Resubmissions

06/09/2026, 19:39

260906-ydc3cada247

06/09/2026, 19:30

260906-x7w7ms1fmd7

General

  • Target
    CamPhish-master.zip
  • Size 12.8MB
  • Sample260906-ydc3cada24
  • SHA256 173f8561adc0c08eddaab33cc8712c500861ae0f4a7f925e7a59740a8902e880
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      CamPhish-master/LiveYTTV.html
    • Size 2KB
    • SHA256 91716334033f81968c23a07cf41cdfa1e41b6096ca342197ea515baecfecfbb7
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      CamPhish-master/OnlineMeeting.html
    • Size 5KB
    • SHA256 daa9b842d3375a0f2d7e9f4639230aa21d2a8e2973728fdc4389b0ab7086021e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      CamPhish-master/camphish.sh
    • Size 9KB
    • SHA256 f996ed3456b426e093f7cdb116fb72509e3cb790a7d451cd3c132abcaeb21a3e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      CamPhish-master/festivalwishes.html
    • Size 4KB
    • SHA256 d2f979a0558002f0fa451d3769df84f4a381584220fab241c6e1f85aa157fb12
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      CamPhish-master/gdsc_syllabus.html
    • Size 4KB
    • SHA256 c1114cb29a96fb55848d64de3f2a86fac77a8a55565dce62896f92f3357d024a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      CamPhish-master/index.html
    • Size 23KB
    • SHA256 18afa9c324aba2e1286b9ddffa931ec014c9147755ad5095abe35b192b4d9681
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      CamPhish-master/index2.html
    • Size 4KB
    • SHA256 864cda1b04691cdbc67c1b1c7ec5beca3e78b8c85df3028648c49dbfccf24def
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      CamPhish-master/ngrok
    • Size 25.4MB
    • SHA256 30f943bbcb018a57f4a9a1eab9b97488ee8374a4e7ef2dae779e95f0856c4ebc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks