Overview
overview
7Static
static
1CamPhish-m...V.html
ubuntu-24.04-amd64
CamPhish-m...g.html
ubuntu-24.04-amd64
CamPhish-m...ish.sh
ubuntu-24.04-amd64
1CamPhish-m...s.html
ubuntu-24.04-amd64
CamPhish-m...s.html
ubuntu-24.04-amd64
CamPhish-m...x.html
ubuntu-24.04-amd64
CamPhish-m...2.html
ubuntu-24.04-amd64
CamPhish-master/ngrok
ubuntu-24.04-amd64
7General
- Target CamPhish-master.zip
- Size 12.8MB
- Sample260906-ydc3cada24
- SHA256 173f8561adc0c08eddaab33cc8712c500861ae0f4a7f925e7a59740a8902e880
- MD5 9f2824928d3d1447a30da61a5a2d92ef
- SHA1 09a5129a69ecbbfbd27340fed3da9a68f472934c
- SHA512 eb2cf09baacfe401d8bd6c8b7850a5501ac552ab50ddfc8e34ef4e72bf75942d67a99ab2116e793e13ba5ae95ae1983fa2c628413be053e9834a08dc30b4e423
- SSDEEP 393216:XW4Ds0jsAXj1ffE35hvhfDCTzdhsKakH7bQ:GAhbXj1f6RWFakH7c
- TLSH T101D6339D899CB60579FB3D05F320C7B338FA521D8918D861A0D11864D4BACFB9F3A987
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
CamPhish-master/LiveYTTV.html
Resource
ubuntu2404-amd64-20250619-en
Behavioral task
behavioral2
Sample
CamPhish-master/OnlineMeeting.html
Resource
ubuntu2404-amd64-20260127-en
Behavioral task
behavioral3
Sample
CamPhish-master/camphish.sh
Resource
ubuntu2404-amd64-20260126-en
Behavioral task
behavioral4
Sample
CamPhish-master/festivalwishes.html
Resource
ubuntu2404-amd64-20260126-en
Behavioral task
behavioral5
Sample
CamPhish-master/gdsc_syllabus.html
Resource
ubuntu2404-amd64-20250619-en
Behavioral task
behavioral6
Sample
CamPhish-master/index.html
Resource
ubuntu2404-amd64-20260127-en
Behavioral task
behavioral7
Sample
CamPhish-master/index2.html
Resource
ubuntu2404-amd64-20260126-en
Behavioral task
behavioral8
Sample
CamPhish-master/ngrok
Resource
ubuntu2404-amd64-20260126-en
Malware Config
Targets
-
- Target CamPhish-master/LiveYTTV.html
- Size 2KB
- SHA256 91716334033f81968c23a07cf41cdfa1e41b6096ca342197ea515baecfecfbb7
- MD5 728fe0d09068c27d20fbae6e824659a8
- SHA1 4e2a1194a644d79c6846220761cf42a7c87f7086
- SHA512 84fd48bb98a74ad8d76965a99943fa749c3f3e3872617acc1548731b01ac57e70e90cf9175a507e094cf78fd4a87c45308a986afecfcabb044ca9315c0b21419
- TLSH T1D741658AB9079C5A867147F8F556954CF663E1035640C7D57ACC83912F348563833FEC
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target CamPhish-master/OnlineMeeting.html
- Size 5KB
- SHA256 daa9b842d3375a0f2d7e9f4639230aa21d2a8e2973728fdc4389b0ab7086021e
- MD5 17f36c40188c0eb461634a2228c90a1d
- SHA1 8b1a7683de4c41cc353df37d3f681672f3bde766
- SHA512 bd0db32787783edb0cab5731c21114e6d5393727825aeecbf4ae16320bd781bef9e769eb4c9a56a28a3801c1600ebc3f466dcb1d83e59a07c7b33ddd26d48181
- SSDEEP 96:rL5dCIA2FKrFaEFHF9p/O2gH5dxI+Pi+y1sJmWhthVfpM:rlJA2FKrFaEFHF9p/O5dI+PBycZzVBM
- TLSH T1C1B1618AB8B310475513A0D41F778A0972A2D0039A8AD9E43FEE53D4DF8ADD95C63BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target CamPhish-master/camphish.sh
- Size 9KB
- SHA256 f996ed3456b426e093f7cdb116fb72509e3cb790a7d451cd3c132abcaeb21a3e
- MD5 2a8f06f2cd79da25385326ad18fbb77e
- SHA1 04b7e4c7e9cae1ca35bcac2e4c3e7ce74496de69
- SHA512 8604b73d58fe6e84a24c95d246a87985de2af6ad3deb7932d72b5b6558b1b6bc559df0556e994cbba3f1e9c8f984aebe0a61668dbc344b0a9ede7caeb90636e3
- SSDEEP 192:Nfv0s7qHGiczxeQSNYZh1n61w9NZQecYep:NVHzoiyw1BcH
- TLSH T131125258BC55C83FAC2B3BB8B21EFC48E857224E49B47974F0ADC249DBF4D998C26505
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target CamPhish-master/festivalwishes.html
- Size 4KB
- SHA256 d2f979a0558002f0fa451d3769df84f4a381584220fab241c6e1f85aa157fb12
- MD5 85e4f36f7cb33aeed1c72fe3e80dd0dc
- SHA1 fe4d3216c730f3bde26ab9a11dc66fccfa67d096
- SHA512 b01a5af71413e7a08436837a7177ccd895feb601cd09c49cbda7af2999e64219d91ed36d6546602dfd75fe28144c12f38b927bb5258a2f66dc5fde9443261cfa
- SSDEEP 48:XpWv/6KVa4T9bs7ow5dTNSFpqQYiHx7OJHDUgc10I+ajVL/dhh0cVxC:cJZs7nVYGDzcaI+ajhVh1u
- TLSH T11AA1774B69C54406723282B4AF335748FA968007534247EA7EEE529B6FB5D49C873FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target CamPhish-master/gdsc_syllabus.html
- Size 4KB
- SHA256 c1114cb29a96fb55848d64de3f2a86fac77a8a55565dce62896f92f3357d024a
- MD5 b37f06a2e777d77726a14f691e8078dc
- SHA1 8576179517d6509fd3b4dc379ac02d2052c8a269
- SHA512 2643896cf14d9629d9bf17bfac717b422b6b5657ab534bfb3dde9a6b6815398ff53aad2c76c10bac708adaa38cd6192c68a511e3ae8392a3830bb34eed77f1ef
- SSDEEP 48:opqf6mi74T97TLye9lvN8G93hzLYTd7hJIAOu8HpfHI+H+gM:9G8l2eLvSGBRYLOuwpfHI+H1M
- TLSH T1B1A1838B29F70006610390B57FAB6708B995C007874ADE993E8D935C9FC8999C973B9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target CamPhish-master/index.html
- Size 23KB
- SHA256 18afa9c324aba2e1286b9ddffa931ec014c9147755ad5095abe35b192b4d9681
- MD5 56291ff0d15bc35bf725da2ad83f4410
- SHA1 b68e4dd0873af1269e048ebf9559cf08419d5c2a
- SHA512 fc14ad25f127f5a7e1e6f46cc66dac51ca86fe343b8b70d5d0add9b5472c144ace0df230566f856d7590fe46cec6dde4cd52e5707157ed72ef9c61edf5b192e7
- SSDEEP 384:KINvxK7FRgFJLs9wfIMyqa5WwoD9Hjl10ZMirgXeHHEk8pgF/SE:KINZK7FyFRAwfdOiDXoDcsqE
- TLSH T16EB2E7ABB6025502711B846873DE5B349A1C9813E6078CBD72DE064CDF84EDC93ABF97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target CamPhish-master/index2.html
- Size 4KB
- SHA256 864cda1b04691cdbc67c1b1c7ec5beca3e78b8c85df3028648c49dbfccf24def
- MD5 7e7478110ced66a4aca3fe46f25629e0
- SHA1 e9ca7a71839d6e1ca12803b7bb631662a7372a4f
- SHA512 78536bac6940f5c104901b04f556b779787de54490bb7dbb2cd20e5fde18acc2ccda4590cb42eeced7e4fc45339a7cf29d76166dd060c2f9cc728028b1bb45dc
- SSDEEP 48:4pLu6z74T9+N5O9FPN8WtkQS+S75Jk0+4AFMNkzn5I+nPpYnUbk+:q8IN0LPSWhK+4wMNkz5I+nPy6h
- TLSH T19FA1975B69F70017710280F47E77A748B7A6C4078709DEE97D8D529CAF88989D873B8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target CamPhish-master/ngrok
- Size 25.4MB
- SHA256 30f943bbcb018a57f4a9a1eab9b97488ee8374a4e7ef2dae779e95f0856c4ebc
- MD5 15346a4b46d85230ba9965ea4ab72dc1
- SHA1 24687fab1dd3e9f8909f9a87420c14e63650b282
- SHA512 3e98c972c96b2534bab466dc934a00f393ea8afb842e69439fbd94947bf85f280fbcd9e2b8f1ac6b061d46b31d982de2985efcaaa8746c0ba149b9940eedb7f2
- SSDEEP 393216:TGoGxEqUfE3O/O+ZvFIwF+7J1/sacVs2p5:T3E3O2YXwFzcVs2H
- TLSH T1BD479D40E8DF54FEFAC35930A4ABBA2F173152018316EAC7C5049E17F97B6C91D3626A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.