Overview
overview
3Static
static
1tykq22/tyk...en.vbs
windows7-x64
1tykq22/tyk...en.vbs
windows10-2004-x64
1tykq22/tykq22/MD5.vbs
windows7-x64
1tykq22/tykq22/MD5.vbs
windows10-2004-x64
1tykq22/tyk...de.vbs
windows7-x64
1tykq22/tyk...de.vbs
windows10-2004-x64
1tykq22/tyk...ow.vbs
windows7-x64
1tykq22/tyk...ow.vbs
windows10-2004-x64
1tykq22/tyk...ew.asp
windows7-x64
3tykq22/tyk...ew.asp
windows10-2004-x64
3tykq22/tyk...ew.asp
windows7-x64
3tykq22/tyk...ew.asp
windows10-2004-x64
3tykq22/tyk...nf.asp
windows7-x64
3tykq22/tyk...nf.asp
windows10-2004-x64
3tykq22/tyk...ck.vbs
windows7-x64
1tykq22/tyk...ck.vbs
windows10-2004-x64
1tykq22/tyk...nn.vbs
windows7-x64
1tykq22/tyk...nn.vbs
windows10-2004-x64
1tykq22/tyk...kq.asp
windows7-x64
3tykq22/tyk...kq.asp
windows10-2004-x64
3tykq22/tyk...fo.asp
windows7-x64
3tykq22/tyk...fo.asp
windows10-2004-x64
3tykq22/tyk...ot.asp
windows7-x64
3tykq22/tyk...ot.asp
windows10-2004-x64
3tykq22/tyk...t2.asp
windows7-x64
3tykq22/tyk...t2.asp
windows10-2004-x64
3tykq22/tykq22/fun.vbs
windows7-x64
1tykq22/tykq22/fun.vbs
windows10-2004-x64
1tykq22/tyk...ex.vbs
windows7-x64
1tykq22/tyk...ex.vbs
windows10-2004-x64
1tykq22/tyk...x2.vbs
windows7-x64
1tykq22/tyk...x2.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
tykq22/tykq22/CodeGen.vbs
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
tykq22/tykq22/CodeGen.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
tykq22/tykq22/MD5.vbs
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
tykq22/tykq22/MD5.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
tykq22/tykq22/VerifyCode.vbs
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
tykq22/tykq22/VerifyCode.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
tykq22/tykq22/allqdshow.vbs
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
tykq22/tykq22/allqdshow.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
tykq22/tykq22/annouceview.asp
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
tykq22/tykq22/annouceview.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
tykq22/tykq22/artview.asp
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
tykq22/tykq22/artview.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
tykq22/tykq22/cdinf.asp
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
tykq22/tykq22/cdinf.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
tykq22/tykq22/check.vbs
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
tykq22/tykq22/check.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
tykq22/tykq22/conn.vbs
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
tykq22/tykq22/conn.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
tykq22/tykq22/data/asoftkq.asp
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
tykq22/tykq22/data/asoftkq.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
tykq22/tykq22/feninfo.asp
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
tykq22/tykq22/feninfo.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
tykq22/tykq22/foot.asp
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
tykq22/tykq22/foot.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
