
windows10-2004-x64
1jiyu/Admin...p.html
windows7-x64
1jiyu/Admin...p.html
windows10-2004-x64
1jiyu/Admin...n.html
windows7-x64
1jiyu/Admin...n.html
windows10-2004-x64
1jiyu/Admin...e.html
windows7-x64
1jiyu/Admin...e.html
windows10-2004-x64
1jiyu/Admin...e.html
windows7-x64
1jiyu/Admin...e.html
windows10-2004-x64
1jiyu/Admin...k.html
windows7-x64
1jiyu/Admin...k.html
windows10-2004-x64
1jiyu/Admin...n.html
windows7-x64
1jiyu/Admin...n.html
windows10-2004-x64
1jiyu/Admin...e.html
windows7-x64
1jiyu/Admin...e.html
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
jiyu/@shujuku/程序演示.url
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
jiyu/@shujuku/程序演示.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
jiyu/Admin/TOP.asp
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
jiyu/Admin/TOP.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
jiyu/Admin/WYSIWYG/Editor/dialog.js
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
jiyu/Admin/WYSIWYG/Editor/dialog.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
jiyu/Admin/WYSIWYG/Editor/htmlarea.js
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
jiyu/Admin/WYSIWYG/Editor/htmlarea.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
jiyu/Admin/WYSIWYG/Editor/lang/en.js
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
jiyu/Admin/WYSIWYG/Editor/lang/en.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
jiyu/Admin/WYSIWYG/Editor/popupdiv.js
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
jiyu/Admin/WYSIWYG/Editor/popupdiv.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
jiyu/Admin/WYSIWYG/Editor/popups/about.html
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
jiyu/Admin/WYSIWYG/Editor/popups/about.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
jiyu/Admin/WYSIWYG/Editor/popups/blank.html
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
jiyu/Admin/WYSIWYG/Editor/popups/blank.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
jiyu/Admin/WYSIWYG/Editor/popups/custom2.html
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
jiyu/Admin/WYSIWYG/Editor/popups/custom2.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
jiyu/Admin/WYSIWYG/Editor/popups/editor_help.html
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
jiyu/Admin/WYSIWYG/Editor/popups/editor_help.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
jiyu/Admin/WYSIWYG/Editor/popups/fullscreen.html
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
jiyu/Admin/WYSIWYG/Editor/popups/fullscreen.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
jiyu/Admin/WYSIWYG/Editor/popups/insert_image.html
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
jiyu/Admin/WYSIWYG/Editor/popups/insert_image.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
jiyu/Admin/WYSIWYG/Editor/popups/insert_table.html
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
jiyu/Admin/WYSIWYG/Editor/popups/insert_table.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
jiyu/Admin/WYSIWYG/Editor/popups/link.html
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
jiyu/Admin/WYSIWYG/Editor/popups/link.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
jiyu/Admin/WYSIWYG/Editor/popups/old-fullscreen.html
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
jiyu/Admin/WYSIWYG/Editor/popups/old-fullscreen.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
jiyu/Admin/WYSIWYG/Editor/popups/old_insert_image.html
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
jiyu/Admin/WYSIWYG/Editor/popups/old_insert_image.html
Resource
win10v2004-20240226-en
General
-
Target
cda114ea95f24f142320613416f63536
-
Size
73KB
-
MD5
cda114ea95f24f142320613416f63536
-
SHA1
d5adc2d781c6334752d0932886ed5f0084cdb055
-
SHA256
56b8fba8992231befd307db2305d3cc75b24a9b20d3372f609d1b3357128f4d3
-
SHA512
f335855616ef255e2966b90a0cd5d001727ac299a82cf18d4f718afdd822e4ce74acbf36610921c93fe2397e781250b4cf85725c835d0d285dfcdb50b922330b
-
SSDEEP
1536:EM+tNIJ7vfkx5C4QbvcnalgP4it8nMMMqcPkJ/Qe+yV4:/A+546cPXtEMM5csJIe1u
Malware Config
Signatures
Files
-
cda114ea95f24f142320613416f63536.rar
-
jiyu/@shujuku/QQ83152719.mdb
-
jiyu/@shujuku/ini.sys
-
jiyu/@shujuku/程序演示.url.url
-
jiyu/Admin/TOP.asp
-
jiyu/Admin/WYSIWYG/Editor/dialog.js.js
-
jiyu/Admin/WYSIWYG/Editor/htmlarea.css
-
jiyu/Admin/WYSIWYG/Editor/htmlarea.js.js
-
