GetCadtVersion
InstrDasm
InstrDecode
MakeMnemonic
General
-
Target
PsyProxy.zip
-
Size
18.2MB
-
MD5
63d5ce47604dd47e658be563606c7af8
-
SHA1
c5763efb1b7cbf7aa61ed770cec1fc960c4c6055
-
SHA256
7211ad92b036ad25343956f3a7f40378d68bcf4a61e56e232c2acf99375060d7
-
SHA512
679729dbb23c4f311e399b63852174c86da86017fcaa316a5f351cefe93faf816c3aacc07d95f7dec8aea881597dd28a7ff8209ac69f80afb13c12d1e47d740a
-
SSDEEP
393216:IUkFU+K+ytFdhJPHr1bmO6uUlaT3yOVJJepJa+sm52TwmgN/nquy53:I/yrBr1j3UlaDyOORsjTwb5A3
Score
3/10
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
Files
-
PsyProxy.zip
Password: infected
-
PsyProxy/bilder/builder.exe
Password: infected
94a4fd8369ee0aac0c5503ec42854baa
Headers
Imports
Sections
-
PsyProxy/bilder/cadt.dll
Password: infected
Headers
Exports
Sections
-
PsyProxy/bilder/crypt.exe
Password: infected
312b362b5c9cbcf326d57ac163dfe875
Headers
Imports
Sections
-
PsyProxy/bilder/readme.txt
-
PsyProxy/www/GeoIP.dat
-
PsyProxy/www/GeoLiteCity.dat
-
PsyProxy/www/MySQL.php
-
PsyProxy/www/Net/GeoIP.dat
-
PsyProxy/www/Net/GeoIP.php
-
PsyProxy/www/Net/GeoIP/DMA.php
-
PsyProxy/www/Net/GeoIP/Location.php
-
PsyProxy/www/admin.php
-
PsyProxy/www/check.php
-
PsyProxy/www/common.php
-
PsyProxy/www/config.php
-
PsyProxy/www/db.sql
-
PsyProxy/www/dloader.php
-
PsyProxy/www/flags/00.gif
-
PsyProxy/www/flags/ad.gif
-
PsyProxy/www/flags/ae.gif
-
PsyProxy/www/flags/af.gif
-
PsyProxy/www/flags/ag.gif
-
PsyProxy/www/flags/ai.gif
-
PsyProxy/www/flags/al.gif
-
PsyProxy/www/flags/am.gif
-
PsyProxy/www/flags/an.gif
-
PsyProxy/www/flags/ao.gif
-
PsyProxy/www/flags/aq.gif
-
PsyProxy/www/flags/ar.gif
-
PsyProxy/www/flags/as.gif
-
PsyProxy/www/flags/at.gif
-
PsyProxy/www/flags/au.gif
-
PsyProxy/www/flags/aw.gif
-
PsyProxy/www/flags/az.gif
-
PsyProxy/www/flags/ba.gif
-
PsyProxy/www/flags/bb.gif
-
PsyProxy/www/flags/bd.gif
-
PsyProxy/www/flags/be.gif
-
PsyProxy/www/flags/bf.gif
-
PsyProxy/www/flags/bg.gif
-
PsyProxy/www/flags/bh.gif
-
PsyProxy/www/flags/bi.gif
-
PsyProxy/www/flags/bj.gif
-
PsyProxy/www/flags/bm.gif
-
PsyProxy/www/flags/bn.gif
-
PsyProxy/www/flags/bo.gif
-
PsyProxy/www/flags/br.gif
-
PsyProxy/www/flags/bs.gif
-
PsyProxy/www/flags/bv.gif
-
PsyProxy/www/flags/bw.gif
-
PsyProxy/www/flags/by.gif
-
PsyProxy/www/flags/bz.gif
-
PsyProxy/www/flags/ca.gif
-
PsyProxy/www/flags/cd.gif
-
PsyProxy/www/flags/cf.gif
-
PsyProxy/www/flags/cg.gif
-
PsyProxy/www/flags/ch.gif
-
PsyProxy/www/flags/ci.gif
-
PsyProxy/www/flags/ck.gif
-
PsyProxy/www/flags/cl.gif
-
PsyProxy/www/flags/cm.gif
-
PsyProxy/www/flags/cn.gif
-
PsyProxy/www/flags/co.gif
-
PsyProxy/www/flags/cr.gif
-
PsyProxy/www/flags/cu.gif
-
PsyProxy/www/flags/cv.gif
-
PsyProxy/www/flags/cy.gif