tykq22/tykq22/foot2.asp
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
tykq22/tykq22/foot2.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
tykq22/tykq22/fun.vbs
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
tykq22/tykq22/fun.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral29
Sample
tykq22/tykq22/index.vbs
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
tykq22/tykq22/index.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
tykq22/tykq22/index2.vbs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
tykq22/tykq22/index2.vbs
Resource
win10v2004-20240709-en
General
-
Target
39fcab957a1494e449c45d82a4e694ef_JaffaCakes118
-
Size
455KB
-
MD5
39fcab957a1494e449c45d82a4e694ef
-
SHA1
ef06e43fa154afd297b42a04031664b94485af14
-
SHA256
4dabeebba477001d9d0f2d0b6beca0c45fb3d566b92c6bb6b17be1baad3b87d1
-
SHA512
b7af769a52e070a7c8fbbffa1faa38463696364f770347e3a31dda08194a91fd4e7e66f8e6aebed10e994b8dc98af027aa4418a50ed987873d66d10e065ff224
-
SSDEEP
6144:OfAn6vg5yVPSLkOxMtmpimzClJZiPKxEP8k4simYUp/aoSk1zOO3RacJl+D:ln6vsykLBdDanyK44siGpSoRF39i
Malware Config
Signatures
Files
-
39fcab957a1494e449c45d82a4e694ef_JaffaCakes118.rar
-
tykq22/tykq22/CodeGen.asp.vbs
-
tykq22/tykq22/MD5.asp.vbs
-
tykq22/tykq22/VerifyCode.asp.vbs
-
tykq22/tykq22/allqdshow.asp.vbs
-
tykq22/tykq22/annouceview.asp
-
tykq22/tykq22/artview.asp
-
tykq22/tykq22/cdinf.asp
-
tykq22/tykq22/check.asp.vbs
-
tykq22/tykq22/conn.asp.vbs
-
tykq22/tykq22/css.css
-
tykq22/tykq22/data/asoftkq.asp
-
tykq22/tykq22/feninfo.asp
-
tykq22/tykq22/foot.asp
-
tykq22/tykq22/foot2.asp
-
tykq22/tykq22/fun.asp.vbs
-
tykq22/tykq22/images/Arrow002.gif.gif
-
tykq22/tykq22/images/BGb1.jpg.jpg
-
tykq22/tykq22/images/Bar1.gif.gif
-
tykq22/tykq22/images/Bg_1.jpg.jpg
-
tykq22/tykq22/images/Clock.swf
-
tykq22/tykq22/images/LOGO.gif
-
tykq22/tykq22/images/MAIN_BG.GIF.gif
-
tykq22/tykq22/images/More.gif.gif
-
tykq22/tykq22/images/NavBG.gif.gif
-
tykq22/tykq22/images/Thumbs.db
-
tykq22/tykq22/images/TitleTop.gif.gif
-
tykq22/tykq22/images/Top_Pic001.gif.gif
-
tykq22/tykq22/images/Top_Pic003.gif.gif
-
tykq22/tykq22/images/Top_Pic004.gif.gif
-
tykq22/tykq22/images/UBB/Thumbs.db
-
tykq22/tykq22/images/UBB/Ubb_BOLD.GIF.gif
-
tykq22/tykq22/images/UBB/Ubb_CENTER.GIF.gif
-
tykq22/tykq22/images/UBB/Ubb_CODE.GIF.gif
-
tykq22/tykq22/images/UBB/Ubb_EMAIL.GIF.gif
-
tykq22/tykq22/images/UBB/Ubb_Fly.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_Glow.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_Help.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_IMAGE.GIF.gif
-
tykq22/tykq22/images/UBB/Ubb_MP.GIF.gif
-
tykq22/tykq22/images/UBB/Ubb_Move.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_QUOTE.GIF.gif
-
tykq22/tykq22/images/UBB/Ubb_RM.GIF.gif
-
tykq22/tykq22/images/UBB/Ubb_Shockwave.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_Smile.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_URL.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_emot.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_italicize.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_list.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_qt.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_shadow.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_swf.gif.gif
