General
-
Target
0755bf4bc36febf32c77305d3cc8f30498a40bf888076fa7b7e565bb36e043c5
-
Size
7.7MB
-
MD5
c54bae3129215a0cc1ad3a312576b07e
-
SHA1
c3c2d3843ea662af365f8a98fdaf495fc22b3347
-
SHA256
0755bf4bc36febf32c77305d3cc8f30498a40bf888076fa7b7e565bb36e043c5
-
SHA512
f8bdb199391bed95b8463c71a4bdd3f35b2d1d91dceddd295493a9c341b16c720a28d31f41958c608f9d2780f3c103e81ed65a3df692e769bb9119670b3ef71a
-
SSDEEP
196608:nVU/oPb8TMwoPnylRYXGcQchI4hgvK4B5hrpBa:awo8KlDcQMhgvvfM
Score
4/10
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
0755bf4bc36febf32c77305d3cc8f30498a40bf888076fa7b7e565bb36e043c5
-
_desk-05895/.htaccess
-
_desk-05895/additional.php
-
_desk-05895/admin/.htaccess
-
_desk-05895/admin/antibot.php
-
_desk-05895/admin/blocker_setting.php
-
_desk-05895/admin/css/bootstrap.min.css
-
_desk-05895/admin/css/bootstrap.min.css.map
-
_desk-05895/admin/css/paper-dashboard.css
-
_desk-05895/admin/css/paper-dashboard.css.map
-
_desk-05895/admin/css/paper-dashboard.min.css
-
_desk-05895/admin/demo/demo.css
-
_desk-05895/admin/demo/demo.js
-
_desk-05895/admin/fonts/nucleo-icons.eot
-
_desk-05895/admin/fonts/nucleo-icons.ttf
-
_desk-05895/admin/fonts/nucleo-icons.woff
-
_desk-05895/admin/fonts/nucleo-icons.woff2
-
_desk-05895/admin/img/apple-icon.png
-
_desk-05895/admin/img/bg5.jpg
-
_desk-05895/admin/img/damir-bosnjak.jpg
-
_desk-05895/admin/img/default-avatar.png
-
_desk-05895/admin/img/faces/ayo-ogunseinde-1.jpg
-
_desk-05895/admin/img/faces/ayo-ogunseinde-2.jpg
-
_desk-05895/admin/img/faces/clem-onojeghuo-1.jpg
-
_desk-05895/admin/img/faces/clem-onojeghuo-2.jpg
-
_desk-05895/admin/img/faces/clem-onojeghuo-3.jpg
-
_desk-05895/admin/img/faces/clem-onojeghuo-4.jpg
-
_desk-05895/admin/img/faces/erik-lucatero-1.jpg
-
_desk-05895/admin/img/faces/erik-lucatero-2.jpg
-
_desk-05895/admin/img/faces/joe-gardner-1.jpg
-
_desk-05895/admin/img/faces/joe-gardner-2.jpg
-
_desk-05895/admin/img/faces/kaci-baum-1.jpg
-
_desk-05895/admin/img/faces/kaci-baum-2.jpg
-
_desk-05895/admin/img/favicon.png
-
_desk-05895/admin/img/header.jpg
-
_desk-05895/admin/img/jan-sendereks.jpg
-
_desk-05895/admin/img/logo-small.png
-
_desk-05895/admin/img/mike.jpg
-
_desk-05895/admin/index.js
-
_desk-05895/admin/index.php
-
_desk-05895/admin/js/core/bootstrap.min.js
-
_desk-05895/admin/js/core/jquery.min.js
-
_desk-05895/admin/js/core/popper.min.js
-
_desk-05895/admin/js/paper-dashboard.js
-
_desk-05895/admin/js/paper-dashboard.js.map
-
_desk-05895/admin/js/paper-dashboard.min.js
-
_desk-05895/admin/js/plugins/bootstrap-notify.js
-
_desk-05895/admin/js/plugins/chartjs.min.js
-
_desk-05895/admin/js/plugins/perfect-scrollbar.jquery.min.js
-
_desk-05895/admin/login.php
-
_desk-05895/admin/logout.php
