Overview
overview
3Static
static
1confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3confidenti...].html
windows7-x64
3confidenti...].html
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
confidential/. [useless].html
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
confidential/. [useless].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
confidential/Direct Messages - Firy024stream [1249441603571945625].html
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
confidential/Direct Messages - Firy024stream [1249441603571945625].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
confidential/Direct Messages - Fungaldom [1249801805739720845].html
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
confidential/Direct Messages - Fungaldom [1249801805739720845].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
confidential/Direct Messages - Garnet [1231205091499970600].html
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
confidential/Direct Messages - Garnet [1231205091499970600].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
confidential/Direct Messages - German [1148723006407979028].html
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
confidential/Direct Messages - German [1148723006407979028].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
confidential/Direct Messages - German [1249099276865503334].html
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
confidential/Direct Messages - German [1249099276865503334].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
confidential/Direct Messages - Giovanni [1247621230660550759].html
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
confidential/Direct Messages - Giovanni [1247621230660550759].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
confidential/Direct Messages - Goffy. [1105195878978949212].html
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
confidential/Direct Messages - Goffy. [1105195878978949212].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
confidential/Direct Messages - Hades [1234204064317968544].html
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
confidential/Direct Messages - Hades [1234204064317968544].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
confidential/Direct Messages - Haldonj41 [1246450821370089533].html
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
confidential/Direct Messages - Haldonj41 [1246450821370089533].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
confidential/Direct Messages - Hallo [1249024212937605162].html
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
confidential/Direct Messages - Hallo [1249024212937605162].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
confidential/Direct Messages - Hermes [1228805137749774491].html
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
confidential/Direct Messages - Hermes [1228805137749774491].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
confidential/Direct Messages - Horizon [1249397311965106187].html
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
confidential/Direct Messages - Horizon [1249397311965106187].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
confidential/Direct Messages - J. Robert Oppenheimer, German [1226231741119729714].html
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
confidential/Direct Messages - J. Robert Oppenheimer, German [1226231741119729714].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
confidential/Direct Messages - Jack Tritt [1237884522670981271].html
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
confidential/Direct Messages - Jack Tritt [1237884522670981271].html
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
confidential/Direct Messages - JadeIGuess [1221505444380545025].html
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
confidential/Direct Messages - JadeIGuess [1221505444380545025].html
Resource
win10v2004-20240802-en
General
-
Target
jay (1).zip
-
Size
3.4MB
-
MD5
66d42b233977d70de708f36eb5d399e4
-
SHA1
8818260628bc48f7552708157a27ddb50ed64610
-
SHA256
1f789eca76ede7db357a1d407aab003bec6280021f8bdf41306935dcd9ef586e
-
SHA512
bc0540df7fd7918b87171395ecdfce8cf419d1871a207cb80db668f9ea2a8a51abaa17c647cbc8acc27642c96fa3a33d3369a971f104a2816ea0e23e47f95a68
-
SSDEEP
49152:fCZtxwMZ8tOBR15UENHrD9Tno9lQZsQn8XcZNKagZdTVP0685eLi6WcMw65FYiqt:fCZDwMZ8sB9f9TRshuZWhJeaW/05kGWW
Malware Config
Signatures
Files
-
jay (1).zip.zip
-
confidential.rar.rar
-
confidential/. [useless].html.html .js polyglot
-
confidential/Direct Messages - Firy024stream [1249441603571945625].html.html .js polyglot
-
confidential/Direct Messages - Fungaldom [1249801805739720845].html.html .js polyglot
-
confidential/Direct Messages - Garnet [1231205091499970600].html.html .js polyglot
