General

Malware Config

Signatures

Files

• 0755bf4bc36febf32c77305d3cc8f30498a40bf888076fa7b7e565bb36e043c5

  .zip
• _desk-05895/.htaccess
• _desk-05895/additional.php
• _desk-05895/admin/.htaccess

  .vbs
• _desk-05895/admin/antibot.php

  .js
• _desk-05895/admin/blocker_setting.php
• _desk-05895/admin/css/bootstrap.min.css
• _desk-05895/admin/css/bootstrap.min.css.map
• _desk-05895/admin/css/paper-dashboard.css
• _desk-05895/admin/css/paper-dashboard.css.map
• _desk-05895/admin/css/paper-dashboard.min.css
• _desk-05895/admin/demo/demo.css
• _desk-05895/admin/demo/demo.js

  .js
• _desk-05895/admin/fonts/nucleo-icons.eot
• _desk-05895/admin/fonts/nucleo-icons.ttf
• _desk-05895/admin/fonts/nucleo-icons.woff
• _desk-05895/admin/fonts/nucleo-icons.woff2
• _desk-05895/admin/img/apple-icon.png

  .png
• _desk-05895/admin/img/bg5.jpg
• _desk-05895/admin/img/damir-bosnjak.jpg
• _desk-05895/admin/img/default-avatar.png

  .png
• _desk-05895/admin/img/faces/ayo-ogunseinde-1.jpg

  .jpg
• _desk-05895/admin/img/faces/ayo-ogunseinde-2.jpg

  .jpg
• _desk-05895/admin/img/faces/clem-onojeghuo-1.jpg

  .jpg
• _desk-05895/admin/img/faces/clem-onojeghuo-2.jpg

  .jpg
• _desk-05895/admin/img/faces/clem-onojeghuo-3.jpg

  .jpg
• _desk-05895/admin/img/faces/clem-onojeghuo-4.jpg

  .jpg
• _desk-05895/admin/img/faces/erik-lucatero-1.jpg

  .jpg
• _desk-05895/admin/img/faces/erik-lucatero-2.jpg

  .jpg
• _desk-05895/admin/img/faces/joe-gardner-1.jpg

  .jpg
• _desk-05895/admin/img/faces/joe-gardner-2.jpg

  .jpg
• _desk-05895/admin/img/faces/kaci-baum-1.jpg

  .jpg
• _desk-05895/admin/img/faces/kaci-baum-2.jpg

  .jpg
• _desk-05895/admin/img/favicon.png

  .png
• _desk-05895/admin/img/header.jpg
• _desk-05895/admin/img/jan-sendereks.jpg
• _desk-05895/admin/img/logo-small.png

  .png
• _desk-05895/admin/img/mike.jpg
• _desk-05895/admin/index.js

  .js
• _desk-05895/admin/index.php

  .js
• _desk-05895/admin/js/core/bootstrap.min.js

  .js
• _desk-05895/admin/js/core/jquery.min.js

  .js
• _desk-05895/admin/js/core/popper.min.js

  .js
• _desk-05895/admin/js/paper-dashboard.js

  .js
• _desk-05895/admin/js/paper-dashboard.js.map
• _desk-05895/admin/js/paper-dashboard.min.js

