Overview
overview
7Static
static
1aadhisakth...e2.ps1
windows10-2004-x64
3aadhisakth...e2.ps1
windows11-ltsc_2024-x64
3aadhisakth...4.html
windows10-2004-x64
3aadhisakth...4.html
windows11-ltsc_2024-x64
3aadhisakth...l2.ps1
windows10-2004-x64
3aadhisakth...l2.ps1
windows11-ltsc_2024-x64
3aadhisakth...ut.lnk
windows10-2004-x64
7aadhisakth...ut.lnk
windows11-ltsc_2024-x64
3aadhisakth...py.bat
windows10-2004-x64
1aadhisakth...py.bat
windows11-ltsc_2024-x64
1aadhisakth...up.bat
windows10-2004-x64
1aadhisakth...up.bat
windows11-ltsc_2024-x64
1aadhisakth...py.bat
windows10-2004-x64
1aadhisakth...py.bat
windows11-ltsc_2024-x64
1aadhisakth...ce.bat
windows10-2004-x64
1aadhisakth...ce.bat
windows11-ltsc_2024-x64
1aadhisakth...ql.bat
windows10-2004-x64
1aadhisakth...ql.bat
windows11-ltsc_2024-x64
1aadhisakth...re.bat
windows10-2004-x64
1aadhisakth...re.bat
windows11-ltsc_2024-x64
1aadhisakth...t.html
windows10-2004-x64
3aadhisakth...t.html
windows11-ltsc_2024-x64
3aadhisakth...e.html
windows10-2004-x64
3aadhisakth...e.html
windows11-ltsc_2024-x64
3aadhisakth...t.html
windows10-2004-x64
3aadhisakth...t.html
windows11-ltsc_2024-x64
3aadhisakth...h.html
windows10-2004-x64
3aadhisakth...h.html
windows11-ltsc_2024-x64
3aadhisakth...8.html
windows10-2004-x64
3aadhisakth...8.html
windows11-ltsc_2024-x64
3aadhisakth...h.html
windows10-2004-x64
3aadhisakth...h.html
windows11-ltsc_2024-x64
3General
- Target aadhisakthifinance-development.zip
- Size 17.6MB
- Sample260713-phcspsgz7k
- SHA256 ab947426eb3b74684f74fa56857841da9cdab937850482791b2e8c135bbae5b6
- MD5 e32c4a905f72b86227bd3509b6940def
- SHA1 4e3527268f7b2b5c72d6c4c752b3d2f9e1b92464
- SHA512 9333a75f5036db2a26026d029332d69e3ea0289d69b6941ca182a83a813c8e89d26369ffcc0b1d9d75b4d708ac909cd5c723f2a82d93c5ed9b5b2187242cbce0
- SSDEEP 393216:klJMvHMCNjG5nOD1A7TJ0wbXWiYJuDjV2wffzV6OTp01oze6FuWRt:FsCMOmJ0cxYJuDjPfLV6ON0SLLRt
- TLSH T14A1723A4CB4DEC51DC1469B3644B0AF7239EEF02D004BAA4719A3275DB8D6CA6FC934D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
aadhisakthifinance-development/Agriculture2.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
aadhisakthifinance-development/Agriculture2.ps1
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
aadhisakthifinance-development/Agriculture4.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
aadhisakthifinance-development/Agriculture4.html
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
aadhisakthifinance-development/Agriculturesell2.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
aadhisakthifinance-development/Agriculturesell2.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
aadhisakthifinance-development/DBUtils/RunBackup - Copy - Shortcut.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
aadhisakthifinance-development/DBUtils/RunBackup - Copy - Shortcut.lnk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
aadhisakthifinance-development/DBUtils/RunBackup - Copy.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
aadhisakthifinance-development/DBUtils/RunBackup - Copy.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
aadhisakthifinance-development/DBUtils/RunBackup.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
aadhisakthifinance-development/DBUtils/RunBackup.bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
aadhisakthifinance-development/DBUtils/RunRestore - Copy.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
aadhisakthifinance-development/DBUtils/RunRestore - Copy.bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
aadhisakthifinance-development/DBUtils/RunRestore - test instance.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
aadhisakthifinance-development/DBUtils/RunRestore - test instance.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
aadhisakthifinance-development/DBUtils/RunRestore - version 17 postgresql.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
aadhisakthifinance-development/DBUtils/RunRestore - version 17 postgresql.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
aadhisakthifinance-development/DBUtils/RunRestore.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
aadhisakthifinance-development/DBUtils/RunRestore.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
aadhisakthifinance-development/UserReport_Export.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
aadhisakthifinance-development/UserReport_Export.html
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
aadhisakthifinance-development/adminhome.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
aadhisakthifinance-development/adminhome.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
aadhisakthifinance-development/alledit.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
aadhisakthifinance-development/alledit.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
aadhisakthifinance-development/allsearch.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
aadhisakthifinance-development/allsearch.html
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
aadhisakthifinance-development/allsearch_3008.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
aadhisakthifinance-development/allsearch_3008.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
aadhisakthifinance-development/awisesearch.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
aadhisakthifinance-development/awisesearch.html
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target aadhisakthifinance-development/Agriculture2.php
- Size 4KB
- SHA256 b86ade4ee2129cff86d059853106546fa9fb0ec5d860cdf23fe1c9940638f6a4
- MD5 00884c28feb6efc83e219b04b93fb229
- SHA1 2df961a0ad2aff01ac35528253062e8c9c9da961
- SHA512 3cc84b39b67817954c53a08b49052d45b6bfb62b9a50ba7c04a268a12c5848ae57050ceda6aff3b8f272a5be5cae8268108ebd4ea382b14854c1ffd83d5d2fce
- SSDEEP 96:1ientVspaMVDRt2XYQcYIVKN5J8cYGoSXyx/:zkgIRtwrcYI45JBYG7y1
- TLSH T16AA14EA93C274D21314B651A7E0C1C010E4C044B6E87B6C838CE17EDAFDDA4EE8BE6A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target aadhisakthifinance-development/Agriculture4.php
- Size 2KB
- SHA256 5a99644596d462b2b69e7e450cd1dc20024a6e03d2b7deb6931d5c96ea5f1c25
- MD5 49819dc559219e5de8159b137fc01f7c
- SHA1 0e0be32a7f4fa247a0495be4d302959833477be9
- SHA512 699d35565cb17e1197964ba77daea57cb87bd7533135365ac5ae1ecc860020c6174a1d2eb51223c120a4321826a4c4fa4de9acb17567feefa5f05206725f45c9
- TLSH T12A415562B8634556F0215472FE14690425AB715B6B0BDCE46D8F127B8F880E96CBBD0D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target aadhisakthifinance-development/Agriculturesell2.php
- Size 6KB
- SHA256 6d77a212df254b5142ae5060a8c7978c7151c88db1505a70007784dbb80b72d1
- MD5 4542e0ab258f350783de9c8b135fd34e
- SHA1 48ca9000536a6c4706b37cda39ee5a8cc5004219
- SHA512 e867388c52e661096f206f3df1d9f36641fdeb11f1db82eeb78f530a6321255735a932f5e7864eb2a0f3ae6afc32d10726dc8982f93b10fe73135d8c452595dc
- SSDEEP 96:1iqQnepV67Lcqr18aMVDRt2lY8cZ2LAa95JscYGXXyRj/es:/QeQ1FIRtkVcZhM5JxYGnyxR
