Overview
overview
10Static
static
10WHATSAPP-P...AR.bat
windows10-2004-x64
1WHATSAPP-P...AR.bat
windows11-21h2-x64
1WHATSAPP-P...ons.js
windows10-2004-x64
3WHATSAPP-P...ons.js
windows11-21h2-x64
3WHATSAPP-P...les.js
windows10-2004-x64
3WHATSAPP-P...les.js
windows11-21h2-x64
3WHATSAPP-P...dex.js
windows10-2004-x64
3WHATSAPP-P...dex.js
windows11-21h2-x64
3WHATSAPP-P...-db.js
windows10-2004-x64
3WHATSAPP-P...-db.js
windows11-21h2-x64
3WHATSAPP-P...s.html
windows10-2004-x64
4WHATSAPP-P...s.html
windows11-21h2-x64
4WHATSAPP-P...-sw.js
windows10-2004-x64
3WHATSAPP-P...-sw.js
windows11-21h2-x64
3WHATSAPP-P...ush.js
windows10-2004-x64
3WHATSAPP-P...ush.js
windows11-21h2-x64
3WHATSAPP-P...ion.js
windows10-2004-x64
3WHATSAPP-P...ion.js
windows11-21h2-x64
3WHATSAPP-P.../sw.js
windows10-2004-x64
3WHATSAPP-P.../sw.js
windows11-21h2-x64
3WHATSAPP-P...ons.js
windows10-2004-x64
3WHATSAPP-P...ons.js
windows11-21h2-x64
3WHATSAPP-P...ice.js
windows10-2004-x64
3WHATSAPP-P...ice.js
windows11-21h2-x64
3WHATSAPP-P...nte.js
windows10-2004-x64
3WHATSAPP-P...nte.js
windows11-21h2-x64
3WHATSAPP-P...e.html
windows10-2004-x64
3WHATSAPP-P...e.html
windows11-21h2-x64
4WHATSAPP-P...oes.js
windows10-2004-x64
3WHATSAPP-P...oes.js
windows11-21h2-x64
3WHATSAPP-P...k.html
windows10-2004-x64
3WHATSAPP-P...k.html
windows11-21h2-x64
4General
- Target htdocs.rar
- Size 45.8MB
- Sample251204-g5e8caby8d
- SHA256 bb01bdd31700c1d61464a5c4f9fca60be6de61670c383539eb01fc7d882a74a8
- MD5 8a761a62839da66f6c90db1448791870
- SHA1 a3ee92b9940376d797f3c802cd92a862c8a94038
- SHA512 285c1a168b4f434a031c897f604d9593a0cacdf47dafb20db5b008b64db1df00b432c12fe561f0a5b6cdba3f9a4561dfd4655f163065f651f9cf652c70ca8239
- SSDEEP 786432:Z37lp+viH1K+QCKZNd3elB+Qdxc3OdgeDWt9JIapk6Jjw3KEYWJ/nb:Z37ed3iQQ03EgeD4z+ejQKEYWBb
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
WHATSAPP-PROPRIO-PHP/INSTALAR.bat
Resource
win10v2004-20251016-en
Behavioral task
behavioral2
Sample
WHATSAPP-PROPRIO-PHP/INSTALAR.bat
Resource
win11-20251015-en
Behavioral task
behavioral3
Sample
WHATSAPP-PROPRIO-PHP/api-reservations.js
Resource
win10v2004-20251016-en
Behavioral task
behavioral4
Sample
WHATSAPP-PROPRIO-PHP/api-reservations.js
Resource
win11-20251015-en
Behavioral task
behavioral5
Sample
WHATSAPP-PROPRIO-PHP/gerar-vapid-keys-simples.js
Resource
win10v2004-20251016-en
Behavioral task
behavioral6
Sample
WHATSAPP-PROPRIO-PHP/gerar-vapid-keys-simples.js
Resource
win11-20251015-en
Behavioral task
behavioral7
Sample
WHATSAPP-PROPRIO-PHP/index.js
Resource
win10v2004-20251016-en
Behavioral task
behavioral8
Sample
WHATSAPP-PROPRIO-PHP/index.js
Resource
win11-20251015-en
Behavioral task
behavioral9
Sample
WHATSAPP-PROPRIO-PHP/init-db.js
Resource
win10v2004-20251016-en
Behavioral task
behavioral10
Sample
WHATSAPP-PROPRIO-PHP/init-db.js
Resource
win11-20251015-en
Behavioral task
behavioral11
Sample
WHATSAPP-PROPRIO-PHP/public/create-icons.html
Resource
win10v2004-20251016-en
Behavioral task
behavioral12
Sample
WHATSAPP-PROPRIO-PHP/public/create-icons.html
Resource
win11-20251015-en
Behavioral task
behavioral13
Sample
WHATSAPP-PROPRIO-PHP/public/firebase-messaging-sw.js
Resource
win10v2004-20251016-en
Behavioral task
behavioral14
Sample
WHATSAPP-PROPRIO-PHP/public/firebase-messaging-sw.js
Resource
win11-20251015-en
Behavioral task
behavioral15
Sample
WHATSAPP-PROPRIO-PHP/public/js/push.js
Resource
win10v2004-20251016-en
Behavioral task
behavioral16
Sample
WHATSAPP-PROPRIO-PHP/public/js/push.js
Resource
win11-20251015-en
Behavioral task
behavioral17
Sample
WHATSAPP-PROPRIO-PHP/public/push-notification.js
Resource
win10v2004-20251016-en
Behavioral task
behavioral18
Sample
WHATSAPP-PROPRIO-PHP/public/push-notification.js
Resource
win11-20250610-en
Behavioral task
behavioral19
Sample
WHATSAPP-PROPRIO-PHP/public/sw.js
Resource
win10v2004-20251016-en
Behavioral task
behavioral20
Sample
WHATSAPP-PROPRIO-PHP/public/sw.js
Resource
win11-20250619-en
Behavioral task
behavioral21
Sample
WHATSAPP-PROPRIO-PHP/push-notifications.js
Resource
win10v2004-20251016-en
Behavioral task
behavioral22
Sample
WHATSAPP-PROPRIO-PHP/push-notifications.js
Resource
win11-20250610-en
Behavioral task
behavioral23
Sample
WHATSAPP-PROPRIO-PHP/services/PushNotificationService.js
Resource
win10v2004-20251016-en
Behavioral task
behavioral24
Sample
WHATSAPP-PROPRIO-PHP/services/PushNotificationService.js
Resource
win11-20251015-en
Behavioral task
behavioral25
Sample
WHATSAPP-PROPRIO-PHP/views/chat-cliente.js
Resource
win10v2004-20251016-en
Behavioral task
behavioral26
Sample
WHATSAPP-PROPRIO-PHP/views/chat-cliente.js
Resource
win11-20251015-en
Behavioral task
behavioral27
Sample
WHATSAPP-PROPRIO-PHP/views/cliente.html
Resource
win10v2004-20251016-en
Behavioral task
behavioral28
Sample
WHATSAPP-PROPRIO-PHP/views/cliente.html
Resource
win11-20251015-en
Behavioral task
behavioral29
Sample
WHATSAPP-PROPRIO-PHP/views/configuracoes.js
Resource
win10v2004-20251016-en
Behavioral task
behavioral30
Sample
WHATSAPP-PROPRIO-PHP/views/configuracoes.js
Resource
win11-20251015-en
Behavioral task
behavioral31
Sample
WHATSAPP-PROPRIO-PHP/views/gerar-link.html
Resource
win10v2004-20250619-en
Behavioral task
behavioral32
Sample
WHATSAPP-PROPRIO-PHP/views/gerar-link.html
