Overview
overview
3Static
static
1FNBODIRECT...ter.js
windows7-x64
1FNBODIRECT...ter.js
windows10-2004-x64
1FNBODIRECT...XoC.js
windows7-x64
1FNBODIRECT...XoC.js
windows10-2004-x64
1FNBODIRECT...kn.ps1
windows7-x64
1FNBODIRECT...kn.ps1
windows10-2004-x64
1FNBODIRECT...er.ps1
windows7-x64
1FNBODIRECT...er.ps1
windows10-2004-x64
1FNBODIRECT...ct.xml
windows7-x64
1FNBODIRECT...ct.xml
windows10-2004-x64
3FNBODIRECT...ask.js
windows7-x64
1FNBODIRECT...ask.js
windows10-2004-x64
1FNBODIRECT...er.ps1
windows7-x64
1FNBODIRECT...er.ps1
windows10-2004-x64
1FNBODIRECT...st.ps1
windows7-x64
1FNBODIRECT...st.ps1
windows10-2004-x64
1FNBODIRECT...ns.ps1
windows7-x64
1FNBODIRECT...ns.ps1
windows10-2004-x64
1FNBODIRECT...or.ps1
windows7-x64
1FNBODIRECT...or.ps1
windows10-2004-x64
1FNBODIRECT...a.html
windows7-x64
1FNBODIRECT...a.html
windows10-2004-x64
1FNBODIRECT...x.html
windows7-x64
1FNBODIRECT...x.html
windows10-2004-x64
1FNBODIRECT...n.html
windows7-x64
1FNBODIRECT...n.html
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
FNBODIRECT[MRWEEBEE]/login/Bots/blacklister.js
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
FNBODIRECT[MRWEEBEE]/login/Bots/blacklister.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
FNBODIRECT[MRWEEBEE]/login/Bots/bot/SfnZqYH0LCSzlXoC.js
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
FNBODIRECT[MRWEEBEE]/login/Bots/bot/SfnZqYH0LCSzlXoC.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
FNBODIRECT[MRWEEBEE]/login/Bots/bot/dAsQH7TJ4Jk8Eukn.ps1
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
FNBODIRECT[MRWEEBEE]/login/Bots/bot/dAsQH7TJ4Jk8Eukn.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
FNBODIRECT[MRWEEBEE]/login/Bots/fucker.ps1
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
FNBODIRECT[MRWEEBEE]/login/Bots/fucker.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
FNBODIRECT[MRWEEBEE]/login/ses/files/logo-fnbodirect.xml
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
FNBODIRECT[MRWEEBEE]/login/ses/files/logo-fnbodirect.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
FNBODIRECT[MRWEEBEE]/login/ses/files/mask.js
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
FNBODIRECT[MRWEEBEE]/login/ses/files/mask.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/ClassLoader.ps1
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/ClassLoader.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/inacho/php-credit-card-validator/tests/Test.ps1
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/inacho/php-credit-card-validator/tests/Test.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/src/Domains.ps1
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/src/Domains.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/src/Validator.ps1
Resource
win7-20230712-en
Behavioral task
behavioral20
Sample
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/src/Validator.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
FNBODIRECT[MRWEEBEE]/login/ses/session_emma.html
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
FNBODIRECT[MRWEEBEE]/login/ses/session_emma.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
FNBODIRECT[MRWEEBEE]/login/ses/session_index.html
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
FNBODIRECT[MRWEEBEE]/login/ses/session_index.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
FNBODIRECT[MRWEEBEE]/login/ses/session_login.html
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
FNBODIRECT[MRWEEBEE]/login/ses/session_login.html
Resource
win10v2004-20230703-en
General
-
Target
3d6c17086299fc6615fcaf679fe573e6524555ea214961beb295bb93e133c1bd
-
Size
2.2MB
-
MD5
84e6844dfd1189b83d1d312da4768917
-
SHA1
aade669e2f285ccacde2e5afb95d0a0adaec9539
-
SHA256
3d6c17086299fc6615fcaf679fe573e6524555ea214961beb295bb93e133c1bd
-
SHA512
62c8bcb5e54cdeff2de6311f7f4b18a41eeed3fc083b8e640e56288dee99c573a3806ce2ada2e0a994cfe3cdf65fa6ed6d33cb16638a9e6500e8961e11b106fc
-
SSDEEP
49152:Qk6m4Ak6m49k6m4zk6m4Rk6m4U3d4k6m4Lk6m4Lk6m4z/k6m43R3RGxjyk6m41p7:HdAdndhdPdbddxdndBdkR+xdEOdPdldu
Malware Config
Signatures
Files
-
3d6c17086299fc6615fcaf679fe573e6524555ea214961beb295bb93e133c1bd.zip
-
FNBODIRECT[MRWEEBEE]/.htaccess
-
FNBODIRECT[MRWEEBEE]/Logs/.htaccess
-
FNBODIRECT[MRWEEBEE]/dead.php
-
FNBODIRECT[MRWEEBEE]/index.php
-
FNBODIRECT[MRWEEBEE]/login/.htaccess
-
FNBODIRECT[MRWEEBEE]/login/Bots/.htaccess
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/.htaccess
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/.htaccess
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/.htaccess
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/LICENSE
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/README.md
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/composer.json
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/export.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/raw/.htaccess
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/raw/Crawlers.json
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/raw/Crawlers.txt
