Overview
overview
3Static
static
1fjqq_cn_bl...ws.asp
windows7-x64
3fjqq_cn_bl...ws.asp
windows10-2004-x64
3fjqq_cn_bl...nn.vbs
windows7-x64
1fjqq_cn_bl...nn.vbs
windows10-2004-x64
1fjqq_cn_bl...S.html
windows7-x64
1fjqq_cn_bl...S.html
windows10-2004-x64
1fjqq_cn_bl...L.html
windows7-x64
1fjqq_cn_bl...L.html
windows10-2004-x64
1fjqq_cn_bl...ds.vbs
windows7-x64
1fjqq_cn_bl...ds.vbs
windows10-2004-x64
1fjqq_cn_bl...ig.vbs
windows7-x64
1fjqq_cn_bl...ig.vbs
windows10-2004-x64
1fjqq_cn_bl...ex.vbs
windows7-x64
1fjqq_cn_bl...ex.vbs
windows10-2004-x64
1fjqq_cn_bl...nk.vbs
windows7-x64
1fjqq_cn_bl...nk.vbs
windows10-2004-x64
1fjqq_cn_bl...mb.vbs
windows7-x64
1fjqq_cn_bl...mb.vbs
windows10-2004-x64
1fjqq_cn_bl...er.vbs
windows7-x64
1fjqq_cn_bl...er.vbs
windows10-2004-x64
1fjqq_cn_bl...ck.vbs
windows7-x64
1fjqq_cn_bl...ck.vbs
windows10-2004-x64
1fjqq_cn_bl...ut.asp
windows7-x64
3fjqq_cn_bl...ut.asp
windows10-2004-x64
3fjqq_cn_bl...og.asp
windows7-x64
3fjqq_cn_bl...og.asp
windows10-2004-x64
3fjqq_cn_bl...lp.asp
windows7-x64
3fjqq_cn_bl...lp.asp
windows10-2004-x64
3fjqq_cn_bl...on.asp
windows7-x64
3fjqq_cn_bl...on.asp
windows10-2004-x64
3fjqq_cn_bl...ip.asp
windows7-x64
3fjqq_cn_bl...ip.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
fjqq_cn_blue_for_3.2/News.asp
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
fjqq_cn_blue_for_3.2/News.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
fjqq_cn_blue_for_3.2/admin/Conn.vbs
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
fjqq_cn_blue_for_3.2/admin/Conn.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
fjqq_cn_blue_for_3.2/admin/HTMLtoJS.html
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
fjqq_cn_blue_for_3.2/admin/HTMLtoJS.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
fjqq_cn_blue_for_3.2/admin/JStoHTML.html
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
fjqq_cn_blue_for_3.2/admin/JStoHTML.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
fjqq_cn_blue_for_3.2/admin/admin_ads.vbs
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
fjqq_cn_blue_for_3.2/admin/admin_ads.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
fjqq_cn_blue_for_3.2/admin/admin_config.vbs
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
fjqq_cn_blue_for_3.2/admin/admin_config.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
fjqq_cn_blue_for_3.2/admin/admin_index.vbs
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
fjqq_cn_blue_for_3.2/admin/admin_index.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
fjqq_cn_blue_for_3.2/admin/admin_link.vbs
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
fjqq_cn_blue_for_3.2/admin/admin_link.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
fjqq_cn_blue_for_3.2/admin/admin_mb.vbs
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
fjqq_cn_blue_for_3.2/admin/admin_mb.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
fjqq_cn_blue_for_3.2/admin/admin_webmaster.vbs
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
fjqq_cn_blue_for_3.2/admin/admin_webmaster.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
fjqq_cn_blue_for_3.2/admin/check.vbs
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
fjqq_cn_blue_for_3.2/admin/check.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
fjqq_cn_blue_for_3.2/admin/fjqq_about.asp
