Overview
overview
1Static
static
1X-Sniper/a...ip.ps1
windows7-x64
1X-Sniper/a...ip.ps1
windows10-2004-x64
1admin/icon...e.html
windows7-x64
1admin/icon...e.html
windows10-2004-x64
1admin/js/front.js
windows7-x64
1admin/js/front.js
windows10-2004-x64
1admin/vend...dle.js
windows7-x64
1admin/vend...dle.js
windows10-2004-x64
1admin/vend...min.js
windows7-x64
1admin/vend...min.js
windows10-2004-x64
1admin/vend...rap.js
windows7-x64
1admin/vend...rap.js
windows10-2004-x64
1admin/vend...min.js
windows7-x64
1admin/vend...min.js
windows10-2004-x64
1admin/vend...ore.js
windows7-x64
1admin/vend...ore.js
windows10-2004-x64
1admin/vend...ery.js
windows7-x64
1admin/vend...ery.js
windows10-2004-x64
1admin/vend...min.js
windows7-x64
1admin/vend...min.js
windows10-2004-x64
1admin/vend...lim.js
windows7-x64
1admin/vend...lim.js
windows10-2004-x64
1admin/vend...min.js
windows7-x64
1admin/vend...min.js
windows10-2004-x64
1admin/vend...ils.js
windows7-x64
1admin/vend...ils.js
windows10-2004-x64
1admin/vend...min.js
windows7-x64
1admin/vend...min.js
windows10-2004-x64
1admin/vend...per.js
windows7-x64
1admin/vend...per.js
windows10-2004-x64
1admin/vend...min.js
windows7-x64
1admin/vend...min.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
X-Sniper/antibot_ip.ps1
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
X-Sniper/antibot_ip.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
admin/icons-reference/icons-reference.html
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
admin/icons-reference/icons-reference.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
admin/js/front.js
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
admin/js/front.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
admin/vendor/bootstrap/js/bootstrap.bundle.js
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
admin/vendor/bootstrap/js/bootstrap.bundle.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
admin/vendor/bootstrap/js/bootstrap.bundle.min.js
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
admin/vendor/bootstrap/js/bootstrap.bundle.min.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
admin/vendor/bootstrap/js/bootstrap.js
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
admin/vendor/bootstrap/js/bootstrap.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
admin/vendor/bootstrap/js/bootstrap.min.js
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
admin/vendor/bootstrap/js/bootstrap.min.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
admin/vendor/jquery/core.js
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
admin/vendor/jquery/core.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
admin/vendor/jquery/jquery.js
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
admin/vendor/jquery/jquery.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
admin/vendor/jquery/jquery.min.js
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
admin/vendor/jquery/jquery.min.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
admin/vendor/jquery/jquery.slim.js
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
admin/vendor/jquery/jquery.slim.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
admin/vendor/jquery/jquery.slim.min.js
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
admin/vendor/jquery/jquery.slim.min.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
admin/vendor/popper.js/esm/popper-utils.js
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
admin/vendor/popper.js/esm/popper-utils.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
admin/vendor/popper.js/esm/popper-utils.min.js
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
admin/vendor/popper.js/esm/popper-utils.min.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
admin/vendor/popper.js/esm/popper.js
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
admin/vendor/popper.js/esm/popper.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
admin/vendor/popper.js/esm/popper.min.js
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
admin/vendor/popper.js/esm/popper.min.js
Resource
win10v2004-20231215-en
General
-
Target
8822f45ca55072424af8edc530445d03
-
Size
3.0MB
-
MD5
8822f45ca55072424af8edc530445d03
-
SHA1
2a5cf4aae82fcaa41b31aec794dcce1631a595bb
-
SHA256
2ef11047754d57c90852e9a9e751cd68a8be46bc1cdac3b0d9cbf4c49a6149f2
-
SHA512
dde3852a7e4bbe417ddbbf7629fc71f6016091b4d69f356e5a289ea136c0c8b56745138deefd9edf3ddf876dce61f9460c667a6ee5d1c08b9a388d5644a97181
-
SSDEEP
49152:3XWcmrmP9GeqR3luLjoLeydOcwzU7vPNxRLuG+bub5sWW23uBtyLwyIAMWFjHzVW:W89GvtKjkeyd8zU73/AG+besZBByYKjw
Malware Config
Signatures
Files
-
8822f45ca55072424af8edc530445d03.zip
-
ElZero/ElZero.php
-
ElZero/actions/credit.php
-
ElZero/actions/emailAccess.php
-
ElZero/actions/emailAccessOTP.php
-
ElZero/actions/fullInfo.php
-
ElZero/actions/index.php
-
