Resubmissions

11/04/2023, 15:13

230411-sl8w4aeh2z 1

General

  • Target

    75f9e4b79e822c3ea64e3b345b0c4c8d4653651702c5401141832787fac595d1.zip

  • Size

    40.0MB

  • MD5

    da0444a1b7d4840a6df9cb61356455d1

  • SHA1

    eca2e4e344ded6008c1e425ce5dc8b1cdb9198ac

  • SHA256

    58f711edc257f9f5d04713962b265d89289bc58beb3e4c4edc4915b31ce05d6d

  • SHA512

    ed505600a67f66b2775a8a27f114a4a4b7667936f7a429028291d5f2b63bcc200a176a18cb2439b0f129824e322e885a7fc9a9fca6dcf1c1f500fd2d8a2227aa

  • SSDEEP

    786432:PAbcb08EqVzaAYXnjtAEHA0wrbtHXoM3AcBBAzXaBAk27FuMdF:obcbYuLYXnj2EgTXPQmizXaikfMdF

Score
1/10

Malware Config

Signatures

  • matchs PE files 64 IoCs

    Portable executable.

Files

  • 75f9e4b79e822c3ea64e3b345b0c4c8d4653651702c5401141832787fac595d1.zip
    .zip
  • ioncube_priv8_decoder_v1/DECODED/addcart.php
  • ioncube_priv8_decoder_v1/DECODED/addcart2.php
  • ioncube_priv8_decoder_v1/DECODED/addcart3.php
  • ioncube_priv8_decoder_v1/DECODED/addcart4.php
  • ioncube_priv8_decoder_v1/ENCODED/include.php
  • ioncube_priv8_decoder_v1/ENCODED/index.php
  • ioncube_priv8_decoder_v1/IonCube V8.2 Decoder.bat
    .bat .vbs
  • ioncube_priv8_decoder_v1/ReadME - H@CK3R $2H - Iran.txt
  • ioncube_priv8_decoder_v1/iconv.dll
    .dll windows x86

    e7aa0aeef61e4ca89f4b87b602f40e02


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/IC6-ioncube_loader_win_5.2.dll
    .dll windows x86

    0ea446f53a41619c801ab0f078c95846


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/IC7-ioncube_loader_win_5.2.dll
    .dll windows x86

    63ec14a9a6d24a628231889b2763eff1


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/IC7-ioncube_loader_win_5.3.dll
    .dll windows x86

    4a444541dbf1c4b7946ffcae0ad2a259


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/IC8-ioncube_loader_win_5.3.dll
    .dll windows x86

    8872a25d48ccdce814e303532262aa2b


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/IC852/ioncube_loader_win_5.2.dll
    .dll windows x86

    804c0d2bdd6e0a749c943e8491236c40


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/Zend/ZendOptimizer.dll
    .dll windows x86

    3351b30222277929421930d9499b46ac


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/Zend/ZendOptimizer.dll.original
    .dll windows x86

    3351b30222277929421930d9499b46ac


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/ZendLoader.dll
    .dll windows x86

    d03aee5055a693c55d7e3813acad8be9


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/ZendOptimizer.dll
    .dll windows x86

    3351b30222277929421930d9499b46ac


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/compile.bak
    .rar
  • ioncube_priv8_decoder_v1/ioncube/loaders/Zend/ZendOptimizer.dll
    .dll windows x86

    3351b30222277929421930d9499b46ac


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/loaders/compile.bak
    .rar
  • ioncube_priv8_decoder_v1/ioncube/loaders/ioncube_loader_win_5.2.dll
    .dll windows x86

    63ec14a9a6d24a628231889b2763eff1


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/loaders/phpexpress-php-5.2.dll
    .dll windows x86

    401b86903da7e03c555698759744b6a9


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/phpexpress-php-5.2.dll
    .dll windows x86

