Overview
overview
3Static
static
3PhotosFam.exe
windows10-2004-x64
3PhotosFam.exe
windows11-ltsc_2024-x64
3Php7 - mys...cal.js
windows10-2004-x64
3Php7 - mys...cal.js
windows11-ltsc_2024-x64
3Php7 - mys...fam.js
windows10-2004-x64
3Php7 - mys...fam.js
windows11-ltsc_2024-x64
3Php7 - mys...ash.js
windows10-2004-x64
3Php7 - mys...ash.js
windows11-ltsc_2024-x64
3Php7 - mys...sh0.js
windows10-2004-x64
3Php7 - mys...sh0.js
windows11-ltsc_2024-x64
3Php7 - mys...sh1.js
windows10-2004-x64
3Php7 - mys...sh1.js
windows11-ltsc_2024-x64
3Php7 - mys...nc.ps1
windows10-2004-x64
3Php7 - mys...nc.ps1
windows11-ltsc_2024-x64
3Php7 - mys...tat.js
windows10-2004-x64
3Php7 - mys...tat.js
windows11-ltsc_2024-x64
3Php7 - mys...idu.js
windows10-2004-x64
3Php7 - mys...idu.js
windows11-ltsc_2024-x64
3Php7 - mys...tip.js
windows10-2004-x64
3Php7 - mys...tip.js
windows11-ltsc_2024-x64
3Php7 - mys...ay.ps1
windows10-2004-x64
3Php7 - mys...ay.ps1
windows11-ltsc_2024-x64
3Php7 - mys...te.ps1
windows10-2004-x64
3Php7 - mys...te.ps1
windows11-ltsc_2024-x64
3Php7 - mys...mg.ps1
windows10-2004-x64
3Php7 - mys...mg.ps1
windows11-ltsc_2024-x64
3Php7 - mys...ne.ps1
windows10-2004-x64
3Php7 - mys...ne.ps1
windows11-ltsc_2024-x64
3Php7 - mys...ne.ps1
windows10-2004-x64
3Php7 - mys...ne.ps1
windows11-ltsc_2024-x64
3Php7 - mys...du.ps1
windows10-2004-x64
3Php7 - mys...du.ps1
windows11-ltsc_2024-x64
3General
- Target oxy-gen_light.zip
- Size 5.7MB
- Sample260818-nazrtsssfy
- SHA256 0ec3aaa311a9fbdd724ce891b4f9ba11713989ca7b3ff3e4abb80f0d8fcb0ec6
- MD5 8fe3f6cc9ef192f8f7a2e02399281dbe
- SHA1 57c7f52348721d905adac22981de37b847979fc6
- SHA512 8d93bd8989ff57b3f4bd42e8c9eadc340037c84a1f7dea95e97d2c205687b65f055df2d92b4b5d940063450c6e96ad0dd858a7c751af9ee4bfa86535c91123c6
- SSDEEP 98304:cJmAS5iRKRsGVfdO7NByWNrCsDm9BDM6Yk3dEApYtbaVIQ:mmAl/7NBpXDm9BI6DES5
- TLSH T11E5633CCD3E92853D4A6EEBF348B65DBE3A54E5553211303282F1064DE82BAB2F65317
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
PhotosFam.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PhotosFam.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Php7 - mysqli/admin/cal.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Php7 - mysqli/admin/cal.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Php7 - mysqli/admin/cal_fam.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Php7 - mysqli/admin/cal_fam.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Php7 - mysqli/admin/flash.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Php7 - mysqli/admin/flash.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Php7 - mysqli/admin/flash0.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Php7 - mysqli/admin/flash0.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Php7 - mysqli/admin/flash1.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Php7 - mysqli/admin/flash1.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
Php7 - mysqli/admin/lib_inc.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Php7 - mysqli/admin/lib_inc.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Php7 - mysqli/admin/stat.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Php7 - mysqli/admin/stat.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Php7 - mysqli/arbre_individu.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Php7 - mysqli/arbre_individu.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Php7 - mysqli/balloontip.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Php7 - mysqli/balloontip.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Php7 - mysqli/birthday.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Php7 - mysqli/birthday.ps1
