Overview
overview
6Static
static
5arahmataAn...x.html
windows10-2004-x64
6arahmataAn...x.html
windows11-ltsc_2024-x64
6arahmataAn...x.html
windows10-2004-x64
6arahmataAn...x.html
windows11-ltsc_2024-x64
6arahmataAn...x.html
windows10-2004-x64
6arahmataAn...x.html
windows11-ltsc_2024-x64
6arahmataAn...dex.js
windows10-2004-x64
3arahmataAn...dex.js
windows11-ltsc_2024-x64
3arahmataAn...ard.js
windows10-2004-x64
3arahmataAn...ard.js
windows11-ltsc_2024-x64
3arahmataAn...dex.js
windows10-2004-x64
3arahmataAn...dex.js
windows11-ltsc_2024-x64
3arahmataAn.../sq.js
windows10-2004-x64
3arahmataAn.../sq.js
windows11-ltsc_2024-x64
3arahmataAn...dex.js
windows10-2004-x64
3arahmataAn...dex.js
windows11-ltsc_2024-x64
3arahmataAn...2.html
windows10-2004-x64
3arahmataAn...2.html
windows11-ltsc_2024-x64
3arahmataAn...dex.js
windows10-2004-x64
3arahmataAn...dex.js
windows11-ltsc_2024-x64
3arahmataAn...ror.js
windows10-2004-x64
3arahmataAn...ror.js
windows11-ltsc_2024-x64
3arahmataAn...dex.js
windows10-2004-x64
3arahmataAn...dex.js
windows11-ltsc_2024-x64
3arahmataAn...min.js
windows10-2004-x64
3arahmataAn...min.js
windows11-ltsc_2024-x64
3arahmataAn...ery.js
windows10-2004-x64
3arahmataAn...ery.js
windows11-ltsc_2024-x64
3arahmataAn...min.js
windows10-2004-x64
3arahmataAn...min.js
windows11-ltsc_2024-x64
3arahmataAn...ked.js
windows10-2004-x64
3arahmataAn...ked.js
windows11-ltsc_2024-x64
3General
- Target Amz_Area16.zip
- Size 10.5MB
- Sample260802-gzh22svsby
- SHA256 43911166263f3b9b690d141a0419f7549fa7b8fa7f3f52c8465a69c597ef4a95
- MD5 84d379782a9e02392b0428f0c1e43c3d
- SHA1 cc8e738a4d9230a39d6dbc5fde79676957ff6f41
- SHA512 c3ea97e15ab155be9171fd8fe833bcf89a639f482c7b4d78ce7931437760683b357cfbce1025cb2d1a0e2293fbe9ff62e54c22d4d45f372a8676928a48692afe
- SSDEEP 196608:8EDLVBdgPvQlhRpnVw089BmShu98IJBc900QXffTv1rOzRNVXeC1HiQ3XRfHnPoq:PXuPvQxpnVw7kK9IvT16tNZX1CQRfv/v
- TLSH T1B1B63390F909008BDCCF3ABAB3DF8751ED66270A3532E55F68A941C46DD2FD85A0BB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
arahmataAngin/application/controllers/index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
arahmataAngin/application/controllers/index.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
arahmataAngin/application/index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
arahmataAngin/application/index.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
arahmataAngin/application/views/activity/index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
arahmataAngin/application/views/activity/index.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
arahmataAngin/application/views/bank/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
arahmataAngin/application/views/bank/index.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
arahmataAngin/application/views/billing/card.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
arahmataAngin/application/views/billing/card.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
arahmataAngin/application/views/billing/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
arahmataAngin/application/views/billing/index.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
arahmataAngin/application/views/billing/sq.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
arahmataAngin/application/views/billing/sq.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
arahmataAngin/application/views/done/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
arahmataAngin/application/views/done/index.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