-
PsyProxy/www/flags/cz.gif
-
PsyProxy/www/flags/de.gif
-
PsyProxy/www/flags/dj.gif
-
PsyProxy/www/flags/dk.gif
-
PsyProxy/www/flags/dm.gif
-
PsyProxy/www/flags/do.gif
-
PsyProxy/www/flags/dz.gif
-
PsyProxy/www/flags/ec.gif
-
PsyProxy/www/flags/ee.gif
-
PsyProxy/www/flags/eg.gif
-
PsyProxy/www/flags/er.gif
-
PsyProxy/www/flags/es.gif
-
PsyProxy/www/flags/et.gif
-
PsyProxy/www/flags/eu.gif
-
PsyProxy/www/flags/fi.gif
-
PsyProxy/www/flags/fj.gif
-
PsyProxy/www/flags/fk.gif
-
PsyProxy/www/flags/fm.gif
-
PsyProxy/www/flags/fo.gif
-
PsyProxy/www/flags/fr.gif
-
PsyProxy/www/flags/ga.gif
-
PsyProxy/www/flags/gb.gif
-
PsyProxy/www/flags/gd.gif
-
PsyProxy/www/flags/ge.gif
-
PsyProxy/www/flags/gh.gif
-
PsyProxy/www/flags/gi.gif
-
PsyProxy/www/flags/gl.gif
-
PsyProxy/www/flags/gm.gif
-
PsyProxy/www/flags/gn.gif
-
PsyProxy/www/flags/gp.gif
-
PsyProxy/www/flags/gq.gif
-
PsyProxy/www/flags/gr.gif
-
PsyProxy/www/flags/gt.gif
-
PsyProxy/www/flags/gu.gif
-
PsyProxy/www/flags/gw.gif
-
PsyProxy/www/flags/gy.gif
-
PsyProxy/www/flags/hk.gif
-
PsyProxy/www/flags/hr.gif
-
PsyProxy/www/flags/ht.gif
-
PsyProxy/www/flags/hu.gif
-
PsyProxy/www/flags/id.gif
-
PsyProxy/www/flags/ie.gif
-
PsyProxy/www/flags/il.gif
-
PsyProxy/www/flags/in.gif
-
PsyProxy/www/flags/iq.gif
-
PsyProxy/www/flags/ir.gif
-
PsyProxy/www/flags/is.gif
-
PsyProxy/www/flags/it.gif
-
PsyProxy/www/flags/jm.gif
-
PsyProxy/www/flags/jo.gif
-
PsyProxy/www/flags/jp.gif
-
PsyProxy/www/flags/ke.gif
-
PsyProxy/www/flags/kg.gif
-
PsyProxy/www/flags/kh.gif
-
PsyProxy/www/flags/ki.gif
-
PsyProxy/www/flags/kp.gif
-
PsyProxy/www/flags/kr.gif
-
PsyProxy/www/flags/ky.gif
-
PsyProxy/www/flags/kz.gif
-
PsyProxy/www/flags/lb.gif
-
PsyProxy/www/flags/lk.gif
-
PsyProxy/www/flags/lt.gif
-
PsyProxy/www/flags/lu.gif
-
PsyProxy/www/flags/lv.gif
-
PsyProxy/www/flags/ly.gif
-
PsyProxy/www/flags/ma.gif
-
PsyProxy/www/flags/mc.gif
-
PsyProxy/www/flags/md.gif
-
PsyProxy/www/flags/mg.gif
-
PsyProxy/www/flags/mn.gif
-
PsyProxy/www/flags/mo.gif
-
PsyProxy/www/flags/mp.gif
-
PsyProxy/www/flags/ms.gif
-
PsyProxy/www/flags/mt.gif
-
PsyProxy/www/flags/mx.gif
-
PsyProxy/www/flags/my.gif
-
PsyProxy/www/flags/mz.gif
-
PsyProxy/www/flags/na.gif
-
PsyProxy/www/flags/nc.gif
-
PsyProxy/www/flags/nf.gif
-
PsyProxy/www/flags/nl.gif
-
PsyProxy/www/flags/no.gif
-
PsyProxy/www/flags/np.gif
-
PsyProxy/www/flags/nr.gif
-
PsyProxy/www/flags/nz.gif
-
PsyProxy/www/flags/om.gif
-
PsyProxy/www/flags/pa.gif
-
PsyProxy/www/flags/pe.gif
-
PsyProxy/www/flags/pf.gif
-
PsyProxy/www/flags/ph.gif
-
PsyProxy/www/flags/pk.gif
-
PsyProxy/www/flags/pl.gif
-
PsyProxy/www/flags/pm.gif
-
PsyProxy/www/flags/pr.gif
-
PsyProxy/www/flags/pt.gif
-
