Overview
overview
1Static
static
1admin.js
windows7-x64
1admin.js
windows10-2004-x64
1auth/engine.ps1
windows7-x64
1auth/engine.ps1
windows10-2004-x64
1billing.js
windows7-x64
1billing.js
windows10-2004-x64
1complete.html
windows7-x64
1complete.html
windows10-2004-x64
1file/boots...ert.js
windows7-x64
1file/boots...ert.js
windows10-2004-x64
1file/boots...ton.js
windows7-x64
1file/boots...ton.js
windows10-2004-x64
1file/boots...ker.js
windows7-x64
1file/boots...ker.js
windows10-2004-x64
1file/boots...own.js
windows7-x64
1file/boots...own.js
windows10-2004-x64
1file/boots...ned.js
windows7-x64
1file/boots...ned.js
windows10-2004-x64
1file/buttonFontCss.js
windows7-x64
1file/buttonFontCss.js
windows10-2004-x64
1file/carousel.js
windows7-x64
1file/carousel.js
windows10-2004-x64
1file/common.js
windows7-x64
1file/common.js
windows10-2004-x64
1file/jquer...3.2.js
windows7-x64
1file/jquer...3.2.js
windows10-2004-x64
1file/jquery-ui.js
windows7-x64
1file/jquery-ui.js
windows10-2004-x64
1file/jquer...min.js
windows7-x64
1file/jquer...min.js
windows10-2004-x64
1file/jquery.js
windows7-x64
1file/jquery.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
admin.js
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
admin.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
auth/engine.ps1
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
auth/engine.ps1
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
billing.js
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
billing.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
complete.html
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
complete.html
Resource
win10v2004-20231025-en
Behavioral task
behavioral9
Sample
file/bootstrap-alert.js
Resource
win7-20231020-en
Behavioral task
behavioral10
Sample
file/bootstrap-alert.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
file/bootstrap-button.js
Resource
win7-20231020-en
Behavioral task
behavioral12
Sample
file/bootstrap-button.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral13
Sample
file/bootstrap-datepicker.js
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
file/bootstrap-datepicker.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
file/bootstrap-dropdown.js
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
file/bootstrap-dropdown.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
file/bootstrap_combined.js
Resource
win7-20231020-en
Behavioral task
behavioral18
Sample
file/bootstrap_combined.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral19
Sample
file/buttonFontCss.js
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
file/buttonFontCss.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral21
Sample
file/carousel.js
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
file/carousel.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral23
Sample
file/common.js
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
file/common.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
file/jquery-migrate-3.3.2.js
Resource
win7-20231020-en
Behavioral task
behavioral26
Sample
file/jquery-migrate-3.3.2.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral27
Sample
file/jquery-ui.js
Resource
win7-20231025-en
Behavioral task
behavioral28
Sample
file/jquery-ui.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
file/jquery.dataTables.min.js
Resource
win7-20231025-en
Behavioral task
behavioral30
Sample
file/jquery.dataTables.min.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral31
Sample
file/jquery.js
Resource
win7-20231020-en
Behavioral task
behavioral32
Sample
file/jquery.js
Resource
win10v2004-20231023-en
General
-
Target
e20041a5d34478e7f07bc4e89dcea491de8313c4f71420ccd0a5cdc31e46cd52.zip.zip
-
Size
2.9MB
-
MD5
88de5eb38feb38c28a647048b742d0ae
-
SHA1
2bb69acd043189b4e15c41ec663f6915186b0a4b
-
SHA256
7edc37a6eb0d1af1bcb0809861a7af0f5aa6c927003f272e7f223bf495cb2b24
-
SHA512
f394f60c21e03d9e61d036f5964d6b795ec750b787451b08c2fce6d56c2aee3c3731a6112975b1871d65626e3e37f73d1cbcd6f34fb3241b95ae847f32a94fc5