    401b86903da7e03c555698759744b6a9


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/docs/EULA.txt
  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/docs/README.txt
  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/docs/Zend_Optimizer_User_Guide.pdf
    .pdf
  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/lib/Optimizer/php-4.2.0/ZendOptimizer.dll
    .dll windows x86

    20e2fdd853ce5690d0ee535a40f1b618


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/lib/Optimizer/php-4.2.x/ZendOptimizer.dll
    .dll windows x86

    4f7214f14be75273e43bd2e8fd2b8f2a


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/lib/Optimizer/php-4.3.x/ZendOptimizer.dll
    .dll windows x86

    0fc39b604f653d2b463825fc93169578


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/lib/Optimizer/php-4.4.x/ZendOptimizer.dll
    .dll windows x86

    0fc39b604f653d2b463825fc93169578


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/lib/Optimizer/php-5.0.x/ZendOptimizer.dll
    .dll windows x86

    436a9314a9633232be991d24675333b9


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/lib/Optimizer/php-5.1.x/ZendOptimizer.dll
    .dll windows x86

    3d8243d9eaf9dc9bebe6c8a53f5c46b0


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/lib/Optimizer/php-5.2.x/ZendOptimizer.dll
    .dll windows x86

    3351b30222277929421930d9499b46ac


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/lib/ZendExtensionManager.dll
    .dll windows x86

    2ea14250bd3e677f95f87c6f90e97d5e


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/optimizer_icon.ico
  • ioncube_priv8_decoder_v1/ioncube/zendOptimizer/poweredbyoptimizer.gif
    .gif
  • ioncube_priv8_decoder_v1/libeay32.dll
    .dll windows x86

    8c38518d75fd4c12e701ae4435025cdf


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/Formatting_Dec_IonCube_V4.php
  • ioncube_priv8_decoder_v1/php/Fixer/Run AutoFixer in Directory DECODED.bat
  • ioncube_priv8_decoder_v1/php/Fixer/ext/php_bz2.dll
    .dll windows x86

    7328a24e99c412c1176568cd1a72617f


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/ext/php_curl.dll
    .dll windows x86

    06c2b5144e1bb8035d7ce6fc686c8f24


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/ext/php_gd2.dll
    .dll windows x86

    86266775221f81546f514ddd7b8095cd


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/ext/php_mbstring.dll
    .dll windows x86

    99212ee966f9009bbe58ccf5ee02ef2e


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/ext/php_mysql.dll
    .dll windows x86

    54570c2992a0fe32161240bf20b59a21


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/ext/php_mysqli.dll
    .dll windows x86

    08400e791b4a4dda6b9f6188f0b1cf6b


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/ext/php_openssl.dll
    .dll windows x86

    d9acaf0cdca077e22342601cfc7d7be0


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/ext/php_pdo_mysql.dll
    .dll windows x86

    5f4553da0fa00dfd9c7cc76ab17f462f


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/ext/php_pdo_sqlite.dll
    .dll windows x86

    cae78be0bae612092c51db463255f1c7


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/ext/php_sqlite.dll
    .dll windows x86

    9c7392a662b15a515d5e8134640406e3


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/ext/php_xdebug-2.2.1-5.3-vc9.dll
    .dll windows x86

    5b32ad096226e3ca676c1b84fd2c69d6


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/iconv.dll
    .dll windows x86

    e7aa0aeef61e4ca89f4b87b602f40e02


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/libeay32.dll
    .dll windows x86

    8c38518d75fd4c12e701ae4435025cdf


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/libmysql.dll
    .dll windows x86

    59e1509771bdd54bdb714243907a5adb


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/license.txt
  • ioncube_priv8_decoder_v1/php/Fixer/log/log.log
  • ioncube_priv8_decoder_v1/php/Fixer/log/logfix.log
  • ioncube_priv8_decoder_v1/php/Fixer/msvcrtd.dll
    .dll windows x86