- TLSH T112D152E43C2B89203147611ABE0878461E5C041B2E07B5C478DF53ECAF9DA5EE4BEAB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target aadhisakthifinance-development/DBUtils/RunBackup - Copy - Shortcut.lnk
- Size 1KB
- SHA256 4f053c53371bafaa12ab0ef972825e0e78484e811256e43d2136a5c14cb42fa3
- MD5 c222742b6213eedf0f1050fa4fa4b72b
- SHA1 8fd7c489a4d1aab79f85481329048ad1c92bed09
- SHA512 b48299dbf84ec3d8b3e908eb655b88b7f7b46cf71a00f546fd05a3158ef3e2d88d4d49907b13039b41405da772fae96b8ea3def5b1796c3c00f6f17da332dfd5
- TLSH T12531028229790940C7B76BF11AD257E9CB2B46639C35C92290C4109F1A63C31DD6573B
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target aadhisakthifinance-development/DBUtils/RunBackup - Copy.bat
- Size 351B
- SHA256 7b7312d26a63326b5e51d6245c334e02a359acdefa96b135154ad35c28bad876
- MD5 9238a0ae8118f9e3badfc6b79bfd81e5
- SHA1 ef1db71b991236ccfa339b4e8c7ba14187a688b1
- SHA512 6793922352ea6d329d6f3595bfb8de990830864477bac7bb29b1aaca039575f0028707badee4b129777902d9ad9eb1ed852812852826566e97b50e1eb6cec5e6
- TLSH T111E0D84DA19049D45931182094A94CD6DB8FF01F2325605A2AA8B206EEDB518792F59A
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target aadhisakthifinance-development/DBUtils/RunBackup.bat
- Size 426B
- SHA256 935e93364de0d32d1ef29d3e0e605a8c57ddeeca70e199946e9ea1d29eac69f7
- MD5 9d29c04ef8611a61ae461bb07940da7f
- SHA1 122d677ce13be2ca95a54bdc2d4cd03c9e7faa73
- SHA512 b9d5e0911c01d3b4bb631619b23a70053fa610b7a9d72fd16443a4e54f9d10ba2598c6b828f344694908fbcd777e2e36ae1e6cc1105fa67ed820405e81cd991b
- TLSH T1EAE0E548D5804DE94A32483494EA4CD5DBCFF00F1325B0592DA47306FA9B90C392F09B
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target aadhisakthifinance-development/DBUtils/RunRestore - Copy.bat
- Size 690B
- SHA256 b4b8fd2f6a148362c30b2415a2d8a70b4dd648866313c7a0d1cffcb12373e45a
- MD5 402d1e408d7572cf4f45edb152befae7
- SHA1 d6e16766a895e01db779924edc13c19ca78d0e86
- SHA512 c6360e9c5d83e9e2e3ce81ba94fd345f772d64d9c5e305d7844b7432d8b0cfb6d8353dadadeb14fa7e6d347eeb4fd05c984ac488b91770367365bdce141a6f55
- TLSH T1D601FEA863C094910C5B04403DB44962CBF7E0CB1235546627C9F25B2BAE8D0AB2C894
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target aadhisakthifinance-development/DBUtils/RunRestore - test instance.bat
- Size 707B
- SHA256 ad8658903754201dfea326cb5f6057bda00356540a74c9e6e9ef250ab8503ecb
- MD5 1d88653c22b105743c77ddd2922fbfd3
- SHA1 1830613b04028c83b07730f65fe52ec4ee92124b
- SHA512 d7fb5834dd7fcee2281292d51a3f4c6e212d9854d5c56e1b36098b98b9cef4f3650c3d2adf587368279317deb187e96a7a24ad03b99e0047a5fffd3de1d90e75
- TLSH T114014C98D7A1C8E88D3E4420B9F41C63979BE00B820460546BADA21A7B5BD56169E44B
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target aadhisakthifinance-development/DBUtils/RunRestore - version 17 postgresql.bat
- Size 761B
- SHA256 b61db3197805601a03de6fcf74dbe824c75139feab76228cfb7d7cd1c01ac2ce
- MD5 fddfb26fd6d20dcc948fd28fc97a2b48
- SHA1 306867dedcf867adf3cbeffca428252941e5e529
- SHA512 fd17357a555a8f44993752c5add08e1df9e50189742610512054b2efc966828a4c39b1a5fccc2a41aca2b59e017937ef8949f49bd82bed1743acfa8576d53b13
- TLSH T1F801D054A5809C74492B64E07D701553EF53F08B0324144559E4F3777EA9AE5BB1C490
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target aadhisakthifinance-development/DBUtils/RunRestore.bat
- Size 1KB
- SHA256 d09d68cf34471f911be325729180787e7cb1c0cf7767e00e1def3a175fec01a8
- MD5 605e2b91a700425309ddcaa05a87f9e1
- SHA1 a0653324c984f1153fdc628b67bbd3008861bce4