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/raw/Exclusions.json
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/raw/Exclusions.txt
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/raw/Headers.json
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/raw/Headers.txt
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/raw/index.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/.htaccess
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/CrawlerDetect.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/Fixtures/.htaccess
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/Fixtures/AbstractProvider.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/Fixtures/AbstractReff.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/Fixtures/Crawlers.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/Fixtures/Exclusions.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/Fixtures/Headers.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/Fixtures/Headerspam.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/Fixtures/SpamReferrers.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/Crawler/src/ReferralSpamDetect.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/anti.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/blacklist.dat
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/blacklist.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/bot-crawler.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/bots.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/ref.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/Anti/out/whitelist.dat
-
FNBODIRECT[MRWEEBEE]/login/Bots/blacklist.dat
-
FNBODIRECT[MRWEEBEE]/login/Bots/blacklister.php.js
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/78MhStYkx0gUYL4m.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Antibot/.htaccess
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Antibot/AntibotHostname.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Antibot/AntibotInternetserviceprovider.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Antibot/AntibotProxyserver.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Antibot/AntibotUseragent.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Antibot/AntibotVirtualprivatenetwork.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Antibot/Antibotasn.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Antibot/Antibotcountry.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Antibot/Antibotcrawlerdetect.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/CrawlerDetect/CrawlerDetect.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/CrawlerDetect/Fixtures/AbstractProvider.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/CrawlerDetect/Fixtures/AbstractReff.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/CrawlerDetect/Fixtures/Crawlers.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/CrawlerDetect/Fixtures/Exclusions.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/CrawlerDetect/Fixtures/Headers.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/CrawlerDetect/Fixtures/Headerspam.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/CrawlerDetect/Fixtures/SpamReferrers.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/CrawlerDetect/ReferralSpamDetect.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/N55U0DLENwqKvrr9.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Server/.htaccess
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Server/LkQUeQHMtwG2kxe9.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Server/asn.dat
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Server/blacklist.dat
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Server/hostname.dat
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Server/isp.dat
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Server/ua-full.dat
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Server/useragent.dat
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/Server/whitelist.dat
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/SfnZqYH0LCSzlXoC.php.js
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/config.ini
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/crawlerdetect.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/dAsQH7TJ4Jk8Eukn.php.ps1
-
FNBODIRECT[MRWEEBEE]/login/Bots/bot/index.php
-
FNBODIRECT[MRWEEBEE]/login/Bots/fucker.php.ps1
-
FNBODIRECT[MRWEEBEE]/login/Bots/whitelist.dat
-
FNBODIRECT[MRWEEBEE]/login/index.php
-
FNBODIRECT[MRWEEBEE]/login/robots.txt
-
FNBODIRECT[MRWEEBEE]/login/ses/.htaccess
-
FNBODIRECT[MRWEEBEE]/login/ses/files/checkbox-sign-in-widget.png.png
-
FNBODIRECT[MRWEEBEE]/login/ses/files/custom-signin.241e0fb439244dc50c5929c0513a6765.css
-
FNBODIRECT[MRWEEBEE]/login/ses/files/favicon.ico
-
FNBODIRECT[MRWEEBEE]/login/ses/files/logo-fnbodirect.svg.xml
-
FNBODIRECT[MRWEEBEE]/login/ses/files/main.css
-
FNBODIRECT[MRWEEBEE]/login/ses/files/mask.js.js
-