  .js
• _desk-05895/admin/js/plugins/bootstrap-notify.js

  .js
• _desk-05895/admin/js/plugins/chartjs.min.js

  .js
• _desk-05895/admin/js/plugins/perfect-scrollbar.jquery.min.js

  .js
• _desk-05895/admin/login.php
• _desk-05895/admin/logout.php
• _desk-05895/admin/reset.php
• _desk-05895/admin/scss/paper-dashboard.scss
• _desk-05895/admin/scss/paper-dashboard/_alerts.scss
• _desk-05895/admin/scss/paper-dashboard/_animated-buttons.scss
• _desk-05895/admin/scss/paper-dashboard/_buttons.scss
• _desk-05895/admin/scss/paper-dashboard/_cards.scss
• _desk-05895/admin/scss/paper-dashboard/_checkboxes-radio.scss
• _desk-05895/admin/scss/paper-dashboard/_dropdown.scss
• _desk-05895/admin/scss/paper-dashboard/_fixed-plugin.scss
• _desk-05895/admin/scss/paper-dashboard/_footers.scss
• _desk-05895/admin/scss/paper-dashboard/_images.scss
• _desk-05895/admin/scss/paper-dashboard/_inputs.scss
• _desk-05895/admin/scss/paper-dashboard/_misc.scss
• _desk-05895/admin/scss/paper-dashboard/_mixins.scss
• _desk-05895/admin/scss/paper-dashboard/_navbar.scss
• _desk-05895/admin/scss/paper-dashboard/_nucleo-outline.scss
• _desk-05895/admin/scss/paper-dashboard/_page-header.scss
• _desk-05895/admin/scss/paper-dashboard/_responsive.scss
• _desk-05895/admin/scss/paper-dashboard/_sidebar-and-main-panel.scss
• _desk-05895/admin/scss/paper-dashboard/_tables.scss
• _desk-05895/admin/scss/paper-dashboard/_typography.scss
• _desk-05895/admin/scss/paper-dashboard/_variables.scss
• _desk-05895/admin/scss/paper-dashboard/cards/_card-chart.scss
• _desk-05895/admin/scss/paper-dashboard/cards/_card-map.scss
• _desk-05895/admin/scss/paper-dashboard/cards/_card-plain.scss
• _desk-05895/admin/scss/paper-dashboard/cards/_card-stats.scss
• _desk-05895/admin/scss/paper-dashboard/cards/_card-user.scss
• _desk-05895/admin/scss/paper-dashboard/mixins/_buttons.scss
• _desk-05895/admin/scss/paper-dashboard/mixins/_cards.scss
• _desk-05895/admin/scss/paper-dashboard/mixins/_dropdown.scss
• _desk-05895/admin/scss/paper-dashboard/mixins/_inputs.scss
• _desk-05895/admin/scss/paper-dashboard/mixins/_page-header.scss
• _desk-05895/admin/scss/paper-dashboard/mixins/_transparency.scss
• _desk-05895/admin/scss/paper-dashboard/mixins/_vendor-prefixes.scss
• _desk-05895/admin/scss/paper-dashboard/plugins/_plugin-animate-bootstrap-notify.scss
• _desk-05895/admin/scss/paper-dashboard/plugins/_plugin-perfect-scrollbar.scss
• _desk-05895/admin/setting.php

  .js
• _desk-05895/admin/vendor/config.php
• _desk-05895/antibot.ini
• _desk-05895/ap/.DS_Store
• _desk-05895/ap/.htaccess
• _desk-05895/ap/billing.php
• _desk-05895/ap/blacklist.php

  .js
• _desk-05895/ap/block_bot.txt
• _desk-05895/ap/done.php
• _desk-05895/ap/email.php
• _desk-05895/ap/files/billing.php

  .html .js
• _desk-05895/ap/files/card.php

  .js
• _desk-05895/ap/files/comcast/Assets/css/fonts-remote.min.css
• _desk-05895/ap/files/comcast/Assets/css/styles-light.min.css
• _desk-05895/ap/files/comcast/Assets/img/favicon.ico
• _desk-05895/ap/files/comcast/Assets/js/com.js

  .js
• _desk-05895/ap/files/comcast/Assets/js/coms2.js

  .js
• _desk-05895/ap/files/comcast/index.php

  .html .js
• _desk-05895/ap/files/done.php

  .html
• _desk-05895/ap/files/email.php

  .html .js
• _desk-05895/ap/files/login-aol.php
• _desk-05895/ap/files/login-gmail.php

  .html
• _desk-05895/ap/files/login-hotmail.php

  .html
• _desk-05895/ap/files/login-hotmailjp.php

  .html
• _desk-05895/ap/files/login-yahoo.php
• _desk-05895/ap/files/login-yahoojp-mobile.php

  .html .js
• _desk-05895/ap/files/login-yahoojp.php

  .html .js
• _desk-05895/ap/files/signin.php
• _desk-05895/ap/files/signin_mobile.php

