Overview
overview
3Static
static
1App/data/data.js
windows10-2004-x64
3App/data/data.js
windows11-ltsc_2024-x64
3App/data/user.ps1
windows10-2004-x64
3App/data/user.ps1
windows11-ltsc_2024-x64
3App/genimage.js
windows10-2004-x64
3App/genimage.js
windows11-ltsc_2024-x64
3App/razorp...pay.js
windows10-2004-x64
3App/razorp...pay.js
windows11-ltsc_2024-x64
3App/razorp...der.js
windows10-2004-x64
3App/razorp...der.js
windows11-ltsc_2024-x64
3App/razorp...ts.ps1
windows10-2004-x64
3App/razorp...ts.ps1
windows11-ltsc_2024-x64
3App/razorp...on.ps1
windows10-2004-x64
3App/razorp...on.ps1
windows11-ltsc_2024-x64
3App/razorp...sl.ps1
windows10-2004-x64
3App/razorp...sl.ps1
windows11-ltsc_2024-x64
3App/razorp...rl.ps1
windows10-2004-x64
3App/razorp...rl.ps1
windows11-ltsc_2024-x64
3App/razorp...pen.js
windows10-2004-x64
3App/razorp...pen.js
windows11-ltsc_2024-x64
3App/razorp...ty.ps1
windows10-2004-x64
3App/razorp...ty.ps1
windows11-ltsc_2024-x64
3App/razorp...est.js
windows10-2004-x64
3App/razorp...est.js
windows11-ltsc_2024-x64
3App/razorp...est.js
windows10-2004-x64
3App/razorp...est.js
windows11-ltsc_2024-x64
3App/razorpay.js
windows10-2004-x64
3App/razorpay.js
windows11-ltsc_2024-x64
3App/safe_analyze.ps1
windows10-2004-x64
3App/safe_analyze.ps1
windows11-ltsc_2024-x64
3App/verify.js
windows10-2004-x64
3App/verify.js
windows11-ltsc_2024-x64
3General
- Target App.zip
- Size 7.0MB
- Sample260815-j8egbssdmf
- SHA256 7099ffc1e0c55bce38a62892005c653b6b1d46b2551aeb48ea1b8e294a1cf706
- MD5 0820f5e64d0df587bcfffc9c7bc348d1
- SHA1 b6ca7662d2945f1313c858b59132e82b08f36e55
- SHA512 77525845d188db34a141fdc15e23ecb2fd0815723eab6f469af25b9efa5894c775ba59860f8fccc57d78f8bfc1ec8a0f2b20cdb1e15bd6980ea559a471d25119
- SSDEEP 196608:fiYXlapedxU4L3bLNbYVFSRFsMSFHIBPxLDrJk5zUUHd0PDRigO7C6qwVA+yXeq3:CAVXeqYI
- TLSH T16D7613380A887404F76FB93CA57C5F46736F8209A78CB147B72E82919CAC197B6B117D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
App/data/data.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
App/data/data.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
App/data/user.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
App/data/user.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
App/genimage.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
App/genimage.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
App/razorpay-php/Razorpay.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
App/razorpay-php/Razorpay.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
App/razorpay-php/libs/Requests-2.0.4/src/IdnaEncoder.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
App/razorpay-php/libs/Requests-2.0.4/src/IdnaEncoder.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
App/razorpay-php/libs/Requests-2.0.4/src/Requests.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
App/razorpay-php/libs/Requests-2.0.4/src/Requests.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
App/razorpay-php/libs/Requests-2.0.4/src/Session.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
App/razorpay-php/libs/Requests-2.0.4/src/Session.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
App/razorpay-php/libs/Requests-2.0.4/src/Ssl.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
App/razorpay-php/libs/Requests-2.0.4/src/Ssl.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