FNBODIRECT[MRWEEBEE]/login/ses/files/montserrat-light-webfont.woff
-
FNBODIRECT[MRWEEBEE]/login/ses/files/montserrat-regular-webfont.woff
-
FNBODIRECT[MRWEEBEE]/login/ses/files/okta-sign-in.min.css
-
FNBODIRECT[MRWEEBEE]/login/ses/files/okticon.woff
-
FNBODIRECT[MRWEEBEE]/login/ses/files/styles.bdb4cd4fc9a49b85ea4a.css
-
FNBODIRECT[MRWEEBEE]/login/ses/process/.htaccess
-
FNBODIRECT[MRWEEBEE]/login/ses/process/composer.json
-
FNBODIRECT[MRWEEBEE]/login/ses/process/composer.lock
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/autoload.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/ClassLoader.php.ps1
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/InstalledVersions.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/LICENSE
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/autoload_classmap.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/autoload_namespaces.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/autoload_psr4.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/autoload_real.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/autoload_static.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/installed.json
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/installed.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/composer/platform_check.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/inacho/php-credit-card-validator/.gitignore
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/inacho/php-credit-card-validator/LICENSE
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/inacho/php-credit-card-validator/README.md
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/inacho/php-credit-card-validator/composer.json
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/inacho/php-credit-card-validator/src/CreditCard.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/inacho/php-credit-card-validator/tests/Test.php.ps1
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/LICENSE
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/README.md
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/composer.json
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/composer.lock
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/data/disposable.json
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/data/disposable.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/data/disposable.txt
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/src/Data.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/src/Domains.php.ps1
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/src/Exporter/BaseInterface.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/src/Exporter/Json.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/src/Exporter/Php.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/src/Exporter/Text.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/src/Getter/Json.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-data-disposable/src/Getter/Newline.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/.gitignore
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/.travis.yml
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/LICENSE
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/README.md
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/composer.json
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/composer.lock
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/phpunit.xml.xml
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/src/Validator.php.ps1
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/src/data/role.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/tests/HasMxTest.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/tests/IsDisposableTest.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/tests/IsEmailTest.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/tests/IsExampleTest.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/tests/IsRoleTest.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/tests/IsSendableTest.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/vendor/nojacko/email-validator/tests/IsValidTest.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/verify_session_card.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/verify_session_emma.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/verify_session_index.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/verify_session_login.php
-
FNBODIRECT[MRWEEBEE]/login/ses/process/verify_session_personal.php
-
FNBODIRECT[MRWEEBEE]/login/ses/session_card.php.html .js
-
FNBODIRECT[MRWEEBEE]/login/ses/session_emma.php.html
-
FNBODIRECT[MRWEEBEE]/login/ses/session_index.php.html
-
FNBODIRECT[MRWEEBEE]/login/ses/session_login.php.html
-
FNBODIRECT[MRWEEBEE]/login/ses/session_personal.php.html .js
-
FNBODIRECT[MRWEEBEE]/robots.txt
-
FNBODIRECT[MRWEEBEE]/settings/.htaccess
-
FNBODIRECT[MRWEEBEE]/settings/index.php
-
FNBODIRECT[MRWEEBEE]/settings/settings.php
-
FNBODIRECT[MRWEEBEE]/temp.txt