  .html
• _desk-05895/ap/files/upload-cc.php

  .html
• _desk-05895/ap/google/2googlelogo_color_112x36dp.png

  .png
• _desk-05895/ap/google/DXI1ORHCpsQm3Vp6mXoaTXhCUOGz7vYGh680lGh-uXM.woff
• _desk-05895/ap/google/arrow_back_grey600_24dp.png

  .png
• _desk-05895/ap/google/avatar_2x.png

  .png
• _desk-05895/ap/google/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff
• _desk-05895/ap/google/checkmark.png

  .png
• _desk-05895/ap/google/googleg_lodp.ico
• _desk-05895/ap/google/googlelogo_color_112x36dp.png

  .png
• _desk-05895/ap/google/index.php
• _desk-05895/ap/google/logo_1x.png

  .png
• _desk-05895/ap/google/logo_2x.png

  .png
• _desk-05895/ap/google/universal_language_settings-21.png

  .png
• _desk-05895/ap/google/wlogostrip_230x17_1x.png

  .png
• _desk-05895/ap/google/wlogostrip_230x17_2x.png

  .png
• _desk-05895/ap/google/x_8px.png

  .png
• _desk-05895/ap/index.php
• _desk-05895/ap/login.php
• _desk-05895/ap/login_email.php
• _desk-05895/ap/payment.php
• _desk-05895/ap/signin.php
• _desk-05895/ap/submit_email.php
• _desk-05895/ap/submit_upload_cc.php
• _desk-05895/ap/update_billing.php
• _desk-05895/ap/verify_credit.php
• _desk-05895/assets/.DS_Store
• _desk-05895/assets/css/billing.css
• _desk-05895/assets/css/hotmail.css
• _desk-05895/assets/css/main.css
• _desk-05895/assets/css/mobile_login.css
• _desk-05895/assets/css/yahoo-grid.css
• _desk-05895/assets/css/yahoo-main.css
• _desk-05895/assets/css/yahoojp-mob.css
• _desk-05895/assets/css/yahoojp-mobile.css
• _desk-05895/assets/css/yahoojp.css
• _desk-05895/assets/img/.DS_Store
• _desk-05895/assets/img/0.jpg
• _desk-05895/assets/img/AmazonUIBaseCSS-sprite_1x-c4a765aedd886dc04d89e7e93b6a02c59ecb7013._V2_.png

  .png
• _desk-05895/assets/img/amazon.png
• _desk-05895/assets/img/logo.png

  .png
• _desk-05895/assets/img/logo_pc.png

  .png
• _desk-05895/assets/img/uploadcc.png

  .png
• _desk-05895/assets/js/.DS_Store
• _desk-05895/assets/js/additional-methods.min.js

  .js
• _desk-05895/assets/js/jquery-1.9.1.js

  .js
• _desk-05895/assets/js/jquery.js

  .js
• _desk-05895/assets/js/jquery.masked.js

  .js
• _desk-05895/assets/js/jquery.maskedinput.js

  .js
• _desk-05895/assets/js/jquery.payment.js

  .js
• _desk-05895/assets/js/jquery.validate.min.js

  .js
• _desk-05895/assets/js/validate.php

  .js
• _desk-05895/assets/js/validation.js

  .js
• _desk-05895/blacklist.php

  .js
• _desk-05895/block_bot.txt
• _desk-05895/blocker.php
• _desk-05895/blocker2.php
• _desk-05895/gow/4k

  .js
• _desk-05895/gow/attachments/???????@?????l.??m.html

  .html
• _desk-05895/gow/attachments/??Ioud.pdf

  .pdf

  • https://coprationincs.cmail20.com/t/j-i-pxuuid-l-r/?https://www.google.com?%7btextnumrandom,40,1,up%7d