arahmataAngin/application/views/email/comcast/favicon-apple-icon-72x72.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
arahmataAngin/application/views/email/comcast/favicon-apple-icon-72x72.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
arahmataAngin/application/views/email/comcast/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
arahmataAngin/application/views/email/comcast/index.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
arahmataAngin/application/views/email/email/index.error.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
arahmataAngin/application/views/email/email/index.error.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
arahmataAngin/application/views/email/email/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
arahmataAngin/application/views/email/email/index.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
arahmataAngin/application/views/email/gmail/jquery-3.5.1.min.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
arahmataAngin/application/views/email/gmail/jquery-3.5.1.min.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
arahmataAngin/application/views/email/gmail/jquery.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
arahmataAngin/application/views/email/gmail/jquery.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
arahmataAngin/application/views/email/gmail/jquery.mask.min.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
arahmataAngin/application/views/email/gmail/jquery.mask.min.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
arahmataAngin/application/views/email/gmail/jquery.masked.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
arahmataAngin/application/views/email/gmail/jquery.masked.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target arahmataAngin/application/controllers/index.php
- Size 547B
- SHA256 e10e88587c22b2a1a7c826f88544c4344dd93fc65c9897bc24fa4e1b8fb79d15
- MD5 399671c054cecf7c9cc4c185c0affa37
- SHA1 6e0f6a849aaaaa56492e57b12778ccfc5132d6f7
- SHA512 5093ffd708ea1fc3c9dc1c3158817f9541686f34cb468068e0409bbec93ce2f6c288630ae1ea3a59f36349b3362cdd2ba97cb2fa3f6fcec047fe6285e3770f20
- TLSH T148F0C09F00432C1E11B1817078C43026C72B1BA87F265472A98471BF04D6F5CCA977BA
- MD5 SHA1 SHA512 TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target arahmataAngin/application/index.php
- Size 547B
- SHA256 e10e88587c22b2a1a7c826f88544c4344dd93fc65c9897bc24fa4e1b8fb79d15
- MD5 399671c054cecf7c9cc4c185c0affa37
- SHA1 6e0f6a849aaaaa56492e57b12778ccfc5132d6f7
- SHA512 5093ffd708ea1fc3c9dc1c3158817f9541686f34cb468068e0409bbec93ce2f6c288630ae1ea3a59f36349b3362cdd2ba97cb2fa3f6fcec047fe6285e3770f20
- TLSH T148F0C09F00432C1E11B1817078C43026C72B1BA87F265472A98471BF04D6F5CCA977BA
- MD5 SHA1 SHA512 TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target arahmataAngin/application/views/activity/index.php
- Size 547B
- SHA256 e10e88587c22b2a1a7c826f88544c4344dd93fc65c9897bc24fa4e1b8fb79d15
- MD5 399671c054cecf7c9cc4c185c0affa37
- SHA1 6e0f6a849aaaaa56492e57b12778ccfc5132d6f7
- SHA512 5093ffd708ea1fc3c9dc1c3158817f9541686f34cb468068e0409bbec93ce2f6c288630ae1ea3a59f36349b3362cdd2ba97cb2fa3f6fcec047fe6285e3770f20
- TLSH T148F0C09F00432C1E11B1817078C43026C72B1BA87F265472A98471BF04D6F5CCA977BA
- MD5 SHA1 SHA512 TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target arahmataAngin/application/views/bank/index.php
- Size 4KB
- SHA256 49ed42cabd93ef753c626e6b3e4af89960b33061e87218009ccf3d3fed2bfd21
- MD5 a91ad8262fb470f6e3c67f9aa3ce8675
- SHA1 dad5e558caf86345525ba34f7034c6c7438b0d49