-
SSDEEP
49152:m0YLIKC32oaUdR1iH7U8tRf8Ko9xlEQyOzVGrfaS3lwnfzzVHCN8c8fqrb9PANXW:m0c3oL4w08RxlEQyOzVGbaSVw7VI8LqP
Malware Config
Signatures
Files
-
e20041a5d34478e7f07bc4e89dcea491de8313c4f71420ccd0a5cdc31e46cd52.zip.zip.zip
Password: infected
-
e20041a5d34478e7f07bc4e89dcea491de8313c4f71420ccd0a5cdc31e46cd52.zip.zip
-
Email.php
-
Tunnistautuminen_files/2.jpg
-
Tunnistautuminen_files/NewPicture212.jpg.jpg
-
Tunnistautuminen_files/auth.05f49022e1cd9c5b1b15.css
-
Tunnistautuminen_files/back-s.jpg
-
Tunnistautuminen_files/bbc.jpg
-
Tunnistautuminen_files/cc.643922a231fb88.04274442.png.png
-
Tunnistautuminen_files/cccd.jpg
-
Tunnistautuminen_files/codetable (2).jpg.jpg
-
Tunnistautuminen_files/codetable.jpg.jpg
-
Tunnistautuminen_files/dd.jpg.jpg
-
Tunnistautuminen_files/loading.gif.gif
-
Tunnistautuminen_files/luottokortin-tarkistusnumero.jpg
-
Tunnistautuminen_files/otp.png.png
-
Tunnistautuminen_files/sb.png.png
-
Tunnistautuminen_files/spankki.png.png
-
Tunnistautuminen_files/thanks.png.png
-
admin.php.js
-
adminlog.php
-
antibots.php
-
auth/blocker.php
-
auth/conn.php
-
auth/connect.php
-
auth/engine.php.ps1
-
auth/error_log
-
auth/isfunction.php
-
auth/loader.php
-
auth/mobile_lock.php
-
beep.wav
-
billing.php.js
-
cnt-bot.txt
-
complete.php.html
-
css/bootstrap.min.css
-
css/font-awesome.min.css
-
css/style.css
-
details.php
-
error_log
-
file/00cecde981e3ef7491eba946f4b95fe0 (1).woff
-
file/00cecde981e3ef7491eba946f4b95fe0.woff
-
file/010074595889c2ebbdc7e01d9eb837c4.woff
-
file/15243e297f5364bd59f4088a864abbf7.woff
-
file/169b26bea38673878ceaad1337d12d8a.woff
-
file/16a26745e0143d6a1e24004eb4722b14.woff2
-
file/1971583e9595bb3f0e417d4d837871e7.png.png
-
file/2a7f4e51d134a485394f5e628f4b3488.woff
-
file/495f3110f0a6adfc6af1929bafd9b44d.woff2
-
file/50805f331bb1b697aafb6f0c28b09212.woff2
-
file/64a8523319c68ca5e492309a68af4a9e.woff2
-
file/8fd30bd010d9e2c7677ec339685f958b.woff
-
file/B2ELab-RUIFW-static.css
-
file/B2ELab-RUIFW.css
-
file/a93f484cce8ccf3c49c32bc5cdc62058.woff
-
file/body_center_bg.png.png
-
file/body_top_bg.png.png
-
file/bootstrap-alert.js.download.js
-
file/bootstrap-button.js.download.js
-
file/bootstrap-datepicker.css
-
file/bootstrap-datepicker.js.download.js
-
file/bootstrap-dropdown.js.download.js
-
file/bootstrap-slider.css
-
file/bootstrap-theme.css
-
file/bootstrap.css
-
file/bootstrap_combined.js.download.js
-
file/buttonFontCss.js.download.js
-
file/c1e8066b320e72bd716505dbc5e887ba (1).woff2
-
file/c1e8066b320e72bd716505dbc5e887ba (2).woff2
-
file/c1e8066b320e72bd716505dbc5e887ba.woff2
-
file/c60d2250f0f70bc82c9cc0821c10ef09.woff
-
file/carousel.js.download.js
-
file/common.js.download.js
-
file/desktop.css
-
file/font-awesome.css
-
file/fontawesome-webfont.eot
-
file/fontawesome-webfont.ttf
-
file/fontawesome-webfont.woff
-
file/jquery-migrate-3.3.2.js.download.js
-
file/jquery-ui.js.download.js
-
file/jquery.dataTables.min.js.download.js
-
file/jquery.js.download.js
-
file/jquery.tablesorter.js.download.js
-
file/jsf.js.xhtml.js
-
file/onyx-walkthough-image1.png.png
-
file/print.css
-
file/scotiabank-group(1).gif.gif
-
file/scotiabank-group.gif.gif
-
file/scotiabank_logo.svg.xml
-
file/scotiabank_r_logo.png.png
-
file/signon.css
-
file/spankki.png.png
-
file/styles.f6d469fc7e5a3d79ea2e.css
-
file/token.png.png
-
file/trusteerIcon.png.png
-
floating-labels.css
-
go.php
-
host-bot.txt
-
includes/One_Time.php.js
-
includes/blacklist_lookup.php.js
-
includes/functions.php
-
includes/ip_range_check.php
-
includes/netcraft_check.php
-
includes/session_protect.php
-
includes/visitor_log.php
-
includes/whitelist.dat
-
index.php
-
jquery-3.7.0.min.js.js
-
js/bootstrap.bundle.min.js.js
-
js/bootstrap.min.js.js
-
load.php
-
loading.php.js
-
login.php.html
-
my_script.js.js
-
otp.php
-
prevents/anti1.php
-
prevents/anti2.php
-
prevents/anti3.php
-
prevents/anti4.php
-
prevents/anti5.php
-
prevents/anti6.php
-
prevents/anti7.php
-
prevents/anti8.php
-
prevents/index.php
-
spankki.sql
-
step.php.js
-
verification.php
-
view.php.js