-
confidential/Direct Messages - German [1148723006407979028].html.html .js polyglot
-
confidential/Direct Messages - German [1249099276865503334].html.html .js polyglot
-
confidential/Direct Messages - Giovanni [1247621230660550759].html.html .js polyglot
-
confidential/Direct Messages - Goffy. [1105195878978949212].html.html .js polyglot
-
confidential/Direct Messages - Hades [1234204064317968544].html.html .js polyglot
-
confidential/Direct Messages - Haldonj41 [1246450821370089533].html.html .js polyglot
-
confidential/Direct Messages - Hallo [1249024212937605162].html.html .js polyglot
-
confidential/Direct Messages - Hermes [1228805137749774491].html.html .js polyglot
-
confidential/Direct Messages - Horizon [1249397311965106187].html.html .js polyglot
-
confidential/Direct Messages - J. Robert Oppenheimer, German [1226231741119729714].html.html .js polyglot
-
confidential/Direct Messages - Jack Tritt [1237884522670981271].html.html .js polyglot
-
confidential/Direct Messages - JadeIGuess [1221505444380545025].html.html .js polyglot
-
confidential/Direct Messages - John6pr9 [1177362592646320220].html.html .js polyglot
-
confidential/Direct Messages - KozyK β [1136714755734786099].html.html .js polyglot
-
confidential/Direct Messages - MG METTO [1249390378369683586].html.html .js polyglot
-
confidential/Direct Messages - Mase [1236440271978496001].html.html .js polyglot
-
confidential/Direct Messages - Monke [1250844716795302019].html.html .js polyglot
-
confidential/Direct Messages - Mwolfcz [1226530256199090228].html.html .js polyglot
-
confidential/Direct Messages - ProBot β¨ [1228133995003248650].html.html .js polyglot
-
confidential/Direct Messages - Recruitment Team [1239984069304123402].html.html .js polyglot
-
confidential/Direct Messages - STE shooters [888843860636221530].html.html .js polyglot
-
confidential/Direct Messages - Sam (dangerous ahh shopkeeper), ΰΌΊVelocityΰΌ», Castle, πππ.ππππππππ, wigo [1237914641749774456].html.html .js polyglot
-
confidential/Direct Messages - Serena The Great [1247313477161189377].html.html .js polyglot
-
confidential/Direct Messages - ShutUpTalha.com [1208792621460492318].html.html .js polyglot
-
confidential/Direct Messages - Str1kerWoLF_Haddock [1226525811826229318].html.html .js polyglot
-
confidential/Direct Messages - Thereβs no laws against the pokemon [1225538415160987808].html.html .js polyglot
-
confidential/Direct Messages - Ultimateswords5 [1230637650650857523].html.html .js polyglot
-
confidential/Direct Messages - Ves dhc [testing method] [1151979188564279367].html.html .js polyglot
-
confidential/Direct Messages - WG LF [1246236872993145027].html.html .js polyglot
-
confidential/Direct Messages - Wapory [1148012512151883777].html.html .js polyglot
-
confidential/Direct Messages - Wraith [1239580358580637696].html.html .js polyglot
-
confidential/Direct Messages - YAGPDB.xyz [1238275626100592670].html.html .js polyglot
-
confidential/Direct Messages - Zmann666 [1235328735981600871].html.html .js polyglot
-
confidential/Direct Messages - Zom [1180940771327737867].html.html .js polyglot
-
confidential/Direct Messages - failfactsmedia [1182101200456384522].html.html .js polyglot
-
confidential/Direct Messages - gay ass shit [1250845381038837811].html.html .js polyglot
-
confidential/Direct Messages - hydrous [1247623698958123120].html.html .js polyglot
-
confidential/Direct Messages - idru10xrk [1246934581886849086].html.html .js polyglot
-
confidential/Direct Messages - invertedcaze [1140973291088121958].html.html .js polyglot
-
confidential/Direct Messages - jerome [1245924798966792284].html.html .js polyglot
-
confidential/Direct Messages - judgedbeatle934 [1180959812440293518].html.html .js polyglot
-
confidential/Direct Messages - justYosix [1236446426616172585].html.html .js polyglot
-
confidential/Direct Messages - katze [1226880363628855378].html.html .js polyglot
-
confidential/Direct Messages - leilani [1241125191183237176].html.html .js polyglot
-
confidential/Direct Messages - mardal π§π· [1208787538769092628].html.html .js polyglot
-
confidential/Direct Messages - mike, simon123 [1236343852227494002].html.html .js polyglot
-
confidential/Direct Messages - movie [1228873134027837470].html.html .js polyglot
-
confidential/Direct Messages - nuts [1233799681444675635].html.html .js polyglot
-
confidential/Direct Messages - pinkman [1165818849032159314].html.html .js polyglot
-
confidential/Direct Messages - pinkman [1165827184846442496].html.html .js polyglot
-
confidential/Direct Messages - playstationemeraldboy [1247654157435932795].html.html .js polyglot
-
confidential/Direct Messages - quad_ruplexe [1246622861125353474].html.html .js polyglot
-