PsyProxy/www/flags/py.gif
-
PsyProxy/www/flags/qa.gif
-
PsyProxy/www/flags/ro.gif
-
PsyProxy/www/flags/ru.gif
-
PsyProxy/www/flags/sa.gif
-
PsyProxy/www/flags/sb.gif
-
PsyProxy/www/flags/sd.gif
-
PsyProxy/www/flags/se.gif
-
PsyProxy/www/flags/sg.gif
-
PsyProxy/www/flags/si.gif
-
PsyProxy/www/flags/sk.gif
-
PsyProxy/www/flags/sl.gif
-
PsyProxy/www/flags/so.gif
-
PsyProxy/www/flags/sr.gif
-
PsyProxy/www/flags/sy.gif
-
PsyProxy/www/flags/tc.gif
-
PsyProxy/www/flags/tg.gif
-
PsyProxy/www/flags/th.gif
-
PsyProxy/www/flags/tn.gif
-
PsyProxy/www/flags/to.gif
-
PsyProxy/www/flags/tr.gif
-
PsyProxy/www/flags/tt.gif
-
PsyProxy/www/flags/tv.gif
-
PsyProxy/www/flags/tw.gif
-
PsyProxy/www/flags/tz.gif
-
PsyProxy/www/flags/ua.gif
-
PsyProxy/www/flags/ug.gif
-
PsyProxy/www/flags/us.gif
-
PsyProxy/www/flags/uy.gif
-
PsyProxy/www/flags/va.gif
-
PsyProxy/www/flags/ve.gif
-
PsyProxy/www/flags/vg.gif
-
PsyProxy/www/flags/vi.gif
-
PsyProxy/www/flags/vn.gif
-
PsyProxy/www/flags/wf.gif
-
PsyProxy/www/flags/ws.gif
-
PsyProxy/www/flags/ye.gif
-
PsyProxy/www/flags/yu.gif
-
PsyProxy/www/flags/za.gif
-
PsyProxy/www/flags/zw.gif
-
PsyProxy/www/get.php
-
PsyProxy/www/getsocks.php
-
PsyProxy/www/index.php
-
PsyProxy/www/info.php
-
PsyProxy/www/libs/Config_File.class.php
-
PsyProxy/www/libs/Smarty.class.php
-
PsyProxy/www/libs/Smarty_Compiler.class.php
-
PsyProxy/www/libs/Smartyk_Compiler.class.php
-
PsyProxy/www/libs/debug.tpl
-
PsyProxy/www/libs/internals/core.assemble_plugin_filepath.php
-
PsyProxy/www/libs/internals/core.assign_smarty_interface.php
-
PsyProxy/www/libs/internals/core.create_dir_structure.php
-
PsyProxy/www/libs/internals/core.display_debug_console.php
-
PsyProxy/www/libs/internals/core.get_include_path.php
-
PsyProxy/www/libs/internals/core.get_microtime.php
-
PsyProxy/www/libs/internals/core.get_php_resource.php
-
PsyProxy/www/libs/internals/core.is_secure.php
-
PsyProxy/www/libs/internals/core.is_trusted.php
-
PsyProxy/www/libs/internals/core.load_plugins.php
-
PsyProxy/www/libs/internals/core.load_resource_plugin.php
-
PsyProxy/www/libs/internals/core.process_cached_inserts.php
-
PsyProxy/www/libs/internals/core.process_compiled_include.php
-
PsyProxy/www/libs/internals/core.read_cache_file.php
-
PsyProxy/www/libs/internals/core.rm_auto.php
-
PsyProxy/www/libs/internals/core.rmdir.php
-
PsyProxy/www/libs/internals/core.run_insert_handler.php
-
PsyProxy/www/libs/internals/core.smarty_include_php.php
-
PsyProxy/www/libs/internals/core.write_cache_file.php
-
PsyProxy/www/libs/internals/core.write_compiled_include.php
-
PsyProxy/www/libs/internals/core.write_compiled_resource.php
-
PsyProxy/www/libs/internals/core.write_file.php
-
