Static task
static1
Behavioral task
behavioral1
Sample
f3262274c0bcba86219b148d7d12eb51293959090c9914cf5347a02032d2fdd6.zip
Resource
win7-20230831-es
Behavioral task
behavioral2
Sample
f3262274c0bcba86219b148d7d12eb51293959090c9914cf5347a02032d2fdd6.zip
Resource
win10v2004-20230915-es
General
-
Target
f3262274c0bcba86219b148d7d12eb51293959090c9914cf5347a02032d2fdd6.zip.zip
-
Size
4.8MB
-
MD5
4df6f582c3e628012b2def84d578ff97
-
SHA1
0a9ce16c87839ae6615d6b3992faa18832b8b520
-
SHA256
46b26f573c1cd27de80d424813708da896406c34257f59f6455d86477aa4347c
-
SHA512
717be0af4c858311226eedacddc26591b8e41a82c70c3b972bac1d04c74e8c5eca5618ede523a4edd34fb527b4b693ede4aa83ecba4769b9f1e8e2b2083228b3
-
SSDEEP
98304:11tP7q5+/3gQEfqODXhSw+4bvLlYI9DBfFgSHG2ozui4XEyXzK5L6XO32OJBE:/tP7e+fgCODH+4bvL/RVFgSHlXzK5d34
Malware Config
Signatures
Files
-
f3262274c0bcba86219b148d7d12eb51293959090c9914cf5347a02032d2fdd6.zip.zip.zip
Password: infected
-
f3262274c0bcba86219b148d7d12eb51293959090c9914cf5347a02032d2fdd6.zip.zip
-
CR51/Assets/_get/css/index.php.html
-
CR51/Assets/_get/css/kntl.css
-
CR51/Assets/_get/css/kntl1.min.css
-
CR51/Assets/_get/css/kntl2.min.css
-
CR51/Assets/_get/css/kntl3.css
-
CR51/Assets/_get/css/kntl4.css
-
CR51/Assets/_get/css/kntl5.css
-
CR51/Assets/_get/css/style.secure.css
-
CR51/Assets/_get/font/PayPalSansBig-Medium.woff2
-
CR51/Assets/_get/font/PayPalSansBig-Regular.woff2
-
CR51/Assets/_get/font/index.php.html
-
CR51/Assets/_get/img/alert_list.png.png
-
CR51/Assets/_get/img/check_list.png.png
-
CR51/Assets/_get/img/cvv.png.png
-
CR51/Assets/_get/img/favi.ico
-
CR51/Assets/_get/img/favi.png.png
-
CR51/Assets/_get/img/favicon.ico
-
CR51/Assets/_get/img/index.php.html
-
CR51/Assets/_get/img/jcb.png.png
-
CR51/Assets/_get/img/list_c.png.png
-
CR51/Assets/_get/img/logo_official.png.png
-
CR51/Assets/_get/img/logo_official.svg.xml
-
CR51/Assets/_get/img/mastercard.png.png
-
CR51/Assets/_get/img/pp115.png.png
-
CR51/Assets/_get/img/pp144.png.png
-
CR51/Assets/_get/img/pp196.png.png
-
CR51/Assets/_get/img/pp32.png.png
-
CR51/Assets/_get/img/pp64.png.png
-
CR51/Assets/_get/img/pp72.png.png
-
CR51/Assets/_get/img/ssl.png.png
-
CR51/Assets/_get/img/success.png.png
-
CR51/Assets/_get/img/visa.png.png
-
CR51/Assets/_get/index.php.html
-
CR51/Assets/_get/js/additional-methods.min.js.js
-
CR51/Assets/_get/js/index.php.html
-
CR51/Assets/_get/js/jquery-3.3.1.min.js.js
-
CR51/Assets/_get/js/jquery.mask.min.js.js
-
CR51/Assets/_get/js/jquery.validate.min.js.js
-
CR51/Assets/_get/js/kntl-bau.js.js
-
CR51/Assets/_get/js/kntl.js.js
-
CR51/Assets/_pale/css/blue.css
-
CR51/Assets/_pale/css/enroll.css
-
CR51/Assets/_pale/css/index.php.html
-
CR51/Assets/_pale/css/main.css
-
CR51/Assets/_pale/css/style.css
-
CR51/Assets/_pale/fonts/dcefont.eot
-
CR51/Assets/_pale/fonts/dcefont.svg.xml
-
CR51/Assets/_pale/fonts/dcefont.ttf
-
CR51/Assets/_pale/fonts/dcefont.woff
-
CR51/Assets/_pale/fonts/index.php.html
-
CR51/Assets/_pale/fonts/mds-chase-icons.eot
-
CR51/Assets/_pale/fonts/mds-chase-icons.ttf
-
CR51/Assets/_pale/fonts/mds-chase-icons.woff