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
Php7 - mysqli/carte.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Php7 - mysqli/carte.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Php7 - mysqli/carte_img.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Php7 - mysqli/carte_img.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Php7 - mysqli/detail_carte_zone.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Php7 - mysqli/detail_carte_zone.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Php7 - mysqli/detail_ind_zone.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Php7 - mysqli/detail_ind_zone.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Php7 - mysqli/detail_individu.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Php7 - mysqli/detail_individu.ps1
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target PhotosFam.exe
- Size 68KB
- SHA256 8a3fb21e1dda44eae5c97a2db661978b78179077035a8f4df039495908715847
- MD5 935206fb6f8f4fee2c73d738b6bcee77
- SHA1 777f15a17e560b17479c0cb69947fb110f80541a
- SHA512 43eb95a482dd9f291db301b3ae1a9e8a52b50c84d70692c60739dcc943e2ef43f38513919944797104d408d11f71f2c9bbf506b09f390a502bf446fbd35fc5f1
- SSDEEP 768:dscGxBHx5wDNPYdd5G/CVyNjaso0+soL8wQ8RMfvdiwLJ+RKUMK2Vum4qmnrE:dOBR2DNPiq/CVm+B8R8uwrE
- TLSH T15763E713EEAC0401F3E501B06F6525A929377C521835EE0B1A55BE5D1A7AF43BDF232B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Php7 - mysqli/admin/cal.php
- Size 1KB
- SHA256 f2f00563f272c191f5134b38e4358f4b88fadbaf5f0419a6d0dbd5a8d159e3da
- MD5 0f58f142af93bdf030cf51cf97ee2f84
- SHA1 edef0301477b4227d1d1d3f7cbc02d06c550ee2c
- SHA512 07d30de8fdb35b3a55edb702d86899989cfeb932b7bbd7d16135f048e62750db89ee535d46e32228e9e5ad48467ab260cce833644b71feb1046a161b2f95b1d4
- TLSH T13311D0C2161B063177A2E07461335C8387F69C12A642EF8672C46B8A23C454472B92F9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Php7 - mysqli/admin/cal_fam.php
- Size 822B
- SHA256 243e8a249aa3de2a56512468c3582edb811c75430e50dbf054d86b5e0f9ded88
- MD5 ca9e6b581f54960b4de6aa5a121d30b1
- SHA1 e9e59012e6748f7c3e81a9eb0b5a0c6a89ace048
- SHA512 c54f1420bcc289043f1c90f499a322b89307c7fe619f8f3927a6d1dcd23c1c48bd992d61eca9d43d1c77c7100530e2c9fb96aa6d419712359d602733185b2584
- TLSH T1E50112C316275A217777D47865334C8387F25C22AA41DEC7B2857B8B22C410831792FC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Php7 - mysqli/admin/flash.php
- Size 6KB
- SHA256 a923667be9f496cf39f6acfbd1a714025d780f9796cce45af79426cc74041ada
- MD5 ff0c5dd81649ef9836fc2e50e9d459ee
- SHA1 20851b91c74917868bd1defe35900cd12ad44a81
- SHA512 f0dd830d279d15bcd1718b4ba3fc36e2d4837dd8b36b687d714588da2c4884288b9760b231156fd7079c716703ba96157258725429f85f450638b5dc9032228a
- SSDEEP 192:Wp1w5Jt2Mv8xIt2MY8LOt2M78lut2M08Zo:aIt2wrt2hbt2oft2PEo
- TLSH T19AD1C7CE51A94420A97500D7F87AA4ED6598DE3EFB6B071CF8C48FEF3C01684453A63A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Php7 - mysqli/admin/flash0.php