-
_desk-05895/admin/reset.php
-
_desk-05895/admin/scss/paper-dashboard.scss
-
_desk-05895/admin/scss/paper-dashboard/_alerts.scss
-
_desk-05895/admin/scss/paper-dashboard/_animated-buttons.scss
-
_desk-05895/admin/scss/paper-dashboard/_buttons.scss
-
_desk-05895/admin/scss/paper-dashboard/_cards.scss
-
_desk-05895/admin/scss/paper-dashboard/_checkboxes-radio.scss
-
_desk-05895/admin/scss/paper-dashboard/_dropdown.scss
-
_desk-05895/admin/scss/paper-dashboard/_fixed-plugin.scss
-
_desk-05895/admin/scss/paper-dashboard/_footers.scss
-
_desk-05895/admin/scss/paper-dashboard/_images.scss
-
_desk-05895/admin/scss/paper-dashboard/_inputs.scss
-
_desk-05895/admin/scss/paper-dashboard/_misc.scss
-
_desk-05895/admin/scss/paper-dashboard/_mixins.scss
-
_desk-05895/admin/scss/paper-dashboard/_navbar.scss
-
_desk-05895/admin/scss/paper-dashboard/_nucleo-outline.scss
-
_desk-05895/admin/scss/paper-dashboard/_page-header.scss
-
_desk-05895/admin/scss/paper-dashboard/_responsive.scss
-
_desk-05895/admin/scss/paper-dashboard/_sidebar-and-main-panel.scss
-
_desk-05895/admin/scss/paper-dashboard/_tables.scss
-
_desk-05895/admin/scss/paper-dashboard/_typography.scss
-
_desk-05895/admin/scss/paper-dashboard/_variables.scss
-
_desk-05895/admin/scss/paper-dashboard/cards/_card-chart.scss
-
_desk-05895/admin/scss/paper-dashboard/cards/_card-map.scss
-
_desk-05895/admin/scss/paper-dashboard/cards/_card-plain.scss
-
_desk-05895/admin/scss/paper-dashboard/cards/_card-stats.scss
-
_desk-05895/admin/scss/paper-dashboard/cards/_card-user.scss
-
_desk-05895/admin/scss/paper-dashboard/mixins/_buttons.scss
-
_desk-05895/admin/scss/paper-dashboard/mixins/_cards.scss
-
_desk-05895/admin/scss/paper-dashboard/mixins/_dropdown.scss
-
_desk-05895/admin/scss/paper-dashboard/mixins/_inputs.scss
-
_desk-05895/admin/scss/paper-dashboard/mixins/_page-header.scss
-
_desk-05895/admin/scss/paper-dashboard/mixins/_transparency.scss
-
_desk-05895/admin/scss/paper-dashboard/mixins/_vendor-prefixes.scss
-
_desk-05895/admin/scss/paper-dashboard/plugins/_plugin-animate-bootstrap-notify.scss
-
_desk-05895/admin/scss/paper-dashboard/plugins/_plugin-perfect-scrollbar.scss
-
_desk-05895/admin/setting.php
-
_desk-05895/admin/vendor/config.php
-
_desk-05895/antibot.ini
-
_desk-05895/ap/.DS_Store
-
_desk-05895/ap/.htaccess
-
_desk-05895/ap/billing.php
-
_desk-05895/ap/blacklist.php
-
_desk-05895/ap/block_bot.txt
-
_desk-05895/ap/done.php
-
_desk-05895/ap/email.php
-
_desk-05895/ap/files/billing.php
-
_desk-05895/ap/files/card.php
-
_desk-05895/ap/files/comcast/Assets/css/fonts-remote.min.css
-
_desk-05895/ap/files/comcast/Assets/css/styles-light.min.css
-
_desk-05895/ap/files/comcast/Assets/img/favicon.ico
