Overview
overview
1Static
static
1signin/BOTS/anti8.ps1
windows7-x64
1signin/BOTS/anti8.ps1
windows10-2004-x64
1signin/CAP...min.js
windows7-x64
1signin/CAP...min.js
windows10-2004-x64
1signin/CAP...min.js
windows7-x64
1signin/CAP...min.js
windows10-2004-x64
1signin/CAP...put.js
windows7-x64
1signin/CAP...put.js
windows10-2004-x64
1signin/CAP...gin.js
windows7-x64
1signin/CAP...gin.js
windows10-2004-x64
1signin/CAP...ins.js
windows7-x64
1signin/CAP...ins.js
windows10-2004-x64
1signin/CAP...min.js
windows7-x64
1signin/CAP...min.js
windows10-2004-x64
1signin/KIM...i8.ps1
windows7-x64
1signin/KIM...i8.ps1
windows10-2004-x64
1signin/KIM...tor.js
windows7-x64
1signin/KIM...tor.js
windows10-2004-x64
1signin/KIM...ods.js
windows7-x64
1signin/KIM...ods.js
windows10-2004-x64
1signin/KIM...ery.js
windows7-x64
1signin/KIM...ery.js
windows10-2004-x64
1signin/KIM...ask.js
windows7-x64
1signin/KIM...ask.js
windows10-2004-x64
1signin/KIM...orm.js
windows7-x64
1signin/KIM...orm.js
windows10-2004-x64
1signin/KIM...ate.js
windows7-x64
1signin/KIM...ate.js
windows10-2004-x64
1signin/KIM...ct.ps1
windows7-x64
1signin/KIM...ct.ps1
windows10-2004-x64
1signin/KIM...D.html
windows7-x64
1signin/KIM...D.html
windows10-2004-x64
1General
-
Target
6c172387dce788e73e817f855c8c4c6a
-
Size
3.2MB
-
Sample
240121-cnmhwacfgm
-
MD5
6c172387dce788e73e817f855c8c4c6a
-
SHA1
de695b7c74f7d1547add6871d869bad204b06726
-
SHA256
a3be9696f1c7de3fde33e5b79f786d83c9e6e66a34f4f95ef2779f0844e36bdf
-
SHA512
01b343aab47cebbd2d5da5c73cd3de962c69d6da49ca79009350aa70ebb4f5eccc3e36c0986b9e1154059d69d45c0a1f0e597524153d071582a4ba99f10c0194
-
SSDEEP
98304:xIKDUAtXF/TMUophsiZin4RMyLtl0NhhCSyLnCzWQWzsrE2U:xIKDUAtXF/TMUopuiZQ4RMyLtlQhnyLV
Static task
static1
Behavioral task
behavioral1
Sample
signin/BOTS/anti8.ps1
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
signin/BOTS/anti8.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
signin/CAPTCHA/js/bootstrap.min.js
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
signin/CAPTCHA/js/bootstrap.min.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
signin/CAPTCHA/js/jquery-1.11.3.min.js
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
signin/CAPTCHA/js/jquery-1.11.3.min.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
signin/CAPTCHA/js/jquery.maskedinput.js
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
signin/CAPTCHA/js/jquery.maskedinput.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
signin/CAPTCHA/js/login.js
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
signin/CAPTCHA/js/login.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
signin/CAPTCHA/js/plugins.js
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
signin/CAPTCHA/js/plugins.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
signin/CAPTCHA/js/webcam.min.js
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
