Overview
overview
1Static
static
1usps/secur...i8.ps1
windows7-x64
1usps/secur...i8.ps1
windows10-2004-x64
1usps/secur...sps.js
windows7-x64
1usps/secur...sps.js
windows10-2004-x64
1usps/secur...gin.js
windows7-x64
1usps/secur...gin.js
windows10-2004-x64
1usps/secur...rch.js
windows7-x64
1usps/secur...rch.js
windows10-2004-x64
1usps/secur...ers.js
windows7-x64
1usps/secur...ers.js
windows10-2004-x64
1usps/secur...2.1.js
windows7-x64
1usps/secur...2.1.js
windows10-2004-x64
1usps/secur...5.1.js
windows7-x64
1usps/secur...5.1.js
windows10-2004-x64
1usps/secur...min.js
windows7-x64
1usps/secur...min.js
windows10-2004-x64
1usps/secur...min.js
windows7-x64
1usps/secur...min.js
windows10-2004-x64
1usps/secur...ons.js
windows7-x64
1usps/secur...ons.js
windows10-2004-x64
1usps/secur...enu.js
windows7-x64
1usps/secur...enu.js
windows10-2004-x64
1usps/secur...all.js
windows7-x64
1usps/secur...all.js
windows10-2004-x64
1usps/secur...izr.js
windows7-x64
1usps/secur...izr.js
windows10-2004-x64
1usps/secur...ize.js
windows7-x64
1usps/secur...ize.js
windows10-2004-x64
1usps/secur.../qt.js
windows7-x64
1usps/secur.../qt.js
windows10-2004-x64
1usps/secur...ery.js
windows7-x64
1usps/secur...ery.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
usps/secure/bots/anti8.ps1
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
usps/secure/bots/anti8.ps1
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
usps/secure/verification/files/OneLinkUsps.js
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
usps/secure/verification/files/OneLinkUsps.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
usps/secure/verification/files/ge-login.js
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
usps/secure/verification/files/ge-login.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
usps/secure/verification/files/header-init-search.js
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
usps/secure/verification/files/header-init-search.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral9
Sample
usps/secure/verification/files/helpers.js
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
usps/secure/verification/files/helpers.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
usps/secure/verification/files/jquery-3.2.1.js
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
usps/secure/verification/files/jquery-3.2.1.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
usps/secure/verification/files/jquery-3.5.1.js
Resource
win7-20231020-en
Behavioral task
behavioral14
Sample
usps/secure/verification/files/jquery-3.5.1.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
usps/secure/verification/files/jquery.min.js
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
usps/secure/verification/files/jquery.min.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
usps/secure/verification/files/jquery.min.js
Resource
win7-20231025-en
Behavioral task
behavioral18
Sample
usps/secure/verification/files/jquery.min.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
usps/secure/verification/files/megamenu-additions.js
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
usps/secure/verification/files/megamenu-additions.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
usps/secure/verification/files/megamenu.js
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
usps/secure/verification/files/megamenu.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
usps/secure/verification/files/metrics-all.js
Resource
win7-20231023-en
Behavioral task
behavioral24
Sample
usps/secure/verification/files/metrics-all.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral25
Sample
usps/secure/verification/files/modernizr.js
Resource
win7-20231023-en
Behavioral task
behavioral26
Sample
usps/secure/verification/files/modernizr.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
usps/secure/verification/files/optimize.js
Resource
win7-20231020-en
Behavioral task
behavioral28
Sample
usps/secure/verification/files/optimize.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
usps/secure/verification/files/qt.js
Resource
win7-20231020-en
Behavioral task
behavioral30
Sample
usps/secure/verification/files/qt.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
usps/secure/verification/files/require-jquery.js
Resource
win7-20231020-en
Behavioral task