-
CR51/Assets/_pale/fonts/opensans-bold.woff
-
CR51/Assets/_pale/fonts/opensans-light.svg.xml
-
CR51/Assets/_pale/fonts/opensans-light.ttf
-
CR51/Assets/_pale/fonts/opensans-light.woff
-
CR51/Assets/_pale/fonts/opensans-regular.eot
-
CR51/Assets/_pale/fonts/opensans-regular.svg.xml
-
CR51/Assets/_pale/fonts/opensans-regular.ttf
-
CR51/Assets/_pale/fonts/opensans-regular.woff
-
CR51/Assets/_pale/fonts/opensans-semibold.eot
-
CR51/Assets/_pale/fonts/opensans-semibold.svg.xml
-
CR51/Assets/_pale/fonts/opensans-semibold.ttf
-
CR51/Assets/_pale/fonts/opensans-semibold.woff
-
CR51/Assets/_pale/fonts/video-icon.eot
-
CR51/Assets/_pale/fonts/video-icon.svg
-
CR51/Assets/_pale/fonts/video-icon.woff
-
CR51/Assets/_pale/fonts/videoplayer.eot
-
CR51/Assets/_pale/fonts/videoplayer.svg.xml
-
CR51/Assets/_pale/fonts/videoplayer.ttf
-
CR51/Assets/_pale/fonts/videoplayer.woff
-
CR51/Assets/_pale/img/background.desktop.day.1.jpeg.jpg
-
CR51/Assets/_pale/img/background.mobile.day.1.jpeg.jpg
-
CR51/Assets/_pale/img/background.tablet.day.1.jpeg.jpg
-
CR51/Assets/_pale/img/chase-touch-icon-120x120.png.png
-
CR51/Assets/_pale/img/chase-touch-icon-152x152.png.png
-
CR51/Assets/_pale/img/chase-touch-icon-76x76.png.png
-
CR51/Assets/_pale/img/chase-touch-icon.png.png
-
CR51/Assets/_pale/img/favicon.ico
-
CR51/Assets/_pale/img/index.php.html
-
CR51/Assets/_pale/img/octagon.png.png
-
CR51/Assets/_pale/img/success.png.png
-
CR51/Assets/_pale/img/wordmark-white.svg
-
CR51/Assets/_pale/index.php.html
-
CR51/Assets/_pale/js/index.php.html
-
CR51/Assets/_pale/js/jquery-3.3.1.min.js.js
-
CR51/Assets/_pale/js/jquery.creditCardValidator.js.js
-
CR51/Assets/_pale/js/jquery.mask.min.js.js
-
CR51/Assets/_titit/css/abpa-foundation.css
-
CR51/Assets/_titit/css/abpa-responsive.css
-
CR51/Assets/_titit/css/bact_listview.css
-
CR51/Assets/_titit/css/bactouch.css
-
CR51/Assets/_titit/css/footer.css
-
CR51/Assets/_titit/css/index.php.html
-
CR51/Assets/_titit/css/slidemenu.css
-
CR51/Assets/_titit/css/toolbar.css
-
CR51/Assets/_titit/css/vipaa-v4-jawr-print.css
-
CR51/Assets/_titit/css/vipaa-v4-jawr.css
-
CR51/Assets/_titit/font/Responsive_Application.eot
-
CR51/Assets/_titit/font/Responsive_Application.ttf
-
CR51/Assets/_titit/font/Responsive_Application.woff
-
CR51/Assets/_titit/font/cnx-regular.eot
-
CR51/Assets/_titit/font/cnx-regular.ttf
-
CR51/Assets/_titit/font/cnx-regular.woff
-
CR51/Assets/_titit/font/connections_medium-web.eot
-
CR51/Assets/_titit/font/connections_medium-web.ttf
-
CR51/Assets/_titit/font/connections_medium-web.woff
-
CR51/Assets/_titit/font/connections_regular-web.eot
-
CR51/Assets/_titit/font/connections_regular-web.ttf
-
CR51/Assets/_titit/font/connections_regular-web.woff
-
CR51/Assets/_titit/font/index.php.html
-
CR51/Assets/_titit/img/1blue-2white-brd.png.png
-
CR51/Assets/_titit/img/1gray-2white-brd.png.png
-
CR51/Assets/_titit/img/BofA_rgb.png.png
-
CR51/Assets/_titit/img/EHLbrown.png.png
-
CR51/Assets/_titit/img/Rebranding-SigninHistory-sc-sprite-201904.png.png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/aps-mobile-products-icon-sprite-dev.png.png
