Overview
overview
8Static
static
1a/fetch.js
windows10-2004-x64
3a/fetch.js
windows11-ltsc_2024-x64
8a/getappuser.js
windows10-2004-x64
3a/getappuser.js
windows11-ltsc_2024-x64
3a/info.js
windows10-2004-x64
3a/info.js
windows11-ltsc_2024-x64
3ads.js
windows10-2004-x64
3ads.js
windows11-ltsc_2024-x64
8api/esporte.html
windows10-2004-x64
3api/esporte.html
windows11-ltsc_2024-x64
4api/index.ps1
windows10-2004-x64
3api/index.ps1
windows11-ltsc_2024-x64
3api/manual_ads.js
windows10-2004-x64
3api/manual_ads.js
windows11-ltsc_2024-x64
3api/movies_script.js
windows10-2004-x64
3api/movies_script.js
windows11-ltsc_2024-x64
3api/msg.js
windows10-2004-x64
3api/msg.js
windows11-ltsc_2024-x64
3api/webview.js
windows10-2004-x64
3api/webview.js
windows11-ltsc_2024-x64
3auto/movies_script.js
windows10-2004-x64
3auto/movies_script.js
windows11-ltsc_2024-x64
8bg.js
windows10-2004-x64
3bg.js
windows11-ltsc_2024-x64
3edit_texto.js
windows10-2004-x64
3edit_texto.js
windows11-ltsc_2024-x64
3includes/footer.js
windows10-2004-x64
3includes/footer.js
windows11-ltsc_2024-x64
3includes/functions.js
windows10-2004-x64
3includes/functions.js
windows11-ltsc_2024-x64
3includes/index.js
windows10-2004-x64
3includes/index.js
windows11-ltsc_2024-x64
3General
- Target ibouseroficial.zip
- Size 19.9MB
- Sample260626-w3dn3aet8l
- SHA256 3abd58f98143d824655d89da929a6b5fd6ebb8ea3e2a37658fcee7a91f04f5a7
- MD5 6839157b21c6ecab863bce6e7dbb1d58
- SHA1 4fdbff99231f287a80734d85c19a2272a376424d
- SHA512 c5c7febc89bd96252696ed98d4df872f9369b43f5594903c93796ba41d2b7c8b548ad8d17f81217c1b19bac257a18a8b8fcccd2aa7abffcca57d4e496e91e540
- SSDEEP 393216:1LJfx/6Kr4jhmaE9w9mCRBm9C6dFHKHYaPxMnoToKkzR9h8koVZCLnT/:bfx/69NmaE9wsCzTUHKH57TjO9hpoVZW
- TLSH T1692733455B085E51F1D82AB2F74C5003EEEBB137B29E3E0EB580D254B26F3B69051FA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
a/fetch.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
a/fetch.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
a/getappuser.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
a/getappuser.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
a/info.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
a/info.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
ads.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
ads.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral9
Sample
api/esporte.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
api/esporte.html
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral11
Sample
api/index.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
api/index.ps1
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral13
Sample
api/manual_ads.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
api/manual_ads.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral15
Sample
api/movies_script.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
api/movies_script.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral17
Sample
api/msg.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