Resource
win11-20251015-en
Malware Config
Extracted
-
spynote
-
186.26.107.31:7771
Targets
-
- Target WHATSAPP-PROPRIO-PHP/INSTALAR.bat
- Size 2KB
- SHA256 ebc1a9e8f828891137778eb36fe389f9951d4abf5d2c7bcbafddf5519045652b
- MD5 dd907708c17e34072820068b75d01379
- SHA1 360cea279881152589e2519814542f4ad8145b41
- SHA512 10646fba745b0037008bcf669da48026b483eeb21febd92b41f660799d83bbd67a3d858117f526d2d55748f0725df1da31a3852675812414a8e3c1a39d814014
- MD5 SHA1 SHA512
Score1/10 -
- Target WHATSAPP-PROPRIO-PHP/api-reservations.php
- Size 15KB
- SHA256 681d6cb16afcee8bdae6e164cc5c4e1e7a78379fbcdf4bf20ce3baa595e00331
- MD5 e0db44ce414fd0763c034cccf4d3d9a6
- SHA1 cd2ec7e6bf992fd8234991676554ad090e9fe7b8
- SHA512 e74a9ec80913bfa82634d78e98f94caf7bed8b26bef8f00316bedf79bd7ba42a684cbe5aa625153d44dfdcb0f1ad4e84cbafc0c654e1af695bd5f71ee9fccf1f
- SSDEEP 192:CeiII9LjH65Wv4YoiGiVDITcfY1tHZYM65AIlZl939x:hiRRja5Wv4YfGiVETLAlZ/3f
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target WHATSAPP-PROPRIO-PHP/gerar-vapid-keys-simples.php
- Size 4KB
- SHA256 a22b8d0521631a1cee578470b3de8712e0593ba3b78507cb055d564d93cfbd27
- MD5 f308602c534089c4bd594ae83cfb5338
- SHA1 1aff83d2b53fda2017051318a159af89d6ee3b4a
- SHA512 fecfa778b7e47da2f725f29b5a1bfce293e69a4ab7c18b98d8440152b45d4991e7eb02a3d8ed1f72b1b25b0cf2ad76df2f6d3baa07b79e61d17eb4b304ffa965
- SSDEEP 48:fo1yfKMUHM949CoZ2L+PdECBEosWtuFhhEeNXIrGxZyfLEF/PRNagan9DRrL8PEt:wfRP95uEecYZWIB2rVRoE6ni
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target WHATSAPP-PROPRIO-PHP/index.php
- Size 48KB
- SHA256 5fdbfb1b1b6bcbdfc8ae4c7ec76e460b45f5e66e136f3219c938d0de071e48ec
- MD5 07043b1bc5902fb3261561a242a331e2
- SHA1 a2f5a5cef1cc5470d641408d4622d12c9ce090ee
- SHA512 a0a1dbfbb62494be8e5668a3b15020539a16eaad901cca45c11996dfa7c2647d14a20e7f591e75fed8f1e8fdbb09037ac48d18cd9ea2b44214cdcb5e9761d1df
- SSDEEP 384:yR2K/LmkHphpS8VYLX7O/y9v54fFoAualNsu10+5AD4kVGsSmYOQX52w1IMM1A/N:yMK/L5pXTFoKoZOX2w1Ik/SPYyAJ
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target WHATSAPP-PROPRIO-PHP/init-db.php
- Size 8KB
- SHA256 34efc99788e51565338b3be58bd0ace7ca2e22b2f2b5e8efe66234cebc2d6e44
- MD5 2c033e14f0b3c9c3cc2d85d8b2351785
- SHA1 8fecbaf0b33560b04b8ddc86fb9c182613cb0f14
- SHA512 eba83255c95ff5130a2279d5802efe93d3e1cf61730f00ba084209752cd398b30420809b6db6f7a5bb7dcc2ffa29ee3eb898dbf99fc8e16c6b7e452130173578
- SSDEEP 96:wud/rh52zg8/LCYd7bHYFbak6YWrWyhRMD3wAkVBfpEB0flz4tT:P2zg8/LDbUak0M7tkVBfjs
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target WHATSAPP-PROPRIO-PHP/public/create-icons.html
- Size 1KB