-
CR51/Assets/_titit/img/assets-images-global-favicon-android-chrome-192x192-CSXafb7d716.png.png
-
CR51/Assets/_titit/img/assets-images-global-favicon-apple-touch-icon-CSX889b28c.png.png
-
CR51/Assets/_titit/img/assets-images-global-favicon-favicon-16x16-CSXaaa5ca4e.png.png
-
CR51/Assets/_titit/img/assets-images-global-favicon-favicon-32x32-CSX704d6b21.png.png
-
CR51/Assets/_titit/img/assets-images-global-favicon-favicon-CSX8d65d6e4.ico
-
CR51/Assets/_titit/img/assets-images-global-favicon-mstile-144x144-CSX80890b22.png.png
-
CR51/Assets/_titit/img/assets-images-global-favicon-safari-pinned-tab-CSX1aebeef6.svg.xml
-
CR51/Assets/_titit/img/assets-images-global-logos-BofA_rgb-CSX5624a146.svg.xml
-
CR51/Assets/_titit/img/background.png.png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/chevron_hit.png.png
-
CR51/Assets/_titit/img/clear_input_icns.png.png
-
CR51/Assets/_titit/img/close.png.png
-
CR51/Assets/_titit/img/common-btm.gif.gif
-
CR51/Assets/_titit/img/error-large.gif.gif
-
CR51/Assets/_titit/img/error_icon_2x.svg.xml
-
CR51/Assets/_titit/img/favicon.ico
-
CR51/Assets/_titit/img/flipbutton.png.png
-
CR51/Assets/_titit/img/flitered.png.png
-
CR51/Assets/_titit/img/fsd-secure-esp-sprite.png.png
-
CR51/Assets/_titit/img/gfoot-home-icon.png.png
-
CR51/Assets/_titit/img/gfootb-static-sprite.png.png
-
CR51/Assets/_titit/img/greybullet.gif.gif
-
CR51/Assets/_titit/img/hamburger_off.png.png
-
CR51/Assets/_titit/img/hamburger_on.png.png
-
CR51/Assets/_titit/img/header.png.png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/help-qm-fsd.png.png
-
CR51/Assets/_titit/img/home-loan-nav-logo.svg.xml
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/index.php.html
-
CR51/Assets/_titit/img/info_icon_2x.svg
-
CR51/Assets/_titit/img/loading.gif.gif
-
CR51/Assets/_titit/img/loadingLarge.gif.gif
-
CR51/Assets/_titit/img/lock_icon.png.png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/logo.png.png
-
CR51/Assets/_titit/img/message.png.png
-
CR51/Assets/_titit/img/mobile_llama.png.png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/multi.png.png
-
CR51/Assets/_titit/img/[email protected].png
-
CR51/Assets/_titit/img/placeholder_for_logo.png.png
-
CR51/Assets/_titit/img/responsive.svg
-
CR51/Assets/_titit/img/sc-sprite.png.png
-
CR51/Assets/_titit/img/search_icn.png.png
-
CR51/Assets/_titit/img/secure_lock.png.png
-
CR51/Assets/_titit/img/sign-in-sprite.png.png
-
CR51/Assets/_titit/img/signout_icn.png.png
-
CR51/Assets/_titit/img/spinner.gif.gif
-
CR51/Assets/_titit/img/sprite_input.png.png
-
CR51/Assets/_titit/img/toggle.png.png
-
CR51/Assets/_titit/index.php.html
-
CR51/Assets/_titit/js/additional-methods.min.js.js
-
CR51/Assets/_titit/js/index.php.html
-
CR51/Assets/_titit/js/jquery-3.3.1.min.js.js
-
CR51/Assets/_titit/js/jquery.creditCardValidator.js.js
-
CR51/Assets/_titit/js/jquery.mask.min.js.js
-
CR51/Assets/_titit/js/jquery.validate.min.js.js
-
CR51/Assets/css/bootstrap.min.css
-
CR51/Assets/css/cr51.install.style.css
