General

  • Target
    PRODUCTION2.rar
  • Size 188KB
  • Sample260603-ag29msgx4p
  • SHA256 5a7cf9e05a93d34b68e24b58dfb42297f935c2970294bc26503ab5e80dbb4d95
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Suspicious SVG script tag 1 IoCs
  • SVG contains script element(s) 1 IoCs

File Explorer

  • PRODUCTION2.rar
    .rar 188KB
  • img/04 Honeycomb Foundation_pictogram_Medium._Mobile64.svg
    .svg .js .xml 6KB
  • img/6.gif
    .gif 40KB
  • img/Pin64.svg
    .svg .js .xml 6KB
  • img/icon_secure.b44e0b59e06528f3d244221641a5ab2a.gif
    .gif 3KB
  • img/lock.png
    .png 5KB
  • img/pictogram_Lock64.svg
    .svg .xml 1KB
  • img/rhspanel_t_lock.d9b4a7b0ce9be30dccb11b8b1bb1dbce.png
    .png 1001B
  • img/str.png
    .png 5KB
  • img/user.png
    .png 5KB
  • index.php
    .html 48KB
  • js/gx2.js
    .js 4KB
  • js/jquery-1.4.2.min.js
    .js 70KB
  • js/jquery.payment.js
    .js 17KB
  • js/jquery.preloadinator.min.js
    .js 1KB
  • js/jquery.simplemodal.js
    .js 9KB
  • js/osx.js
    .js 1KB
  • mobile.php
    .html 4KB
  • passcode.php
    .html .js 38KB
  • passcodem.php
    .html .js 8KB
  • secure.php
    .html .js 38KB
  • securem.php
    .html .js 5KB
  • server.php
    825B
  • success.php
    .js 38KB
  • successm.php
    .js 4KB
  • telegram.php
    139B

PRODUCTION2.rar

  • SHA256 5a7cf9e05a93d34b68e24b58dfb42297f935c2970294bc26503ab5e80dbb4d95
  • MD5 SHA1 SHA512 SSDEEP TLSH