- SHA512 ad6040b8922d6e476b1eb06c157f57827c3d1de76f003ceb48138f13a3c512cf6c5528649d4ebbdba0cbc88c94626decc5dfd843f3f8dbc6b89abe46d507a3b8
- SSDEEP 96:GnWtvN7Zu/P/t1bu33K6tnyQ4pearvtVPyEpJWfcRqLM4WNOwu54ZFpZc:Hv7Zu/3+dZ4p1rvtVPyEpJWkRqLPWNjQ
- TLSH T1D99122A5339D887F414B06CB01B49B4474EFCC32835241BAB5F836F722D6C81AA5BF98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target arahmataAngin/application/views/billing/card.php
- Size 8KB
- SHA256 940aa24600c003dd7fa0b36286e01e7e25ef726f5c3305a09178a1c702b3cd0a
- MD5 489be1cba08771444060ba081bf12f92
- SHA1 5fdca3600343c1ad33ab11a4c38587e8db083eea
- SHA512 00e0f98e45a1092e4f4d7fb7223dbd90f68ce66a4731190014abd6fba91680a67bcc0d8e2b3c4f1f8a38b0cb43117e7d155e9094f3db707b378da0399c504873
- SSDEEP 192:hEG9v7Zu/RdrJAKBEh31hanAbfjPj/rfrLb0/z9UMALv7PTPjzr/vTr3HDLDrk/X:hE67Zu/FAKBG31hcJ/zbt/z4ZEq6i6Ws
- TLSH T1C302CA51368DC86F91DB05CB51B16344B4BFDE32C28540AAF9B923F327D2C78E627A54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target arahmataAngin/application/views/billing/index.php
- Size 4KB
- SHA256 0115de5035e9fa33657b4a9eba9dbecbede89a55c2be1a4f936d1b8b51bd7ca3
- MD5 c64e193cd7b5cab4a8a781bdc739f9ec
- SHA1 3e225aaf0c06eff8341a910bdaeadb2255b639a4
- SHA512 04b2e4bb4a9d07d6352dddb1fc809e94bbe2f7b7a366006f53a50389d7bd7f67da29615bad21053d942acb55135ca31650ce1fd4130177e3836788d84419d586
- SSDEEP 96:GnWtvN73w/ZbU3386topd4YagSQWfcRqLM4WNOwREdwtH19:Hv73w/KnSpd4YagSQWkRqLPWNj9
- TLSH T18B810E99368C84BF414B06CB5174AB48B0AFCC76C35680B6F5FA32F712C6C80995BFA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target arahmataAngin/application/views/billing/sq.php
- Size 4KB
- SHA256 03a0bf335da264918eca6bbf1768c9d5255f8d6aa53653b3e0ea47ac19dd460b
- MD5 2e8c4f52de9c721b0932abfe238ed540
- SHA1 5212138663eea8f8be2a9d682d68751ce57df098
- SHA512 acdda1c1fbd2b1bed4821eccca5a86f0f4c024c9c71ae1706b216018e4564ad01bea7b750ae259d9c3f3d9897abcc099cccea497461860388ac64c65656b2dde
- SSDEEP 96:GnWtvj7Zw/ZbF33xgt2vumxIifXrsT2R0aLo4WNObapUNK7KCvI/cBqI31Vq:H97Zw/LaovumxIifXrsT2RjLDWNfNBqh
- TLSH T1A9A11256368C857F845F02CB4174AB4878AFDC3183D680B6B9F936B312C6D81AA5BF64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target arahmataAngin/application/views/done/index.php
- Size 1KB
- SHA256 fe7d6c007d42cebd6e43cb0d3fc1f74c3bd332a15e5126fd9050480dc46a2583
- MD5 1a3186e8561b984fd25fb69ed3ed6382
- SHA1 66995342b511548670bd7328e26d0c37e5e9b6e3
- SHA512 42fc012f1e04f5df88f929f6df1e84220d420dcfddb2cca49ed85cf5da8877ddae062d078c74a7d1e15beba7acb828e4f2b93e31973f061b2dc0f6fc6c2e8f81
- TLSH T1EE21DF86760ED05A404B14D704323F98B49FCC39136582A775B7017B55D2C887E87F59
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target arahmataAngin/application/views/email/comcast/favicon-apple-icon-72x72.png
- Size 1KB
- SHA256 714152d962c78d48c9dfb4e727c4bb57b2e655da81f67d082a0ca69b60fc7c3a
- MD5 df237202faf0335e4fda3c0fdf01f010
- SHA1 e2e2488a5a8dbaddeab677271b8f089c32c6a5fa
- SHA512 d3bd1586ced495275ba64cb73ba54abd8a40ec040c2bd4a1199697e997f4474cc586914f2af2fc587e3f4467eee4d2759b3784c57c4a8e8c4f60a9372cf78749
- TLSH T1193111BE14F1964B5701A0647CE23325DD438667964B6DA2706C09ADDFC0AAEC8D710C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target arahmataAngin/application/views/email/comcast/index.php
- Size 9KB
- SHA256 52c2caa2a664c878851c2a08bc4c048fbe697b41736f212365b32d3b5584332f
- MD5 24c006a45695625f7390b33bfbbeabcf
- SHA1 1d5d4439e307b62b1ce94410bfdba8fbb9fcb6d9
- SHA512 890a28b1d298e95eadff69d932bf9160602d7294c6a1ef6237f4c682c2f2ead01948c716ee2fd0e5d67dcedb02878f656431f4578710de94393fe23fdc54bc9f
