Overview
overview
6Static
static
5invest/cor...ate.js
windows10-2004-x64
3invest/cor...ate.js
windows11-ltsc_2024-x64
3invest/cor...tus.js
windows10-2004-x64
3invest/cor...tus.js
windows11-ltsc_2024-x64
3invest/cor...ers.js
windows10-2004-x64
3invest/cor...ers.js
windows11-ltsc_2024-x64
3invest/cor...ler.js
windows10-2004-x64
3invest/cor...ler.js
windows11-ltsc_2024-x64
3invest/cor...ler.js
windows10-2004-x64
3invest/cor...ler.js
windows11-ltsc_2024-x64
3invest/cor...ler.js
windows10-2004-x64
3invest/cor...ler.js
windows11-ltsc_2024-x64
3invest/cor...ler.js
windows10-2004-x64
3invest/cor...ler.js
windows11-ltsc_2024-x64
3invest/cor...ler.js
windows10-2004-x64
3invest/cor...ler.js
windows11-ltsc_2024-x64
3invest/cor...ler.js
windows10-2004-x64
3invest/cor...ler.js
windows11-ltsc_2024-x64
3invest/cor...ler.js
windows10-2004-x64
3invest/cor...ler.js
windows11-ltsc_2024-x64
3invest/cor...ler.js
windows10-2004-x64
3invest/cor...ler.js
windows11-ltsc_2024-x64
3invest/cor...ler.js
windows10-2004-x64
3invest/cor...ler.js
windows11-ltsc_2024-x64
3invest/cor...ler.js
windows10-2004-x64
3invest/cor...ler.js
windows11-ltsc_2024-x64
3invest/cor...ler.js
windows10-2004-x64
3invest/cor...ler.js
windows11-ltsc_2024-x64
3invest/cor...ler.js
windows10-2004-x64
3invest/cor...ler.js
windows11-ltsc_2024-x64
3invest/cor...er.ps1
windows10-2004-x64
6invest/cor...er.ps1
windows11-ltsc_2024-x64
6General
- Target yy.zip
- Size 14.3MB
- Sample260810-w1bfxshh27
- SHA256 9b76aaf0a2a005849d1e5dd885ac7e4236c23294b92a6d715a77c85674d437a8
- MD5 ed3c2a8c3bcbb195000e6e25e28c7d66
- SHA1 cfdc47f8c480d521fe63470d3b5d14ebcad2cc05
- SHA512 63f95a88362e3783bf391ab6ff766507bfd02479dff5e3ebf8580b621ea690b357745f8cff837422f1813f9be00933e1fd70034c9627ecfeeab5672f40fa0305
- SSDEEP 393216:+kNphiTTU/oUQKeIzexwEoWWN0ncG6QMeTroP4:lNwLDIexwEDroA
- TLSH T12BE6F1CA4F1E7985DE436BF8A7B8D609973C81C4206050739CF72348DA5A6CB7E1E25E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
invest/core_invapp/app/Console/Commands/InstallUpdate.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
invest/core_invapp/app/Console/Commands/InstallUpdate.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
invest/core_invapp/app/Console/Commands/InvestormMigrationStatus.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
invest/core_invapp/app/Console/Commands/InvestormMigrationStatus.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
invest/core_invapp/app/Helpers/helpers.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
invest/core_invapp/app/Helpers/helpers.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
invest/core_invapp/app/Http/Controllers/Admin/ApplicationSettingsController.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
invest/core_invapp/app/Http/Controllers/Admin/ApplicationSettingsController.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
invest/core_invapp/app/Http/Controllers/Admin/LanguageController.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
invest/core_invapp/app/Http/Controllers/Admin/LanguageController.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
invest/core_invapp/app/Http/Controllers/Admin/ManageEmailTemplatesController.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
invest/core_invapp/app/Http/Controllers/Admin/ManageEmailTemplatesController.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
invest/core_invapp/app/Http/Controllers/Admin/ManagePagesController.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
invest/core_invapp/app/Http/Controllers/Admin/ManagePagesController.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