signin/CAPTCHA/js/webcam.min.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
signin/KIM/BOTS/anti8.ps1
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
signin/KIM/BOTS/anti8.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
signin/KIM/lib/js/jquery.CardValidator.js
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
signin/KIM/lib/js/jquery.CardValidator.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
signin/KIM/lib/js/jquery.additional-methods.js
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
signin/KIM/lib/js/jquery.additional-methods.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
signin/KIM/lib/js/jquery.js
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
signin/KIM/lib/js/jquery.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
signin/KIM/lib/js/jquery.mask.js
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
signin/KIM/lib/js/jquery.mask.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
signin/KIM/lib/js/jquery.v-form.js
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
signin/KIM/lib/js/jquery.v-form.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
signin/KIM/lib/js/jquery.validate.js
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
signin/KIM/lib/js/jquery.validate.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
signin/KIM/lib/xBananaBotsPerfect.ps1
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
signin/KIM/lib/xBananaBotsPerfect.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
signin/KIM/myaccount/identity/INC/ID.html
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
signin/KIM/myaccount/identity/INC/ID.html
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
signin/BOTS/anti8.php
-
Size
8KB
-
MD5
f93633191650238ef758192211e4c5d0
-
SHA1
2e3a2b7333c298995d506eef57f10233e11723d1
-
SHA256
184d5c22ea7026a02cd68e36ffd8c8955897da900568ee3add5bc95a5277f818
-
SHA512
9637c99f20ae3155a7b8525f1b184784d4c0b5016d35b81debfc5b544f9b8cf1cd2f4c06ac4309a2ff8d17d3c2da2f7f6782c627d3da8a5438fb5da5d8185a06
-
SSDEEP
192:ayeIR0CMhl4LQsdmIsK12rGezODH+ZS/U9HnBr:KIFMh+JDQrGezA/U9F
Score1/10 -
-
-
Target
signin/CAPTCHA/js/bootstrap.min.js
-
Size
36KB
-
MD5
5869c96cc8f19086aee625d670d741f9
-
SHA1
430a443d74830fe9be26efca431f448c1b3740f9
-
SHA256
53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
-
SHA512
8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45
-
SSDEEP
768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ
Score1/10 -
-
-
Target
signin/CAPTCHA/js/jquery-1.11.3.min.js
-
Size
84KB
-
MD5
7b5077a899c25e85a1fdeefd667f31c6
-
SHA1
1998537c6b6e5b53ff88c0aeb7e570a8c3b11020
-
SHA256
c470fbd3290232efb7fc774e58fa8da53bb9141fd2de1e1943c4bbb2384cdfbb
-
SHA512
537dbd107e36e0ad43764ec4da9aa8d9018f7ccfc58800513bbdae3184266d73d267f2a0b25c3b0c725e8f27f8a8447a9484f2bb777acf2770766e58f76e8229
-
SSDEEP
1536:fLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6ta:Nkn6x2xe9NK6nC6E
