Overview
overview
3Static
static
1admin10111...ity.js
windows10-2004-x64
3admin10111...ity.js
windows11-ltsc_2024-x64
3admin10111...min.js
windows10-2004-x64
3admin10111...min.js
windows11-ltsc_2024-x64
3admin10111...ort.js
windows10-2004-x64
3admin10111...ort.js
windows11-ltsc_2024-x64
3admin101110/lib.ps1
windows10-2004-x64
3admin101110/lib.ps1
windows11-ltsc_2024-x64
3admin10111...age.js
windows10-2004-x64
3admin10111...age.js
windows11-ltsc_2024-x64
3app/src/cms.js
windows10-2004-x64
3app/src/cms.js
windows11-ltsc_2024-x64
3app/src/consent.js
windows10-2004-x64
3app/src/consent.js
windows11-ltsc_2024-x64
3app/src/helpers.js
windows10-2004-x64
3app/src/helpers.js
windows11-ltsc_2024-x64
3app/src/ma...nce.js
windows10-2004-x64
3app/src/ma...nce.js
windows11-ltsc_2024-x64
3app/src/telegram.ps1
windows10-2004-x64
3app/src/telegram.ps1
windows11-ltsc_2024-x64
3app/src/tracking.js
windows10-2004-x64
3app/src/tracking.js
windows11-ltsc_2024-x64
3assets/js/app.js
windows10-2004-x64
3assets/js/app.js
windows11-ltsc_2024-x64
3booking-success.js
windows10-2004-x64
3booking-success.js
windows11-ltsc_2024-x64
3diagnostika.js
windows10-2004-x64
3diagnostika.js
windows11-ltsc_2024-x64
3oshibka.js
windows10-2004-x64
3oshibka.js
windows11-ltsc_2024-x64
3politica.html
windows10-2004-x64
3politica.html
windows11-ltsc_2024-x64
3General
- Target admin101110 (3).zip
- Size 24.2MB
- Sample260806-dnb8ksscma
- SHA256 16b49c7e9586b924cd7b68f361ad92f88ae90057c0c842cf53dc51b8f9ff15c1
- MD5 5dee36f798764e38516cf2d19a5b19fb
- SHA1 52fe31ecc24b42c88a97574569209a352627b1b9
- SHA512 ff84c319cdf9ce9a2117d02d137fba2622d7371eec5cd7886d0cb2a503fa322767c8f5542d8a3890eb43ff067f4001f8780c7da3253d96c2b2f149c76e633eb6
- SSDEEP 393216:RpB4VTT38eoG0iCtwdpLR6qREAKPmOzBjK0LA9cpI8idwgpnvJOms8TQ/cfwy:RpB4VTT3+ZtMpQXAURlI5dw46mQ/ry
- TLSH T14D47337861F62134CD1ED1BD985622A255BFEFC338149FDE2A5523885A0AECF3F31624
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
admin101110/activity.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
admin101110/activity.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
admin101110/assets/admin.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
admin101110/assets/admin.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
admin101110/leads-export.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
admin101110/leads-export.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
admin101110/lib.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
admin101110/lib.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
admin101110/telegram-message.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
admin101110/telegram-message.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
app/src/cms.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
app/src/cms.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
app/src/consent.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
app/src/consent.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
app/src/helpers.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
app/src/helpers.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
app/src/maintenance.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
app/src/maintenance.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
