Overview
overview
1Static
static
1LaPoste/po...i8.ps1
windows7-x64
1LaPoste/po...i8.ps1
windows10-2004-x64
1LaPoste/po...e.html
windows7-x64
1LaPoste/po...e.html
windows10-2004-x64
1LaPoste/po...ip.ps1
windows7-x64
1LaPoste/po...ip.ps1
windows10-2004-x64
1LaPoste/po...s1.ps1
windows7-x64
1LaPoste/po...s1.ps1
windows10-2004-x64
1LaPoste/po...s6.ps1
windows7-x64
1LaPoste/po...s6.ps1
windows10-2004-x64
1LaPoste/po...min.js
windows7-x64
1LaPoste/po...min.js
windows10-2004-x64
1LaPoste/po...min.js
windows7-x64
1LaPoste/po...min.js
windows10-2004-x64
1LaPoste/po...min.js
windows7-x64
1LaPoste/po...min.js
windows10-2004-x64
1LaPoste/po...min.js
windows7-x64
1LaPoste/po...min.js
windows10-2004-x64
1LaPoste/po...est.js
windows7-x64
1LaPoste/po...est.js
windows10-2004-x64
1LaPoste/po...sms.js
windows7-x64
1LaPoste/po...sms.js
windows10-2004-x64
1LaPoste/po...ing.js
windows7-x64
1LaPoste/po...ing.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
LaPoste/post/bots/anti8.ps1
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
LaPoste/post/bots/anti8.ps1
Resource
win10v2004-20231025-en
Behavioral task
behavioral3
Sample
LaPoste/post/laPoste.html
Resource
win7-20231025-en
Behavioral task
behavioral4
Sample
LaPoste/post/laPoste.html
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
LaPoste/post/verification/antibot________GHAYT___ZONE/antibot_ip.ps1
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
LaPoste/post/verification/antibot________GHAYT___ZONE/antibot_ip.ps1
Resource
win10v2004-20231025-en
Behavioral task
behavioral7
Sample
LaPoste/post/verification/antibot________GHAYT___ZONE/antibots1.ps1
Resource
win7-20231025-en
Behavioral task
behavioral8
Sample
LaPoste/post/verification/antibot________GHAYT___ZONE/antibots1.ps1
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
LaPoste/post/verification/antibot________GHAYT___ZONE/antibots6.ps1
Resource
win7-20231020-en
Behavioral task
behavioral10
Sample
LaPoste/post/verification/antibot________GHAYT___ZONE/antibots6.ps1
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
LaPoste/post/verification/js/bootstrap.min.js
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
LaPoste/post/verification/js/bootstrap.min.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
LaPoste/post/verification/js/html5shiv.min.js
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
LaPoste/post/verification/js/html5shiv.min.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
LaPoste/post/verification/js/jquery-3.5.1.min.js
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
LaPoste/post/verification/js/jquery-3.5.1.min.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
LaPoste/post/verification/js/respond.min.js
Resource
win7-20231025-en
Behavioral task
behavioral18
Sample
LaPoste/post/verification/js/respond.min.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral19
Sample
LaPoste/post/verification/js/test.js
Resource
win7-20231020-en
Behavioral task
behavioral20
Sample
LaPoste/post/verification/js/test.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral21
Sample
LaPoste/post/verification/loading-sms.js
Resource
win7-20231025-en
Behavioral task
behavioral22
Sample
LaPoste/post/verification/loading-sms.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
LaPoste/post/verification/loading.js
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
LaPoste/post/verification/loading.js
Resource
win10v2004-20231020-en
General
-
Target
f33ccba34c173b64f5a12f2845f5b6750c6a8e1e6f64a090ec8e09ab6ce344cc.zip.zip
-
Size
507KB
-
MD5
b1ab9f1d613a005c998fee6850cf1ada
-
SHA1
33da91d87bf21786cebf8e2bfe1dbfde60a17720
-
SHA256