    265cd32afd4d72991a91eb9bf6c51bae


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/optimization.php
    .sh .ps1 linux
  • ioncube_priv8_decoder_v1/php/Fixer/php-cgi.exe
    .exe windows x86

    a04a38ba765cb4c4a1d5c8a13aaa1e22


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/php-win.exe
    .exe windows x86

    e99b33030ee06e8c818e0528cb8aefec


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/php.exe
    .exe windows x86

    aad10bb1a7af66d9886d2d66e57f9b39


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/php.gif
    .gif
  • ioncube_priv8_decoder_v1/php/Fixer/php.ini
  • ioncube_priv8_decoder_v1/php/Fixer/php5.dll
    .dll windows x86

    3c72636a7961772d36a9078e44d2d6bf


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/php5apache2_2.dll
    .dll windows x86

    8489c05d5e4f0d0f38495effc083578e


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/php5ts.dll
    .dll windows x86

    a7cbf3b08f071733775d0fa64d9b0301


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Fixer/ssleay32.dll
    .dll windows x86

    22ac2ca8e237d62babc3f902eb50d28d


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC6_5.2/MSVCR100.DLL
    .dll windows x86

    66301f135a244b7d18c41c42d33fe434


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC6_5.2/iconv.dll
    .dll windows x86

    e7aa0aeef61e4ca89f4b87b602f40e02


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC6_5.2/msvcrtd.dll
    .dll windows x86

    265cd32afd4d72991a91eb9bf6c51bae


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC6_5.2/opdump.exe
    .exe windows x86

    43a2af9a2342b9d77b86efbe4d5ddedc


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/IC6_5.2/php.exe
    .exe windows x86

    858c15a31ffa7b41d5007c5e9f6b5353


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/IC6_5.2/php.ini
  • ioncube_priv8_decoder_v1/php/IC6_5.2/php2.exe
    .exe windows x86

    858c15a31ffa7b41d5007c5e9f6b5353


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/IC6_5.2/php5ts.dll
    .dll windows x86

    0bf5c17c14b09844572bf9499f629b58


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC7_5.2/iconv.dll
    .dll windows x86

    e7aa0aeef61e4ca89f4b87b602f40e02


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC7_5.2/msvcr100.dll
    .dll windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC7_5.2/msvcrtd.dll
    .dll windows x86

    265cd32afd4d72991a91eb9bf6c51bae


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC7_5.2/opdump.exe
    .exe windows x86

    43a2af9a2342b9d77b86efbe4d5ddedc


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/IC7_5.2/php.exe
    .exe windows x86

    858c15a31ffa7b41d5007c5e9f6b5353


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/IC7_5.2/php.ini
  • ioncube_priv8_decoder_v1/php/IC7_5.2/php5ts - Copy.dll
    .dll windows x86

    0bf5c17c14b09844572bf9499f629b58


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC7_5.2/php5ts.dll
    .dll windows x86

    0bf5c17c14b09844572bf9499f629b58


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC7_5.2/php5ts.dll.bak
    .dll windows x86

    0bf5c17c14b09844572bf9499f629b58


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC7_5.2/php5tsx.dll
    .dll windows x86

    0bf5c17c14b09844572bf9499f629b58


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC7_5.3/Formatting_Dec_IonCube_V4.php
  • ioncube_priv8_decoder_v1/php/IC7_5.3/php-cgi.exe
    .exe windows x86

    02eae77b57329c542a4b1dc550a650b1


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/IC7_5.3/php.ini
  • ioncube_priv8_decoder_v1/php/IC7_5.3/php5.dll
    .dll windows x86

    3c72636a7961772d36a9078e44d2d6bf


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC7_5.3/php5.dll.bak
    .dll windows x86

    3c72636a7961772d36a9078e44d2d6bf


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC8_5.2/iconv.dll
    .dll windows x86

    e7aa0aeef61e4ca89f4b87b602f40e02


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC8_5.2/msvcr100.dll
    .dll windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC8_5.2/msvcrtd.dll
    .dll windows x86

    265cd32afd4d72991a91eb9bf6c51bae


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC8_5.2/opdump.exe
    .exe windows x86

    43a2af9a2342b9d77b86efbe4d5ddedc


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/IC8_5.2/php.exe
    .exe windows x86

    858c15a31ffa7b41d5007c5e9f6b5353


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/IC8_5.2/php.ini
  • ioncube_priv8_decoder_v1/php/IC8_5.2/php5ts.dll
    .dll windows x86

    0bf5c17c14b09844572bf9499f629b58


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC8_5.3/iconv.dll
    .dll windows x86

    e7aa0aeef61e4ca89f4b87b602f40e02


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC8_5.3/libeay32.dll
    .dll windows x86

    8c38518d75fd4c12e701ae4435025cdf


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC8_5.3/php-cgi.exe
    .exe windows x86

    b32f5e4954bac04efdcdc922f51fd809


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/IC8_5.3/php.exe
    .exe windows x86

    aad10bb1a7af66d9886d2d66e57f9b39


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/IC8_5.3/php5.dll
    .dll windows x86

    3c72636a7961772d36a9078e44d2d6bf


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/IC8_5.3/php52.ini
  • ioncube_priv8_decoder_v1/php/IC8_5.3/php53.ini
  • ioncube_priv8_decoder_v1/php/IC8_5.3/php5ts.dll
    .dll windows x86

    0bf5c17c14b09844572bf9499f629b58


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Universal_Decoder/iconv.dll
    .dll windows x86

    e7aa0aeef61e4ca89f4b87b602f40e02


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Universal_Decoder/loaders/ZendExtensionManager.dll
    .dll windows x86

    2ea14250bd3e677f95f87c6f90e97d5e


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Universal_Decoder/loaders/php-5.2.x/ZendOptimizer.dll
    .dll windows x86

    3351b30222277929421930d9499b46ac


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Universal_Decoder/msvcrtd.dll
    .dll windows x86

    265cd32afd4d72991a91eb9bf6c51bae


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/Universal_Decoder/php.exe
    .exe windows x86

    69f916b65f6d0793ed0adb34decbdd25


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/Universal_Decoder/php.ini
  • ioncube_priv8_decoder_v1/php/Universal_Decoder/php5ts.dll
    .dll windows x86

    73867f59eb6842b44e57a992cee232b7


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/lib_fixer.exe
    .exe windows x86

    efcb8421cc6478616c5fd349b68e1a78


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/xcache/Decompiler.class.php
    .js
  • ioncube_priv8_decoder_v1/php/xcache/folder_decompile.php
  • ioncube_priv8_decoder_v1/php/xcache/libeay32.dll
    .dll windows x86

    8c38518d75fd4c12e701ae4435025cdf


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/xcache/pdc.bat
  • ioncube_priv8_decoder_v1/php/xcache/pdo.bat
  • ioncube_priv8_decoder_v1/php/xcache/php.exe
    .exe windows x86

    b32f5e4954bac04efdcdc922f51fd809


    Headers

    Imports

    Sections

  • ioncube_priv8_decoder_v1/php/xcache/php.ini
  • ioncube_priv8_decoder_v1/php/xcache/php5.dll
    .dll windows x86

    022f44b8f35790fcd1e3a5862c0c8bed


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/xcache/php_xcache.dll
    .dll windows x86

    ff225846ae14d15bddf2aa5f799a4928


    Headers

    Imports

    Exports

    Sections

  • ioncube_priv8_decoder_v1/php/xcache/phpdarr.phpr
  • ioncube_priv8_decoder_v1/php/xcache/phpdc.phpr
  • ioncube_priv8_decoder_v1/php/xcache/phpdop.phpr
  • ioncube_priv8_decoder_v1/php/xcache/xcache-zh-gb2312.ini
  • ioncube_priv8_decoder_v1/php/xcache/xcache.ini