app/src/telegram.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
app/src/telegram.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
app/src/tracking.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
app/src/tracking.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
assets/js/app.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
assets/js/app.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
booking-success.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
booking-success.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
diagnostika.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
diagnostika.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
oshibka.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
oshibka.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
politica.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
politica.html
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target admin101110/activity.php
- Size 34KB
- SHA256 3a62429b772182464e5503f061889f316171c1c8f6291b2b46cf4d08a86127bf
- MD5 3ed828320f33267a8447fdf9843b3d9e
- SHA1 2b2f41b19c980939dfe66d188bd38ac0072c2126
- SHA512 42e272ff87a54b774322e742fd3f18d0183a88158ca7d7df9298efa12f790204b6745d8e029e5eb33b0404fd4439420c91d7190d5100c139b2c4d6c87cafcee8
- SSDEEP 768:VqbtFMQxqPhQTAwPiyivgkVyd6Q0+kWqle:EqmTAwP3ivgkVyd6+/
- TLSH T1E6F2F99030AA35351027D0E6C912A70724A0FA67F393B9383F9C66BD1FD69D0D67729B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target admin101110/assets/admin.js
- Size 36KB
- SHA256 1718eceb7bc9da853da90689c076f2c596bab2be37195eea901fb82adb380604
- MD5 1bb7ad03b7f6af85cca7f851bf182e16
- SHA1 ae746b0d8c7de00d114525dfb9cec08c16d45d08
- SHA512 4e182e9cda08998d9467cb72be340cadcb08330cab7295a4d527d7c4d1e1db3253e0861691a3c9b53faf7c2ca063b065029967a7178dc78fad1489561e8a1cd8
- SSDEEP 384:MxJmuG/cOv94m/HA1XHfijYOtCTNPRCK3FgAW58Z/7CrVdH5airwlmzFNjkHjdTP:y+liE5b3pFCxTP
- TLSH T15DF2B76431262578012361BEEB9F364234A5711FF447D450BE5C4A9E1FF2940A3BAEEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target admin101110/leads-export.php
- Size 4KB
- SHA256 f027101f122f35ea3db50100cd03f5f346c9abc61496918fc354d4021126fd4a
- MD5 5786f69697084030b07d7165e2eaba31
- SHA1 c0850f10930163a9b4280c039d07b1880c9774c8
- SHA512 e7073e8ee271f93f859b07c3851416e9fe9dc3992d30ece26a16ab005b9367bc851727c8fc648efc4f6cc783a0df15ff6f1f2397758c4cf7aa49812db8903d79
- SSDEEP 96:y16robgIdhcOs9jW+Zdf/bPWJUWkqsCIWCBpdKgMGLWdNBg7ceTQuU4SjCteSIry:PsbgMhcOstndf/LWJUWkqzFC/dKp0WdY
- TLSH T18791566554AB24485912B0AB0ECEE01CAD405C375D5B769FBACE416C7FE043FE2BDA2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target admin101110/lib.php
- Size 9KB
- SHA256 6173a902f6e2a0ff9e5e0ca59b4f0965094386431c0563809595112e5c2da2c5
- MD5 36f5122a60d978cd2df10e0cc15e0ffa
- SHA1 21a8efeed8a61f0ddb07df136240494ce892f5da
- SHA512 8883da9fccfcadc78cbdabede64dab0facf3a1d6934633d0fcf82e18ba9a9dc4f668b495c397a6b4cb8e284fd72df8e6f1e8db77bb4f2c1a9bbaf3c5d831a2ba
- SSDEEP 192:9kqBQzvkODyBSEZ2XPOMezU7wGGWsxs7EIwOPp+jHcKWrsQ/:zy/Wv0gIL
- TLSH T17512983854CB1119044398BB4E8BE9447851906B7ED17B11BEAC35B91FF813DCDFE225
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target admin101110/telegram-message.php
