General

  • Target
    aio new page.zip
  • Size 3.1MB
  • Sample260820-drwrdsdr7x
  • SHA256 dfdf8075038f3bf0607b7fb4455050fe06ea963af991cd75cb552b1f6b786c8c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Suspicious SVG script tag 1 IoCs
  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

File Explorer

  • aio new page.zip
    .zip 3.1MB
  • aio/assets/126.php
    235KB
  • aio/assets/263.php
    7KB
  • aio/assets/all.php
    4KB
  • aio/assets/aol.php
    4KB
  • aio/assets/aruba.php
    28KB
  • aio/assets/bossmail.php
    .js 15KB
  • aio/assets/comcast.php
    25KB
  • aio/assets/cpw.php
    23KB
  • aio/assets/css/MAlogin_main_new.css
    11KB
  • aio/assets/css/MAlogin_new.css
    14KB
  • aio/assets/css/bootstrap.min.css
    158KB
  • aio/assets/css/hostedemail.css
    311KB
  • aio/assets/css/hostinger.css
    61KB
  • aio/assets/css/loading.css
    2KB
  • aio/assets/css/loginFrom.css
    208KB
  • aio/assets/css/netsol.css
    354KB
  • aio/assets/css/smarsh.css
    15KB
  • aio/assets/css/styles-OVNL66GE.css
    509KB
  • aio/assets/css/styles.mailcom.min.css
    50KB
  • aio/assets/cybermail.php
    9KB
  • aio/assets/dreamhost.php
    4KB
  • aio/assets/emailsrvr.php
    7KB
  • aio/assets/fastmail.php
    118KB
  • aio/assets/fonts/fa-regular-400.woff
    16KB
  • aio/assets/fonts/fa-regular-400.woff2
    13KB
  • aio/assets/fonts/fa-solid-900.woff
    95KB
  • aio/assets/fonts/fa-solid-900.woff2
    73KB
  • aio/assets/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-700.woff
    84KB
  • aio/assets/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-700.woff2
    63KB
  • aio/assets/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-700italic.woff
    89KB
  • aio/assets/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-700italic.woff2
    68KB
  • aio/assets/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-italic.woff
    89KB
  • aio/assets/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-italic.woff2
    68KB
  • aio/assets/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-regular.woff
    83KB
  • aio/assets/fonts/roboto-v18-greek-ext_cyrillic-ext_cyrillic_greek_latin-ext_latin-regular.woff2
    63KB
  • aio/assets/globalmail.php
    .js 5KB
  • aio/assets/gmx.php
    142KB
  • aio/assets/godaddy.php
    583KB
  • aio/assets/google.php
    619KB
  • aio/assets/hostedemail.php
    8KB
  • aio/assets/hostinger.php
    1.2MB
  • aio/assets/icons/263.ico
    1KB
  • aio/assets/icons/76368936.jpg
    .jpg 213KB
  • aio/assets/icons/arrow.gif
    .gif 1KB
  • aio/assets/icons/domain_logo.png
    .png 3KB
  • aio/assets/icons/hostedemail.ico
    6KB
  • aio/assets/icons/hostinger.png
    .png 1KB
  • aio/assets/icons/hotlineIcon.jpg
    .png 1KB
  • aio/assets/icons/iconLogin.png
    .png 3KB
  • aio/assets/icons/leftImg_new.png
    .png 124KB
  • aio/assets/icons/loginimg.png
    .png 511B
  • aio/assets/icons/logo.svg
    .svg 4KB
  • aio/assets/icons/netsol.ico
    .png 1KB
  • aio/assets/icons/qrcode-pic.png
    .png 11KB
  • aio/assets/icons/qrcode-scan-icon.png
    .png 1KB
  • aio/assets/icons/qrcode.png
    .png 3KB
  • aio/assets/icons/rackspace.ico
    1KB
  • aio/assets/icons/safe.png
    .png 1KB
  • aio/assets/icons/symbols-brand.svg
    .svg .xml 295KB
  • aio/assets/icons/symbols-webmail.svg
    .svg .xml 465KB
  • aio/assets/icons/tabBg.png
    .png 128B
  • aio/assets/icons/webmail-logo.svg
    .svg 2KB
  • aio/assets/interia.php
    15KB
  • aio/assets/ionos.php
    11KB
  • aio/assets/konsolh.php
    2KB
  • aio/assets/mailaliyun.php
    14KB
  • aio/assets/mailplug.php
    9KB
  • aio/assets/mimecast.php
    692KB
  • aio/assets/mxhichina.php
    173KB
  • aio/assets/naver.php
    36KB
  • aio/assets/nc.php
    .js 21KB
  • aio/assets/netease.php
    81KB
  • aio/assets/netsol.php
    24KB
  • aio/assets/office.php
    8KB
  • aio/assets/office_cn.php
    8KB
  • aio/assets/one.php
    9KB
  • aio/assets/orangepl.php
    .js 7KB
  • aio/assets/owa.php
    41KB
  • aio/assets/private.php
    9KB
  • aio/assets/protonmail.php
    776KB
  • aio/assets/qiyestatic.php
    81KB
  • aio/assets/qq.php
    30KB
  • aio/assets/rc.php
    260KB
  • aio/assets/rediffmailpro.php
    14KB
  • aio/assets/registerit.php
    .js 7KB
  • aio/assets/smarsh.php
    .js 11KB
  • aio/assets/strato.php
    672KB
  • aio/assets/telkomsa.php
    .js 8KB
  • aio/assets/wadax.php
    19KB
  • aio/assets/windstream.php
    3KB
  • aio/assets/worksmobile.php
    .js 9KB
  • aio/assets/yahoo.php
    3KB
  • aio/assets/yunyou.php
    .js 43KB
  • aio/assets/zimbra.php
    6KB
  • aio/assets/zoho.php
    5KB
  • aio/auth.php
    3KB
  • aio/build.php
    10KB
  • aio/config.php
    896B
  • aio/index.php
    .js 8KB
  • aio/login.php
    2KB
  • aio/psl_cache.dat
    325KB

aio new page.zip

  • SHA256 dfdf8075038f3bf0607b7fb4455050fe06ea963af991cd75cb552b1f6b786c8c
  • MD5 SHA1 SHA512 SSDEEP TLSH