-
tykq22/tykq22/images/UBB/Ubb_underline.gif.gif
-
tykq22/tykq22/images/UBB/baidu.gif.gif
-
tykq22/tykq22/images/User.gif.gif
-
tykq22/tykq22/images/a1.gif.gif
-
tykq22/tykq22/images/a12.gif.gif
-
tykq22/tykq22/images/admin_left_1.gif.gif
-
tykq22/tykq22/images/admin_left_2.gif.gif
-
tykq22/tykq22/images/admin_left_3.gif.gif
-
tykq22/tykq22/images/admin_left_4.gif.gif
-
tykq22/tykq22/images/admin_left_5.gif.gif
-
tykq22/tykq22/images/art_bg.gif
-
tykq22/tykq22/images/auditing.gif.gif
-
tykq22/tykq22/images/bj2.gif
-
tykq22/tykq22/images/bottom_bg.gif.gif
-
tykq22/tykq22/images/checkarticle.gif.gif
-
tykq22/tykq22/images/favorites.gif.gif
-
tykq22/tykq22/images/finish.gif.gif
-
tykq22/tykq22/images/go.gif.gif
-
tykq22/tykq22/images/headr1c3.jpg.jpg
-
tykq22/tykq22/images/help.gif.gif
-
tykq22/tykq22/images/home.gif.gif
-
tykq22/tykq22/images/index_bj.gif.gif
-
tykq22/tykq22/images/lefttop.gif
-
tykq22/tykq22/images/login.GIF
-
tykq22/tykq22/images/loginIn.gif.gif
-
tykq22/tykq22/images/loginIn2.gif.gif
-
tykq22/tykq22/images/loginLine.gif.gif
-
tykq22/tykq22/images/loginbg.JPG.jpg
-
tykq22/tykq22/images/minus.gif.gif
-
tykq22/tykq22/images/nav_back.gif.gif
-
tykq22/tykq22/images/plus.gif.gif
-
tykq22/tykq22/images/sitebg.jpg.jpg
-
tykq22/tykq22/images/time.GIF
-
tykq22/tykq22/images/titlebg.gif.gif
-
tykq22/tykq22/images/tj.GIF
-
tykq22/tykq22/images/top.gif
-
tykq22/tykq22/images/top_blank.GIF
-
tykq22/tykq22/index.asp.vbs
-
tykq22/tykq22/index2.asp.vbs
-
tykq22/tykq22/indexlogin.css
-
tykq22/tykq22/install.asp.vbs
-
tykq22/tykq22/jobinf.asp
-
tykq22/tykq22/kqinf.asp
-
tykq22/tykq22/list.ASP.vbs
-
tykq22/tykq22/login.asp
-
tykq22/tykq22/login2.asp
-
tykq22/tykq22/login3.asp
-
tykq22/tykq22/loginin.asp.vbs
-
tykq22/tykq22/loginindex.asp.vbs
-
tykq22/tykq22/manager/Admin_Database.asp.vbs
-
tykq22/tykq22/manager/CHAR.ASP.vbs
-
tykq22/tykq22/manager/MD5.asp.vbs
-
tykq22/tykq22/manager/adduser.asp.vbs
-
tykq22/tykq22/manager/admin_add.asp.vbs
-
tykq22/tykq22/manager/admin_do.asp.vbs
-
tykq22/tykq22/manager/admin_xiugai.asp.vbs
-
tykq22/tykq22/manager/adminindex.asp
-
tykq22/tykq22/manager/adminloginblog.asp.vbs
-
tykq22/tykq22/manager/adminmanager.asp.vbs
-
tykq22/tykq22/manager/adminme.asp.vbs
-
tykq22/tykq22/manager/ann_add.asp
-
tykq22/tykq22/manager/annouce.asp.vbs
-
tykq22/tykq22/manager/annouce_do.asp.vbs
-
tykq22/tykq22/manager/annouce_xiugai.asp
-
tykq22/tykq22/manager/artadd.asp.vbs
-
tykq22/tykq22/manager/autoinit.asp.vbs
-
tykq22/tykq22/manager/calendar.js.js
-
tykq22/tykq22/manager/check.asp.vbs
-
tykq22/tykq22/manager/conn.asp.vbs
-
tykq22/tykq22/manager/exportExcel.js.js
-
tykq22/tykq22/manager/help.txt
-
tykq22/tykq22/manager/images/Thumbs.db
-
tykq22/tykq22/manager/images/add_admin.gif
-
tykq22/tykq22/manager/images/addtype.gif
-
tykq22/tykq22/manager/images/adminblog.GIF
-
tykq22/tykq22/manager/images/adminlist.gif
-
tykq22/tykq22/manager/images/allinf.gif