api/msg.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral19
Sample
api/webview.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
api/webview.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral21
Sample
auto/movies_script.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
auto/movies_script.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral23
Sample
bg.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
bg.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral25
Sample
edit_texto.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
edit_texto.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral27
Sample
includes/footer.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
includes/footer.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral29
Sample
includes/functions.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
includes/functions.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral31
Sample
includes/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
includes/index.js
Resource
win11ltsc2024-20260618-en
Malware Config
Targets
-
- Target a/fetch.php
- Size 2KB
- SHA256 56979deba90f02eda9216daebc6bb535ec81e34a458c2ab66aa832d33cea119c
- MD5 ec5edd5c58b3b0a14db7aa9659410d90
- SHA1 65b6cdcd8f83d7ce8b4c708d69c09b3b4417174c
- SHA512 84ca087c5b99160d80432efdd647fc841193e2e8ccf5dcafabb48dfc560e13a8c21bcd4e1c1bfa962de0a6b2dc66ea1acdf69a49efcc909b0b33b99bccf4119a
- TLSH T1CB513E32C3E001FBC5A04062069E7986321978EDD1D957DD9F2AD9EC318478CDC33A67
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target a/getappuser.php
- Size 7KB
- SHA256 5b33746b4c73df0e4eeabf49d054c4421be767bec42a37afc2568aba99be4917
- MD5 c9a52328ab3bb9b423b0f0876798b4d8
- SHA1 28e6c68c11b67043969784279a56491a8062b0bd
- SHA512 570e79631d09fe1103b9160b09abb983e86d08bedc57e688e7108f0a9ce6b1001a3d013b4eae755f0290a8956284ca53197a56127652f23af3dbe914b34e1a04
- SSDEEP 192:b8zluspOpL/uCleIb7/EN0q6mLI0Q1BhKfe/cB:b8kspTMhb4yUB
- TLSH T153F1746478EB4C178077B82967DA60C421DAC50B2780D840FF6E73CA1FDDA29DAF475A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target a/info.php
- Size 3KB
- SHA256 f9690af4814650b5e47333f310d32ed0c1e791b362f92ad0978fbb2f42ebeec9
- MD5 80d0a4c9d599e1ec31a68a912c8aba13
- SHA1 a24da757d012a4432ab22ea775aa5c67ffb7046a
- SHA512 fc64c85ee9cb6677cb0a85d4ff97c99dd8c3fe959d36c33709c602e6d9558a0aac064cc675e09c92d677ecf38f359ba2ada78aebc5018851ad1f3d1389b488b1
- TLSH T10B81416D24C1912309F6C5D72B206B89FAC36907F61AC902B9ED92EB5FF5C05CC37A81
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target ads.php
- Size 7KB
- SHA256 5f1812c156da4ac707ad8f03c0e9d815f14ddfe2b46ba480dd91d7adeede3f0a
- MD5 e27b81c255f82a0d2a733259fb8c46cb
- SHA1 3e4f52cce56f74214417a3b6b2a1623054c2d147
- SHA512 f1e599c3e091653be94d061c0fa3c88c0efaea03095511571fd53efbc5319809ac643795d1b136d27a7c3ffd25ced150af5430c1e918caf3bd7e0b8b0646909f
- SSDEEP 96:WsDNA0FqPG2/gsajb/HzOzlsb6HAHh2TbdQuyhzXTbgdF7dCvjdR4sYVjK:BRs8PIlsbOMh2Tb/mzXTb27dC3cm
- TLSH T163F1302574BE6133125BCB9412DC4D0A7C03AA0FB8538E59B79E70A54B9C440D9FEEC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target api/esporte.php