-
_desk-05895/ap/files/comcast/Assets/js/com.js
-
_desk-05895/ap/files/comcast/Assets/js/coms2.js
-
_desk-05895/ap/files/comcast/index.php
-
_desk-05895/ap/files/done.php
-
_desk-05895/ap/files/email.php
-
_desk-05895/ap/files/login-aol.php
-
_desk-05895/ap/files/login-gmail.php
-
_desk-05895/ap/files/login-hotmail.php
-
_desk-05895/ap/files/login-hotmailjp.php
-
_desk-05895/ap/files/login-yahoo.php
-
_desk-05895/ap/files/login-yahoojp-mobile.php
-
_desk-05895/ap/files/login-yahoojp.php
-
_desk-05895/ap/files/signin.php
-
_desk-05895/ap/files/signin_mobile.php
-
_desk-05895/ap/files/upload-cc.php
-
_desk-05895/ap/google/2googlelogo_color_112x36dp.png
-
_desk-05895/ap/google/DXI1ORHCpsQm3Vp6mXoaTXhCUOGz7vYGh680lGh-uXM.woff
-
_desk-05895/ap/google/arrow_back_grey600_24dp.png
-
_desk-05895/ap/google/avatar_2x.png
-
_desk-05895/ap/google/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff
-
_desk-05895/ap/google/checkmark.png
-
_desk-05895/ap/google/googleg_lodp.ico
-
_desk-05895/ap/google/googlelogo_color_112x36dp.png
-
_desk-05895/ap/google/index.php
-
_desk-05895/ap/google/logo_1x.png
-
_desk-05895/ap/google/logo_2x.png
-
_desk-05895/ap/google/universal_language_settings-21.png
-
_desk-05895/ap/google/wlogostrip_230x17_1x.png
-
_desk-05895/ap/google/wlogostrip_230x17_2x.png
-
_desk-05895/ap/google/x_8px.png
-
_desk-05895/ap/index.php
-
_desk-05895/ap/login.php
-
_desk-05895/ap/login_email.php
-
_desk-05895/ap/payment.php
-
_desk-05895/ap/signin.php
-
_desk-05895/ap/submit_email.php
-
_desk-05895/ap/submit_upload_cc.php
-
_desk-05895/ap/update_billing.php
-
_desk-05895/ap/verify_credit.php
-
_desk-05895/assets/.DS_Store
-
_desk-05895/assets/css/billing.css
-
_desk-05895/assets/css/hotmail.css
-
_desk-05895/assets/css/main.css
-
_desk-05895/assets/css/mobile_login.css
-
_desk-05895/assets/css/yahoo-grid.css
-
_desk-05895/assets/css/yahoo-main.css
-
_desk-05895/assets/css/yahoojp-mob.css
-
_desk-05895/assets/css/yahoojp-mobile.css
-
_desk-05895/assets/css/yahoojp.css
-
_desk-05895/assets/img/.DS_Store
-
_desk-05895/assets/img/0.jpg
-
_desk-05895/assets/img/AmazonUIBaseCSS-sprite_1x-c4a765aedd886dc04d89e7e93b6a02c59ecb7013._V2_.png
-
_desk-05895/assets/img/amazon.png
-
_desk-05895/assets/img/logo.png
-
_desk-05895/assets/img/logo_pc.png
-
_desk-05895/assets/img/uploadcc.png
-
_desk-05895/assets/js/.DS_Store
-
_desk-05895/assets/js/additional-methods.min.js
-
_desk-05895/assets/js/jquery-1.9.1.js
-
_desk-05895/assets/js/jquery.js
-
_desk-05895/assets/js/jquery.masked.js
-
_desk-05895/assets/js/jquery.maskedinput.js
-
_desk-05895/assets/js/jquery.payment.js
-
_desk-05895/assets/js/jquery.validate.min.js
-
_desk-05895/assets/js/validate.php