-
CR51/Assets/css/demo.css
-
CR51/Assets/css/main.min.css
-
CR51/Assets/css/ready.css
-
CR51/Assets/css/ready.css.map
-
CR51/Assets/css/ready.min.css
-
CR51/Assets/email/css/boostrap.min.css
-
CR51/Assets/email/css/index.php.html
-
CR51/Assets/email/css/main.css
-
CR51/Assets/email/css/main2.css
-
CR51/Assets/email/css/main3.css
-
CR51/Assets/email/img/aol-favicon.png.png
-
CR51/Assets/email/img/aol-logo-black-v.0.0.2.png.png
-
CR51/Assets/email/img/arrow.svg
-
CR51/Assets/email/img/background.svg
-
CR51/Assets/email/img/ellipsis.svg
-
CR51/Assets/email/img/favicon.ico
-
CR51/Assets/email/img/favicony.ico
-
CR51/Assets/email/img/index.php.html
-
CR51/Assets/email/img/logo.png.png
-
CR51/Assets/email/img/logo.svg
-
CR51/Assets/email/index.php.html
-
CR51/Assets/fonts/line-awesome.eot
-
CR51/Assets/fonts/line-awesome.svg.xml
-
CR51/Assets/fonts/line-awesome.ttf
-
CR51/Assets/fonts/line-awesome.woff
-
CR51/Assets/fonts/line-awesome.woff2
-
CR51/Assets/img/menu.png.png
-
CR51/Assets/img/menu2.png.png
-
CR51/Assets/img/profile.jpg
-
CR51/Assets/img/profile2.jpg
-
CR51/Assets/js/core/bootstrap.min.js.js
-
CR51/Assets/js/core/jquery.3.2.1.min.js.js
-
CR51/Assets/js/core/popper.min.js.js
-
CR51/Assets/js/cr51.install.script.js.js
-
CR51/Assets/js/demo.js.js
-
CR51/Assets/js/plugin/bootstrap-notify/bootstrap-notify.min.js.js
-
CR51/Assets/js/plugin/bootstrap-toggle/bootstrap-toggle.min.js.js
-
CR51/Assets/js/plugin/chart-circle/circles.min.js.js
-
CR51/Assets/js/plugin/chartist/chartist.min.js.js
-
CR51/Assets/js/plugin/chartist/plugin/chartist-plugin-tooltip.min.js.js
-
CR51/Assets/js/plugin/jquery-mapael/jquery.mapael.min.js.js
-
CR51/Assets/js/plugin/jquery-mapael/maps/README.txt
-
CR51/Assets/js/plugin/jquery-mapael/maps/france_departments.js.js
-
CR51/Assets/js/plugin/jquery-mapael/maps/france_departments.min.js.js
-
CR51/Assets/js/plugin/jquery-mapael/maps/usa_states.js.js
-
CR51/Assets/js/plugin/jquery-mapael/maps/usa_states.min.js.js
-
CR51/Assets/js/plugin/jquery-mapael/maps/world_countries.js.js
-
CR51/Assets/js/plugin/jquery-mapael/maps/world_countries.min.js
-
CR51/Assets/js/plugin/jquery-mapael/maps/world_countries_mercator.js.js
-
CR51/Assets/js/plugin/jquery-mapael/maps/world_countries_mercator.min.js.js
-
CR51/Assets/js/plugin/jquery-mapael/maps/world_countries_miller.js.js
-
CR51/Assets/js/plugin/jquery-mapael/maps/world_countries_miller.min.js.js
-
CR51/Assets/js/plugin/jquery-scrollbar/jquery.scrollbar.min.js.js
-
CR51/Assets/js/plugin/jquery-ui-1.12.1.custom/jquery-ui.min.js.js
-
CR51/Assets/js/ready.js.js
-
CR51/Assets/js/ready.min.js.js
-
CR51/Assets/kintil/css/2.0440f8c5.chunk.css
-
CR51/Assets/kintil/css/779.1aab8142ee7fd4e997ad.css
-
CR51/Assets/kintil/css/dist-bundle-71fc56d.css
-
CR51/Assets/kintil/css/dist-noscript-styles-71fc56d.css
-
CR51/Assets/kintil/css/main.1aab8142ee7fd4e997ad.css
-
CR51/Assets/kintil/css/main.9782ed4d.chunk.css
-
CR51/Assets/kintil/css/prism-ui-prism-ui-71fc56d.css
-
CR51/Assets/kintil/favicons/favicon-android-icon-192x192.png.png
-