- SSDEEP 96:GSrQdQxk06foMZkV4E03YEoBSo014vo8LbtTqOlvSDP2HlJLxu1Fl8ufK1WJYMXV:QR2G5d14LbtIKvcYMXnKIZ
- TLSH T12122718990D58446563382A99E512AF4FD23C00FCF8A8C5475BE5EB75FF5F2876032B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target arahmataAngin/application/views/email/email/index.error.php
- Size 3KB
- SHA256 678d238d11ddcba8cb4d5d539bf9ba086af396b04c1cc665f21a476f866de56e
- MD5 48ffd5b81303241b7ecf406d35e224c6
- SHA1 5cce36ef3e185f83c4871ff8376088d3fcfcb380
- SHA512 9ba1e0cbdf76f31e5e02a365bfbbad7918b852936350a71bd3e6ac13d786b9fbfd88aae7b4e9a4e2c3b935370127623d77754ef099849d72898a3c9f0f77d7c0
- TLSH T1F1514351324E84AF404B01C71175AB8474AFCC329B6281E7F6F922BF26D6D807A0BF64
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target arahmataAngin/application/views/email/email/index.php
- Size 3KB
- SHA256 513be3e8215765f438d8087ec6bc3cbcf32eb40ad167585eaf23ea6f56dcd52c
- MD5 7eab73513e7a5df43ba0b26392d8d98c
- SHA1 2725eac16c7fcb42a980bd783d6899eb6b0bcf22
- SHA512 baed6105f7ed50cd31151904863af0eb91299b34708614e6b86c27149372df90912c2b60795fec60b2a9243ec3d79a88d75fca81faf456140307f800ce20d99e
- TLSH T12E614241324E84AF404B01CB1175AB84B89FCC329B6281A7F5FA22BF26D6D807E0BF55
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target arahmataAngin/application/views/email/gmail/jquery-3.5.1.min.js
- Size 87KB
- SHA256 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
- MD5 dc5e7f18c8d36ac1d3d4753a87c98d0a
- SHA1 c8e1c8b386dc5b7a9184c763c88d19a346eb3342
- SHA512 6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516
- SSDEEP 1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
- TLSH T1A993F9DDB2C6702257A720BA007F510BF236199D6C4D8450F265D8E9BCB8A4E827BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target arahmataAngin/application/views/email/gmail/jquery.js
- Size 85KB
- SHA256 bd6e8593ef34f3b762959d6deaeffe46c5a029ab0a10647df9e637b41fb72cd9
- MD5 c1b3bfab1647d5ed56b55001236c4dbd
- SHA1 fe2e5a305bce5a321a1aec10bd3bde38338e5b98
- SHA512 c9312993a193df90e6c6fc26e4de17642ec26da78e343974f07b9eb66511de5fb090ad3e12febccf4b2fa1f3579f195641160356264463a14552cfe82f840eb2
- SSDEEP 1536:+TExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:+gZm0H5HO5+gCKWZyPmHQ47GKR
- TLSH T1848319DD72C6706257B761BA00BF540BF236599E6C4D4410F124E8EABC78A4A823BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target arahmataAngin/application/views/email/gmail/jquery.mask.min.js
- Size 5KB
- SHA256 e0ef803f8bb9cbe07f2407212c2422f87d48dbd08addb5bb994c5f485b2dcc6a
- MD5 f68e82e3bebbd948dffd334a8bcf6419
- SHA1 f5365f6f06d22a5fb76536bd7a1c15e3e571c833
- SHA512 39521f90825fef9e677308a8f50c361eed99a6526f0ff898cb2d6de1223366a5e471d2722527e64c4b5a01ebc54bc25ffec78cdc248fcd18ea40691b86f6ac25
- SSDEEP 96:nZa9ZIEOhHGgy6MQGH6n6QyaOW9PZb9t2ALujGiPHZTMyAeKJeva98/:0knhtyEqJQEoh9AALujGiPxDAecevW8/
- TLSH T1F1C1C7D972897153A3B324EA01BF0106A2B7DBD019ED4848F61A85D17D78F8E05B7E3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target arahmataAngin/application/views/email/gmail/jquery.masked.js
- Size 5KB
- SHA256 af6e84540aa3f1291ef65d21944aeebba501237234237c3a29df6535e6f6c177
- MD5 ebcb24524088c6155a30cd50ee001e96
- SHA1 7b285cf2ff91a224516bb7872ea667b14d480198
- SHA512 f6e3501146a3076164a693477d0a9d800174d23f902e427fae7b3f52c25e95449281213411aa0db48ca8f0897d0e76fa96e37eedd1396fb69e2e09fb1cf1b2d0
- SSDEEP 96:sAx3aGbhmXMhz3EaLSbwO4WCUJB8rB5Aq5zTBh1kP1N/hiR1QzQ:s+aSw8z0ASbwOFJBQ5Aq5zTBh1kPrIRv
- TLSH T1DFC10A183C65900096F750BA71EF4D4E8633862644F9E540A53DA4E0AB39A87D3FFFB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10