Overview
overview
3Static
static
1new/Analytics.ps1
windows10-2004-x64
3new/Analytics.ps1
windows11-ltsc_2024-x64
3new/BotHandler.ps1
windows10-2004-x64
3new/BotHandler.ps1
windows11-ltsc_2024-x64
3new/BotHan...hp.ps1
windows10-2004-x64
3new/BotHan...hp.ps1
windows11-ltsc_2024-x64
3new/BotHan...rd.ps1
windows10-2004-x64
3new/BotHan...rd.ps1
windows11-ltsc_2024-x64
3new/BotHan...pot.js
windows10-2004-x64
3new/BotHan...pot.js
windows11-ltsc_2024-x64
3new/BotHan...er.ps1
windows10-2004-x64
3new/BotHan...er.ps1
windows11-ltsc_2024-x64
3new/BotHan...nt.ps1
windows10-2004-x64
3new/BotHan...nt.ps1
windows11-ltsc_2024-x64
3new/Notifi...er.ps1
windows10-2004-x64
3new/Notifi...er.ps1
windows11-ltsc_2024-x64
3new/Schedu...ger.js
windows10-2004-x64
3new/Schedu...ger.js
windows11-ltsc_2024-x64
3new/SystemMonitor.ps1
windows10-2004-x64
3new/SystemMonitor.ps1
windows11-ltsc_2024-x64
3new/TelegramBot.js
windows10-2004-x64
3new/TelegramBot.js
windows11-ltsc_2024-x64
3new/UserManager.ps1
windows10-2004-x64
3new/UserManager.ps1
windows11-ltsc_2024-x64
3new/Workfl...er.ps1
windows10-2004-x64
3new/Workfl...er.ps1
windows11-ltsc_2024-x64
3Analytics.ps1
windows10-2004-x64
3Analytics.ps1
windows11-ltsc_2024-x64
3BotHandler.ps1
windows10-2004-x64
3BotHandler.ps1
windows11-ltsc_2024-x64
3BotHandler.ps1
windows10-2004-x64
3BotHandler.ps1
windows11-ltsc_2024-x64
3General
- Target new.rar
- Size 2.8MB
- Sample260813-pegx9ayfrh
- SHA256 7ae7552133e60b4657e22b9db2a4b004d21c4407622ea41640d956f100c72d22
- MD5 f3e9d7a5a0ceae4eb006bcb62a2523c2
- SHA1 aaaea8047cc83d902ca88bf655a02016479d4a52
- SHA512 2fc81d11ff098f23692c8725d2ac1a9e5cbbaa7e91df411d856aaf9644949dce7edcbf468ab0700c1c3159373a9f9411839a2262f6e5dc4ae1722bd52d8e5daa
- SSDEEP 49152:paA8htQSzvnP2VX8yQ1fnaA8htGSqvBP2Vc8yd3UOjoN+UuaA8htuSUv/P2VO8yy:palJzPPBnalfqJPhosUualHUHPHDVsU4
- TLSH T11CD5230DE21CE0F1CE6E7E7966890EFBB9A9DA4969427373143662844DD3CCA0753327
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
new/Analytics.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
new/Analytics.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
new/BotHandler.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
new/BotHandler.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
new/BotHandler.php.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
new/BotHandler.php.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
new/BotHandler/SecurityDashboard.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
new/BotHandler/SecurityDashboard.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
new/BotHandler/SecurityHoneypot.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
new/BotHandler/SecurityHoneypot.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
new/BotHandler/SecurityScanner.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
new/BotHandler/SecurityScanner.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
new/BotHandler/UserManagement.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
new/BotHandler/UserManagement.ps1
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
new/NotificationManager.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
new/NotificationManager.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
new/ScheduleManager.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
new/ScheduleManager.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