- SHA256 c2731274723d5e55eaee18c08807eb73624a93e8c4938d1e159518085f6502dc
- MD5 cabe7abda620906189922fb5bc4d8b11
- SHA1 daa1616097ffd2bdb9a9097c14b95b5dd2534160
- SHA512 00481689adde956c9bba585faf7588ed712720d6bd9df04aabda1ffc8d4e775c9985c7e8f3550e5f4f2abee639434c4e3bcb4481f39ea38ffa1cd1bcbd4f5559
- MD5 SHA1 SHA512
Score4/10 -
- Target WHATSAPP-PROPRIO-PHP/public/firebase-messaging-sw.js
- Size 7KB
- SHA256 cc0be721c357fb4072a849e051d31ca0d126e4719f03a8b1782082266438c784
- MD5 48a6a41581ac3845d113687af7d5d741
- SHA1 02ef28a93091a56748d4cf6259a835e7c1051e0e
- SHA512 1c2a4bc912da8c53627803f1bc01e23e3db10c7ab5b7b5fede260e9bcdf317397431e4f87f8e32526819fe189fcd61df198466ebc8c5c1153d2684ce09022eff
- SSDEEP 96:uUKSp9S4e3C+n0tNPtdRz6DkSKtgMPHgSh4awrNmr7PJbbl:u6je3C+2f2AdPAI4Thmfpl
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target WHATSAPP-PROPRIO-PHP/public/js/push.js
- Size 10KB
- SHA256 3ddecd3073ca62e678365f9fa88c3d00fc2a215d496d318e83eaabfdaf8a1d3c
- MD5 9ebbae97a58ab3265c9b6113f84d7985
- SHA1 561c243b68de6215bfc42a6436585556eba19097
- SHA512 123f446ddd294d41f3b85fcb256021eb176aa13a2813b6937219c975978d706d96429a4eefe365906928ac32dffc2884779b8b083d5befaf4a224288243acc39
- SSDEEP 192:2rB9owguzBzD3uBM2JvBUC41Jbnf2OgKolYCtRp:2rgwguBzD+BMS5UNbOOgJYCt
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target WHATSAPP-PROPRIO-PHP/public/push-notification.js
- Size 4KB
- SHA256 21f658359a34e5c008dd9fe9806940acf53ff8077b63ecbd24bc41fa2e5342e3
- MD5 6815f46938a883fdf12006d9a5adfc82
- SHA1 a946d870dbdfa506a9d47f43ba64d513306c4dfa
- SHA512 9dacd8c9b855bda10629e00fc4ee66fe0845c727b429deefb6cf4134f5960342f878362b878f05067c8e411062bf47629b8e623f50a5eaaef99de7f1098b113d
- SSDEEP 48:38tXyNoRu+q9Cuc+T4MKTn3oz9J4JbAQ9Wu6V8ga8ljbii:3yCyRud4MWn3o4JbXWLugjbii
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target WHATSAPP-PROPRIO-PHP/public/sw.js
- Size 6KB
- SHA256 de5b1e0bd43d17422d02be451fbe2533ea4ae7b5c8db7897ac906c4d72aade4a
- MD5 9f67fe4f34eb830ea3a49b7be66f6fe3
- SHA1 52a3b24652bd61a303b9f4e3e156fb97e49fb18a
- SHA512 3f8a15b2109dee9c8d189876d4abf6b713422242771138b38be5eb332815a9bcd1fad98740704e14ec927c48293b055ac22ce584b4b9299ac4916f24d04c403e
- SSDEEP 96:YXtlAUsaGYP90KNVPaUz2IoltDmE9vveZjAnO8:YXjRPG6HNPqxbJEjAnL
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target WHATSAPP-PROPRIO-PHP/push-notifications.php
- Size 4KB
- SHA256 af0a2db9653e56a10338e907838fa2808859299551d9168c1272b73a666b9bd3
- MD5 0c990ba0c7c6b0e654d417516b150e7b
- SHA1 ce086607b699cbbb56dd8cfe37c562922aef470e
- SHA512 52ef08fe9a294d30ff16bb9c4a4c2d4a63d0815ce17d90fc1f1c0a6f3327e50edcb4e3b8bde011dc4d14c62abee60eaa92461c0017773a08dded2d1c61f4216f