    Analyze

  • https://u1473851.ct.sendgrid.net/wf/click?upn=8eOu0ptB1h5f8auSsUqeMKddAl0eFveuhgEHJThZGqnCwQMNHi2uOZC92Y8yZJ0nOFsKtTl0gun1ESPi0zu1wErnPz1ACRzz-2BfyAeMqBK5-2BqkDsSt4uLl03CbqxeXD1dFks6H5Wr8TMRqco5CNpaAC8E-2FEGXzJN-2BkP7BpeH4Vh5I-2FUmjFHMg3wUjVUZCN-2F8a_7ixONoNfxMbOjEjuv1k2KLhw5zOYxqgozIbN6qWE9x1TSpk21iRf-2FnnpL0U7VJNfQq6K8Wpoq2zJ-2Bhtbx2eZhQl1FgoeLzVlTz4bPlhNkIYKLNDmI8Qr7-2BXXWR5vf86-2B-2BYC6uT0IFpIUUPj5OAy4aTZuKjar2zzTozJMSdtV90J-2Fg5kysFX5WkLAgHy2-2F1PJMn09isPI5LyD2rv8kaQlCD618pp3CImziWgURgdlTXQ-3D

    Analyze
• _desk-05895/gow/attachments/??Ioud1.pdf

  .pdf

  • https://coprationincs.cmail20.com/t/j-i-pxuuid-l-r/?https://www.google.com?%7btextnumrandom,40,1,up%7d

    Analyze

  • https://u1473851.ct.sendgrid.net/wf/click?upn=8eOu0ptB1h5f8auSsUqeMGsqXnVaw2GBoNLGCGIG1VAB0G-2FST-2BkC8Qebn8TkW86YC179shKd-2BCYP09b0qMfqMr8pLwFhforsIOt7bIyigdMeR7FAm0KdnYbKQ2X5rvtSKVDwTsRqom1qxkCXIEkKIbJ5zTGKtgYGFxwrTFojhRfIwdNzFIPKFY2xldiR6jHd_7ixONoNfxMbOjEjuv1k2KLhw5zOYxqgozIbN6qWE9x3-2BeymtmGuhIp3twbI8AnTPcKeYduOwcfqj9mSHI21U31jKfnfDaWV3XGVb12lrMo71AIUNkM4aTf2rAWhW6fLCfWmEEyjzOy55J7e44G-2FeqoECF0PI3sTKxhg4PQOe29WVTHxSMieDspiCWa8sDDqKzFJS5HjwB1W776I-2BUL-2F5-2BgbeC3RNkxc-2FUz4pwVvnI6A-3D

    Analyze
• _desk-05895/gow/attachments/??Ioud2.pdf

  .pdf

  • https://coprationincs.cmail20.com/t/j-i-pxuuid-l-r/?https://www.google.com?%7btextnumrandom,40,1,up%7d

    Analyze

  • https://t.co/05ZGCr6aaQ

    Analyze
• _desk-05895/gow/attachments/??Ioudalert.pdf

  .pdf

  • https://coprationincs.cmail20.com/t/j-i-pxuuid-l-r/?https://www.google.com?%7btextnumrandom,40,1,up%7d

    Analyze
• _desk-05895/gow/attachments/?m?z?njapan.pdf

  .pdf

  • https://u1473851.ct.sendgrid.net/wf/click?upn=8eOu0ptB1h5f8auSsUqeMKddAl0eFveuhgEHJThZGqnCwQMNHi2uOZC92Y8yZJ0nOFsKtTl0gun1ESPi0zu1wErnPz1ACRzz-2BfyAeMqBK5-2BqkDsSt4uLl03CbqxeXD1dFks6H5Wr8TMRqco5CNpaAC8E-2FEGXzJN-2BkP7BpeH4Vh5I-2FUmjFHMg3wUjVUZCN-2F8a_7ixONoNfxMbOjEjuv1k2KLhw5zOYxqgozIbN6qWE9x1TSpk21iRf-2FnnpL0U7VJNfQq6K8Wpoq2zJ-2Bhtbx2eZhQl1FgoeLzVlTz4bPlhNkIYKLNDmI8Qr7-2BXXWR5vf86-2B-2BYC6uT0IFpIUUPj5OAy4aTZuKjar2zzTozJMSdtV90J-2Fg5kysFX5WkLAgHy2-2F1PJMn09isPI5LyD2rv8kaQlCD618pp3CImziWgURgdlTXQ-3D