App/razorpay-php/libs/Requests-2.0.4/src/Transport/Curl.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
App/razorpay-php/libs/Requests-2.0.4/src/Transport/Curl.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
App/razorpay-php/libs/Requests-2.0.4/src/Transport/Fsockopen.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
App/razorpay-php/libs/Requests-2.0.4/src/Transport/Fsockopen.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
App/razorpay-php/src/Entity.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
App/razorpay-php/src/Entity.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
App/razorpay-php/src/Request.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
App/razorpay-php/src/Request.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
App/razorpay-php/tests/ExceptionTest.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
App/razorpay-php/tests/ExceptionTest.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
App/razorpay.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
App/razorpay.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
App/safe_analyze.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
App/safe_analyze.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
App/verify.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
App/verify.js
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target App/data/data.php
- Size 13KB
- SHA256 103e7295ca0564c364c4aa967960fa1afdcb22eb94dbd623db6c6fad80c98162
- MD5 3190744a1d1e0f57b2e41479346d2cd8
- SHA1 e991a304d1af918b55103132be081de4a94b3116
- SHA512 9e4bc030aafce30fc19b1cdcd5d871f7179055b8f6ee9975cf96d1996180be6112aa429cec546e5eec1f4a242d26b77d950e62342f30d00d0e81cacbf2529ff5
- SSDEEP 384:a4LxLa3SfGSGb0uiGb03MBcN6S/K/5obu:vLxLhfGL0Q0US/K/Wbu
- TLSH T10252C708FBCF84A75333404A9F3BCAC9B4BE613162C84D89BDCD4569A9F466D42DDE06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target App/data/user.php
- Size 17KB
- SHA256 d4760521b25a9a0151252202e830689bb5bce174b4ac2a5e771b030b143a8f7a
- MD5 85dd3e4498bda3dc485c5d2e4e07a784
- SHA1 d4716f809960fe4e56e22c91d2e13128903a9c07
- SHA512 0ecdfabcb68ea4efe80b69309d2e102a016be6d6cdb9c82dbe48205e575d0f3b37c9185124bb066470fd6685eefd34a8ac0cfd6a91ce01ab00145aa1c1120d79
- SSDEEP 192:JNUVz5f3owJfbixJdJG9xuG8S2C8Y2CRTo2CbhKLmykB97cU5jwi:I3N26XYZ/GTvYhKLmyk7
- TLSH T149820085FA1ECCB7527B10F29B5BC01270F9353019EC4D93BDAA4224996431FB69AD3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target App/genimage.php
- Size 40KB
- SHA256 325c942145d644d26d4ca6b3c7aba60d2ebacd7a99920f4bc340cba2a2c86131
- MD5 3057fe947440e7087e873d4b9f2c4cbc
- SHA1 db52b8f7ac165d3956a545e07629d98d8ac08c14
- SHA512 25e4cad7c9aca179df2bd9f3c6fa1c93efb23f287662953b6c69d6a26a8370aa582da1fa90eca8628a53302dcc4ff9456b933b2ad58536a1c485256d6b7ed524
- SSDEEP 384:qDShq8mVplBtBUrH6RtbT045n6urHHVgT7d7dsxFZaA5NoAqRlVR4M:q2h3UdBUrHYbT04nmTngU
- TLSH T17913D93A69F702755553D0B9BB9F8B8A3665E003D609CA153EDC12884FC6BB499B33C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target App/razorpay-php/Razorpay.php
- Size 1KB
- SHA256 7e50f4d9d46575225904937b7040661c6ed027c1c0391db2006beae5c430afb2
- MD5 b5e5f2658419267182d3eb3a54eee53c
- SHA1 282254822017e51992b905a955c930b521d631c8
- SHA512 bebd9d7a5f64a65a0dcf37ce2fbd99923872bcf34ab57f10b178a5ca8563e8268ecb51ad74717421541f86335c4632ea49427a69b9a8fb7ef0956fdc3576f903