-
_desk-05895/assets/js/validation.js
-
_desk-05895/blacklist.php
-
_desk-05895/block_bot.txt
-
_desk-05895/blocker.php
-
_desk-05895/blocker2.php
-
_desk-05895/gow/4k
-
_desk-05895/gow/attachments/???????@?????l.??m.html
-
_desk-05895/gow/attachments/??Ioud.pdf
-
https://coprationincs.cmail20.com/t/j-i-pxuuid-l-r/?https://www.google.com?%7btextnumrandom,40,1,up%7d
-
https://u1473851.ct.sendgrid.net/wf/click?upn=8eOu0ptB1h5f8auSsUqeMKddAl0eFveuhgEHJThZGqnCwQMNHi2uOZC92Y8yZJ0nOFsKtTl0gun1ESPi0zu1wErnPz1ACRzz-2BfyAeMqBK5-2BqkDsSt4uLl03CbqxeXD1dFks6H5Wr8TMRqco5CNpaAC8E-2FEGXzJN-2BkP7BpeH4Vh5I-2FUmjFHMg3wUjVUZCN-2F8a_7ixONoNfxMbOjEjuv1k2KLhw5zOYxqgozIbN6qWE9x1TSpk21iRf-2FnnpL0U7VJNfQq6K8Wpoq2zJ-2Bhtbx2eZhQl1FgoeLzVlTz4bPlhNkIYKLNDmI8Qr7-2BXXWR5vf86-2B-2BYC6uT0IFpIUUPj5OAy4aTZuKjar2zzTozJMSdtV90J-2Fg5kysFX5WkLAgHy2-2F1PJMn09isPI5LyD2rv8kaQlCD618pp3CImziWgURgdlTXQ-3D
-
-
_desk-05895/gow/attachments/??Ioud1.pdf
-
https://coprationincs.cmail20.com/t/j-i-pxuuid-l-r/?https://www.google.com?%7btextnumrandom,40,1,up%7d
-
https://u1473851.ct.sendgrid.net/wf/click?upn=8eOu0ptB1h5f8auSsUqeMGsqXnVaw2GBoNLGCGIG1VAB0G-2FST-2BkC8Qebn8TkW86YC179shKd-2BCYP09b0qMfqMr8pLwFhforsIOt7bIyigdMeR7FAm0KdnYbKQ2X5rvtSKVDwTsRqom1qxkCXIEkKIbJ5zTGKtgYGFxwrTFojhRfIwdNzFIPKFY2xldiR6jHd_7ixONoNfxMbOjEjuv1k2KLhw5zOYxqgozIbN6qWE9x3-2BeymtmGuhIp3twbI8AnTPcKeYduOwcfqj9mSHI21U31jKfnfDaWV3XGVb12lrMo71AIUNkM4aTf2rAWhW6fLCfWmEEyjzOy55J7e44G-2FeqoECF0PI3sTKxhg4PQOe29WVTHxSMieDspiCWa8sDDqKzFJS5HjwB1W776I-2BUL-2F5-2BgbeC3RNkxc-2FUz4pwVvnI6A-3D
-
-
_desk-05895/gow/attachments/??Ioud2.pdf
-
https://coprationincs.cmail20.com/t/j-i-pxuuid-l-r/?https://www.google.com?%7btextnumrandom,40,1,up%7d
-
https://t.co/05ZGCr6aaQ
-
-
_desk-05895/gow/attachments/??Ioudalert.pdf
-
https://coprationincs.cmail20.com/t/j-i-pxuuid-l-r/?https://www.google.com?%7btextnumrandom,40,1,up%7d
-
-
_desk-05895/gow/attachments/?m?z?njapan.pdf
-
https://u1473851.ct.sendgrid.net/wf/click?upn=8eOu0ptB1h5f8auSsUqeMKddAl0eFveuhgEHJThZGqnCwQMNHi2uOZC92Y8yZJ0nOFsKtTl0gun1ESPi0zu1wErnPz1ACRzz-2BfyAeMqBK5-2BqkDsSt4uLl03CbqxeXD1dFks6H5Wr8TMRqco5CNpaAC8E-2FEGXzJN-2BkP7BpeH4Vh5I-2FUmjFHMg3wUjVUZCN-2F8a_7ixONoNfxMbOjEjuv1k2KLhw5zOYxqgozIbN6qWE9x1TSpk21iRf-2FnnpL0U7VJNfQq6K8Wpoq2zJ-2Bhtbx2eZhQl1FgoeLzVlTz4bPlhNkIYKLNDmI8Qr7-2BXXWR5vf86-2B-2BYC6uT0IFpIUUPj5OAy4aTZuKjar2zzTozJMSdtV90J-2Fg5kysFX5WkLAgHy2-2F1PJMn09isPI5LyD2rv8kaQlCD618pp3CImziWgURgdlTXQ-3D
-
-
_desk-05895/gow/attachments/?m?z?nsecure.docx
-
_desk-05895/gow/attachments/?mss.pdf
-
https://u1473851.ct.sendgrid.net/wf/click?upn=8eOu0ptB1h5f8auSsUqeMGsqXnVaw2GBoNLGCGIG1VAB0G-2FST-2BkC8Qebn8TkW86YC179shKd-2BCYP09b0qMfqMr8pLwFhforsIOt7bIyigdMeR7FAm0KdnYbKQ2X5rvtSKVDwTsRqom1qxkCXIEkKIbJ5zTGKtgYGFxwrTFojhRfIwdNzFIPKFY2xldiR6jHd_7ixONoNfxMbOjEjuv1k2KLhw5zOYxqgozIbN6qWE9x3-2BeymtmGuhIp3twbI8AnTPcKeYduOwcfqj9mSHI21U31jKfnfDaWV3XGVb12lrMo71AIUNkM4aTf2rAWhW6fLCfWmEEyjzOy55J7e44G-2FeqoECF0PI3sTKxhg4PQOe29WVTHxSMieDspiCWa8sDDqKzFJS5HjwB1W776I-2BUL-2F5-2BgbeC3RNkxc-2FUz4pwVvnI6A-3D
-
-
_desk-05895/gow/attachments/Account Locked.pdf
-
_desk-05895/gow/attachments/Amazon Update.docx
-
_desk-05895/gow/attachments/Amazon Update.pdf
-
_desk-05895/gow/attachments/AppIe Verification.docx
-
_desk-05895/gow/attachments/Apple-VerificationDetails.docx
-
_desk-05895/gow/attachments/Apple.docx
-
_desk-05895/gow/attachments/Billing Problem.pdf
-
_desk-05895/gow/attachments/Invoice_OrderIDMS91G0YMHN1.pdf
-
_desk-05895/gow/attachments/Login-Natwest.pdf
-
_desk-05895/gow/attachments/Natwest.pdf
-
_desk-05895/gow/attachments/Untitled.pdf
-
_desk-05895/gow/attachments/Validate.pdf
-
_desk-05895/gow/attachments/amazon.pdf
-
_desk-05895/gow/attachments/default.txt
-
_desk-05895/gow/attachments/iCI?udSecure.pdf
-
_desk-05895/gow/attachments/iCloud-Official.pdf
-
_desk-05895/gow/attachments/iCloudjp.pdf
-
_desk-05895/gow/attachments/invoice.pdf
-
_desk-05895/gow/attachments/un?uth???z?d ??????.pdf
-
_desk-05895/gow/attachments/un?uth???z?d ???????d.pdf
-
_desk-05895/gow/attachments/~$azon Update.docx
-
_desk-05895/gow/config.php
-
_desk-05895/gow/dokumentasi.html
-
_desk-05895/gow/file/maillist/email.txt
-
_desk-05895/gow/file/maillist/test.html
-
_desk-05895/gow/letter/1.html
-
_desk-05895/gow/letter/2.html
-
_desk-05895/gow/letter/Natwest.pdf
-
_desk-05895/gow/letter/aol.html
-
_desk-05895/gow/letter/apple.html
-
_desk-05895/gow/letter/apple1.html
-
_desk-05895/gow/letter/hotfams.html
-
_desk-05895/gow/letter/jp.html
-
_desk-05895/gow/letter/letpp.html
-
_desk-05895/gow/letter/new 8.html
-
_desk-05895/gow/letter/test.html
-
_desk-05895/gow/letter/testjp.html
-
_desk-05895/gow/letter/wwe111.jpg
-
_desk-05895/gow/letter/yori.html
-
_desk-05895/gow/modules/FourKey/FourKey.php
-
_desk-05895/gow/modules/language/phpmailer.lang-am.php
-
_desk-05895/gow/modules/language/phpmailer.lang-ar.php
-
_desk-05895/gow/modules/language/phpmailer.lang-az.php
-
_desk-05895/gow/modules/language/phpmailer.lang-ba.php
-
_desk-05895/gow/modules/language/phpmailer.lang-be.php
-
_desk-05895/gow/modules/language/phpmailer.lang-bg.php
-
_desk-05895/gow/modules/language/phpmailer.lang-ca.php
-
_desk-05895/gow/modules/language/phpmailer.lang-ch.php
-
_desk-05895/gow/modules/language/phpmailer.lang-cs.php
-
_desk-05895/gow/modules/language/phpmailer.lang-da.php
-
_desk-05895/gow/modules/language/phpmailer.lang-de.php
-
_desk-05895/gow/modules/language/phpmailer.lang-el.php
-