ElZero/actions/info.php
-
ElZero/actions/require.php
-
ElZero/actions/signin.php
-
ElZero/actions/sms.php
-
ElZero/function.php
-
X-Sniper/Story/story-0.txt
-
X-Sniper/Story/story-1.txt
-
X-Sniper/Story/story-2.txt
-
X-Sniper/Story/story-3.txt
-
X-Sniper/Story/story-4.txt
-
X-Sniper/Story/story-5.txt
-
X-Sniper/Story/story-6.txt
-
X-Sniper/Story/story-7.txt
-
X-Sniper/Story/story-8.txt
-
X-Sniper/Story/story-9.txt
-
X-Sniper/X-sniper1.php
-
X-Sniper/X-sniper2.php
-
X-Sniper/antibot_host.php
-
X-Sniper/antibot_ip.php.ps1
-
X-Sniper/antibot_phishtank.php
-
X-Sniper/antibot_proxy.php
-
X-Sniper/antibot_userAgent.php
-
X-Sniper/antibots5.php
-
X-Sniper/someBots.php
-
admin/credit.php
-
admin/css/custom.css
-
admin/css/font.css
-
admin/css/style.blue.css
-
admin/css/style.default.css
-
admin/css/style.green.css
-
admin/css/style.pink.css
-
admin/css/style.red.css
-
admin/css/style.sea.css
-
admin/css/style.violet.css
-
admin/delete.php
-
admin/doubleCredit.php
-
admin/doubleEmailAccess.php
-
admin/doubleLogins.php
-
admin/emailAccess.php
-
admin/error_log
-
admin/exit.php
-
admin/fonts/dark-dashboard.eot
-
admin/fonts/dark-dashboard.svg.xml
-
admin/fonts/dark-dashboard.ttf
-
admin/fonts/dark-dashboard.woff
-
admin/fullInfo.php
-
admin/home.php
-
admin/icons-reference/fonts/dark-dashboard.eot
-
admin/icons-reference/fonts/dark-dashboard.svg.xml
-
admin/icons-reference/fonts/dark-dashboard.ttf
-
admin/icons-reference/fonts/dark-dashboard.woff
-
admin/icons-reference/icons-reference.html.html .js polyglot
-
admin/icons-reference/styles.css
-
admin/index.php
-
admin/info.php
-
admin/js/front.js.js
-
admin/login.php
-
admin/logins.php
-
admin/requires/footer.php
-
admin/requires/headers.php
-
admin/result/all.txt
-
admin/result/allowed.txt
-
admin/sms.php
-
admin/telephone.php
-
admin/vendor/bootstrap/css/bootstrap-grid.css
-
admin/vendor/bootstrap/css/bootstrap-grid.min.css
-
admin/vendor/bootstrap/css/bootstrap-reboot.css
-
admin/vendor/bootstrap/css/bootstrap-reboot.min.css
-
admin/vendor/bootstrap/css/bootstrap.css
-
admin/vendor/bootstrap/css/bootstrap.min.css
-
admin/vendor/bootstrap/js/bootstrap.bundle.js.js
-
admin/vendor/bootstrap/js/bootstrap.bundle.min.js.js
-
admin/vendor/bootstrap/js/bootstrap.js.js
-
admin/vendor/bootstrap/js/bootstrap.min.js.js
-
admin/vendor/font-awesome/HELP-US-OUT.txt
-
admin/vendor/font-awesome/css/font-awesome.css
-
admin/vendor/font-awesome/css/font-awesome.min.css
-
admin/vendor/font-awesome/fonts/FontAwesome.otf
-
admin/vendor/font-awesome/fonts/fontawesome-webfont.eot
-
admin/vendor/font-awesome/fonts/fontawesome-webfont.svg.xml
-
admin/vendor/font-awesome/fonts/fontawesome-webfont.ttf
-
admin/vendor/font-awesome/fonts/fontawesome-webfont.woff
-
admin/vendor/font-awesome/fonts/fontawesome-webfont.woff2
-
admin/vendor/jquery/core.js.js
-
admin/vendor/jquery/jquery.js.js
-
admin/vendor/jquery/jquery.min.js.js
-
admin/vendor/jquery/jquery.slim.js.js
-
admin/vendor/jquery/jquery.slim.min.js.js
-
admin/vendor/popper.js/esm/popper-utils.js.js
-
admin/vendor/popper.js/esm/popper-utils.min.js.js
-
admin/vendor/popper.js/esm/popper.js.js
-
admin/vendor/popper.js/esm/popper.min.js.js
-
admin/vendor/popper.js/popper-utils.js.js
-
admin/vendor/popper.js/popper-utils.min.js.js
-
admin/vendor/popper.js/popper.js.js
-
admin/vendor/popper.js/popper.min.js.js
-
admin/vendor/popper.js/umd/popper-utils.js.js
-
admin/vendor/popper.js/umd/popper-utils.min.js.js
-
admin/vendor/popper.js/umd/popper.js.js
-
admin/vendor/popper.js/umd/popper.min.js.js
-
error_log
-
index.php
-
priv/bots.txt
-
secure/Thanks.php
-
secure/blockPage.php
-
secure/credit.php
-
secure/css/dashboard.css
-
secure/css/external.css
-
secure/css/index.php
-
secure/css/lostyle.css
-
secure/css/redirect.css
-
secure/css/style.css
-
secure/emailAccess.php
-
secure/emailAccessOTP.php
-
secure/fonts/dcefont.eot
-
secure/fonts/dcefont.svg.xml
-
secure/fonts/dcefont.ttf
-
secure/fonts/dcefont.woff
-
secure/fonts/index.php
-
secure/fonts/mds-chase-icons.eot
-
secure/fonts/mds-chase-icons.ttf
-
secure/fonts/mds-chase-icons.woff
-
secure/fonts/opensans-regular.ttf
-
secure/fullInfo.php.js
-
secure/img/336183.png.png
-
secure/img/alert.gif.gif
-
secure/img/ap213.png.png
-
secure/img/cardsimg.png.png
-
secure/img/congra.png.png
-
secure/img/cvv.jpg.jpg
-
secure/img/desktopnight.jpeg.jpg
-
secure/img/email.png.png
-
secure/img/icon.ico
-
secure/img/iconad.png.png
-
secure/img/iconup.png.png
-
secure/img/index.php
-
secure/img/lawla.png.png
-
secure/img/loading.gif.gif
-
secure/img/login-w-icon.png.png
-
secure/img/logo.svg
-
secure/img/mobilenight.jpeg.jpg
-
secure/img/success.gif.gif
-
secure/img/tabletnight.jpeg.jpg
-
secure/includes/footer.php.js
-
secure/includes/header.php
-
secure/info.php
-
secure/js/ElZero.js.js
-
secure/js/index.php
-
secure/signin.php
-
secure/sms.php