invest/core_invapp/app/Http/Controllers/Admin/ProfileController.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
invest/core_invapp/app/Http/Controllers/Admin/ProfileController.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
invest/core_invapp/app/Http/Controllers/Admin/QuickSettingsController.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
invest/core_invapp/app/Http/Controllers/Admin/QuickSettingsController.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
invest/core_invapp/app/Http/Controllers/Admin/TransactionController.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
invest/core_invapp/app/Http/Controllers/Admin/TransactionController.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
invest/core_invapp/app/Http/Controllers/Admin/UpdateManagerController.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
invest/core_invapp/app/Http/Controllers/Admin/UpdateManagerController.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
invest/core_invapp/app/Http/Controllers/Admin/UserController.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
invest/core_invapp/app/Http/Controllers/Admin/UserController.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
invest/core_invapp/app/Http/Controllers/AuthController.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
invest/core_invapp/app/Http/Controllers/AuthController.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
invest/core_invapp/app/Http/Controllers/ContactController.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
invest/core_invapp/app/Http/Controllers/ContactController.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
invest/core_invapp/app/Http/Controllers/Invest/Admin/InvestedPlansController.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
invest/core_invapp/app/Http/Controllers/Invest/Admin/InvestedPlansController.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
invest/core_invapp/app/Http/Controllers/Invest/Admin/SettingsController.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
invest/core_invapp/app/Http/Controllers/Invest/Admin/SettingsController.ps1
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target invest/core_invapp/app/Console/Commands/InstallUpdate.php
- Size 1KB
- SHA256 32ab289bcb6ccc787d02e132008978ee41b8e1aa8e67b0f5f1ef4504b412641b
- MD5 2e560369a3b3ecf43c56e179a8b75832
- SHA1 045686653458063aa63d8c32f5cf3fedd8a249d5
- SHA512 8b80a1732ad5f0331e4f4a6ec1a7200db66327b8b20e53b2d01f6ba965d445e50636a3abf6c79865902ffd3362179b3aa1184e6b7e06de41df6818e5d16964b4
- TLSH T1D521CCC70EEDD437147E32FF4F16A044D962572B16C0618938BCA2380F313A8C78AA6D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target invest/core_invapp/app/Console/Commands/InvestormMigrationStatus.php
- Size 2KB
- SHA256 123aad1ccd08490f6803447e6e2ccd186d2acbdf73649e1229fcdb997fa2d92a
- MD5 da0dcf371ce44e1e5cb948921471401d
- SHA1 691f4d8f10bd748945f5f4ff5b90b63baf6f0375
- SHA512 c98c1ae88bc8d9eedc51173fb03283eac72cf82dba000331835eadf95393521714ffde8525fb8b362240b5664a66f0b31b9b3c7357e5a64f201f41660af0a8a0
- TLSH T1B35133853DDAE69654B323AE4B46C048E539EA3B626611427CFDC63C1F3825892939FC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target invest/core_invapp/app/Helpers/helpers.php
- Size 76KB
- SHA256 7a1795e344c4444be580473bd18f0d2e09020b512a667e96a2538b3304f43484
- MD5 f21b6466e781e858766ac27273e20bf1
- SHA1 7c2df40e285235f2efe9eb801c9b21aacd81432d
- SHA512 d7b529b0b29404c236f7ca5fcc0fa40f3ebdaf7ff7094c536cfea597872821cf2bb59f6deb6151ef2010e883ecb1b4de46da946f8ea3adde984045bca8aeaad4