_desk-05895/gow/modules/language/phpmailer.lang-eo.php
-
_desk-05895/gow/modules/language/phpmailer.lang-es.php
-
_desk-05895/gow/modules/language/phpmailer.lang-et.php
-
_desk-05895/gow/modules/language/phpmailer.lang-fa.php
-
_desk-05895/gow/modules/language/phpmailer.lang-fi.php
-
_desk-05895/gow/modules/language/phpmailer.lang-fo.php
-
_desk-05895/gow/modules/language/phpmailer.lang-fr.php
-
_desk-05895/gow/modules/language/phpmailer.lang-gl.php
-
_desk-05895/gow/modules/language/phpmailer.lang-he.php
-
_desk-05895/gow/modules/language/phpmailer.lang-hr.php
-
_desk-05895/gow/modules/language/phpmailer.lang-hu.php
-
_desk-05895/gow/modules/language/phpmailer.lang-id.php
-
_desk-05895/gow/modules/language/phpmailer.lang-it.php
-
_desk-05895/gow/modules/language/phpmailer.lang-ja.php
-
_desk-05895/gow/modules/language/phpmailer.lang-ka.php
-
_desk-05895/gow/modules/language/phpmailer.lang-ko.php
-
_desk-05895/gow/modules/language/phpmailer.lang-lt.php
-
_desk-05895/gow/modules/language/phpmailer.lang-lv.php
-
_desk-05895/gow/modules/language/phpmailer.lang-ms.php
-
_desk-05895/gow/modules/language/phpmailer.lang-nb.php
-
_desk-05895/gow/modules/language/phpmailer.lang-nl.php
-
_desk-05895/gow/modules/language/phpmailer.lang-pl.php
-
_desk-05895/gow/modules/language/phpmailer.lang-pt.php
-
_desk-05895/gow/modules/language/phpmailer.lang-pt_br.php
-
_desk-05895/gow/modules/language/phpmailer.lang-ro.php
-
_desk-05895/gow/modules/language/phpmailer.lang-rs.php
-
_desk-05895/gow/modules/language/phpmailer.lang-ru.php
-
_desk-05895/gow/modules/language/phpmailer.lang-sk.php
-
_desk-05895/gow/modules/language/phpmailer.lang-sl.php
-
_desk-05895/gow/modules/language/phpmailer.lang-sv.php
-
_desk-05895/gow/modules/language/phpmailer.lang-tr.php
-
_desk-05895/gow/modules/language/phpmailer.lang-uk.php
-
_desk-05895/gow/modules/language/phpmailer.lang-vi.php
-
_desk-05895/gow/modules/language/phpmailer.lang-zh.php
-
_desk-05895/gow/modules/language/phpmailer.lang-zh_cn.php
-
_desk-05895/gow/modules/src/Exception.php
-
_desk-05895/gow/modules/src/OAuth.php
-
_desk-05895/gow/modules/src/PHPMailer.php
-
_desk-05895/gow/modules/src/POP3.php
-
_desk-05895/gow/modules/src/SMTP.php
-
_desk-05895/index.php
-
_desk-05895/lang.php
-
_desk-05895/main.php
-
_desk-05895/onetime.php
-
_desk-05895/result/log_visitor.txt
-
_desk-05895/security/blacklist.dat
-
_desk-05895/security/onetime.dat
-
_desk-05895/security/user.dat
-
_desk-05895/security/whitelist.dat
-
_desk-05895/session.php
-
_desk-05895/upload/.htaccess
-
_desk-05895/upload/backcc__Aqua Black Photo Sale Retail Stores Instagram Post(1).jpg
-
_desk-05895/upload/frontcc__Blue and Teal Border Game Night Invitation.jpg