General

  • Target

    229bc74efaec13853ed9774d20581e3e56221d26f17c6ff6221722d9dfa80ba5

  • Size

    1.7MB

  • MD5

    06bbfa0b1d4501bb3cb1f2ecf6210f1b

  • SHA1

    411efc60840edc3f847ac3388f9143872b9c8e8c

  • SHA256

    229bc74efaec13853ed9774d20581e3e56221d26f17c6ff6221722d9dfa80ba5

  • SHA512

    64b8e0148fad4be361969ad52605e7e67d0b379a2b5524a0a6f21496d2c17d6ac297545e88e12a3ec286e4b828aeafe0c700f17c6e9955ed34a1975a44168cb4

  • SSDEEP

    24576:LSqf2Sc4u6ZpTDXhbNBvn/+f8D73qUosaafyoXpU8hsPsZgPMOzzR5I7I4He:dOScJ6DBvZaUoD+r5psPs+PZk7I4+

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://interfaces.core.sw.bps.com/

Signatures

  • HTTP links in PDF interactive object 2 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 229bc74efaec13853ed9774d20581e3e56221d26f17c6ff6221722d9dfa80ba5
    .zip
  • virtual_freer_v1.58/back/cards.php
    .ps1
  • virtual_freer_v1.58/back/categories.php
    .ps1
  • virtual_freer_v1.58/back/index.php
  • virtual_freer_v1.58/back/login.php
  • virtual_freer_v1.58/back/logout.php
  • virtual_freer_v1.58/back/payments.php
    .ps1
  • virtual_freer_v1.58/back/plugins.php
    .ps1
  • virtual_freer_v1.58/back/products.php
    .js
  • virtual_freer_v1.58/back/setting.php
    .ps1
  • virtual_freer_v1.58/back/statistics.php
  • virtual_freer_v1.58/back/template/footer.php
  • virtual_freer_v1.58/back/template/header.php
    .js
  • virtual_freer_v1.58/back/template/index.html
    .html
  • virtual_freer_v1.58/back/template/notify.php
  • virtual_freer_v1.58/callback.php
    .ps1
  • virtual_freer_v1.58/gateway.php
  • virtual_freer_v1.58/guide.pdf
    .pdf
    • http://parsyar.com/

  • virtual_freer_v1.58/include/csrf-magic.php
  • virtual_freer_v1.58/include/funks.php
    .js
  • virtual_freer_v1.58/include/index.html
    .html
  • virtual_freer_v1.58/include/libs/class.phpmailer.php
    .js
  • virtual_freer_v1.58/include/libs/class.smartmysql.php
  • virtual_freer_v1.58/include/libs/class.smtp.php
    .ps1
  • virtual_freer_v1.58/include/libs/index.html
    .html
  • virtual_freer_v1.58/include/libs/nusoap.php
    .js
  • virtual_freer_v1.58/include/libs/parsyar.class.php
    .js
  • virtual_freer_v1.58/include/libs/smarty/Smarty.class.php
    .ps1
  • virtual_freer_v1.58/include/libs/smarty/index.html
    .html
  • virtual_freer_v1.58/include/libs/smarty/plugins/block.php.php
    .js
  • virtual_freer_v1.58/include/libs/smarty/plugins/block.textformat.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/function.counter.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/function.cycle.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/function.fetch.php
    .ps1
  • virtual_freer_v1.58/include/libs/smarty/plugins/function.html_checkboxes.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/function.html_image.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/function.html_options.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/function.html_radios.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/function.html_select_date.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/function.html_select_time.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/function.html_table.php
    .ps1
  • virtual_freer_v1.58/include/libs/smarty/plugins/function.mailto.php
    .js
  • virtual_freer_v1.58/include/libs/smarty/plugins/function.math.php
    .js
  • virtual_freer_v1.58/include/libs/smarty/plugins/index.html
    .html
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifier.capitalize.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifier.date_format.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifier.debug_print_var.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifier.escape.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifier.regex_replace.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifier.replace.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifier.spacify.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifier.truncate.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.cat.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.count_characters.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.count_paragraphs.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.count_sentences.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.count_words.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.default.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.indent.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.lower.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.noprint.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.string_format.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.strip.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.strip_tags.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.upper.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/modifiercompiler.wordwrap.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/outputfilter.trimwhitespace.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/shared.escape_special_chars.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/shared.make_timestamp.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/shared.mb_str_replace.php
  • virtual_freer_v1.58/include/libs/smarty/plugins/variablefilter.htmlspecialchars.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/index.html
    .html
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_cacheresource_file.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_append.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_assign.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_block.php
    .ps1
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_break.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_call.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_capture.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_config_load.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_continue.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_debug.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_eval.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_extends.php
    .js
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_for.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_foreach.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_function.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_if.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_include.php
    .js
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_include_php.php
    .js
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_insert.php
    .js
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_ldelim.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_nocache.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_private_block_plugin.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_private_function_plugin.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_private_modifier.php
    .ps1
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_private_object_block_function.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_private_object_function.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_private_print_expression.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_private_registered_block.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_private_registered_function.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_private_special_variable.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_rdelim.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_section.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compile_while.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_compilebase.php
    .ps1
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_config.php
    .js
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_config_file_compiler.php
    .ps1
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_configfilelexer.php
    .vbs
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_configfileparser.php
    .ps1
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_data.php
    .ps1
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_debug.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_filter.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_filter_handler.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_function_call_handler.php
    .js
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_get_include_path.php
    .ps1
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_nocache_insert.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_parsetree.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_register.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_resource_eval.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_resource_extends.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_resource_file.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_resource_php.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_resource_registered.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_resource_stream.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_resource_string.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_smartytemplatecompiler.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_template.php
    .js
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_templatecompilerbase.php
    .ps1
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_templatelexer.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_templateparser.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_utility.php
    .js
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_wrapper.php
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_internal_write_file.php
    .vbs
  • virtual_freer_v1.58/include/libs/smarty/sysplugins/smarty_security.php
  • virtual_freer_v1.58/include/libs/startSmarty.php
  • virtual_freer_v1.58/include/libs/xmlthing.class.php
    .js
  • virtual_freer_v1.58/include/pdf.php
  • virtual_freer_v1.58/include/prepare.php
  • virtual_freer_v1.58/include/startSmarty.php
  • virtual_freer_v1.58/index.php
  • virtual_freer_v1.58/install.pdf
    .pdf
    • http://ChangesInstallyourdomain.com/freer/install