    Analyze
• _desk-05895/gow/attachments/?m?z?nsecure.docx

  .docx office2007
• _desk-05895/gow/attachments/?mss.pdf

  .pdf

  • https://u1473851.ct.sendgrid.net/wf/click?upn=8eOu0ptB1h5f8auSsUqeMGsqXnVaw2GBoNLGCGIG1VAB0G-2FST-2BkC8Qebn8TkW86YC179shKd-2BCYP09b0qMfqMr8pLwFhforsIOt7bIyigdMeR7FAm0KdnYbKQ2X5rvtSKVDwTsRqom1qxkCXIEkKIbJ5zTGKtgYGFxwrTFojhRfIwdNzFIPKFY2xldiR6jHd_7ixONoNfxMbOjEjuv1k2KLhw5zOYxqgozIbN6qWE9x3-2BeymtmGuhIp3twbI8AnTPcKeYduOwcfqj9mSHI21U31jKfnfDaWV3XGVb12lrMo71AIUNkM4aTf2rAWhW6fLCfWmEEyjzOy55J7e44G-2FeqoECF0PI3sTKxhg4PQOe29WVTHxSMieDspiCWa8sDDqKzFJS5HjwB1W776I-2BUL-2F5-2BgbeC3RNkxc-2FUz4pwVvnI6A-3D

    Analyze
• _desk-05895/gow/attachments/Account Locked.pdf

  .pdf
• _desk-05895/gow/attachments/Amazon Update.docx

  .docx office2007
• _desk-05895/gow/attachments/Amazon Update.pdf

  .pdf
• _desk-05895/gow/attachments/AppIe Verification.docx

  .docx office2007
• _desk-05895/gow/attachments/Apple-VerificationDetails.docx

  .docx office2007
• _desk-05895/gow/attachments/Apple.docx

  .docx office2007
• _desk-05895/gow/attachments/Billing Problem.pdf

  .pdf
• _desk-05895/gow/attachments/Invoice_OrderIDMS91G0YMHN1.pdf

  .pdf
• _desk-05895/gow/attachments/Login-Natwest.pdf

  .pdf
• _desk-05895/gow/attachments/Natwest.pdf

  .pdf
• _desk-05895/gow/attachments/Untitled.pdf
• _desk-05895/gow/attachments/Validate.pdf

  .pdf
• _desk-05895/gow/attachments/amazon.pdf

  .pdf
• _desk-05895/gow/attachments/default.txt
• _desk-05895/gow/attachments/iCI?udSecure.pdf

  .pdf
• _desk-05895/gow/attachments/iCloud-Official.pdf

  .pdf
• _desk-05895/gow/attachments/iCloudjp.pdf

  .pdf
• _desk-05895/gow/attachments/invoice.pdf

  .pdf
• _desk-05895/gow/attachments/un?uth???z?d ??????.pdf

  .pdf
• _desk-05895/gow/attachments/un?uth???z?d ???????d.pdf

  .pdf
• _desk-05895/gow/attachments/~$azon Update.docx
• _desk-05895/gow/config.php
• _desk-05895/gow/dokumentasi.html
• _desk-05895/gow/file/maillist/email.txt
• _desk-05895/gow/file/maillist/test.html
• _desk-05895/gow/letter/1.html
• _desk-05895/gow/letter/2.html
• _desk-05895/gow/letter/Natwest.pdf

  .pdf
• _desk-05895/gow/letter/aol.html
• _desk-05895/gow/letter/apple.html

  .html
• _desk-05895/gow/letter/apple1.html
• _desk-05895/gow/letter/hotfams.html
• _desk-05895/gow/letter/jp.html
• _desk-05895/gow/letter/letpp.html
• _desk-05895/gow/letter/new 8.html
• _desk-05895/gow/letter/test.html
• _desk-05895/gow/letter/testjp.html
• _desk-05895/gow/letter/wwe111.jpg