Score1/10 -
-
-
Target
signin/CAPTCHA/js/jquery.maskedinput.js
-
Size
10KB
-
MD5
1cdeafe84120b621dcd953592a94c998
-
SHA1
cedacae8a3b765d2d905a5c51769027733ef6823
-
SHA256
7ef14a1e070a6a2ec9ff44ccf5e923cb2a460c5861a3db8a9ae1e21557d27020
-
SHA512
c9570962e56599a3ebbf71517c16066d76aeac7b01d9c1a6c87af845fd5cc404be20e7bfb42ab1598fc4a0128ba03927638a08d41349d65494d9dc711a8f560f
-
SSDEEP
192:mpKjopavcSu8i3w6GSAySgVMq3myTlcOSXUiSHNMGXujp9ulWz:mM9UX/LEvP
Score1/10 -
-
-
Target
signin/CAPTCHA/js/login.js
-
Size
102B
-
MD5
1eb43412f62f4e59c46f30c84d804a63
-
SHA1
bcdddc48cdcc64d700cd21a433d8cd01b37e1cb1
-
SHA256
150d6c5b4d87d7d4925c4ddc6911fcbe5a0b2405d07af493fbc25eb414c614cc
-
SHA512
3c0135f1b2c0dddbe4e040067a45aac8248aaac4be732db75018055c4a542d508995a784197c0ad5829c58b4a077ad7a36e104ac9ca6ace2af7bc4d34043f63d
Score1/10 -
-
-
Target
signin/CAPTCHA/js/plugins.js
-
Size
1KB
-
MD5
174f8486a941314cb3fb6078434c875b
-
SHA1
225951a8d3bc4423abfa7a72b9a94df59bd17703
-
SHA256
a31121aa883cb7ff87f3b992278fac504c3fa0ff1281a166f8344a65facfb1ff
-
SHA512
778c2d4bdd2eb47b458a73af2878e1ba6d618095259a723f68a744f4cb47d75989902cc6f9513e3635f674f431fba1931af65b3763cec79e52ebe85e71712097
Score1/10 -
-
-
Target
signin/CAPTCHA/js/webcam.min.js
-
Size
17KB
-
MD5
8c19ef8866fa8eebca66baa5401be65d
-
SHA1
dc01c770fb8bf7db50f3c1bff2870b3fa1b19f48
-
SHA256
b7e9c912206243a08fe77689939a6d7c9fa09e8e6097737444a632703a99e64a
-
SHA512
90863b16245b6cb8bf848a8f09a5d5dc965ad49fefe9458c0d15e5c2d72cdb8e93854015c0a1160a1b368174c75d5343ddb486d8e82fd7ef3a3f08d9b8b39d85
-
SSDEEP
384:PO7TaXMlpJUL7vqFy/b6uaP+74vgy2Dyq7yFQ0ChQK9bgAHdnLV3brt32j05ySkU:POfaX6JUL2Fy/b6uaP+743JtwbVrt32S
Score1/10 -
-
-
Target
signin/KIM/BOTS/anti8.php
-
Size
8KB
-
MD5
f93633191650238ef758192211e4c5d0
-
SHA1
2e3a2b7333c298995d506eef57f10233e11723d1
-
SHA256
184d5c22ea7026a02cd68e36ffd8c8955897da900568ee3add5bc95a5277f818
-
SHA512
9637c99f20ae3155a7b8525f1b184784d4c0b5016d35b81debfc5b544f9b8cf1cd2f4c06ac4309a2ff8d17d3c2da2f7f6782c627d3da8a5438fb5da5d8185a06
-
SSDEEP
192:ayeIR0CMhl4LQsdmIsK12rGezODH+ZS/U9HnBr:KIFMh+JDQrGezA/U9F
Score1/10 -
-
-
Target
signin/KIM/lib/js/jquery.CardValidator.js
-
Size
6KB
-
MD5
27c724fa448269f77118494361b0fc0c
-
SHA1
7455679ba0a9811fd31ab5ea8f76ebfe4ba22ec9
-
SHA256
8802adf5641c1056fcf4feeeabb83be1b1e3724d9b460cecc791dfdd6422bc3b
-
SHA512
bec5c3be2b2b2b1719f4e8138a425bb4b2bc3c42a9704699ed1925b160bcbef2e5806096687f50572be0c2f585c326f5afb9eb3a60caac7c87b292e57aa46517
-
SSDEEP
192:yBQHDwgvNNiV0UVCVFVCIiOAyCsfaLEsanRPoaoJ:yBGpNJEv7iNO
Score1/10 -
-
-
Target
signin/KIM/lib/js/jquery.additional-methods.js
-
Size
21KB
-
MD5
90ea2fdca7a2817e04c6f508fc70fc82
-
SHA1
8ea4223a744c83d354c257bbce3e85e6804e9147
-
SHA256
72d04d4e4fec062d1c4ef989026f021267b61ffa1d0350855a7007e81f49bba6
-
SHA512
73d6085eb5bdf19c87121e66c77fd45c803629b0fbae59fdcd4f1c8e354ad001f8bbb3c06cf214a95d932dd7952276a81862c17b96f419d5a3299c7f446a06d7