confidential/Direct Messages - quad_ruplexe, ΰΌΊVelocityΰΌ», Harun, German [1250129912497700988].html.html .js polyglot
-
confidential/Direct Messages - r. [1249492239143403590].html.html .js polyglot
-
confidential/Direct Messages - robux laundering scheme [1236766625143980062].html.html .js polyglot
-
confidential/Direct Messages - sencockbunny [1128699283017826375].html.html .js polyglot
-
confidential/Direct Messages - shadow wizard money gang [1158549860501438524].html.html .js polyglot
-
confidential/Direct Messages - simon123 [1230634207412224112].html.html .js polyglot
-
confidential/Direct Messages - va2672 [1249098894831517808].html.html .js polyglot
-
confidential/Direct Messages - where wapory will never be unblocked [1249096210313121833].html.html .js polyglot
-
confidential/Direct Messages - wigo [1225600529225355329].html.html .js polyglot
-
confidential/Direct Messages - wigo [1240750640456667307].html.html .js polyglot
-
confidential/Direct Messages - wigo [1244761055029235723].html.html .js polyglot
-
confidential/Direct Messages - wigo [1244764116401524736].html.html .js polyglot
-
confidential/Direct Messages - wigo [1247974424205070432].html.html .js polyglot
-
confidential/Direct Messages - ΠΌΡΡ [1208771179465154633].html.html .js polyglot
-
confidential/Direct Messages - π β¦ [1238273833153069088].html.html .js polyglot
-
confidential/Direct Messages - πππ.ππππππππ [1219734693029609637].html.html .js polyglot
-
confidential/Direct Messages - ππππ£ππππ©π½π‘πͺπ§π₯π‘π [1233166544440393748].html.html .js polyglot
-
confidential/application bot.html.html .js polyglot
-
confidential/argument gc [interesting].html.html .js polyglot
-
confidential/bloxlink [useful].html.html .js polyglot
-
confidential/bloxlink pro [useless].html.html .js polyglot
-
confidential/castle [half useless].html.html .js polyglot
-
confidential/col [useless].html.html .js polyglot
-
confidential/daf friend [useless].html.html .js polyglot
-
confidential/daf invite [useless].html.html .js polyglot
-
confidential/daf recruiter [useless].html.html .js polyglot
-
confidential/dahood star gc [useless].html.html .js polyglot
-
confidential/dev friend [useless].html.html .js polyglot
-
confidential/discord [useless].html.html .js polyglot
-
confidential/double counter [useless].html.html .js polyglot
-
confidential/dyno [kinda useless].html.html .js polyglot
-
confidential/dyno [useless].html.html .js polyglot
-
confidential/game development gc (pt2) [useless].html.html .js polyglot
-
confidential/game development groupchat.html.html .js polyglot
-
confidential/his gf [face reveal].html.html .js polyglot
-
confidential/jadel gc [interesting].html.html .js polyglot
-
confidential/mee6 [useless].html.html .js polyglot
-
confidential/random dahood friend [useless].html.html .js polyglot
-
confidential/random gc [useless].html.html .js polyglot
-
confidential/random person 10 [interesting].html.html .js polyglot
-
confidential/random person 11 [useless].html.html .js polyglot
-
confidential/random person 12 [useless].html.html .js polyglot
-
confidential/random person 13 [useless].html.html .js polyglot
-
confidential/random person 14 [useless].html.html .js polyglot
-
confidential/random person 15 [useless].html.html .js polyglot
-
confidential/random person 2 [useless].html.html .js polyglot
-
confidential/random person 3 [useless].html.html .js polyglot
-
confidential/random person 4 [useless].html.html .js polyglot
-
confidential/random person 5 [useless].html.html .js polyglot
-
confidential/random person 6 [useless].html.html .js polyglot
-
confidential/random person 7 [useless].html.html .js polyglot
-
confidential/random person 8 [useless].html.html .js polyglot
-
confidential/random person 9 [useless].html.html .js polyglot
-
confidential/random person [useless].html.html .js polyglot
-
confidential/throwaway gc 2 [useless].html.html .js polyglot
-
confidential/throwaway gc 3 [age admitting].html.html .js polyglot
-
confidential/throwaway gc 4 [useless].html.html .js polyglot
-
confidential/throwaway gc 5 [useless].html.html .js polyglot
-
confidential/throwaway gc [useless].html.html .js polyglot
-
confidential/tickets bot [useless].html.html .js polyglot
-
confidential/tickets tool [interesting].html.html .js polyglot
-
confidential/trade offer 2 [useless].html.html .js polyglot
-
confidential/trade offer 3 [useless].html.html .js polyglot
-
confidential/trade offer 4 [useless].html.html .js polyglot
-
confidential/trade offer 5 [useless].html.html .js polyglot
-
confidential/trade offer 6 [useless].html.html .js polyglot
-
confidential/trade offer [useless].html.html .js polyglot
-
confidential/trickster [useless].html.html .js polyglot
-
confidential/tts bot [useless].html.html .js polyglot
-
confidential/velocity [useless].html.html .js polyglot