- Size 1KB
- SHA256 31da970ec3c41c174b632a3535bde3eab31252938fe1861c75c8bf4a5f939a83
- MD5 54c2ee8f4ee18a3e835e096664ac85e9
- SHA1 2f9870ccd1b60e5da5f6497f520f4b3d422926b4
- SHA512 d1cfb47c6293860679372c792f276123cf7a37a0675b04384956a12af87d287ef0a8b40ce9ed9b545cb207c28ea02743da9f89cc994df923f3575b7cf81d69b7
- TLSH T1473109CE4156892165B500C7F4BA989C6498DD3DAF6F032CF5C08FEF3C12A84253EA66
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Php7 - mysqli/admin/flash1.php
- Size 1KB
- SHA256 cbc464b111b25a1e34f4578fb27367c44ab311ccf7fd4fed4e271cc311d5e7bf
- MD5 30425818ceeef050519b0b6d20233679
- SHA1 18562cd5b4084aad844cebeed44949bd089fe2ae
- SHA512 72d74217c5618f734441436089a030bfc4bc4f5d19a64b08546137be9eb138da3f383646c0381680f096f67811ffda59fcb1cb4e3f4a0301c5ada16ca04e66a4
- TLSH T1D23146CA415648206AB200C7F47B98DCA498ED3DBB5B478CF5C18FEF3C41B84143E56A
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Php7 - mysqli/admin/lib_inc.php
- Size 20KB
- SHA256 a2e7ae073f088b5b3215eb560cb1621384491a1c3439e0e1deb5c033b26d6335
- MD5 920c567f5f5abcd98c88f7a5c735e406
- SHA1 6d94dd030f24cfcda5de2a1b714510d3bf43c115
- SHA512 e30fb5bd8af4ceef1a281c64280785fa82ea3561bb7821ae874e99d61deb6975f23a4e7118788c130f3cc21a20e32db03e3a500f96a607a74e6027e51f0aacf1
- SSDEEP 384:FokWyZJbxNcYzVE5xauaRpfZ4/2u8+bwm5T5SAMs:FokWyZ5tzVWaJpfZ4/2u8+bwm5VSAMs
- TLSH T12F92A492FD0642E96A9771F49F3E5C87EC79D06206F991E0FC8F4AE5B62042084EE5DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Php7 - mysqli/admin/stat.php
- Size 2KB
- SHA256 57e3a5208403f8044633530e6f0effe6b01ff38f8c3aa297b62f6c6cb4fab448
- MD5 6e6a2cd2773ea2355587517ee35a7d8b
- SHA1 43c8605400b72a6d97c3c92a05161ae94d991868
- SHA512 14cc01754ebd81b340a3e2a5b3b4493503d77fb6c9a8b1c31e366966dedd1fcb5ec7b464a40ab6c2cf1683ce72a008c4f8c6af980b70dfeab4bac97cb2c9457b
- TLSH T18F5101C56037E31194BE719C967A0CE349FB895026CFAC49F4CD8BB81442802767DFAB
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Php7 - mysqli/arbre_individu.php
- Size 90KB
- SHA256 6da52e2e9869d3f5c219a1cea9d9d31deb793d8aa4c46140e3b5d272f443f328
- MD5 c3ece098a1c6183a46dfdfadc92841a1
- SHA1 1467fe90f9ea6aaaed1b3525947af98413dbb717
- SHA512 88f3a2c872b2f61b6c4595de883bef2d0da989bec2167c2b3bf8cc622255cf4c077e4c0455edfc4f26d84849b08e9af82bdd4c0155bb537ed8d2836851b7ad4a
- SSDEEP 384:I8ErARj3sLCEt3QxJ9/Drlm2p3EDHWSCF6Nlv7rd4n0oCkMQQQQIQQQgQQQgQQo7:I8ErAWX3SJ9/DEU3EDHWS/HvUCfym5
- TLSH T10E93C0C8B889A56B40C34268E835FCEEE961D0A5C7E766E0EC6B681FB51B4F3511874C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Php7 - mysqli/balloontip.js
- Size 5KB
- SHA256 95eb23a8e17142e517dd6426728fca168874a01f40072b8d53169a51a841578d
- MD5 b51b243fdb6b59ae216e7a1000a579d2
- SHA1 7a0e48e9ca7417b1189b427a0094e10f8b4f8e3e
- SHA512 89cd0b2fe6b561f5d6c2df7b35f0f40aa76ef809bf16af6830a545711b9448eea504d5ae458345ca20c718c0ed20d2c853b16917d18417ce608d374b75a0b50a
- SSDEEP 96:RHf4UxmtFo847AwurFv8HEcG5rTIUarO2scW:RHYvrFv7lJk5i1cW
- TLSH T1DFB1449623D125B3D136E76E022FA71AF5705770A042F360111EC4E82C6AF5F58BBE5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Php7 - mysqli/birthday.php
- Size 7KB
- SHA256 7fd5d866e2d29be0378ade6da63ff8b4fc92a93408cb8b5503fce660bb761a5a
- MD5 125ca97c7da2fda353967475d6c03ecf
- SHA1 aae52338f504a377be3563a3238b8744b07c5cd4