PsyProxy/www/libs/plugins/block.textformat.php
-
PsyProxy/www/libs/plugins/compiler.assign.php
-
PsyProxy/www/libs/plugins/function.assign_debug_info.php
-
PsyProxy/www/libs/plugins/function.config_load.php
-
PsyProxy/www/libs/plugins/function.counter.php
-
PsyProxy/www/libs/plugins/function.cycle.php
-
PsyProxy/www/libs/plugins/function.debug.php
-
PsyProxy/www/libs/plugins/function.eval.php
-
PsyProxy/www/libs/plugins/function.fetch.php
-
PsyProxy/www/libs/plugins/function.html_checkboxes.php
-
PsyProxy/www/libs/plugins/function.html_image.php
-
PsyProxy/www/libs/plugins/function.html_options.php
-
PsyProxy/www/libs/plugins/function.html_radios.php
-
PsyProxy/www/libs/plugins/function.html_select_date.php
-
PsyProxy/www/libs/plugins/function.html_select_time.php
-
PsyProxy/www/libs/plugins/function.html_table.php
-
PsyProxy/www/libs/plugins/function.mailto.php
-
PsyProxy/www/libs/plugins/function.math.php
-
PsyProxy/www/libs/plugins/function.popup.php
-
PsyProxy/www/libs/plugins/function.popup_init.php
-
PsyProxy/www/libs/plugins/modifier.capitalize.php
-
PsyProxy/www/libs/plugins/modifier.cat.php
-
PsyProxy/www/libs/plugins/modifier.count_characters.php
-
PsyProxy/www/libs/plugins/modifier.count_paragraphs.php
-
PsyProxy/www/libs/plugins/modifier.count_sentences.php
-
PsyProxy/www/libs/plugins/modifier.count_words.php
-
PsyProxy/www/libs/plugins/modifier.date_format.php
-
PsyProxy/www/libs/plugins/modifier.debug_print_var.php
-
PsyProxy/www/libs/plugins/modifier.default.php
-
PsyProxy/www/libs/plugins/modifier.escape.php
-
PsyProxy/www/libs/plugins/modifier.indent.php
-
PsyProxy/www/libs/plugins/modifier.lower.php
-
PsyProxy/www/libs/plugins/modifier.nl2br.php
-
PsyProxy/www/libs/plugins/modifier.regex_replace.php
-
PsyProxy/www/libs/plugins/modifier.replace.php
-
PsyProxy/www/libs/plugins/modifier.spacify.php
-
PsyProxy/www/libs/plugins/modifier.string_format.php
-
PsyProxy/www/libs/plugins/modifier.strip.php
-
PsyProxy/www/libs/plugins/modifier.strip_tags.php
-
PsyProxy/www/libs/plugins/modifier.truncate.php
-
PsyProxy/www/libs/plugins/modifier.upper.php
-
PsyProxy/www/libs/plugins/modifier.wordwrap.php
-
PsyProxy/www/libs/plugins/outputfilter.trimwhitespace.php
-
PsyProxy/www/libs/plugins/shared.escape_special_chars.php
-
PsyProxy/www/libs/plugins/shared.make_timestamp.php
-
PsyProxy/www/stat.php
-
PsyProxy/www/style.css
-
PsyProxy/www/templates/admin.tpl
-
PsyProxy/www/templates/auth.tpl
-
PsyProxy/www/templates/dloader.tpl
-
PsyProxy/www/templates/form.tpl
-
PsyProxy/www/templates/index.tpl
-
PsyProxy/www/templates/info.tpl
-
PsyProxy/www/templates/main.tpl
-
PsyProxy/www/templates/upd.tpl
-
PsyProxy/www/upd.php