Overview
overview
3Static
static
1sisira-boo...age.js
windows10-2004-x64
3sisira-boo...age.js
windows11-ltsc_2024-x64
3sisira-boo.../db.js
windows10-2004-x64
3sisira-boo.../db.js
windows11-ltsc_2024-x64
3sisira-boo...ons.js
windows10-2004-x64
3sisira-boo...ons.js
windows11-ltsc_2024-x64
3sisira-boo...ter.js
windows10-2004-x64
3sisira-boo...ter.js
windows11-ltsc_2024-x64
3sisira-boo...dex.js
windows10-2004-x64
3sisira-boo...dex.js
windows11-ltsc_2024-x64
3General
- Target sisira-booking (3).zip
- Size 39KB
- Sample260801-akpgysah83
- SHA256 6a24a47b24d9d8999da9b51b4ae6969e40d9a04196507aa5b5a6050588e6c9a4
- MD5 592b1409b72b8dada3fb031a14647151
- SHA1 d9c1a8fbb4db285887fc11cb1d786542550cc061
- SHA512 0e58e54dbcbff3a181e834221226acb427a00ef29e5975d0848e478877e3973b56380b5b0a11d5166b321e0e02e19e2d321e275dbff8a724a894657c0a35d035
- SSDEEP 768:IydDFvuCXK6m2Y5XwKazNCY0EMkmWhBbStWgCDcw4gz8SEH0hGFiJ7Y:m/L5XwKazc1WLbStWiq8D24iJ7Y
- TLSH T13F038D38FBAD552DC76EBD725C4A038F55E6E20762862DCC6A01E5F0B815ED03E702A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
sisira-booking/admin/pay_message.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
sisira-booking/admin/pay_message.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
sisira-booking/config/db.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
sisira-booking/config/db.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
sisira-booking/includes/functions.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
sisira-booking/includes/functions.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
sisira-booking/register.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
sisira-booking/register.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
sisira-booking/whatsapp-listener/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
sisira-booking/whatsapp-listener/index.js
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target sisira-booking/admin/pay_message.php
- Size 6KB
- SHA256 c26b1d6b9581a57d488ce9e0ed3189cc06aab82d099fd019e34bae37c4369e2d
- MD5 e2227f7af50f5ac7237d0d9bbf8167ab
- SHA1 0b85a2b26554e977076d5461d702c1e6ef38c46c
- SHA512 dd69775b514a4dd15bca1ce91ddc4547bb040813d376942de7b4cf00272516d58bc2a309c8c9d523b06e268cc09d27309ecfb7af45c871917aa7d79f4806bc4e
- SSDEEP 192:UuwLSPdnIcA64twFHs+kCTMDF/R7R6arcZn:wU1Icl4t6Hs+khjv4Zn
- TLSH T10FE19521B0F70836467BC26D5666E60E3ED5C507D6028C507A5CB2E80FD0EE9CAFE198
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target sisira-booking/config/db.php
- Size 868B
- SHA256 83c7ff0fb41d9ca4b934364b73c4e6a49e59b60fa2002d18bace5aebe964f9dd
- MD5 9377bc06194980a30db47b39accd30d6
- SHA1 6c65428fe04977c580c49ab0010d572ea8c67884
- SHA512 12b574e64dea8f4cdb0a3528a00f178fa9455d782fe74f901a1bb6ec665b2851a2ce13a13f0f069365f822a41f68e6f5395ac20ec6f76f5bf0d2b4b5b4458863
- TLSH T185114C9751E48369136B15998C07C0453164B1371B047B15BD3D5299EF98BB9BE32287
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target sisira-booking/includes/functions.php
- Size 10KB
- SHA256 a59738359da51221c280ba4156ed2c2b65efa432388ed689940f036a4f57f75b
- MD5 44a5bb436a24e26eeb0360961559dc05
- SHA1 ea94701b364bae5a0994b5cced9175c3904df48f
- SHA512 e246028b3adeaba58db06adbeb1901da4e12c7c66bd15065ffe046e2305dfead3d93dea6e50746c04b686aa3af7779dfd0f9f011c736d6d1074ba5a33003eeb9
- SSDEEP 192:EQOeI/iQBAG9iQE6+5h6th0gYLAuYgd4VqQFYE2HIyoOJ6HLj:pGAGgLAuYgbQFEIeEn
- TLSH T1CC229376B4FB8A3041D3D72C5F9AC689367990138684E890BA5E91DC0F40F6CE3B8A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target sisira-booking/register.php
- Size 4KB
- SHA256 be58cc1466cd192c95523ae9eb1d1feda54cb79999c905024308f44334bfd250
- MD5 c3908923acf9cac491d2bf30c334f38e
- SHA1 7a68c15e260c4edb7b925dc93c3c6782a4477812
- SHA512 940313e4eccff1f02b5cc5a8e23417c1bb2f79d960fb0b6a8ee111473fdb96b1eaf61fc0bfcd4a3cbee47182e55ec4f3013df4b193014b713afb175b0268a0ec
- SSDEEP 96:7lITAh79W91qZYwenYIXr2yrwFBeJ7tkMfgCoA3nyY:5IYW91qZYVYIXr2yrwF28AiY
- TLSH T119A1883070F11E375193A6E8AB49A4817CA1D117DB56D604BFFC97CC1F96C4BC957211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target sisira-booking/whatsapp-listener/index.js
- Size 4KB
- SHA256 4d1520899c558e0dacdb601359a010ce6f07bed62e611bec39ac4631cfdeb889
- MD5 82161fd3a4026dfa1ec274626f4823b2
- SHA1 e0a9af5d6e67bc40225bdaa44fdc8b13760bcde7
- SHA512 82066e1de47c89547ff7f187a2473efe07639a0bd89bd9225fdb217809de499892de2736cd2c14f0dc8249250240b9d6819f8edcb9767f9f15e5739a53e350ac
- SSDEEP 96:G1/kqCt0KzL36KDD6cDpcknygTv+Hsmy4:G1/kB0o6KDOcDpcknyiHL4
- TLSH T1CF91634A1EFB262916B311A65F9F50016522E007360CF92ABB6D93810FD57D0E3BA7CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10