- SHA512 161729ccf868c06fbf0197e6208dc1b094f5cef517d9426a62824d46a12acc95ac4cc293c8e876de0aacc072cc70e2d1dfac3a8e25774558edd7f91eb66632c1
- TLSH T19811CC546680C4B12E1B48C23F74C692CEF7F09B033168592A94A2566FE58D1A71E995
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target aadhisakthifinance-development/UserReport_Export.php
- Size 688B
- SHA256 8eb4b097dc0a7b7e8c60413b41cd53698a2e4db8a83ac4d4768c5233ee7b1953
- MD5 c153c22ee20247e67da2d0fd3c1be4a5
- SHA1 fde86dfd13d8e7b8d3f0f0e14c0ac55b7d71384d
- SHA512 dab172c257bb5f48578ff5ebc282dafbc0191107ac38c212ff6a53eae72ea7b5886eb7b96da2817cc5d21eca02ac6ebb84f39148214a0cb6aa56c1e24a14e0a4
- TLSH T1500149B1FC9B72900657AC554841DA842EF6584371568C197E0D42EF6BD5F0CF86F2A8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target aadhisakthifinance-development/adminhome.php
- Size 1KB
- SHA256 030c1c0984d5955227554d5b222323106a676166ecb1a1e7e82e091120ec516f
- MD5 85d80aba839b68cdc007b6ffc394b8f8
- SHA1 88824402064ebd90409858fab7164170fe5ee05f
- SHA512 911093b17f84cbdbe9b650a2231154c47eb8d733ea3cc603ddb26483d819424e5dc8f41e8d64231ae8e33af886fe4befffb324f47697099e425cde48972cdfb4
- TLSH T1DE31CED6AD621A02304BCF94710347D563A3F902B642DD78775020ED9FC57AE0A3B28E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target aadhisakthifinance-development/alledit.php
- Size 10KB
- SHA256 2a28b3d57ee254679646b3f9a4a6a55e453e88bc4c52ec7959f844989362a2e9
- MD5 874f5d4fcc8ce343bf8eade6d667f522
- SHA1 9f62d954679e5479c600d6443b068cd435d28fb5
- SHA512 02daccf3850cda541f990f746681d88adcea96524eb9c5d4ef72ead1b317804c525223acf2e251f38e52cdcd5f04bb4741a1f000395ceea4702c7d7fa66739fb
- SSDEEP 48:S60/MMkO3DTXE/J4VciCbiUwbitgai4birbiYKiebilbi3jbiHbiizi1EFbbiHfu:glzKpyc3BzFJhr2w2/6zHhLncE1M
- TLSH T11522154347D62F3969DD393EC0247CC658FF3AF49B529C81912B6A37DE881287806797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target aadhisakthifinance-development/allsearch.php
- Size 6KB
- SHA256 4d049181e049d5d597c5a42c78a96b2a8da105d910e50c60c9674807ad23e453
- MD5 f83309201f2ae2a9cebdb3f52b1834ea
- SHA1 e143a9aa3acb9897b5e696ae10bb8617103430e0
- SHA512 4b320c6b752902aa9888e8010faef33257f2c56c6400a22f3bb81f43b74a0d714d1115fc6bdcee64a0251ae0f73f23bb88fe826d7682e9111eeca743635afb6b
- SSDEEP 96:glnK8ZuKdMk9SnccCxUXxirZ4TGQrtOTJ4DFOfoqv2Z0bwcMtAScglZsZThM:ynnbwNt9dZQThM
- TLSH T147E1974159C62D39A9EE793D85207CCA44F736E093118C90D76B8E37EF84E2D7806BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target aadhisakthifinance-development/allsearch_3008.php
- Size 6KB
- SHA256 ad050ba46d796459c0f28a4c30da94787f655145e09f0f74bc206aa7934da7a8
- MD5 8cc1b88729e747a0325e0756f374b2ac
- SHA1 cbcd96273077f47337e549118d4324240165b27a
- SHA512 aeed59b3d3cf8ee5bcf99f65935e3fc1bc6b7026c6017e6f681aa208eee82796618fbf189cf6028e835f4aab138c6b2bd92ec45131702d5929baa5c0e3dd2d50
- SSDEEP 96:glnY8ZMKdak9SOQxUJxidZ4TetOTJ4DFOfoqv2Z0bwcMtAScglZsZThM:yn5bwNt9dZQThM
- TLSH T1A8D1874149C62D35A9EE783D85107CC944F736E093528C90D7AB9E37EF84E2D7806BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target aadhisakthifinance-development/awisesearch.php
- Size 982B
- SHA256 c4c6a651ec8116e8685f667595cbf60aa87773e1b3c2b1e014e28bb52b900147
- MD5 209bd55dfd4f8e6382f9a34c1f7b6021
- SHA1 3e9c2ecc2e0a35069dab3a698a05349ae1254c2b
- SHA512 d1bda8d62a6904508ab5c70a886454977b13d3e521e01f8c547555a9b6fc4a0af6f46d673d7064610c4020a59b2012d8326d6edd1e862cadd145a7e67c4fe2be
- TLSH T14C11ED42C9C2191CA55B786BDD01F4D8C1FEA0618B5B2CE0AA2B163BCD9056D886BB0E
- MD5 SHA1 SHA512 TLSH
Score3/10