- SHA512 32cbb2d0b97ed5e934284e1b575e1c91dc034832c150436b638f9dd6fdaeae73a34e29e29b253a071e5a701ac6fcdec9278c3f3b5303e916afe68288840513c2
- SSDEEP 96:d1fxp9As19XlUJTquV8BFdxdxdBdpbhg7id1dQd3ad0yI5ldVqYB+IocbS+z2h1q:/uDEuVi+59qGi16f0X98Ryc
- TLSH T14EE153D4BE0A6102956B7030E83C4CCFA839C1F64304DE5CB4AB58A476DA4F5726F7D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Php7 - mysqli/carte.php
- Size 6KB
- SHA256 0c9459cb892492aef2d13827a3c6bbde3c8efd4723bde0d5e1c028384cc3ea69
- MD5 a939f4f7dfb29842e1092729abc787df
- SHA1 43331749259f8db8551a8db3bbd0e72b963dd5b7
- SHA512 1fe3bde5c1c8cdaf45fd3ab91983b589e432c83600a070bf8db789b2b7a0b72fafc97ba5b3dbbb3f798a469f2b08321fb6ed4e5f346628b15dd14108192bde44
- SSDEEP 192:t1+aXiaxNJxPJx7Js1rmwTRr4oTxuSi2SBOhHRA4xGxNE:t1+aXVfJJJRJs1/Rpji2SkhHRA4xGxNE
- TLSH T1E5D174E0FF05EAECD02A75B09A3FED464670C11A32A555E9F7850C1D56B18C2329D5FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Php7 - mysqli/carte_img.php
- Size 6KB
- SHA256 d6e3ada7193d207ff4f5bb97985681cc2535b4e5a0bf813d72b1f50f434821ec
- MD5 9d5d154e06b89646561dc528eb34b4ab
- SHA1 55a6f7d4e80a6109d7b44043dead33392fb25eab
- SHA512 4b6bb474e54f000a26d4608a3ffea0fe72d06c568a4fff8e7e6693ee4efd359239bf89b85ae4cef27a0567a40809eabce811eba10bfb3662142ecbbad27af63a
- SSDEEP 96:X/dju/BwsAADsqKW68a0YVvrKetJ6A+FcJU9RLVC2ywYMy1wCe+TdLvbZdNtlndc:MAaKVbVvrxCAEqUg2d8wudNtlndc
- TLSH T113D1C68D3F275D36E29C90A5513FCCF68BBDD1046AA8EEB6B4058B39025CC41762F4A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Php7 - mysqli/detail_carte_zone.php
- Size 5KB
- SHA256 db6d14151268c9ecc41f359cc91a51d8f88abc9681aa99211e2f79ccc8165682
- MD5 69e0b1cb535e5987d139392101732c0d
- SHA1 2840bc6021d4318e50a99b81c9ed3a66e087dedd
- SHA512 33159da79f3dc523cc80255afd1da968975d1238feee35ce9f6310c93dc63445b2f379b47e338e1f367b7fe6416ef52c881c2cc029939c2cc56b27365d1e99ea
- SSDEEP 96:L19X30ffz9jOD//Grre/YgY/VXGYWKpxrUJIPRAk7KybdkF/n0T500eTcwIFEWgZ:gfZjGGrq/a1GcU+X7Kybdq/n09005KPZ
- TLSH T1E4C186C2BE15DA7940BA5014C13EEAA1ED65F9657DF6B2DCFC051F87A860C98322C8E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Php7 - mysqli/detail_ind_zone.php
- Size 8KB
- SHA256 5fcd76317302264dd6e583a579c7a803dc55019464d4bc8bcb0ed76bb0ae08a7
- MD5 d051e39a358c1ae06d49f630e66eca57
- SHA1 9d3a0ebcda2bfc68805720393b3c87bd5f73ab09
- SHA512 170f5d58faf8ce73c1ae24046ae09be4973bf88df3a924ecd0b654808b3c9793fd2923bf17f1f248274c72d262e4f181d6c10441d06f5d8e797246fe234f6796
- SSDEEP 96:d1VbXBgqG0fOlYB5NbKO6H3VPEO6g+5zAygGtzyV/Gzm5am1Q5qZiR0EZtNROdBJ:JHfJl5CfZ9NSAgrROdBwuzP54twZKEN
- TLSH T1B202B7F7BF1B52D880AD6044D23D9492E439CE1B366954D0B8C28EBC3EA1864377C6DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Php7 - mysqli/detail_individu.php
- Size 29KB
- SHA256 b13bad44a042a356600b70b45ac12661d5bb661d941aff28cc2fb8b4828c0551
- MD5 d8047c35d1c31f35c77278d2588ac745
- SHA1 e19eb1b62a6165c204c6c80e18b86208b05708e5
- SHA512 2951eae672b1dd9909b744aed746620c5bb688fff786279a21638fdef989b76fa8602b976447ba7293f264ea28857e3ebf542c8d3352f2d7eb525659fd4aab60
- SSDEEP 768:NbseKD1+XWkOTdHdvk/r7YU4IsqionOUm9IRQrx3CIpo4dkTb32zJaU:N4eKD1+XWkOTdHdvk/r7YU4IsqionOBj
- TLSH T1AFD273C9F6598AE5801D64BCD334C862F4B9C5D7279A64D4F8EB1DF16CAA0B0A31C1E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10