  • virtual_freer_v1.58/install/index.php
  • virtual_freer_v1.58/install/virtual.sql
  • virtual_freer_v1.58/parsyar.pdf
    .pdf
    • https://parsyar.com/entries/view/3

    • https://parsyar.com/entries/view/4

    • https://parsyar.com/entries/view/5

    • http://parsyar.com/entries/view/32

    • https://parsyar.com/entries/view/6

    • https://parsyar.com/entries/view/2

    • https://parsyar.com/auth/register

    • http://Csharj.parsyar.com

  • virtual_freer_v1.58/plugins/email.php
    .ps1
  • virtual_freer_v1.58/plugins/freersms.php
  • virtual_freer_v1.58/plugins/index.html
    .html
  • virtual_freer_v1.58/plugins/mellat.php
  • virtual_freer_v1.58/plugins/smtp_email.php
    .ps1
  • virtual_freer_v1.58/plugins/zarinpalwg.php
  • virtual_freer_v1.58/plugins/zarinpalzg.php
  • virtual_freer_v1.58/statics/css/all.css
  • virtual_freer_v1.58/statics/css/colorbox.css
  • virtual_freer_v1.58/statics/css/dd.css
  • virtual_freer_v1.58/statics/css/dd_arrow.gif
    .gif
  • virtual_freer_v1.58/statics/css/index.html
    .html
  • virtual_freer_v1.58/statics/css/jquery-ui-1.8.14.css
  • virtual_freer_v1.58/statics/css/style.css
  • virtual_freer_v1.58/statics/font/BYagut.ttf
  • virtual_freer_v1.58/statics/font/index.html
    .html
  • virtual_freer_v1.58/statics/font/websaz.eot
  • virtual_freer_v1.58/statics/font/websaz.ttf
  • virtual_freer_v1.58/statics/font/websaz.woff
  • virtual_freer_v1.58/statics/image/add-icon.gif
    .gif
  • virtual_freer_v1.58/statics/image/arrow.gif
    .gif
  • virtual_freer_v1.58/statics/image/banks.png
    .png
  • virtual_freer_v1.58/statics/image/bg-center-column.jpg
    .jpg
  • virtual_freer_v1.58/statics/image/bg-dotted.gif
    .gif
  • virtual_freer_v1.58/statics/image/bg-footer.gif
    .gif
  • virtual_freer_v1.58/statics/image/bg-header.gif
    .gif
  • virtual_freer_v1.58/statics/image/bg-left-header.gif
    .gif
  • virtual_freer_v1.58/statics/image/bg-left-link.gif
    .gif
  • virtual_freer_v1.58/statics/image/bg-middle.gif
    .gif
  • virtual_freer_v1.58/statics/image/bg-orange-button.gif
    .gif
  • virtual_freer_v1.58/statics/image/bg-select.gif
    .gif
  • virtual_freer_v1.58/statics/image/bg-th-left.gif
    .gif
  • virtual_freer_v1.58/statics/image/bg-th-right.gif
    .gif
  • virtual_freer_v1.58/statics/image/bottom.gif
    .gif
  • virtual_freer_v1.58/statics/image/color_box/controls.png
    .png
  • virtual_freer_v1.58/statics/image/color_box/index.html
    .html
  • virtual_freer_v1.58/statics/image/color_box/loading.gif
    .gif
  • virtual_freer_v1.58/statics/image/content.gif
    .gif
  • virtual_freer_v1.58/statics/image/datepicer/calendar.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/index.html
    .html
  • virtual_freer_v1.58/statics/image/datepicer/ui-bg_flat_30_cccccc_40x100.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-bg_flat_50_5c5c5c_40x100.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-bg_glass_40_ffc73d_1x400.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-bg_highlight-hard_20_0972a5_1x100.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-bg_highlight-soft_33_003147_1x100.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-bg_highlight-soft_35_222222_1x100.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-bg_highlight-soft_44_444444_1x100.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-bg_highlight-soft_80_eeeeee_1x100.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-bg_loop_25_000000_21x21.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-icons_222222_256x240.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-icons_4b8e0b_256x240.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-icons_a83300_256x240.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-icons_cccccc_256x240.png
