General

  • Target
    htdocs.zip
  • Size 2.9MB
  • Sample260907-dlk3psed85
  • SHA256 fb0f159ee66f40ebfad1352448e45d853d5eb78f079bde9261f93b43946b06cd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • htdocs.zip
    .zip 2.9MB
  • htdocs/.htaccess
    .vbs 783B
  • htdocs/a.php
    1KB
  • htdocs/a/a.php
    2KB
  • htdocs/a/adscometoday.php
    .html .js 3KB
  • htdocs/a/app.php
    2KB
  • htdocs/a/b.php
    468B
  • htdocs/a/backup.php
    2KB
  • htdocs/a/backup/backup.php
    4KB
  • htdocs/a/backup/clearlog.php
    152B
  • htdocs/a/backup/flaggedbackup.php
    4KB
  • htdocs/a/backup/hash.php
    .html 1KB
  • htdocs/a/backup/index.php
    .html .js 2KB
  • htdocs/a/backup/testhash.php
    1015B
  • htdocs/a/backup/uploadbackup_local.php
    906B
  • htdocs/a/bal.php
    2KB
  • htdocs/a/balance.php
    .js 3KB
  • htdocs/a/box.php
    2KB
  • htdocs/a/cdn/dist/css/adminlte.min.css
    1.3MB
  • htdocs/a/cdn/dist/js/adminlte.min.js
    .js 43KB
  • htdocs/a/cdn/dist/js/demo.js
    .js 21KB
  • htdocs/a/cdn/plugins/bootstrap/js/bootstrap.bundle.min.js
    .js 82KB
  • htdocs/a/cdn/plugins/bootstrap/js/bootstrap.min.js
    .js 61KB
  • htdocs/a/cdn/plugins/datatables-bs4/css/dataTables.bootstrap4.min.css
    5KB
  • htdocs/a/cdn/plugins/datatables-bs4/js/dataTables.bootstrap4.min.js
    .js 2KB
  • htdocs/a/cdn/plugins/datatables-buttons/css/buttons.bootstrap4.min.css
    3KB
  • htdocs/a/cdn/plugins/datatables-buttons/js/buttons.bootstrap4.min.js
    .js 1KB
  • htdocs/a/cdn/plugins/datatables-buttons/js/buttons.colVis.min.js
    .js 2KB
  • htdocs/a/cdn/plugins/datatables-buttons/js/buttons.flash.min.js
    .js 25KB
  • htdocs/a/cdn/plugins/datatables-buttons/js/buttons.html5.min.js
    .js 24KB
  • htdocs/a/cdn/plugins/datatables-buttons/js/buttons.print.min.js
    .js 2KB
  • htdocs/a/cdn/plugins/datatables-buttons/js/dataTables.buttons.min.js
    .js 19KB
  • htdocs/a/cdn/plugins/datatables-responsive/css/responsive.bootstrap4.min.css
    4KB
  • htdocs/a/cdn/plugins/datatables-responsive/js/dataTables.responsive.min.js
    .js 13KB
  • htdocs/a/cdn/plugins/datatables-responsive/js/responsive.bootstrap4.min.js
    .js 1KB
  • htdocs/a/cdn/plugins/datatables-searchbuilder/css/searchBuilder.bootstrap4.min.css
    8KB
  • htdocs/a/cdn/plugins/datatables-searchbuilder/js/dataTables.searchBuilder.min.js
    .js 66KB
  • htdocs/a/cdn/plugins/datatables-searchbuilder/js/searchBuilder.bootstrap4.min.js
    .js 933B
  • htdocs/a/cdn/plugins/datatables/jquery.dataTables.min.js
    .js 81KB
  • htdocs/a/cdn/plugins/jquery/jquery.min.js
    .js 87KB
  • htdocs/a/claimrest.php
    1KB
  • htdocs/a/config.php
    732B
  • htdocs/a/copyfiles.php
    2KB
  • htdocs/a/cron.php
    716B
  • htdocs/a/cron_timedb.json
    27B
  • htdocs/a/cust.php