- Size 10KB
- SHA256 4c1468a5b44724f90cd60c287738c257f0499b230f2731f83e3752b2659d74af
- MD5 b08cf37f3eb7c5d19fde792c44c40154
- SHA1 dd7881c09192a6c59a1531eac10c2286b4818fd5
- SHA512 ac9be81afd699333fe22f812790d4eb846d47e54cf2e440156031ab67df5ff475ba79d95dd29f555853a9c6808cf3b099fa5ebb2349adaa2f5c7b5e5a0756e36
- SSDEEP 192:nMmMnzPdEs/ZCfnL1ItbYEAFyCidz8nfaDUwSijy5IgV/efQ+7UyOaiUy8E8JPpq:nnMDdEWoukNhidBUwSijy5IgVGfQ+IyC
- TLSH T12F32616055B2A6790103E0BBF586A5027CA181BB7E87750636EC1A7A5FE7C25CB3B34C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target app/src/cms.php
- Size 78KB
- SHA256 70e37d013abcbf2b05390dc14683df4504e3ab271c546b4c19c5064559786db7
- MD5 b05549bfee4fe4b2cf129f59d9475e7a
- SHA1 d00adbcb383dd9506e40dd970227b6d3d376f59f
- SHA512 f63752a293f8219e26d5640d657bb95397aa294f4c137ffa4bec1430eb306fb876fa0042e4d501d04038e8e7af2623113ff7052ae18cd11681958391f6d9a1ab
- SSDEEP 1536:479ncV1Omt7QDST1Zy/A4xj4cKWXIbzYvSqy39P6FMp8l4Iq6qboUGnEbcd2V:+u1Omt7Q+T1s/8gnzy3kzElboAy2V
- TLSH T13D73862528DF64590103F02BDF8AE5086A7900772DADB663FE5C36A93FD133CC6B4664
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target app/src/consent.php
- Size 3KB
- SHA256 ea9d3be9c4a6c473f0a65cdb75483d01972ff3c36ed797e17bebd182c53c6b13
- MD5 d1c0ef4c90d765b01674eef6671412d5
- SHA1 1b35c6fb12b803738ce1df17e2489b457934da17
- SHA512 f13a698651f66054c2969e310e190d378ff84ca9ea6f865b46e2477bde505c7777cc706ae499c824201b66cbd396a76a1b48e1bc5fce4e06d09c2daf91756763
- TLSH T13E81865434ED70DF0163F82AC50D5A09BABC05BB2969E32BB95C39A52FD1434C1747AA
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target app/src/helpers.php
- Size 11KB
- SHA256 c22891bc660e42a26e635cb9412ba15d1dbf45af54cbbd3146ce400754a65e22
- MD5 23bee9058d6d969b8fc6a759fb827c29
- SHA1 772e2ea7cafb7881e96ab45aafb14e2e6aa09a16
- SHA512 14c468811b224680c0e47faf00f7d11a02b5102a22cc099676f214b859a8d8fb6f43d353c8d4d8d39ee01289e10b4be77aaf5b7a41ac95f03f166f757020aefa
- SSDEEP 192:BBSr8o5UfQ8OjXyVQeWsCbiILoMZEpiQe8WlNvEZVWVuS8kb9J7C+W+9DdFLEr14:Bs8J0f8W0u/dW+9DHq1o+z5u
- TLSH T1B5328559B4E764450523F82E8E8ED61C7EA8083B0679A7A2FC4D05E93FD402CC37AB5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target app/src/maintenance.php
- Size 19KB
- SHA256 eb3d8ac7470705b97d58fb7964db6130a3b3f25652afe3abc78aaf6f7711a3d2
- MD5 e71c25dcfe4667a115cfd77eb07c3bdb
- SHA1 2e491c4bf809caddcb073ce08cae3b39ed1e62ab
- SHA512 022d14fb3e16bc1251528de6eb2d937a93d5e440f88281de33f6f7c1c1d966fae8306d3b90e34cb8764f497741839a392ee8194a6df0518b411a70584af1a0db
- SSDEEP 384:Ga9cKphgdDEQwtrQ9Js3F9hmKM8RQVnFKNpxXp:GRpdDE/XV9hJM8RSkNpx5
- TLSH T1269262143CDF68BA0163F02E8B462509F92448B79599E3617E5C23D96FE0178D7FCAB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target app/src/telegram.php
- Size 5KB
- SHA256 839cae64323a7b833dd4aaf87f9c863f4f4a8fbb8268643306b13ecfa861a5f8
- MD5 d9b3dd0856cdc5e91653190410d90895
- SHA1 61ff0cbd1fc19f67a2bc45a58687c39b934a8e18
- SHA512 cf050bf6ba0f87869858b3dc8c358984ccf18d7454c66ec71dc450edc0961dd30528c6980c2fb85b7e42a43d8e7ba61074cd8a04d3d99ef2ce0b29aca29e4f43
- SSDEEP 96:oBGyXJoU8Ho0gCo9Hc99dM808HGYel3yijgJ9kt+DsSKyEtyiNFxJ12Z1tlx3Y:oBGXU8HoN9I9S8HGZ1yijgJ9kt+DsSOz
- TLSH T122C1A5546C6750211417D83FBA4FFD08AF656863A9DCF511FA8C24988F8C73CEAF0A89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target app/src/tracking.php