-
tykq22/tykq22/manager/images/allnoshenhe.gif
-
tykq22/tykq22/manager/images/datab.gif
-
tykq22/tykq22/manager/images/datah.gif
-
tykq22/tykq22/manager/images/datay.gif
-
tykq22/tykq22/manager/images/ggadd.gif
-
tykq22/tykq22/manager/images/gglist.gif
-
tykq22/tykq22/manager/images/ggxg.gif
-
tykq22/tykq22/manager/images/jf.gif
-
tykq22/tykq22/manager/images/latter.gif
-
tykq22/tykq22/manager/images/login.gif
-
tykq22/tykq22/manager/images/manberqdqt.gif
-
tykq22/tykq22/manager/images/menberblog.gif
-
tykq22/tykq22/manager/images/mypass.gif
-
tykq22/tykq22/manager/images/qd.gif
-
tykq22/tykq22/manager/images/subwz.gif
-
tykq22/tykq22/manager/images/sysbl.gif
-
tykq22/tykq22/manager/images/tlatter.gif
-
tykq22/tykq22/manager/images/type.gif
-
tykq22/tykq22/manager/images/webset.gif
-
tykq22/tykq22/manager/images/wzlist.gif
-
tykq22/tykq22/manager/images/xginf.gif
-
tykq22/tykq22/manager/images/xgtype.gif
-
tykq22/tykq22/manager/images/xgwz.gif
-
tykq22/tykq22/manager/latter.asp.vbs
-
tykq22/tykq22/manager/latter2.asp.vbs
-
tykq22/tykq22/manager/latterrc.asp.vbs
-
tykq22/tykq22/manager/left.asp.js
-
tykq22/tykq22/manager/left.css
-
tykq22/tykq22/manager/loginblogdel.asp.vbs
-
tykq22/tykq22/manager/logindo.asp.vbs
-
tykq22/tykq22/manager/main.asp.vbs
-
tykq22/tykq22/manager/menberloginblog.asp.vbs
-
tykq22/tykq22/manager/menberqdqt.asp.vbs
-
tykq22/tykq22/manager/paiming.asp.vbs
-
tykq22/tykq22/manager/payinfo.asp.vbs
-
tykq22/tykq22/manager/payset.asp.vbs
-
tykq22/tykq22/manager/qdset.asp.vbs
-
tykq22/tykq22/manager/qdset2.asp.js
-
tykq22/tykq22/manager/qdset_do.asp.vbs
-
tykq22/tykq22/manager/qdsetjs.asp.vbs
-
tykq22/tykq22/manager/quickview.asp
-
tykq22/tykq22/manager/qx.asp.vbs
-
tykq22/tykq22/manager/qx2.asp.vbs
-
tykq22/tykq22/manager/shenhe.asp.vbs
-
tykq22/tykq22/manager/shenhe_do.asp.vbs
-
tykq22/tykq22/manager/showtime.asp
-
tykq22/tykq22/manager/signatt.asp
-
tykq22/tykq22/manager/type.asp.vbs
-
tykq22/tykq22/manager/type_do.asp.vbs
-
tykq22/tykq22/manager/ubb.asp.html .js polyglot
-
tykq22/tykq22/manager/ubb1.asp
-
tykq22/tykq22/manager/ubbcode.asp.vbs
-
tykq22/tykq22/manager/user_xiugai.asp.vbs
-
tykq22/tykq22/manager/useradmin_do.asp.vbs
-
tykq22/tykq22/manager/userindex.asp.vbs
-
tykq22/tykq22/manager/userindex2.asp.vbs
-
tykq22/tykq22/manager/userxiugai_do.asp.vbs
-
tykq22/tykq22/manager/viewmenber.asp.vbs
-
tykq22/tykq22/manager/webinf.asp
-
tykq22/tykq22/manager/webset.asp.vbs
-
tykq22/tykq22/manager/webset_do.asp.vbs
-
tykq22/tykq22/noshenhe.asp.vbs
-
tykq22/tykq22/paiming.asp.vbs
-
tykq22/tykq22/pass.asp.vbs
-
tykq22/tykq22/payinfo.asp.vbs
-
tykq22/tykq22/qd.asp.vbs
-
tykq22/tykq22/qd_do.asp.vbs
-
tykq22/tykq22/qdinf.asp
-
tykq22/tykq22/qdinfo.asp.vbs
-
tykq22/tykq22/rwerwerwerwe.asp.vbs
-
tykq22/tykq22/sn.asp
-
tykq22/tykq22/top.asp
-
tykq22/tykq22/ubb.asp.html .js polyglot
-
tykq22/tykq22/ubb1.asp
-
tykq22/tykq22/ubbcode.asp.vbs
-
tykq22/tykq22/userpass.asp.vbs
-
tykq22/tykq22/v2.2功能说明.txt
-
tykq22/tykq22/viewpm.asp.vbs
-
tykq22/tykq22/webinfo.asp
-
tykq22/tykq22/zhinf.asp
-
tykq22/tykq22/zizhusign.asp.vbs
-
tykq22/tykq22/测试账号.txt