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
fjqq_cn_blue_for_3.2/admin/fjqq_about.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
fjqq_cn_blue_for_3.2/admin/fjqq_blog.asp
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
fjqq_cn_blue_for_3.2/admin/fjqq_blog.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
fjqq_cn_blue_for_3.2/admin/fjqq_help.asp
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
fjqq_cn_blue_for_3.2/admin/fjqq_help.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
fjqq_cn_blue_for_3.2/admin/fjqq_union.asp
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
fjqq_cn_blue_for_3.2/admin/fjqq_union.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
fjqq_cn_blue_for_3.2/admin/fjqq_vip.asp
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
fjqq_cn_blue_for_3.2/admin/fjqq_vip.asp
Resource
win10v2004-20240709-en
General
-
Target
48c438b317bf0f5864ac08a76dbdbd73_JaffaCakes118
-
Size
131KB
-
MD5
48c438b317bf0f5864ac08a76dbdbd73
-
SHA1
8440f90be0441def42e3747c6c7bd77f349e8632
-
SHA256
72a282ae9a7a0c128ca6a57f329d43419dbd4899f363be3c416fb91e7f42f743
-
SHA512
39d75fb7e5bd9c19b83d7821128c355bec4f32173871af697ba1c41fcb409190238d65b30fbb934413706a15c1381ed211660400d6ef5d25f00840d96c98437a
-
SSDEEP
3072:pguX+VYNHR9xIjQfKVweK4x1DgeuZxIJ8wV80laLLlL2io5RT3FM8R:pgruXaKqDgeuXIJ8c1WlzoHjFM8R
Malware Config
Signatures
Files
-
48c438b317bf0f5864ac08a76dbdbd73_JaffaCakes118.rar
-
fjqq_cn_blue_for_3.2/News.asp.asp
-
fjqq_cn_blue_for_3.2/admin/Conn.asp.vbs
-
fjqq_cn_blue_for_3.2/admin/HTMLtoJS.html.html
-
fjqq_cn_blue_for_3.2/admin/JStoHTML.html.html
-
fjqq_cn_blue_for_3.2/admin/admin.css
-
fjqq_cn_blue_for_3.2/admin/admin_ads.asp.vbs
-
fjqq_cn_blue_for_3.2/admin/admin_config.asp.vbs
-
fjqq_cn_blue_for_3.2/admin/admin_index.asp.vbs
-
fjqq_cn_blue_for_3.2/admin/admin_link.asp.vbs
-
fjqq_cn_blue_for_3.2/admin/admin_mb.asp.vbs
-
fjqq_cn_blue_for_3.2/admin/admin_webmaster.asp.vbs
-
fjqq_cn_blue_for_3.2/admin/check.asp.vbs
-
fjqq_cn_blue_for_3.2/admin/fjqq_about.asp
-
fjqq_cn_blue_for_3.2/admin/fjqq_blog.asp
-
fjqq_cn_blue_for_3.2/admin/fjqq_help.asp
-
fjqq_cn_blue_for_3.2/admin/fjqq_union.asp
-
fjqq_cn_blue_for_3.2/admin/fjqq_vip.asp
-
fjqq_cn_blue_for_3.2/admin/fjqq_web.asp
-
fjqq_cn_blue_for_3.2/admin/function.asp.vbs
-
fjqq_cn_blue_for_3.2/admin/images/login_bg.png.png
-
fjqq_cn_blue_for_3.2/admin/images/login_foot.png.png
-
fjqq_cn_blue_for_3.2/admin/images/login_input.png.png
-
fjqq_cn_blue_for_3.2/admin/images/login_left_bg.png.png
-
fjqq_cn_blue_for_3.2/admin/images/login_logo.png.png
-
fjqq_cn_blue_for_3.2/admin/images/login_main_bg.png.png
-
fjqq_cn_blue_for_3.2/admin/images/login_right_bg.png.png
-
fjqq_cn_blue_for_3.2/admin/images/manage/1.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/2.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/EMAIL.GIF.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/GOTO.GIF.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/HOMEPAGE.GIF.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/admin_bg.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/admin_bg_1.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/admin_left_1.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/admin_left_2.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/admin_title.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/bar.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/bar9.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/bbk.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/bbk_main.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/bullet.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/close.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/color.js.js