- SSDEEP 768:QO0pI9UGTDilaghGubgYdwlxXQJcAfzAIPyXQm5b:b08XiulXQJcA7A3p
- TLSH T17173F75838CEB1664572A7389783D409EEB9672B59622580FDFCA8F02F7132CC1E5E5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/Admin/ApplicationSettingsController.php
- Size 30KB
- SHA256 96d5441fa3f8f97889abc8dfe236af23ba945573968ec98695d6ed8ed05722d1
- MD5 33bd73374a0260ebb6f7dcccc457311a
- SHA1 fd4203d8ee33543ee700d3230d384167d9fbe44a
- SHA512 f2a7a755688307911390a7544340f33ad4c4f006d3586089543fa1d38c5b89050c6e254d9e06f984d529edd4e4da921c704e2435cad29ebc4250ec1566b08078
- SSDEEP 768:cBEWtSp696tjWVY25k9f1zgW/pn9bK+Q125uF:cftSp6BVY25ksW/i+w
- TLSH T1E4E285E218CF7214457692AAEF41E501C6ADE31B65811933BFBCBEB40FF136486A497C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/Admin/LanguageController.php
- Size 9KB
- SHA256 431fe5400fda3f2042300e15d46f91d83a88188944345caebb725cb11e8abfd1
- MD5 7a4001c8d7226e9999bbc3441b7e2615
- SHA1 5ea575d8369a7f8378e886b82b7b600351806fba
- SHA512 56278901e3a2b06e22b98b53c3bcfcda4432ee7552bfa4c701ab628d189e98ca33a027cea807886c9ecadf84042894d0bbac0d5c30b729cb631d22ff7b8006aa
- SSDEEP 192:luOlQj3FVP1KRZCdBAaX1e8lMH8LctpLfZaAuy9:luO+3FVE3u+aX1e8ls8LmLBz
- TLSH T19E1266752CC66164513323F9FB82E805FAA6641341953B42FFEC20786FF226896F1E78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/Admin/ManageEmailTemplatesController.php
- Size 3KB
- SHA256 ca84db11b92d85eea7934c0a978345fe1baa8ae2b977be6b8f32eaeb10341260
- MD5 20da8652f5f79f5ecc199af752609520
- SHA1 dd2caca9d0631ba590b3bcbb4d72fe53d1c90870
- SHA512 c0bc3a3d3f6a82e547f0285885ae627437fe9304421bee1d89edb1ebe647ebee7a2bfe30517aae1f68199c400098b6890b52531ed8e98c456927544f0b73db21
- TLSH T1B66111910896A3588A7212FEFA51D255C066C213DF810543F6FC37D41FF0CA5BBA9E78
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/Admin/ManagePagesController.php
- Size 5KB
- SHA256 bee841d7f44df0a3b740516ad11ef8801af43af50f2286d0ecae64bc609192ed
- MD5 188bd14df2e270b4cc11068dd52aae51
- SHA1 3d022cdb7d53b8096d39c36a553dd444b1f5cffe
- SHA512 9162d672441b603460961d252dcd1c3451ee5bce18d91b1e71eb100ccc0f735c4695c64304d8628a2e45bff4c947b683d7ec0728fb83b8ccbdb58f236f0d30d6
- SSDEEP 96:V+ruUh+Wwd6dLVg0xy0ghXpwgHEHrQwCf/9eQEJzFwlHJgJcncAooJs3e9:MueDbBGZwcE0RGFcccn5oe9
- TLSH T150B124863C8A6124C973A2AEFFD6C294DE565013A1DA1302FF9C71E05F711A4CDA5D7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/Admin/ProfileController.php
- Size 12KB
- SHA256 9e56294a316c06d7e813b6e7556ab47b967e2e8ab88676f98de779c0fce425a3
- MD5 51a0f48a422db0ab1f40bff9480b06b8
- SHA1 355dd05a4fb56d91e9a53ed17a1fa377848deb2e
- SHA512 137dc6c11a9ffc7d430470ad9a687496122ed60b42284a233bb48e2ec8133df95daa1be86fe282d74896ce6af16d07a1756283210ae4cdc2f57c545ad9728898
- SSDEEP 192:duSGtK7NCU/FJ4WdXcTqwtuQ1stYt1cWOzEy6Z8PsJOf:duSGtJs4WdXFFQ1stYt1cWCEy62P0Of
- TLSH T1C54278D538CEB5B24132A2B6EE02C206E796B117328512717EBC717C1FB27ACCD94D59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/Admin/QuickSettingsController.php
- Size 9KB
- SHA256 cc678ce51413d2c3eeb15e023b251c093b715ef02339649406589e357f00a0f2
- MD5 14515cc43646d8c82d0b9bd29376fb81
- SHA1 48961b349e723590744d192b75fbb5ce86e1e6c6
- SHA512 63c1bc205fdb7b70a19b679394accdd7e15112c836db4515293d7b4980f95f2924061c056f6f60d4d92a57066f56d6d4a1c22edbaf6778a514c5a3e400aaff58
- SSDEEP 192:E3u8C5wX++iE0VSPHTx0gVCa8KSehtpERYouMsM7A0qhOPE:E3ug++iE0OcKSehtpERBuMZ7A00t
- TLSH T1971262922CCB6214997361BADF12D316D2A6D227BA120153BFBC64F40FF03649F749B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/Admin/TransactionController.php
- Size 31KB
- SHA256 78df573353d31b6586455d212334b59b674b1675b85147cc169fccc408983307