- Size 29KB
- SHA256 8bee839f940113cef11c7e9d37cdda7517c4d65b7be3afc3221c83076e03184c
- MD5 1465360a0b2df51a439f76c5c51cc61b
- SHA1 76f811f25db0f65fa285a9d2b5568b4bd5a36877
- SHA512 49b253972c2bf900fdf395c1a20c0d09a14ccf9881de0314aedda253b97eaf24ac9f78fae02393ab6f0f75b0e683e19ef930bb7b7a3812730bc618e1ad8cee7c
- SSDEEP 768:GMLd62b5Ni5eOMeblY6gYiuvjEnU1biNtpxvV:GMLd6wNi5eOMe+6gYikjE1NRvV
- TLSH T1D2D2662834DBA2714873E02D672B915557B8043369D4E161FFEE13A81FE467EC3F4AA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target assets/js/app.js
- Size 112KB
- SHA256 50cafe82799bb9654a1a2567f44ae72475b0fa5eb8ed1169df8e2743b3f9fed6
- MD5 182cf55878b1d66ce5bf426a41ba5a2f
- SHA1 437ac4e5dc6ad20b202fdd8972db530bd50e4da8
- SHA512 c955695098e709e08a9b85b13f21f8bb460e7fbc7e8e00a437bf4e85c5fb5d722039e05b6eaa2200ef853ac78276def8047df2bda0aee9c5a26d646c2ac57c0a
- SSDEEP 1536:Auh0LAxR/Y0AK/j1olCe9oHzy0k6Nf36e6cFYr7PKkop2CYGW8:th0AY0Aoj1oh9YkCSe6cFs7u2CYl8
- TLSH T117B3F9A97577207D0173727BCF8FA6083679202B3886C991BEAC99182FD151486BF7DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target booking-success.php
- Size 4KB
- SHA256 7ccaef6e66f4768e7b0b99333153c1dda4699ceccad0ed7697cfdc442862b16c
- MD5 bd7d7c9307d3092e066acfe9da4428d0
- SHA1 4a05d98baf7c2659f8c5f77c3821b16db1c69bb1
- SHA512 88a993beab9c8a7432d92f051327c0767c7500178440749b0d2a4f098dfa867b435e27725f931121b3a3e94c6c1ca590e6923c33b37f7478e1b033bba2736ed9
- SSDEEP 96:2W1jLbLGUujdcolifizCoiQzyhcWl94WkdWG6cKEohR5kWcseMW:2W1jLba4oZeoiQGaWl9mdWDcKEGR5kWG
- TLSH T1AB818542705354BE3217D2279E8A3B8434954402A75ADCD9F5E821BBCF9052FB6FB688
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target diagnostika.php
- Size 9KB
- SHA256 440d0b4fb08f904d1bf3e43ffef45ede0707851c8494252bb1080a3bdb469751
- MD5 40af5491564d7407c26d3c6203e7f8df
- SHA1 147cff4771bd319e046599a79f7994437989c6e1
- SHA512 f5600c6e5541d7dbe7945663abe83d58ff60d5332f601f1dc89b0506f0e2c5c86cb960ad15e92f81dd1c15cd33be45bac7d653d577778431e921b3eea4a331f1
- SSDEEP 192:E8eALN84XBZ16/HsV+Gfmq/Om0kPq/kVmuS5zcwyLxu/V6dGuh+BQeUp:5e484X/1IwdGm0kPq/kVWE
- TLSH T15212C7356DD654AA601DF5C6ED086108B88200FF3E25EE293E9E267D2FC127485FCB9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target oshibka.php
- Size 9KB
- SHA256 b1ce55c9b93645931cbb393575e38184b12fbb43a514b7910ed9eb7a06249c45
- MD5 7b074633f815ca521fd01243c68e7f79
- SHA1 7b8d6305ffcbbb1881bae9796383008cdd8b5b47
- SHA512 7ba7c8acdfefd9e5c71a1b31271b4ef30e2b0a9ef967cdd339e9b1e0f3ecd69d11689b411067a231b299b90e017d7337a02dc12095ab0c5e874c6e3ac7e20d6f
- SSDEEP 192:dJplQUqmV1LMRoIEmOegSEQbtj2Q/QTiXQ/XicQsmZQ4xQxR5yjeDCNuoSQTSIc:d4Z/UR2vfTSx
- TLSH T10C12B55598E6602E7032F895DC45460C3C8644AF7A6FD712BCBC22F86FD2474CAA6B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target politica.html
- Size 173B
- SHA256 af8c7030980aad7011508ffc05c9693d5346cf4a4082494f886f89155e1cfa92
- MD5 6061c83d7780761eecfccc77ee736d17
- SHA1 34e66f3c3c9e1c1b202abf0b365f185c1be91298
- SHA512 e2835a80057473d887e0b58646ceb5a46c62915ce3c730e1ef3f909ad4f69eb4e13d44a3f138f3e8d4cb7d921798e47e498d322c5d7080d8576b77d9f151dc62
- TLSH T150C080C21070540F56715938B9C37507B19A7805788C9474F45421BC18F5705C45F352
- MD5 SHA1 SHA512 TLSH
Score3/10