    2KB
  • htdocs/a/custem.php
    .js 4KB
  • htdocs/a/error.php
    .html .js 3KB
  • htdocs/a/index.php
    3KB
  • htdocs/a/linux_Status.php
    .html .ps1 1KB
  • htdocs/a/main.php
    .js 3KB
  • htdocs/a/ncw.php
    877B
  • htdocs/a/newsstatus.php
    1KB
  • htdocs/a/p.php
    928B
  • htdocs/a/pending.php
    .js 3KB
  • htdocs/a/r.php
    1KB
  • htdocs/a/report_ads_come_today.php
    3KB
  • htdocs/a/run_cron.php
    4KB
  • htdocs/a/s.php
    2KB
  • htdocs/a/setcountry.php
    950B
  • htdocs/a/setnewsserver.php
    956B
  • htdocs/a/submit_rewards_info.php
    537B
  • htdocs/a/sync.php
    .js 3KB
  • htdocs/a/testhash.php
    2KB
  • htdocs/a/u.php
    2KB
  • htdocs/a/upload.php
    .html 443B
  • htdocs/a/upload_report.php
    .js 3KB
  • htdocs/a/uploadbackup.php
    901B
  • htdocs/a/uploadbackup_local.php
    906B
  • htdocs/a/validate.php
    .js 3KB
  • htdocs/a/validate_del.php
    2KB
  • htdocs/a/z.php
    2KB
  • htdocs/a/za.php
    .html 2KB
  • htdocs/a/zb.php
    962B
  • htdocs/b.bat
    127B
  • htdocs/b.php
    8KB
  • htdocs/bat.php
    72B
  • htdocs/blog.db
    6.5MB
  • htdocs/c.php
    41B
  • htdocs/close.php
    .js 989B
  • htdocs/create.php
    90B
  • htdocs/createrun.php
    61B
  • htdocs/don/a.php
    1KB
  • htdocs/don/b.php
    1KB
  • htdocs/don/bat.php
    272B
  • htdocs/don/c.php
    1KB
  • htdocs/don/index.php
    .html 797B
  • htdocs/don/info.php
    .js 2KB
  • htdocs/don/r.php
    1KB
  • htdocs/don/report.php
    .js 3KB
  • htdocs/don/start.php
    2KB
  • htdocs/don/z.php
    137B
  • htdocs/donationtool.php
    4KB
  • htdocs/index.php
    .js 1KB
  • htdocs/info.php
    .js 971B
  • htdocs/mini.bat
    123B
  • htdocs/mini.m2s
    4KB
  • htdocs/news.php
    122B
  • htdocs/o.php
    922B
  • htdocs/run.php
    2KB
  • htdocs/script.m2s
    19KB
  • htdocs/search/index.php
    2KB
  • htdocs/sites.db
    12KB
  • htdocs/tools/Administrative Tools - Shortcut.lnk
    .lnk 918B
  • htdocs/tools/Block.MSFT.ps1
    10KB
  • htdocs/tools/On-Screen Keyboard.lnk
    .lnk 1KB
  • htdocs/tools/README.md.txt
    40B
  • htdocs/tools/add to path.bat
    .bat .vbs 49B
  • htdocs/tools/etc - Shortcut.lnk
    .lnk 1KB
  • htdocs/tools/google.crt
    12KB
  • htdocs/tools/hosts
    14KB
  • htdocs/tools/mouse recoreder.exe
    .exe 267KB
  • htdocs/tools/remove defender.reg
    294B
  • htdocs/tools/server.crt
    1KB
  • htdocs/tools/server.csr
    578B
  • htdocs/tools/server.key
    1KB
  • htdocs/tools/start log.bat
    30B
  • htdocs/update.php
    3KB
  • htdocs/updatesites.php
    583B
  • htdocs/upload.php
    751B
  • htdocs/w3.css
    22KB
  • htdocs/wait.php
    486B

htdocs.zip

  • SHA256 fb0f159ee66f40ebfad1352448e45d853d5eb78f079bde9261f93b43946b06cd
  • MD5 SHA1 SHA512 SSDEEP TLSH