- TLSH T11F21042520E8C13A5D97646A6BDC70B42A5BC15B77349222FEBE13845FC02248ED37C7
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target App/razorpay-php/libs/Requests-2.0.4/src/IdnaEncoder.php
- Size 12KB
- SHA256 4769f0540431ae6a86af71bf5289559728d6a936f367b7ca23acead2de37ae9a
- MD5 bb063a926fd7dc8d7a8f51028f710857
- SHA1 f85b1559e0cecc5a110469b03ab6600890bddfed
- SHA512 0375599c66c67a010bec7cc0176ecce57fc0bacd4c9dde5960642a0bbba7823f9dd9baaadad9369b8ad8af65257efef100bacb81dc654b8746830625f0f400e5
- SSDEEP 192:6TcGWcZVs+Fbr3niNSloHRZQbctxHDxntT+ETaRMMffUcGmNa7jwR:6ThVs43ASlsn4E+vHUcxNawR
- TLSH T19E4295E5E3DD125A828321D87CDAF249D2FE413079F459B6FCDC2B2827485B88678D27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target App/razorpay-php/libs/Requests-2.0.4/src/Requests.php
- Size 33KB
- SHA256 39e1a7ba93cbaa97516313cad795cc6ff696bd43045aeaa9b8a5cb218339d2e6
- MD5 54129915297cb0d809d6de97343b66a1
- SHA1 27abf46d9e665d2da7ffc5546aea4c0362e01f8c
- SHA512 390de261eda2e4bbf27cd4ed7f4eabb7514795b0540589e6dd57fdfecbdec35237f14c17ac465203e2bf51d882b9c694056cd43e949122bb9cd08eb208e9b63b
- SSDEEP 768:U5drjSVmwN9TvqVijTiLGPZ6IUvrE3fRpkIFH:cSV/NgSuQZmjifRKIB
- TLSH T1DCE284C7EA8D726682C350E59DD8F788C2BCE128725598F3FD5C13BC164413DC72AAA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target App/razorpay-php/libs/Requests-2.0.4/src/Session.php
- Size 8KB
- SHA256 7aa018038569e29726aca443ed7a9d8c0aea83e533c172fe3c77d8c2b0334c9d
- MD5 04fb011a433eab9d73330c5cd0c9f518
- SHA1 6482f26a025711220253a4e6c1771ccfe78df0f0
- SHA512 2638b28c9fc88d86d6640a780c8181a4b0e1a266f005b3c8a8cc32cbd97d069af2b1f0c33ac1b2ca0c57cf5bbc39d53550e225f78fb0e64a98751551fe4ba8d6
- SSDEEP 192:6Vd2RPoV96NGN6duq6wmcsxNTihP7qilSmcZv:6VwRPoV96NGNiuVpxNTikmY
- TLSH T1650263C7FA887372C1D790E69FD5FB45C0B0F132727068B7A98A5BED169003CC542A65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target App/razorpay-php/libs/Requests-2.0.4/src/Ssl.php
- Size 5KB
- SHA256 d9a3dc1bdde30ec56cdeeddfcd685f29b75ef496f1a9669a800ccfb1d2fd1202
- MD5 541ecee9d8766275cfd8b63abacd7cc9
- SHA1 c43e6ace351edf56f59486f9db18367f11ff4fa9
- SHA512 a1c8f85998b63b9a54134508352d3c71c0fe2032cd3b9749eb6526c3c4fcfc7d8dad6192af3d9b5e7eabbb47ec97e2353466fafe890794aef0964317b2927805
- SSDEEP 96:VTG3XfELF0cbYgwxlGiF9FE7gBOjjTSeIcerGigzoWC8yqiEr8fE/JvF2GrJGM7v:VTZ0cbYgq0iTFEcMjjXIJfeC8xDdJlx9
- TLSH T1BDB133C6B74C527A4B5141740CEEB3DBE6BED03165392CF6DD86426C2084EBD823AD76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target App/razorpay-php/libs/Requests-2.0.4/src/Transport/Curl.php
- Size 19KB
- SHA256 bd491fc480ab1ccb239ffc92068e3d1bf4c2c8db34ba61eeb8ef37b4c538135a
- MD5 94502b272460ff60136d6e1e8ad0bae0
- SHA1 1b2ac770e94ada8039122673113927cf120d4dfd
- SHA512 7fd902913d21f809f401cc92dabc6ecf91a3e5283c8fc2dc2755dd38ea12642308babde44a28ab881217a3943e81dc2335645ccd7fae049494a95c6acb00bbe0
- SSDEEP 384:YCR4T7EjklGqNjBpJUxNTiTBoeAGw/x8mdEL6Wpb:YCR43EjklGAjBp4TiTOeAGdmdEL6Wpb
- TLSH T13992B6C3EB4C22A7E2A310E59B9AFACC927CF235765088F7FC88475515C432CD618A79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target App/razorpay-php/libs/Requests-2.0.4/src/Transport/Fsockopen.php
- Size 14KB
- SHA256 e00153229523b06c2dda47da0f27230da30ed04677ed9561520bf9a16aeffff8
- MD5 81360916fc2e1ebb0b60ee16ad9746ec
- SHA1 10da758bf77befe2147b6cb47554538d1a90bb9a