-
fjqq_cn_blue_for_3.2/admin/images/manage/html_no.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/html_ok.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/key.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/minus.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/name.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/plus.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/title_bg_hide.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/title_bg_quit.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/manage/title_bg_show.gif.gif
-
fjqq_cn_blue_for_3.2/admin/images/style.css
-
fjqq_cn_blue_for_3.2/admin/index.asp
-
fjqq_cn_blue_for_3.2/admin/login.asp.vbs
-
fjqq_cn_blue_for_3.2/admin/md5.asp.vbs
-
fjqq_cn_blue_for_3.2/admin/serverinfo.asp.asp .vbs polyglot
-
fjqq_cn_blue_for_3.2/foot.asp
-
fjqq_cn_blue_for_3.2/head.asp.html
-
fjqq_cn_blue_for_3.2/images/about_arrow.gif.gif
-
fjqq_cn_blue_for_3.2/images/button_bg.gif.gif
-
fjqq_cn_blue_for_3.2/images/footerbg.png.png
-
fjqq_cn_blue_for_3.2/images/gif.gif.gif
-
fjqq_cn_blue_for_3.2/images/gif1.gif.gif
-
fjqq_cn_blue_for_3.2/images/gif2.gif.gif
-
fjqq_cn_blue_for_3.2/images/gif3.gif.gif
-
fjqq_cn_blue_for_3.2/images/gif7.gif.gif
-
fjqq_cn_blue_for_3.2/images/h2_bg01.gif.gif
-
fjqq_cn_blue_for_3.2/images/headerbg.png.png
-
fjqq_cn_blue_for_3.2/images/line_shi.gif.gif
-
fjqq_cn_blue_for_3.2/images/line_xu.gif.gif
-
fjqq_cn_blue_for_3.2/images/logo.png.png
-
fjqq_cn_blue_for_3.2/images/menubg.gif.gif
-
fjqq_cn_blue_for_3.2/images/new.gif.gif
-
fjqq_cn_blue_for_3.2/images/news_arrow.gif.gif
-
fjqq_cn_blue_for_3.2/images/news_bg.gif.gif
-
fjqq_cn_blue_for_3.2/images/safe.gif.gif
-
fjqq_cn_blue_for_3.2/images/singerlist_h2.gif.gif
-
fjqq_cn_blue_for_3.2/images/style.css
-
fjqq_cn_blue_for_3.2/images/tableft.gif.gif
-
fjqq_cn_blue_for_3.2/images/tabright.gif.gif
-
fjqq_cn_blue_for_3.2/img.asp.asp
-
fjqq_cn_blue_for_3.2/img1.asp.asp
-
fjqq_cn_blue_for_3.2/inc/#fjqq_cn_pic.asa
-
fjqq_cn_blue_for_3.2/inc/Config.asp
-
fjqq_cn_blue_for_3.2/inc/Function.asp
-
fjqq_cn_blue_for_3.2/inc/clear.asp
-
fjqq_cn_blue_for_3.2/inc/fjqq.asp.vbs
-
fjqq_cn_blue_for_3.2/inc/fso.asp.vbs
-
fjqq_cn_blue_for_3.2/index.asp.asp
-
fjqq_cn_blue_for_3.2/info.asp.asp
-
fjqq_cn_blue_for_3.2/js/bot1.js
-
fjqq_cn_blue_for_3.2/js/count.js
-
fjqq_cn_blue_for_3.2/js/end.js
-
fjqq_cn_blue_for_3.2/js/foot.js
-
fjqq_cn_blue_for_3.2/js/hot.js
-
fjqq_cn_blue_for_3.2/js/language.js.js
-
fjqq_cn_blue_for_3.2/js/link.txt
-
fjqq_cn_blue_for_3.2/js/main.js
-
fjqq_cn_blue_for_3.2/js/up.js
-
fjqq_cn_blue_for_3.2/js/url.js
-
fjqq_cn_blue_for_3.2/js/wangzhai.js.js
-
fjqq_cn_blue_for_3.2/link.asp
-
fjqq_cn_blue_for_3.2/pic.asp.asp
-
fjqq_cn_blue_for_3.2/使用说明(必读).txt
-
fjqq_cn_blue_for_3.2/商业版本.url.url
-
fjqq_cn_blue_for_3.2/官方下载.url.url
-
fjqq_cn_blue_for_3.2/官方网站.url.url
-
fjqq_cn_blue_for_3.2/新云软件.url.url