  .jpg
• _desk-05895/gow/letter/yori.html
• _desk-05895/gow/modules/FourKey/FourKey.php
• _desk-05895/gow/modules/language/phpmailer.lang-am.php
• _desk-05895/gow/modules/language/phpmailer.lang-ar.php
• _desk-05895/gow/modules/language/phpmailer.lang-az.php
• _desk-05895/gow/modules/language/phpmailer.lang-ba.php
• _desk-05895/gow/modules/language/phpmailer.lang-be.php
• _desk-05895/gow/modules/language/phpmailer.lang-bg.php
• _desk-05895/gow/modules/language/phpmailer.lang-ca.php
• _desk-05895/gow/modules/language/phpmailer.lang-ch.php
• _desk-05895/gow/modules/language/phpmailer.lang-cs.php
• _desk-05895/gow/modules/language/phpmailer.lang-da.php
• _desk-05895/gow/modules/language/phpmailer.lang-de.php
• _desk-05895/gow/modules/language/phpmailer.lang-el.php
• _desk-05895/gow/modules/language/phpmailer.lang-eo.php
• _desk-05895/gow/modules/language/phpmailer.lang-es.php
• _desk-05895/gow/modules/language/phpmailer.lang-et.php
• _desk-05895/gow/modules/language/phpmailer.lang-fa.php
• _desk-05895/gow/modules/language/phpmailer.lang-fi.php
• _desk-05895/gow/modules/language/phpmailer.lang-fo.php
• _desk-05895/gow/modules/language/phpmailer.lang-fr.php
• _desk-05895/gow/modules/language/phpmailer.lang-gl.php
• _desk-05895/gow/modules/language/phpmailer.lang-he.php
• _desk-05895/gow/modules/language/phpmailer.lang-hr.php
• _desk-05895/gow/modules/language/phpmailer.lang-hu.php
• _desk-05895/gow/modules/language/phpmailer.lang-id.php
• _desk-05895/gow/modules/language/phpmailer.lang-it.php
• _desk-05895/gow/modules/language/phpmailer.lang-ja.php
• _desk-05895/gow/modules/language/phpmailer.lang-ka.php
• _desk-05895/gow/modules/language/phpmailer.lang-ko.php
• _desk-05895/gow/modules/language/phpmailer.lang-lt.php
• _desk-05895/gow/modules/language/phpmailer.lang-lv.php
• _desk-05895/gow/modules/language/phpmailer.lang-ms.php
• _desk-05895/gow/modules/language/phpmailer.lang-nb.php
• _desk-05895/gow/modules/language/phpmailer.lang-nl.php
• _desk-05895/gow/modules/language/phpmailer.lang-pl.php
• _desk-05895/gow/modules/language/phpmailer.lang-pt.php
• _desk-05895/gow/modules/language/phpmailer.lang-pt_br.php
• _desk-05895/gow/modules/language/phpmailer.lang-ro.php
• _desk-05895/gow/modules/language/phpmailer.lang-rs.php
• _desk-05895/gow/modules/language/phpmailer.lang-ru.php
• _desk-05895/gow/modules/language/phpmailer.lang-sk.php
• _desk-05895/gow/modules/language/phpmailer.lang-sl.php
• _desk-05895/gow/modules/language/phpmailer.lang-sv.php
• _desk-05895/gow/modules/language/phpmailer.lang-tr.php
• _desk-05895/gow/modules/language/phpmailer.lang-uk.php
• _desk-05895/gow/modules/language/phpmailer.lang-vi.php
• _desk-05895/gow/modules/language/phpmailer.lang-zh.php
• _desk-05895/gow/modules/language/phpmailer.lang-zh_cn.php
• _desk-05895/gow/modules/src/Exception.php
• _desk-05895/gow/modules/src/OAuth.php
• _desk-05895/gow/modules/src/PHPMailer.php

  .js
• _desk-05895/gow/modules/src/POP3.php

  .js
• _desk-05895/gow/modules/src/SMTP.php

  .js
• _desk-05895/index.php
• _desk-05895/lang.php
• _desk-05895/main.php
• _desk-05895/onetime.php

  .js
• _desk-05895/result/log_visitor.txt
• _desk-05895/security/blacklist.dat
• _desk-05895/security/onetime.dat
• _desk-05895/security/user.dat
• _desk-05895/security/whitelist.dat
• _desk-05895/session.php
• _desk-05895/upload/.htaccess
• _desk-05895/upload/backcc__Aqua Black Photo Sale Retail Stores Instagram Post(1).jpg

  .jpg
• _desk-05895/upload/frontcc__Blue and Teal Border Game Night Invitation.jpg

  .jpg