new/SystemMonitor.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
new/SystemMonitor.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
new/TelegramBot.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
new/TelegramBot.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
new/UserManager.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
new/UserManager.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
new/WorkflowManager.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
new/WorkflowManager.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Analytics.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Analytics.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
BotHandler.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
BotHandler.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
BotHandler.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
BotHandler.ps1
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target new/Analytics.php
- Size 14KB
- SHA256 06894ee798b535bb5840065bd2b86829c44c3796d13b2372c64f2ce1968a5841
- MD5 198d7c4d918607fd3cf406924a416e7c
- SHA1 61509e56cda65a689a48a2538cd98c3e599bbe6d
- SHA512 3e4b4fbaa1d57e0e492672cf547785fa71f2828f475db69988cfe8475c3dab5b1099c2481dd91fadda7666c90369fbb7d8d33afa3f37a8ccbba35e503798adcd
- SSDEEP 96:32ZjAF+7g2xU2DxIdbCymm3wnJiY+7iFHPKnzW4HXq9UY7vIFkZwJXElPcIZvGJJ:Q3qI1ScyY7AswHIUI+bgPIDnn
- TLSH T1FC62016F1A8D1868DC335E727351E229F92B6A23628D5443FBEC0284AFF1115B5EED70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target new/BotHandler.php
- Size 166KB
- SHA256 84a97b49d472548680e41d268ca7a6ccb123f832b73f0d3138d6172c6f708551
- MD5 2409734a8a1d0dc6dc89f42d559c0d8f
- SHA1 283222a6989e43cc20d35f07b225b84560d8ada3
- SHA512 b080f893c4274a7574134e351182c4f9aafe66b64a46388e15b6b9ecea66047722783c2e2d1502526640f9912bf1dba5c75b3d402270ae45d6e7e128bc6862d5
- SSDEEP 768:EGjhxt1cqbMADnwPdNnZJPiou8NZIH+4bhLI6ae3hLkNZeBkJiK/h5QDvpDe6Qxm:Xtxt1QOwPSZ8NZIe4ll93cRiK/ey1xVG
- TLSH T194F343E9250CCD7048329377B382B620DA66B433654AA612FDEC07D41FB0652DBADFB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target new/BotHandler.php.original
- Size 166KB
- SHA256 84a97b49d472548680e41d268ca7a6ccb123f832b73f0d3138d6172c6f708551
- MD5 2409734a8a1d0dc6dc89f42d559c0d8f
- SHA1 283222a6989e43cc20d35f07b225b84560d8ada3
- SHA512 b080f893c4274a7574134e351182c4f9aafe66b64a46388e15b6b9ecea66047722783c2e2d1502526640f9912bf1dba5c75b3d402270ae45d6e7e128bc6862d5
- SSDEEP 768:EGjhxt1cqbMADnwPdNnZJPiou8NZIH+4bhLI6ae3hLkNZeBkJiK/h5QDvpDe6Qxm:Xtxt1QOwPSZ8NZIe4ll93cRiK/ey1xVG
- TLSH T194F343E9250CCD7048329377B382B620DA66B433654AA612FDEC07D41FB0652DBADFB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target new/BotHandler/SecurityDashboard.php
- Size 19KB
- SHA256 ae3a960bbb6c986050b4f73299bc66ece70b02375306c867edb80ea53c529851
- MD5 dc2dd535004b8579dcabd5e88238202f
- SHA1 388afb72397b383074dcf41aaf6d2fb6a446b7d3
- SHA512 a4925e1dd3892be927f85324669a0210a6faf8d26fe97224de925bd5f0d3237f75fe83a8b3d69c448ba34fb8a1436daf8bb60ada9f791473eb8936542da858d9
- SSDEEP 384:2+a9tyB+qXHuzDxeU1QKySmaMLlEDRyQSS+jRrapFvMUftens6KLiuzM1mjS3T3A:QLxmEmTQ
- TLSH T11792754539BEAA714803A53323933114D727DA036208EE12FA9D47DC6F18B63DFAD769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target new/BotHandler/SecurityHoneypot.php
- Size 15KB