CR51/Assets/kintil/favicons/favicon-apple-icon-114x114.png.png
-
CR51/Assets/kintil/favicons/favicon-apple-icon-120x120.png.png
-
CR51/Assets/kintil/favicons/favicon-apple-icon-144x144.png.png
-
CR51/Assets/kintil/favicons/favicon-apple-icon-152x152.png.png
-
CR51/Assets/kintil/favicons/favicon-apple-icon-180x180.png.png
-
CR51/Assets/kintil/favicons/favicon-apple-icon-57x57.png.png
-
CR51/Assets/kintil/favicons/favicon-apple-icon-60x60.png.png
-
CR51/Assets/kintil/favicons/favicon-apple-icon-72x72.png.html
-
CR51/Assets/kintil/favicons/favicon-apple-icon-76x76.png.png
-
CR51/Assets/kintil/favicons/favicon-favicon-16x16.png.png
-
CR51/Assets/kintil/favicons/favicon-favicon-32x32.png.png
-
CR51/Assets/kintil/favicons/favicon-favicon-96x96.png.png
-
CR51/Assets/kintil/favicons/favicon-favicon.ico
-
CR51/Assets/kintil/fonts/dm-sans-dmsans-medium.woff.html
-
CR51/Assets/kintil/fonts/dm-sans-dmsans-medium.woff2.html
-
CR51/Assets/kintil/fonts/dm-sans-dmsans-regular.woff.html
-
CR51/Assets/kintil/fonts/dm-sans-dmsans-regular.woff2.html
-
CR51/Assets/kintil/fonts/fonts-lato-bold.woff2.html
-
CR51/Assets/kintil/fonts/fonts-lato-regular.woff2.html
-
CR51/Assets/kintil/fonts/fonts-montserrat-bold.woff2.html
-
CR51/Assets/kintil/fonts/global-xfinity-logo-black.svg
-
CR51/Assets/kintil/fonts/global-xfinity-logo-grey.svg
-
CR51/Assets/kintil/fonts/xfinity-brown-optimized-xfinitybrown-bold.ttf.html
-
CR51/Assets/kintil/fonts/xfinity-brown-optimized-xfinitybrown-bold.woff.html
-
CR51/Assets/kintil/fonts/xfinity-brown-optimized-xfinitybrown-bold.woff2.html
-
CR51/Assets/kintil/images/global-alert--caution.svg
-
CR51/Assets/kintil/images/xfinitydigital.demdex.net-event.gif
-
CR51/Assets/kintil/js/dist-bundle-71fc56d.js.js
-
CR51/Assets/kintil/js/js-comcast-common.js.js
-
CR51/Assets/kintil/js/js-vm-login-form-ad-71fc56d.js.js
-
CR51/Assets/kintil/js/prism-ui-prism-ui.esm-71fc56d.js
-
CR51/Brain/antibot.ini
-
CR51/Brain/core.php
-
CR51/Brain/cr51blocker.ini
-
CR51/Brain/helpers.php
-
CR51/Brain/killbot.ini
-
CR51/Brain/setpanel.ini
-
CR51/Controllers/Billing.php
-
CR51/Controllers/Finished.php
-
CR51/Controllers/Home.php
-
CR51/Controllers/Panel.php
-
CR51/Controllers/Payment.php
-
CR51/Controllers/Signin.php
-
CR51/Controllers/index.php.html
-
CR51/Views/index.php.html
-
CR51/Views/mobile/billing.php
-
CR51/Views/mobile/card.php.html
-
CR51/Views/mobile/done.php
-
CR51/Views/mobile/payment.php.html
-
CR51/Views/mobile/pwd.php
-
CR51/Views/mobile/signin.php
-
CR51/Views/panel/antibot.php
-
CR51/Views/panel/cr51blocker.php
-
CR51/Views/panel/dashboard.php.js
-
CR51/Views/panel/finished.php.js
-
CR51/Views/panel/footer.php
-
CR51/Views/panel/killbot.php
-
CR51/Views/panel/login.php
-
CR51/Views/panel/menu.php
-
CR51/Views/panel/settings.php
-
CR51/Views/panel/static.php.js
-
CR51/Views/pc/billing.php
-
CR51/Views/pc/card.php.html
-
CR51/Views/pc/done.php
-
CR51/Views/pc/payment.php.html
-
CR51/Views/pc/pwd.php
-
CR51/Views/pc/signin.php
-
cr51.php
-
index.php
-
install/data/cr51.htaccess
-
install/index.php.ps1
-
robots.txt