- Size 1KB
- SHA256 298987069296a14864cfd696b7e683286fcdd9b0ab65b4b6e1c34146dceb5249
- MD5 6d6f860d1d83f973c07c35311ca43f52
- SHA1 d2773ab600e64d8f434bd2a244fe1d480ea03e82
- SHA512 2b4099602d787c79f925c4fd44fd5b9065499090f0025c7d17d9b15d056d3cc77476339c926bcf6d932ac348da6d663705d97f249ca9cefb06aee94ac09a8045
- TLSH T1913180F93D129409445750D9C8E0D2284B96F359A0C0DFDEF4A5C63371837F93955669
- MD5 SHA1 SHA512 TLSH
Score4/10 -
- Target api/index.php
- Size 1KB
- SHA256 0ca512e8a96630b8f672914072056cccc3fddf75c502ce27813fa029adfe77a9
- MD5 c318edfd8fe6ce16b08c78ca785016fa
- SHA1 acf12a1bec85b3275484673547cac12580e336b2
- SHA512 8a492ebd8a29deeae7a254ff603b4333b801e5fd4961f7e73696c5a8a223422416db236e055041e68dd586fecf6bd0a93440d9aa016d2f367e87170296423a39
- TLSH T18E211E88A4EE3E4701D7683515EE564C5EEC009B202C4D88BF8E039C8F9C8397DDA989
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target api/manual_ads.php
- Size 2KB
- SHA256 f3c11252dc78839951caff2775241b02d560d39aff83a8fde9c4943ddf5a3219
- MD5 b69a60b2416976f417b4279daa4ecf7a
- SHA1 9a06e6320def4bea00372f1dbf4d15a93e312eef
- SHA512 d99e5681342eb10d44b5b78618013cb425c0b6be8620b85111acee79acb1a387ba31b5156497bb05d9ab44e14138914d4097b967f0654e10917dadf1f96fa9a0
- TLSH T19D514521668518336C73327878FA995936FB7140B635CBA83E8D60D9438D7C86A393E9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target api/movies_script.js
- Size 96KB
- SHA256 fc5499204b9fb3d2d3a2af0dd117c08d9e14a9583fd7afaf7ab875c5608734f1
- MD5 607d9b0b62ff5697e2b40f94a6c56b8d
- SHA1 e1651a128d738e4d964ce3587b4a0d2aa015c35c
- SHA512 1d3855bc4eab89740e35b3d5a4800a71f8a0a7e917ae2421cb62437d13cd637c9634f73e17045ab03f1b139b614ac54d7c2b5d0c9683bd851ea8319b7b006929
- SSDEEP 3072:jh1fw7aXQDzjELM9btKN4e8BTyTUjOS8Un1uD:rwoezjuAbEN4RywjGIw
- TLSH T1F6A3BE312E063E1AD3662D6CD5FE14C56DDC83176818D4B1389CE8AAEB62D31A4F6D70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target api/msg.php
- Size 3KB
- SHA256 540edf8e174a71394758311ccc72444403e7c352a401b89d7292ef33e3e56324
- MD5 48d6cf35aca13a656ed0991c6d56727c
- SHA1 5a199ee656168273c2bae83be6f0e31963d77752
- SHA512 9c24012aac9c93be95150521aa3e9b040923782d78259429d97d945da1e95ee007b5b032e84cb182cc588a5da3ee4895fde786c56940b00c8015e79ed225052c
- TLSH T145613318AD804411B533B33BBF96B179EA634057515056D47C4DA3C65FF0D2587A3FC8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target api/webview.php
- Size 1KB
- SHA256 d215193a2690d0b9dfc280b0c89fe705c6a282f330e7b8615f62a19602bcc094
- MD5 b6ae4a0ddbd19d1b37ec2ad47116a239
- SHA1 7271b9dbe7794fd3de3866671652c3b4b5114eca
- SHA512 c547dce731f61bf40808325140692f5d94ae37bc042b8f17af1d8e555c83457988131ff97f72af7a76e8942d0ce6d6a0da4821aab33584f4de8da5a032701404
- TLSH T1A02142AA3EE710461962A7B143E7F2041A426453A281C84039DEE3580FCA74EC0E33CD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target auto/movies_script.js
- Size 96KB
- SHA256 e2553fc0fde2db73d33b7bb07e360852da8878b1205dbf4488208bf3c0d074dd
- MD5 23712442b22b43797a5f210f9e8c8378