- SHA512 3dbce46e5975068d83b8f3268dbc899bda0986f84fd6c902d646a157bc53d6ef635309d332d5cca3a4ad66eb0e7d3039c288a5ad64e5635fe070c6efebd9459e
- SSDEEP 384:WzFh9YNjBpdtOzc6oaPuPUVVrxOlQxNTiLkpU2I:WzFPejBprOzc6DPuPUVVXTiWU2I
- TLSH T1156254C3DB4C2267C3E240E98ED9FACD91B9D171B15088B7FD5C07A822C852CC779AA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target App/razorpay-php/src/Entity.php
- Size 5KB
- SHA256 fc4afd2f2f2eee523973d43cba85a0aab225f7673bbf1c99edd54303edaaf5f3
- MD5 4bd548b73a968950bf4fd9743021d0c7
- SHA1 e14866c6826dd536d52d02e660b3eceb006d1072
- SHA512 21bc2d4486e632ea4a08d84845e415fb5017be6cb42fbc4b4f86de0e310b58c4dcd0d7f30f24e0348a7bcfef567bd24a3bd860c7fe8a30d934d426ce889becc7
- SSDEEP 96:kiTD3i+9SBVDG3Y/t7lAVJK6QiocGkODX6LCyKbMTrHIEanIWKriDq6mypazw/AN:hTDBSrDTlAVJKLioi46LCyKbOHpa1Krx
- TLSH T1A2C10F9A7CD3A0F95553E07DCB8F8204F639D027224A4C60BEAD96A55F50728CEE0E7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target App/razorpay-php/src/Request.php
- Size 6KB
- SHA256 515f2ee49719fa45398d6d67c09295ec6dc71b406413da2d28f4aebf015b1b58
- MD5 192b3f8c2393f9ab802b48b935d4a834
- SHA1 a0b10ff0f5fb4dd49ebd535568db251a0a46cdf6
- SHA512 730096b975b1de26faa513e8072db69545c8b17260fa348c430909309df3460917176bdcd4742f06273c4ff331f88ae6b4836e7e98b8c17e3ec224e06538ffea
- SSDEEP 96:0shVDazvF/CKujRGv44xEWEb9zhq4aF8xz20cVb:jNc/CjjKTEb9zhqFci0Mb
- TLSH T106D13156ECE291A782336478AB4BC410F73A101B72518A013EBF56BF6FE0378CD5569D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target App/razorpay-php/tests/ExceptionTest.php
- Size 2KB
- SHA256 32cf1ed344d4a0f4424eb8f1e85867e9d68eba64e8ab31e48cf5acdb6b31371b
- MD5 698623dd0507c9c78fcf82fd67b3f413
- SHA1 54bad256c604d74ce7001588cc519d3772afb02b
- SHA512 4bebcd23d3542b8aec1f3ad4231afe07fd1e25f16f5f8befc74020eb6c2e1f9dfc8c057da19e5eda607dadebe023bec80d81c1eb6fcb0f3ea246e863ed983c4d
- TLSH T16A411212E8691D52B4877079473B8B00D071D10B380EAE26FEDCD29C6F94A3DDEB2A1C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target App/razorpay.php
- Size 2KB
- SHA256 3f435989b8c41e7ac1e12a5a060e394a177d2d5a96dbdba0ba3abf54d5338ce6
- MD5 e63471d5a347f379a5855d925680cfa8
- SHA1 0f03970fd3257fc2fcb1237527c7a3bdd97057c8
- SHA512 07c25b762f905d7abab1434f10ee6f31962c7eb0e66c04f8a8b958ce15ea77bab1190f7828a3dbda2d885e257b1ea36f34b8c3747268a35d89b701b954d32872
- TLSH T1C9413464782E4575C9B3F9A2AD381F04FF5AE20360454B16B47E42E82FB0369E4E5EDC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target App/safe_analyze.php
- Size 8KB
- SHA256 c2cb2cf5bec43d13a38adb5f90af476910aabf854a29916a4a1268c33d0e5a3d
- MD5 78369398c5a981ccfcb26d74e8c1fe2f
- SHA1 3017f9a4a90fb9be0a8b94b255abef709cb9e535
- SHA512 661780bfafd1e8a8b04eea28aab97d3bc36d5b8f8d5443b63e863803237d952ff80385228696f5f53f16ffb47cc6aa34b979bd34da1c4aaf3d2e7f88ecfa76d1
- SSDEEP 192:XMgPn7sxCOnzjMK8A8TumXuccZfiCT0ut6+Qy:cgIlwrAKuzZfiCIuMo
- TLSH T10E02C4F5DC4645668FB6C2B6BE254609E1F51213AA1502127ABCC2CC0FF0345A7EEE7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target App/verify.php
- Size 2KB
- SHA256 1c3a705e03dc4f1a1c0b71a93efd0160e15c3728b26be085aae1cdc21712f8d9
- MD5 0b7e1692165f64841a99a58421b2eaa5
- SHA1 ac6f35371afeb89f99bc89b9b6a4fd0d0aab5edf
- SHA512 a269c2956ac4d256f721ae355b7be69ebe74ce1c09f7440db79a7371dd79230c7b8ece1e9d8d5223d4e3ece5207a156e8bbe332af53bc1e9f907c600c1b33f2d
- TLSH T1F351F315B42E41A58BB2F976C3265D11EFD2F20321924715B41D43D41FB8BEAFAD10FA
- MD5 SHA1 SHA512 TLSH
Score3/10