- SHA256 482b8f0a750b2ea4907962304b981cb52379ca83866d953aac1c1091f1f9c1a2
- MD5 fabbbf89b719b1a2ed7dcb6d68b803ef
- SHA1 6b3a5095afc49003f027ae02d8abaf630bd30fe8
- SHA512 ef8703a9e874558d184f699aace7da0c707431d858604a98116eaac699696250f34503e54e5127c8ed44db8e0c552e3077abc63a82c3c1c0c6dbd84b11cfd32d
- SSDEEP 384:x/Tr2Wa2+ULa3Qz0imL///s2R0shMhiRHW7Airq:/WL///sPe
- TLSH T14E72761636EFB6310017D0365792B411D213F9175288AD2CFF6C23A82F55B36AEBD1BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target new/BotHandler/SecurityScanner.php
- Size 27KB
- SHA256 6e5be8fa8a091751eff348c661d5921b53458ced9d911ac993755dd8be7f7016
- MD5 9e4d61c6c1bba3c72cce455646f7f499
- SHA1 a152d991b87c55bd1abc8b0aceb2989637c525d9
- SHA512 02d6391d15d50063fdc4f2a4894ddeca69661191139e3acade4019966d1ed54aec7941353c1d35510a75b6ee3854a355f4b92b27875fddd38d0385435acf6c82
- SSDEEP 192:+IgKMyw3Y5GM8UiDMw4uluWhkoUivSCyidVWCyi5wjlqDaBwK2Kn6dxiaixjiSCK:ewmkogqDa+Do95HFiTl9YL/FjSWD9ORA
- TLSH T14EC243A92CEE9572001BA43767863410C337D6071588DE01FE9E17982F6873BAFAD779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target new/BotHandler/UserManagement.php
- Size 36KB
- SHA256 4eeb6494032e4690328839fc1c14be332c4937a86ee07aab06ee4473897a4aea
- MD5 1efa55c050c96bb0bdf0b4841392e216
- SHA1 04b3692d172817bbfdbb378134e691cec99aa5af
- SHA512 141087cfe7495175d08d4682446fd60109d94546f5d4004c4e61347062f1a7fc7d3917ab41f10cfe6fc2f4c0579a583eb59eda2219f69a80e23b16c3d037f2fc
- SSDEEP 384:BuxmgiG4m0ybiUW2hP8RUgr0zGsoeHKVgPsk4P8wQTwZzHZoREo1dVnVMlw18nVc:awya+ypKQWnH0HMapCtr
- TLSH T170F224A5396EDA30045290237287BA30D727ED03658CDA01F57D1BBC2F14A63DBAD6AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target new/NotificationManager.php
- Size 13KB
- SHA256 7a7c8e97a7c845641054f8589baf8aae53f14990ff3c323aa117e46ae2c043d4
- MD5 4ee705c576c0a09ebbf6f31dd54124d4
- SHA1 23880d6d0da1d57487160d1b9fbb7971024d627f
- SHA512 e4797c6c2369bc90e31911157168e737bbf6a08e38adc6665fa9f43e4ac66a07f50aac14975edaef14554e75c5a5618576b6d3a99d5120dfb3c60cd6c917fb29
- SSDEEP 384:UkWKmbgBGseFoYGrSjJHvGrSjJJ5N99GiQ29vAYU4NkXYGe6gy8x1J1:Up/S8X
- TLSH T1945273FD284689B459739337A3C3B510EA73A513A1465802BAED13D46FF0712DB9EE70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target new/ScheduleManager.php
- Size 8KB
- SHA256 a220a2c4f020d7f8803ae009131f6b2e3a4ad21c2873c8d2605b722c77137855
- MD5 50e6d66ed1fae3ebd59968b4a6d19efc
- SHA1 ee5ef99befbb9ad58eabb440ee0879ee021d2cb9
- SHA512 e3dc0773971a83f0dd87798abf329cd8b00c15bcf2aebf8dc3ab84c66af5662c4b41d35eb5d696494e6945e69c14af81b5d8a0e66fe947ca7975b6a0f8159d4c
- SSDEEP 96:v4F+AWCaNdyinxNCiQCfj6JIMzhzWippzLA7Amlsni1Ba909MK22toqkHF3Mwg+C:z/jC/CfotPpau3Fl242
- TLSH T1F602FFBF2A7A49A04C73723FE383B4D8ED6665231246490BF9EE12441FB0235CB49DB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target new/SystemMonitor.php
- Size 15KB
- SHA256 f735546d3381a1ba90c09ee7d6da22636038c08519615cdf732a18642c3bee11
- MD5 2f726075208672cc080a32af51f58fb1
- SHA1 bc342cfe75dfa968f78529f58084bda8975629e9
- SHA512 4fe2d4aab2c8aad06dffac1c7055594b5d7e6ffe99a30ba281074a3df2ba34123a4ed32d1b7b8b039bd844d91171e3dde3770d2b00e71454e8764dbe3b24d576
- SSDEEP 192:gsf5DDH914YPgNbP1hvUvGU/foyQyDi+Z74k387:gsfd4rLMv53oyQyDi+Z74ke
- TLSH T1FD628768380C9873553793796BC37925EBB78A134306EE00B9BC1245CF74459EB5AFB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target new/TelegramBot.php