-
SSDEEP
192:Q0HHxjIz2kLGeY0XAZJEmbDfnDDh+PiVrYmzDBko+U/f/QcOk+OUZppCFNAZogc:Qqxj0+e1XmXDfeTop/Q6fFNAe
Score1/10 -
-
-
Target
signin/KIM/lib/js/jquery.js
-
Size
84KB
-
MD5
1a0d5be2d25ff036a0e088e0ec0b3600
-
SHA1
7a9ae64f46b3c59ab06648d5681434a89c3d605c
-
SHA256
2a1f1370eb7b24a307312112427dfd544fb838a8bef66babc936f5e870a22e52
-
SHA512
f93c1d0ed0314a201f1051e9df068b0197cb0a8c1287083a07597dc0cf06f7f987ba118718a14948d7ab949ef9b9a2128a54a403ca504ea3ee28984d2df69cdf
-
SSDEEP
1536:35hEyisTikEJqRdXXe2pP7lgoVMEXvdVhvLgSh4xzAdXtqTyZSusjiKx/w7Ug2xY:1QGvHhvLIzuXkTScl//MTDU8Cuh
Score1/10 -
-
-
Target
signin/KIM/lib/js/jquery.mask.js
-
Size
17KB
-
MD5
219d169a80568884a3d6baab3e5e7def
-
SHA1
61d00104de8c972c820cd9b527d8e2edb30e5c4a
-
SHA256
cf1f0d954cbbbcb32d170b1ff68c5b082a1086f34f2bbee825ca88b7c9fb213a
-
SHA512
90da5426fce80e290e48ebcfed50a9b93633abf0d0e34f6fe83bbe6cdf7a440ef486f0e57cc71f6ca04cedf89dea6a581c5a80d3c503a12c534202d163116597
-
SSDEEP
384:K2Pmngz+rsZSSQCyRjfQFe/he/U/GA2AJ:xOggjfT8uJ
Score1/10 -
-
-
Target
signin/KIM/lib/js/jquery.v-form.js
-
Size
6KB
-
MD5
31b64f77af102dc69d198b7e34f5607f
-
SHA1
a71c837ed5f432861f2a11b8b29d8ab6b81878f3
-
SHA256
9304574d62807aa60938f2d95a29e9bba829de51d20304600a6724a7d91d271b
-
SHA512
2d2f429106629dffa83245720e495d9a34815725344741b11abea02b82f66bc30b4d16b995f8af5b25cf4f7d090174f5808faa65b6a6c7848c61c3f5b787c027
-
SSDEEP
192:iEyEncbBXybk9OWoMjiqjxKAxKHxKdxKAkvxKZCbckKWlOKi5vz:L7MXybk9OWoMjisxKAxKHxKdxKAkvxKH
Score1/10 -
-
-
Target
signin/KIM/lib/js/jquery.validate.js
-
Size
45KB
-
MD5
17836a76e9a044bc7dad83f6dcef42ef
-
SHA1
3467edcee0e9cecd3e5be5bfd21227c8676c05ac
-
SHA256
d030f6633a5d0efd3f76fcf5ec98a0468c76770e618a401ffe5ddc7f6ccc844b
-
SHA512
f43e42b37d04f512bae5615eaf9c04d9f9f9597a72739c9b258805564140260d40097b0a8a64d265406aed709899accc253ba669e27f8be6e07ddade7eac25a7
-
SSDEEP
768:rFYgrTbATRSY9vI/Vrw/zWBCo64/cUAK89OyjAKsdn+GKQhq/EKYApJ5K84kI9Yo:rrTbATRSYZI/Vrw/K564/cUAK89OyjAp
Score1/10 -
-
-
Target
signin/KIM/lib/xBananaBotsPerfect.php
-
Size
23KB
-
MD5
0426d00b56eb7a0899e9caa9d1f51b7d
-
SHA1
0323c476d5d9460eaa31023ca7e4dc002c26f1e8
-
SHA256
5a39ba874a16ac1273ef3231d491b6108fd09a5d9410c6a8996725f2ee48336a
-
SHA512
d627526202cd42c498d8949bb382e6955bd09897615a526efed624b99220122f718b0a6059a7a727d21913666a26227ae119345c0d340d7939c2ecc129b8916d
-
SSDEEP
384:LT2JomWb2y2QocbsPpk27oYG2sb7GXfnV1EHr0RpeN2f3b7tXfnV1EHr0RMeN22:hnMuJ0Mu02
Score1/10 -
-
-
Target
signin/KIM/myaccount/identity/INC/ID.html
-
Size
7KB
-
MD5
765daf8b16462771cded3d5fcc163bd8
-
SHA1
2d44c15019c6af90e4854dfe05ee8dcff4a2a4a4
-
SHA256
bda8d8342f35487b13a7418daf74cfceb5d44567bb0fe953ae81c82c69b6eb36
-
SHA512
fb43296f24a68f438bdce05468c1f0938e008aadf5272860d8ca2bf25db21c0ce716a1f5b607c72ebeb998f10d143840d10852c87b9e8e755cf99f69dcde3093
-
SSDEEP
96:SNxpUwnGB0pUwnGSYpUwnGgIPpUwnGOrpUwnjK8u7zv9G75O:IqQqfqdqqqL8uvAY
Score1/10 -