- SHA1 ff1b20b33e13acb6ebb7725dbc232ba7d5237994
- SHA512 659dca31d6add2b22343b73ec7db85ecef267868015e6b3d8d53f136deaa80ac9a58a0859b62d34cc6e799c55bc1f98ef3f83ecf9d23f201ec74e67045008886
- SSDEEP 3072:jh1fw7aXQDzjELM9btKN4e8BTyTUjOS8Un1uK:rwoezjuAbEN4RywjGIr
- TLSH T1A4A3BE312E063E1AD3662D6CD5FE14C56DDC83176818D4B1389CE8AAEB62D31A4F6D70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bg.php
- Size 10KB
- SHA256 85cfac04c008ae369b0bc87a55d079dee91e255ea7d3edadac1d0e3144661ee4
- MD5 92f0ccc9c859a196b11c80ef28e5c570
- SHA1 b096676b429601cc1c943cfc4271f296a7a06bf2
- SHA512 20f8946e5d78d52baa245467a64c71655df56b84bdfc5944a7a757e5078ac139147c6c2265917b5fbdb3115562bc5aef620fae372836de2a30250618864fe3bc
- SSDEEP 192:BEWu5n1XrsBVefYmI8C/YmI5mx96oHhsLn:BEWuVlsBVeZC/FWm7s7
- TLSH T1E122839B30D59E225073C6A88B529F4EFE8586178A06C70175DD3BC35FB1C05CAAFAD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target edit_texto.php
- Size 6KB
- SHA256 44ef2e53077702ae46b9305b0bcbea2e58f93d894e1b92aa4b4d7b29b5fcc844
- MD5 9630af5fec5fb2f0a8b7659675499ed5
- SHA1 70290c7ae869250c5d05496587dc79ba58bd53a0
- SHA512 c7ebbb9c8d700dc919779be0ca6c5471b2e003047e61f07b76206fb5dc25e1c090b773a94eb87b9672da95565d0b88ca69466fbc57dd3faeafee16a30e02db96
- SSDEEP 96:rlLeQICoKPCsojxosGPQum+DvQuma/Jnt5oG5KaK:rx1vPCsYusEmiHmOJnt5oGA
- TLSH T1DFE1526A79C108314C7362EA7FA1E608FE57510316459694BEFC12E34FF2E02E963F98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target includes/footer.php
- Size 2KB
- SHA256 cf5c66438c135d5f60c9c8fe5db6e8c8a8e848baf3cce2a76110f3aee170d19d
- MD5 dbaf18d100217b3142ee615986f13730
- SHA1 a534c27cac4848c9516bfff0660ff6456d01e522
- SHA512 17c7f0a6e5c8c11dd1aa43767695d198649f257532a4b537ccf2db45cf1b2808c6e725103932bf5a80b94513e01fc3316ec01f23f008fc36da9bbf7181e020cc
- TLSH T14D512D267E6CB4A90262357E30BAE40D3D1F144B3451AD00BEDE909CDF803D2ECB2E20
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target includes/functions.php
- Size 8KB
- SHA256 46c36c5e1106ac230337dd84422b89b6d736cbdd79fadd29238ab2b7e2b6e980
- MD5 063f719adaef4ecbb64b37fcd46293c9
- SHA1 731938fb4ec126f99d25b148e2b02c07ec299136
- SHA512 20a50de3926f63a3f7ff0a8879e6711e2d91b02ecd4677b066758d1c78e2eb5b8f5c45a0811655ebb15e537658dff9b868c2c2b855782282f22ee2f13d4d09be
- SSDEEP 192:cRtZDYUAYKigD8xNPsMbFNxMDhoZCx0xMN8xMgOYqHyiudxNPsMb/DKSpwaAiS5R:us6nE6wmE+/nqHEnEVha85ceLl/D
- TLSH T13902FE1C38976E1181E3B4758B9AD04C7DBD651B122ECAA07E9C41E85F09879F9F0FAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target includes/index.php
- Size 8KB
- SHA256 c1ec2e02c971990dfcfb24c5794d8da6ff964e35dc748ba756f5f792313c3efc
- MD5 f1c6a8d7089b3a91b379ee331b63a86c
- SHA1 5c85e8507fad28d2993f0605592cc0813044fc89
- SHA512 4d407a09c37adf37d2bb961a7543275f76e9717f8b841f2707547d675abee892eea4f04ebec8f08fe19be60418c21462f41db8615d2ea7a1d0aac7a76397ea26
- SSDEEP 192:YXWH6uz3In0MOeifyoEhKyNyicQcFiQA5iQxWuIMriiLYz8CGMAFSi19QBQsD:o+3ReiaoEh8glhVWqxC7AFM
- TLSH T1C80252146AAB706BC961447C2D9FD11136563003054ECD493E8C6198EFFE83ABFB8FA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10