    .png
  • virtual_freer_v1.58/statics/image/datepicer/ui-icons_ffffff_256x240.png
    .png
  • virtual_freer_v1.58/statics/image/edit-icon.gif
    .gif
  • virtual_freer_v1.58/statics/image/exclamation.png
    .png
  • virtual_freer_v1.58/statics/image/header.gif
    .gif
  • virtual_freer_v1.58/statics/image/hr.gif
    .gif
  • virtual_freer_v1.58/statics/image/icon/cart.png
    .png
  • virtual_freer_v1.58/statics/image/icon/category.png
    .png
  • virtual_freer_v1.58/statics/image/icon/chart.png
    .png
  • virtual_freer_v1.58/statics/image/icon/config.png
    .png
  • virtual_freer_v1.58/statics/image/icon/index.html
    .html
  • virtual_freer_v1.58/statics/image/icon/logout.png
    .png
  • virtual_freer_v1.58/statics/image/icon/payment.png
    .png
  • virtual_freer_v1.58/statics/image/icon/plugin.png
    .png
  • virtual_freer_v1.58/statics/image/icon/product.png
    .png
  • virtual_freer_v1.58/statics/image/index.html
    .html
  • virtual_freer_v1.58/statics/image/loader.gif
    .gif
  • virtual_freer_v1.58/statics/image/login-icon.gif
    .gif
  • virtual_freer_v1.58/statics/image/logo.png
    .png
  • virtual_freer_v1.58/statics/image/msdropdown/icon-arrow.gif
    .gif
  • virtual_freer_v1.58/statics/image/msdropdown/icon-ok.gif
    .gif
  • virtual_freer_v1.58/statics/image/msdropdown/index.html
    .html
  • virtual_freer_v1.58/statics/image/msdropdown/msDropDown.gif
    .gif
  • virtual_freer_v1.58/statics/image/msdropdown/msDropDown.png
    .png
  • virtual_freer_v1.58/statics/image/msdropdown/sprite.jpg
    .jpg
  • virtual_freer_v1.58/statics/image/pusher.gif
    .gif
  • virtual_freer_v1.58/statics/image/save-icon.gif
    .gif
  • virtual_freer_v1.58/statics/image/tab-active-left.gif
    .gif
  • virtual_freer_v1.58/statics/image/tab-active-right.gif
    .gif
  • virtual_freer_v1.58/statics/image/tab-active.gif
    .gif
  • virtual_freer_v1.58/statics/image/tab-left.gif
    .gif
  • virtual_freer_v1.58/statics/image/tab-right.gif
    .gif
  • virtual_freer_v1.58/statics/image/tab.gif
    .gif
  • virtual_freer_v1.58/statics/index.html
    .html
  • virtual_freer_v1.58/statics/js/index.html
    .html
  • virtual_freer_v1.58/statics/js/jquery-1.6.1.min.js
    .js
  • virtual_freer_v1.58/statics/js/jquery.colorbox.js
    .js
  • virtual_freer_v1.58/statics/js/jquery.dd.js
    .js
  • virtual_freer_v1.58/statics/js/jquery.js
    .js
  • virtual_freer_v1.58/statics/js/jquery.showMessage.js
    .js
  • virtual_freer_v1.58/statics/js/jquery.ui.datepicker-cc.all.min.js
    .js
  • virtual_freer_v1.58/statics/js/main.js
    .js
  • virtual_freer_v1.58/statics/upload/images/cache/index.html
    .html
  • virtual_freer_v1.58/statics/upload/images/index.html
    .html
  • virtual_freer_v1.58/statics/upload/images/resized/.htaccess
  • virtual_freer_v1.58/statics/upload/images/resized/anySize.php
  • virtual_freer_v1.58/statics/upload/images/resized/index.html
    .html
  • virtual_freer_v1.58/statics/upload/index.html
    .html
  • virtual_freer_v1.58/templates/index.html
    .html
  • virtual_freer_v1.58/templates/templates/callback.tpl
  • virtual_freer_v1.58/templates/templates/footer.tpl
  • virtual_freer_v1.58/templates/templates/header.tpl
  • virtual_freer_v1.58/templates/templates/index.html
    .html
  • virtual_freer_v1.58/templates/templates/index.tpl
  • virtual_freer_v1.58/templates/templates/mellat.tpl
    .js
  • virtual_freer_v1.58/templates/templates/message.tpl
  • virtual_freer_v1.58/templates/templates_c/index.html
    .html