jiyu/Admin/WYSIWYG/Editor/images/cust_apply_event.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/cust_file_preview.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/cust_signs.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/cust_template.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_about.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_align_center.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_align_justify.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_align_left.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_align_right.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_blank.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_charmap.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_color_bg.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_color_fg.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_copy.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_custom.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_cut.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_delete.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_format_bold.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_format_italic.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_format_strike.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_format_sub.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_format_sup.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_format_underline.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_help.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_hr.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_html.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_image.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_indent_less.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_indent_more.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_left_to_right.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_link.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_list_bullet.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_list_num.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_paste.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_redo.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_right_to_left.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_save.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_show_border.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_splitcel.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/ed_undo.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/fullscreen_maximize.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/fullscreen_minimize.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/images/insert_table.gif.gif
-
jiyu/Admin/WYSIWYG/Editor/lang/en.js
-
jiyu/Admin/WYSIWYG/Editor/popupdiv.js.js
-
jiyu/Admin/WYSIWYG/Editor/popups/about.html.js
-
jiyu/Admin/WYSIWYG/Editor/popups/blank.html
-
jiyu/Admin/WYSIWYG/Editor/popups/custom2.html.html .js polyglot
-
jiyu/Admin/WYSIWYG/Editor/popups/editor_help.html.html
-
jiyu/Admin/WYSIWYG/Editor/popups/fullscreen.html.html .js polyglot
-
jiyu/Admin/WYSIWYG/Editor/popups/insert_image.html.html .js polyglot
-
jiyu/Admin/WYSIWYG/Editor/popups/insert_table.html.html .js polyglot
-
jiyu/Admin/WYSIWYG/Editor/popups/link.html.html .js polyglot
-
jiyu/Admin/WYSIWYG/Editor/popups/old-fullscreen.html.html .js polyglot
-
jiyu/Admin/WYSIWYG/Editor/popups/old_insert_image.html.js
-
jiyu/Admin/WYSIWYG/Editor/popups/popup.js.js
-
jiyu/Admin/WYSIWYG/Editor/popups/select_color.html.js
-
jiyu/Admin/WYSIWYG/Editor/popupwin.js.js
-
jiyu/Admin/about.asp.vbs
-
jiyu/Admin/addmessage.asp.vbs
-
jiyu/Admin/del.asp.vbs
-
jiyu/Admin/end.asp
-
jiyu/Admin/img/arrow_down.gif.gif
-
jiyu/Admin/img/arrow_up.gif.gif
-
jiyu/Admin/img/back.gif.gif
-
jiyu/Admin/img/bg1.gif.gif
-
jiyu/Admin/img/bootom_line_arc.gif.gif
-
jiyu/Admin/img/bottom_line_2.gif.gif
-
jiyu/Admin/img/btn_go.gif.gif
-
jiyu/Admin/img/developed_by_expinion_dot_net.gif.gif
-
jiyu/Admin/img/ico_del.gif.gif
-
jiyu/Admin/img/ico_del_on.gif.gif
-
jiyu/Admin/img/ico_edit.gif.gif
-
jiyu/Admin/img/ico_find.gif.gif
-
jiyu/Admin/img/ico_view_2.gif.gif
-
jiyu/Admin/img/ini.sys
-
jiyu/Admin/index.asp.vbs
-
jiyu/Admin/main.asp.vbs
-
jiyu/Admin/messageedit.asp.vbs
-
jiyu/Admin/styles.css
-
jiyu/Admin/viewmessage.asp.vbs
-
jiyu/aspcheck.asp.asp .vbs polyglot
-
jiyu/blessings.asp
-
jiyu/config.asp.vbs
-
jiyu/index.asp
-
jiyu/main.CSS
-
jiyu/新云软件.url.url
-
jiyu/程序说明.txt