- MD5 ab2297e16d399cfac1bf18ce0ac4a399
- SHA1 7aaf5138146a0d11c83771e1871d8d3b0fdcd55a
- SHA512 4487742eb25d2ed15235e48b9ecae721cbb7c91c18205aca038e2a15b3d20a8fdc524397e9a350043f729cfa58cef976c0d9277c8c699902221290c10f403dde
- SSDEEP 384:U4LubAC/a6rYNAgNT7A1CXDHTgP6cIB1t1WrD+5i2ZCjlF/vOvUhdlt:U1ACRrYNAg9Ah81t1fiZUUhdlt
- TLSH T19BE21196388AB171847BF2297F83C204DA76FA0778A315317EEC50A61FB11DCCD96D68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/Admin/UpdateManagerController.php
- Size 1KB
- SHA256 137ee95c7b9f58b868d1eb60b96c103ef480773529fdf842c1ed62f745221933
- MD5 7e8c1f50abfb637ad49a4a758e70eaf7
- SHA1 dcc6f17f05de711bc696b944c2bb60b620be1b3f
- SHA512 eb482a905727966dac22a4b62ad91269a1966fffd52e9e249be480190e15eaa3438e6a0584e9cd6944ef5e8994353bf784bdb9a969dbd36f41c69f4860bcb983
- TLSH T13831CC8E198DA633017F77EFFF53C029E667642320D4021AB1AC50740FB72685B5AD6C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/Admin/UserController.php
- Size 16KB
- SHA256 9a6010563124861d86cb1be756cfed923d5d9ed644b87ef298aa963aa2a3dc4b
- MD5 79203a7e3783c1f5a199c4b183b6ac57
- SHA1 c7b6bc7238c0dd9f4a4c3180316ac4beda25cabd
- SHA512 429de7af4507faeebce6ecb9a485077799ac9f8cd247010ac072a81c07ccff11875b562cdb6c2ca2a1c303d9e7841f61c1cd0d293df14310e28c577d07c1311f
- SSDEEP 384:49uhJcANc5utQ+25e7909V2ebasXvcq5szPBi6lO4hdRGIJwr69egP96UqZL:4sJIlvcwN6i
- TLSH T1F67296D56C9AA100867313B99E12D629EED6F123A0871322FFFC55B82F712E8DD9146C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/AuthController.php
- Size 24KB
- SHA256 423d6585204de51039addb04967eda094e1b7a8c259d1f3333413853cf0bda1c
- MD5 5ea1d6c0ce81d450d24352a7588e05f7
- SHA1 29b5d672e904815329e432cd0fc1438e2e435db8
- SHA512 5e1ff300bf97dfb89ec10f8852363ea996a55bbd526611553398bdadf45bd9d55bef600eba8e4c70e0725a288bccd3c18162b5590df3b876da7f766ae9f80823
- SSDEEP 384:3uA06qfVqnVS4xG+SpkxT6DdJVivrtZtVdu+b/POYLffZuAr8/kSwNJCDshB1SAQ:B+gjlacT6Y7Q0UGHu
- TLSH T1F0B264D52CCA62518672537DEE83C109EB5BE127145E1722BEFC00D81FF1D29AFA2D68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/ContactController.php
- Size 2KB
- SHA256 b756b1e337a9979e093faf303ac34dde57db2a7243352cad0834cbdbeb6ddaac
- MD5 468dcbbd3383fe7f80e9c55ebc01b5cb
- SHA1 88deb09b66c7b2c604800e140bfe94caedc199ef
- SHA512 464db6036c438e987da05d5d23e42edbfb569dd9897f5a384dc82f5d5eb2c193b3fb59cb6ffad8ce8068720658d40791fb31edb0084ebba05a22ec90663a5e61
- TLSH T14C51EC921447A259803262B7FE11A421E642E6039B843F63FDBC20FD1FF39787965E60
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/Invest/Admin/InvestedPlansController.php
- Size 7KB
- SHA256 2e879f43b9094c1aca2d2ec765baa119409959bcf6104d3e36da7590b6b285af
- MD5 d1e0952b1dce2b694b33e53d61bd91e6
- SHA1 42a9525a64a46647b9f11a8fcb09864ae0588eae
- SHA512 3a32b39c7c1fbb80c49b5a4bf3cd3f960bfaa2a436f1a775da901e1dd690ddbacdaf52048cbb8e44be3f5ac5f10aea45201ba8eb54c7ac85fdca3b58e143dedb
- SSDEEP 96:MTubL0O0WvqthmwZJLvHPLfjhm+fdK2vn2/IyyCILdJd7+aVEkJ1Aw:GubA1thmKLvvzjhmCdK2vqJyCWL9VR1
- TLSH T1FBF1447E6C0B5A0447337B69AF52D124EF6654E394C213227D9C33E8CFB0868E58B99C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target invest/core_invapp/app/Http/Controllers/Invest/Admin/SettingsController.php
- Size 3KB
- SHA256 3014a8ba0c4d6e814ae7d85e8f40de903219cea410e25e5cf5ebbd0552987162
- MD5 c1dd607c35eb901e7a4a6cdf781cb2af
- SHA1 6fe680ea84eb76830a429bddd0db2b04c2699025
- SHA512 4e2e54a37c2a262e492f7863a5481e36e30da064df0687c6d4f2d17b541af9d4e20e01c77ba466b65424f86734a215a7e4d4eccee7fbe89c51b09b2ba43ef7d2
- TLSH T1858111A328CF67648031D2B9DFD1DA29D676A317708201637BFC69E80FF0295C665E2C
- MD5 SHA1 SHA512 TLSH
Score6/10