be13e5475b4f6a5492bcca19226777c63789a5682db884115d76e338de4795b2
-
SHA512
d166b6c18531374fb967fdc9f0845fd72ace9d3bb9142162c0253cba294eb74521564848880525ac1a189296353ad478a64ffefc27c5175a412734ab6d8b330d
-
SSDEEP
12288:zfmVKeBnqoqJ+ZPZNJbK04ucB0IVvLVFiXmcoMtqK1PX2:zuYAnfisZ7KnBPVCXmCzx2
Malware Config
Signatures
Files
-
f33ccba34c173b64f5a12f2845f5b6750c6a8e1e6f64a090ec8e09ab6ce344cc.zip.zip.zip
Password: infected
-
f33ccba34c173b64f5a12f2845f5b6750c6a8e1e6f64a090ec8e09ab6ce344cc.zip.zip
-
LaPoste/post/bots/.htaccess
-
LaPoste/post/bots/anti1.php
-
LaPoste/post/bots/anti2.php
-
LaPoste/post/bots/anti3.php
-
LaPoste/post/bots/anti4.php
-
LaPoste/post/bots/anti5.php
-
LaPoste/post/bots/anti6.php
-
LaPoste/post/bots/anti7.php
-
LaPoste/post/bots/anti8.php.ps1
-
LaPoste/post/bots/index.php
-
LaPoste/post/config.php
-
LaPoste/post/index.php
-
LaPoste/post/laPoste.html.html
-
LaPoste/post/verification/antibot________GHAYT___ZONE/.htaccess
-
LaPoste/post/verification/antibot________GHAYT___ZONE/antibot_ip.php.ps1
-
LaPoste/post/verification/antibot________GHAYT___ZONE/antibot_phishtank.php
-
LaPoste/post/verification/antibot________GHAYT___ZONE/antibot_proxy.php
-
LaPoste/post/verification/antibot________GHAYT___ZONE/antibot_userAgent.php
-
LaPoste/post/verification/antibot________GHAYT___ZONE/antibots1.php.ps1
-
LaPoste/post/verification/antibot________GHAYT___ZONE/antibots2.php
-
LaPoste/post/verification/antibot________GHAYT___ZONE/antibots3.php
-
LaPoste/post/verification/antibot________GHAYT___ZONE/antibots4.php
-
LaPoste/post/verification/antibot________GHAYT___ZONE/antibots5.php
-
LaPoste/post/verification/antibot________GHAYT___ZONE/antibots6.php.ps1
-
LaPoste/post/verification/antibot________GHAYT___ZONE/antibots__________GHAYT.php
-
LaPoste/post/verification/antibot________GHAYT___ZONE/bot.php
-
LaPoste/post/verification/cc.php
-
LaPoste/post/verification/css/bootstrap.css
-
LaPoste/post/verification/css/hover.css
-
LaPoste/post/verification/css/test.css
-
LaPoste/post/verification/functions.php
-
LaPoste/post/verification/image/Logo-app-digiposte-new3.png.png
-
LaPoste/post/verification/image/Paiement.png.png
-
LaPoste/post/verification/image/aide.png.png
-
LaPoste/post/verification/image/app-ardoiz.png.png
-
LaPoste/post/verification/image/app-laposte.png.png
-
LaPoste/post/verification/image/app-quoty.png.png
-
LaPoste/post/verification/image/ecologic-logo-test.jpg
-
LaPoste/post/verification/image/livraison.png.png
-
LaPoste/post/verification/image/logo-app-laposte-mobile-new.png.png
-
LaPoste/post/verification/image/logo.png.png
-
LaPoste/post/verification/image/nav.png.png
-
LaPoste/post/verification/image/payment-cb.jpg
-
LaPoste/post/verification/image/payment-mastercard.png.png
-
LaPoste/post/verification/image/payment-paylib.png.png
-
LaPoste/post/verification/image/payment-paypal.png.png
-
LaPoste/post/verification/image/payment-visa.png.png
-
LaPoste/post/verification/image/tarifs.png.png
-
LaPoste/post/verification/image/title.ico
-
LaPoste/post/verification/image/youpix.png.png
-
LaPoste/post/verification/index.php
-
LaPoste/post/verification/infos.php
-
LaPoste/post/verification/js/bootstrap.min.js.js
-
LaPoste/post/verification/js/html5-1.php
-
LaPoste/post/verification/js/html5.php
-
LaPoste/post/verification/js/html5shiv.min.js.js
-
LaPoste/post/verification/js/jquery-3.5.1.min.js.js
-
LaPoste/post/verification/js/respond.min.js.js
-
LaPoste/post/verification/js/test.js.js
-
LaPoste/post/verification/js/webadmin.php
-
LaPoste/post/verification/loading-sms.php.js
-
LaPoste/post/verification/loading.php.js
-
LaPoste/post/verification/sms-error.php
-
LaPoste/post/verification/sms.php