- Size 9KB
- SHA256 e2713ad15e6beb24873074d3c5e7e912ae8cb1f827925dbcd1b552f68fa33249
- MD5 9e827688861d4a03c66abb3d6c4fc53b
- SHA1 7bda97d1a690c09e5d9c7d5c8be5fdd90e3a3ab6
- SHA512 b650ba72cb438631973174f4a1aca577ef04b2d3d5a3f0104b1641341e04e7443a74c829364c4e95510a25b2a3d3305134335d41bb7c89b05dd871fa08bc96e8
- SSDEEP 96:6xoxHzY4wl0USzchENW+FDNS5yh4/0cXzTwm6b/vJOP/iJvg3qgLzvbC/HXTV7UF:wMz+0UWE6Inz6hk
- TLSH T197129BA6295F9D244676612A4B52E520C71606136DCEC141FBBC3F7C0F76432E6CEEAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target new/UserManager.php
- Size 27KB
- SHA256 55c9f7977acda1de5885c0ec1b902dbbdd4c06c048ad4a2f9cffd1b4cb2211a5
- MD5 2313a45c53cb633cb00e2d81179ae2b2
- SHA1 5d04ee2ca3cbce15c71c2b22623581a12e36341c
- SHA512 e38d14f6fadf74732343da8cf07273dfdb41301b8f1e1ce3977404176eacbfafb9ede1fc5d5a43c024a75aaf8148bd994b9182d6488d10e150e222f0c82250ac
- SSDEEP 384:WBeYlSxL91gDvFpUo/zb/plpKbeMGe9X6UjEkZnLWl7eo52S:WBeYi9QvFpUo/zb/lKbeDed6UnZal7eI
- TLSH T18FC285E4716D88B0857367369383BD38DAA36D33614A5802B9FD13582FF012D9369EF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target new/WorkflowManager.php
- Size 22KB
- SHA256 4625e66ba035eeb42a1590652e869a2417b283216638269783dc556e6f1f7cb1
- MD5 c4281527f0a0085ff861c9c619a3a7c9
- SHA1 555d7a55d17570f608918e601459784a378b3442
- SHA512 3f78849ec4227fa3b61f6158251cf1d06f01f8a7edc16f0929b3e65a539e7e66bc872b8eb27f222a58af7a08410063e02fe471c8dbe73b92fe90982ac8de6319
- SSDEEP 384:lrtvL7dJyEGpVYyzdu7rk+cL1XHg4G5rhKYT:lrtD7dJTKVZXHg4G5rhKYT
- TLSH T1B0A221BE1C99145046B397FBB381B810F995592393418A02FFEC13046FF1A25B56EEB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Analytics.php
- Size 14KB
- SHA256 06894ee798b535bb5840065bd2b86829c44c3796d13b2372c64f2ce1968a5841
- MD5 198d7c4d918607fd3cf406924a416e7c
- SHA1 61509e56cda65a689a48a2538cd98c3e599bbe6d
- SHA512 3e4b4fbaa1d57e0e492672cf547785fa71f2828f475db69988cfe8475c3dab5b1099c2481dd91fadda7666c90369fbb7d8d33afa3f37a8ccbba35e503798adcd
- SSDEEP 96:32ZjAF+7g2xU2DxIdbCymm3wnJiY+7iFHPKnzW4HXq9UY7vIFkZwJXElPcIZvGJJ:Q3qI1ScyY7AswHIUI+bgPIDnn
- TLSH T1FC62016F1A8D1868DC335E727351E229F92B6A23628D5443FBEC0284AFF1115B5EED70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target BotHandler.php
- Size 87KB
- SHA256 2c83ca5ceae6b498950ca51ec71f76efd7a72d01d1b189055790e86091a288b2
- MD5 462b68ee8e7d9ae2d9dc056816334f7f
- SHA1 12a10aff2d0dbc114a736d17275edff5e64670c0
- SHA512 46c445d26113a2d75cba98cb8c13e484346ae8a67179faf7743b428b47f26f5db9038edef253e9ee638882cf6ddf8aa4cc42f01a9968a4c2c90eead5f13384c4
- SSDEEP 768:EGjhu1MqCXDYPdNnZJPiou8NZIH+4bhLE6cLkNZeBkJiK/h5zDvs:Xtu1gYPSZ8NZIe4lhtRiK/P0
- TLSH T1C29351EE250C8DB14833E377B382B711EA62A427644AA512FDDC03981FB0555DBADFB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target BotHandler.php
- Size 46KB
- SHA256 32b0ab364731816194686a8b79011fc2d3b2c26735d660b9ecdbac8c58b4b797
- MD5 1ebe31a50d41ecd2b53776315afb1fc8
- SHA1 1afc65f8f0a548bdfceaeee645500ff428c5f2ed
- SHA512 350b3d9d8c2370b9fdc6a6f711dec0cf02e046afc57ea27eab510cd0ff579dca7eacadbc21101051ba1bcb86276f41d8c6794e96a370a489cc2216a7a2ddf8da
- SSDEEP 384:ESWIr80EUu7RAhT46mxlUAlwVo3il8OuuSJNmz1L5/BUGCBa++7J+s4pBhgZQbl8:EGjhu3q9PdNnZJPiou8NZIH+4bhLE6+
- TLSH T1E62330E9290CCD714832D377B382B725DAA4B437644E6A12FDDC03981FB0555EAA8FB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10