- SSDEEP 48:fRsMBnOd2agJp1EFCQL/iIR0gZUajI1SODrai6UXOWm/evy:pwRZwQL/vFj85Pkd9Ey
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target WHATSAPP-PROPRIO-PHP/services/PushNotificationService.php
- Size 7KB
- SHA256 e1bb6e342ba031bd290b69f3bde937add370eb0389312e88582f6ffccc3ab32b
- MD5 3caa4cd1f36a99d3290b1b763990b704
- SHA1 ac95c19677c9a8f9ec797cb08e4ba2716a6b08b6
- SHA512 98ed40dcaf2dd45abacbcd802c46b03659c4163e6a4c00bd6dabba66157d655235eb070812b8b641829631d298d345800bb7eca55efb4c0858d94fb6e134b37a
- SSDEEP 48:fXBaRNLI19/pa2Sk4QSuAJURU9GRSsv9tBz5aujzA7dkONXa83t3NilBVu8x/FzW:c9Y/KQ29GRbZNnGdkSJ3t6BowPaQpQ9
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target WHATSAPP-PROPRIO-PHP/views/chat-cliente.php
- Size 107KB
- SHA256 4175e8f64e38dfdcab2b8c6e383cd858fb325907217c092be812fdd226533e78
- MD5 3e35753834aa296aa32bfb7489d12a4a
- SHA1 5d5ea4bbae51deabc69ecdc670a981ffeafd4571
- SHA512 b57614e68ab0bc21163d2654b39972ddf495ec8a53a3247b562205ee82b100cf00a22b08489d6abb3b05e9b9e548975d16c37c0b7db5103b66fa1420788ffe8f
- SSDEEP 768:FJZPHAOErIEUQY8kxjjsVfQd07cssASjRCx8q5Zyo:ftAOErIlf8kxjjsNQducssASlCeMZR
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target WHATSAPP-PROPRIO-PHP/views/cliente.php
- Size 5KB
- SHA256 1c47597621ebf47ed3705da3bdc80e4e05f2ac0616f9dbc69f4c9a781b4179ca
- MD5 eded65bc6133ffc3c1b57aed920eed7d
- SHA1 58c4420d6b5cbd4865ae97849b17666e2806ca16
- SHA512 5c7d67f9bae41d10d625c0f5d8cff88a8a0680c113241b117d65c3bc814726379a88ea439342a454b4cd4c7178be5a12d786fbe879b2e201dc4d329a919df72a
- SSDEEP 96:LjIutxBU1WGk7PgFy/gtuDpdtMRUZCZKys:LjIubWIbj7fCC
- MD5 SHA1 SHA512 SSDEEP
Score4/10 -
- Target WHATSAPP-PROPRIO-PHP/views/configuracoes.php
- Size 19KB
- SHA256 539b81d27f84f218b04bc9eeeb2a064de790f5cdb11e659490984c0d1e3dc1c3
- MD5 8de5acc2f4671de028e19beb348ab1b1
- SHA1 9aa9f08b8f880171aeae4972f1f9c011a4aa3f38
- SHA512 f2e2b5dc2fbeeef7a2918bbdd15aa04c74e852087f8e8e0ad85c0e9786e19b9a2fa93bed33851af04005986e67b7f4b5747d9eb1341a1abfa3ef13904392fb85
- SSDEEP 384:zVNOxND4oytPYBxAMgIcWwN5aulq318dZ:wJ4sOaulu18T
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target WHATSAPP-PROPRIO-PHP/views/gerar-link.php
- Size 5KB
- SHA256 0e885c5b21d85f2e3a3d50667b54ffdb2ec1cf89f63890b3f30fd3498e2439a2
- MD5 b18514bed15fe3083aba8c62dc89383e
- SHA1 65ce06afbbd3b8b5437fd77f1fd55b6f6edfc06f
- SHA512 aa9317f6c0664adc4099acc44bdb116f9a2c62575db307f9980789043c0ec79d6c7936b05cc8bd2fc03962ca1f5b0f30d28e842473a3e2329da219c0f6278f46
- SSDEEP 96:vI9lQ3ZxCZL/lDFmihtCZDminAlAWW2wu5hUibu60sUoE:vIfI89dneoSW4qE
- MD5 SHA1 SHA512 SSDEEP
Score4/10