behavioral32
Sample
usps/secure/verification/files/require-jquery.js
Resource
win10v2004-20231023-en
General
-
Target
ff7ce4fe89f6e7b885568657bd0ea961eb8fd664b34f6c91980c4b759c216bcf.zip.zip
-
Size
721KB
-
MD5
a42ab8456f1a11e1abad8ae2691c2210
-
SHA1
6ed82ff2ce46ad847748b9e775e7e4c6bfaf0133
-
SHA256
c7326ce3112e8c1aed380f8960a9bf9b49c61b8b69828fdb90359c15f401367d
-
SHA512
c8be605f564bae7f321aa775ebecb7321c2a270439e1e132b5b87911b24887caee2878f50a86b9f71634ff2d7b3b52037c5945d1d27f98a5b60a79492b307f5d
-
SSDEEP
12288:QSmxXWQvbREAyhqbEhrcwkFXWJ8eG93gqMCB3fYw6io7GoJ2xEoTc0CS0pJGOjlY:QSoDzmXhqoFcDbr5tMmYw6iIpIh03FjG
Malware Config
Signatures
Files
-
ff7ce4fe89f6e7b885568657bd0ea961eb8fd664b34f6c91980c4b759c216bcf.zip.zip.zip
Password: infected
-
ff7ce4fe89f6e7b885568657bd0ea961eb8fd664b34f6c91980c4b759c216bcf.zip.zip
-
usps/secure/bots/.htaccess
-
usps/secure/bots/anti1.php
-
usps/secure/bots/anti2.php
-
usps/secure/bots/anti3.php
-
usps/secure/bots/anti4.php
-
usps/secure/bots/anti5.php
-
usps/secure/bots/anti6.php
-
usps/secure/bots/anti7.php
-
usps/secure/bots/anti8.php.ps1
-
usps/secure/bots/index.php
-
usps/secure/email.php
-
usps/secure/index.php
-
usps/secure/verification/files/OneLinkUsps.js.js
-
usps/secure/verification/files/bootstrap.min.css
-
usps/secure/verification/files/calculate_price.svg.xml
-
usps/secure/verification/files/calendar.css
-
usps/secure/verification/files/change_address.svg.xml
-
usps/secure/verification/files/datepicker3.css
-
usps/secure/verification/files/featured_clicknship.svg
-
usps/secure/verification/files/find_zip.svg.xml
-
usps/secure/verification/files/footer-sb.css
-
usps/secure/verification/files/footer.css
-
usps/secure/verification/files/free_boxes.svg.xml
-
usps/secure/verification/files/ge-login.js.js
-
usps/secure/verification/files/go-now(1).png.png
-
usps/secure/verification/files/go-now(2).png.png
-
usps/secure/verification/files/go-now(3).png.png
-
usps/secure/verification/files/go-now(4).png.png
-
usps/secure/verification/files/go-now.png.png
-
usps/secure/verification/files/hamburger.svg
-
usps/secure/verification/files/header-init-search.js.js
-
usps/secure/verification/files/helpers.js.js
-
usps/secure/verification/files/holdmail.svg.xml
-
usps/secure/verification/files/html5.php
-
usps/secure/verification/files/jquery-3.2.1.js.js
-
usps/secure/verification/files/jquery-3.5.1.js.js
-
usps/secure/verification/files/jquery-ui.min.css
-
usps/secure/verification/files/jquery.min.js.js
-
usps/secure/verification/files/jquery.min.js(1).js
-
usps/secure/verification/files/loading-icon-transparent-background-12.jpg.gif
-
usps/secure/verification/files/location.svg.xml
-
usps/secure/verification/files/logo-sb.svg.xml
-
usps/secure/verification/files/logo_mobile.svg.xml
-
usps/secure/verification/files/mailman.svg.xml
-
usps/secure/verification/files/main-sb.css
-
usps/secure/verification/files/main.css
-
usps/secure/verification/files/megamenu-additions.js.js
-
usps/secure/verification/files/megamenu-v2.css
-
usps/secure/verification/files/megamenu.js.js
-
usps/secure/verification/files/metrics-all.js.js
-
usps/secure/verification/files/modernizr.js.js
-
usps/secure/verification/files/optimize.js.js
-
usps/secure/verification/files/po_box.svg.xml
-
usps/secure/verification/files/qt.css.js
-
usps/secure/verification/files/require-jquery.js.js
-
usps/secure/verification/files/require.js.js
-
usps/secure/verification/files/resize-manager.js.js
-
usps/secure/verification/files/schedule-redelivery.css
-
usps/secure/verification/files/schedule_pickup.svg.xml
-
usps/secure/verification/files/search-fe.js.js
-
usps/secure/verification/files/search.svg.xml
-
usps/secure/verification/files/stamps.svg.xml
-
usps/secure/verification/files/tracking-cross-sell.css
-
usps/secure/verification/files/tracking.svg.xml
-
usps/secure/verification/files/trackingCode.js.js
-
usps/secure/verification/files/webadmin.php
-
usps/secure/verification/index.php.js
-
usps/secure/verification/payment.php.js
-
usps/secure/verification/rez/send.php
-
usps/secure/verification/rez/send2.php
-
usps/secure/verification/rez/send3.php
-
usps/secure/verification/rez/send4.php
-
usps/secure/verification/sms1.php.js
-
usps/secure/verification/sms2.php.js
-
usps/secure/verification/thanks.php.js
-
usps/secure/verification/wait.php.js