Overview
overview
3Static
static
3PPQCMS-fre...PI.key
macos-10.15-amd64
1PPQCMS-fre...dex.js
windows10-2004-x64
3PPQCMS-fre...dex.js
windows11-ltsc_2024-x64
3PPQCMS-fre...ct.ps1
windows10-2004-x64
3PPQCMS-fre...ct.ps1
windows11-ltsc_2024-x64
3PPQCMS-fre...lib.js
windows10-2004-x64
3PPQCMS-fre...lib.js
windows11-ltsc_2024-x64
3PPQCMS-fre...dex.js
windows10-2004-x64
3PPQCMS-fre...dex.js
windows11-ltsc_2024-x64
3PPQCMS-fre...dJs.js
windows10-2004-x64
3PPQCMS-fre...dJs.js
windows11-ltsc_2024-x64
3PPQCMS-fre...Mod.js
windows10-2004-x64
3PPQCMS-fre...Mod.js
windows11-ltsc_2024-x64
3PPQCMS-fre...Mod.js
windows10-2004-x64
3PPQCMS-fre...Mod.js
windows11-ltsc_2024-x64
3PPQCMS-fre...Add.js
windows10-2004-x64
3PPQCMS-fre...Add.js
windows11-ltsc_2024-x64
3PPQCMS-fre...Top.js
windows10-2004-x64
3PPQCMS-fre...Top.js
windows11-ltsc_2024-x64
3PPQCMS-fre...Add.js
windows10-2004-x64
3PPQCMS-fre...Add.js
windows11-ltsc_2024-x64
3PPQCMS-fre...Mod.js
windows10-2004-x64
3PPQCMS-fre...Mod.js
windows11-ltsc_2024-x64
3PPQCMS-fre...deo.js
windows10-2004-x64
3PPQCMS-fre...deo.js
windows11-ltsc_2024-x64
3PPQCMS-fre...Mod.js
windows10-2004-x64
3PPQCMS-fre...Mod.js
windows11-ltsc_2024-x64
3PPQCMS-fre...tup.js
windows10-2004-x64
3PPQCMS-fre...tup.js
windows11-ltsc_2024-x64
3PPQCMS-fre...ion.js
windows10-2004-x64
3PPQCMS-fre...ion.js
windows11-ltsc_2024-x64
3PPQCMS-fre...Seo.js
windows10-2004-x64
3General
- Target PPQCMS-free.zip
- Size 4.9MB
- Sample260908-rldkhs1yft
- SHA256 1370a24cdc4d9e80f4d28fba1bfa3fc438ce30ab2aa26eaba1b5b1b5fa5f6712
- MD5 6b46884e5990deff53c833d2d8fbf0bb
- SHA1 86ba60a36f857b4a26649c7247913a3d30896695
- SHA512 31239ba476349ff7ba64f7abaf9e497b64bf351ab2d008b3dcf0de77ac1f2d7c1d42f16e0ca6f5d628400e4c0e5fe02ee9c95bf68a835964e6f2373562ee6773
- SSDEEP 98304:K4smsivZV3SbeqcV/4W4eiJlnWBhGR/3NskD2veythNejxcc58v81CSt61Z4MC5k:KVivmaHxq1vmkD2vdthNeln8aCS41Z4Y
- TLSH T1FD3633B84D248915CB5FAC34FFEDC5A9F4D2EA461612B70B3C411590C8FA5863B28FDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
PPQCMS-free/PPQSQL/API.key
Resource
macos-20250619-en
Behavioral task
behavioral2
Sample
PPQCMS-free/PPQSQL/Home/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
PPQCMS-free/PPQSQL/Home/index.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
PPQCMS-free/PPQSQL/collect.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
PPQCMS-free/PPQSQL/collect.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
PPQCMS-free/PPQSQL/collect_lib.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
PPQCMS-free/PPQSQL/collect_lib.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
PPQCMS-free/PPQSQL/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
PPQCMS-free/PPQSQL/index.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral10
Sample
PPQCMS-free/Php/Admin/Home/Ad/AdJs.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
PPQCMS-free/Php/Admin/Home/Ad/AdJs.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
PPQCMS-free/Php/Admin/Home/Ad/CoupletsMod.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
PPQCMS-free/Php/Admin/Home/Ad/CoupletsMod.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral14
Sample
PPQCMS-free/Php/Admin/Home/Ad/FloatMod.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
PPQCMS-free/Php/Admin/Home/Ad/FloatMod.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral16
Sample
PPQCMS-free/Php/Admin/Home/Ad/IeUrlAdd.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
PPQCMS-free/Php/Admin/Home/Ad/IeUrlAdd.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
PPQCMS-free/Php/Admin/Home/Ad/Top.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
PPQCMS-free/Php/Admin/Home/Ad/Top.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral20
Sample
PPQCMS-free/Php/Admin/Home/Ad/TopAdd.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
PPQCMS-free/Php/Admin/Home/Ad/TopAdd.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral22
Sample
PPQCMS-free/Php/Admin/Home/Ad/TopMod.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
PPQCMS-free/Php/Admin/Home/Ad/TopMod.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral24
Sample
PPQCMS-free/Php/Admin/Home/Ad/Video.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
PPQCMS-free/Php/Admin/Home/Ad/Video.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral26
Sample
PPQCMS-free/Php/Admin/Home/Ad/VideoMod.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
PPQCMS-free/Php/Admin/Home/Ad/VideoMod.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral28
Sample
PPQCMS-free/Php/Admin/Home/Basic/Basicsetup.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
PPQCMS-free/Php/Admin/Home/Basic/Basicsetup.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral30
Sample
PPQCMS-free/Php/Admin/Home/Basic/Collection.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
PPQCMS-free/Php/Admin/Home/Basic/Collection.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral32
Sample
PPQCMS-free/Php/Admin/Home/Basic/Seo.js
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target PPQCMS-free/PPQSQL/API.KEY
- Size 64B
- SHA256 5705efafd37101a7b74f78291e90565b26634930709de118b308094d94b2c217
- MD5 0a593945f1546098d9daecf8be79c559
- SHA1 198d1b773fcb73e10dd624152161d8117c293dfc
- SHA512 28ef95db612d5bbcff8d7bd4b816bbdf8002d2b4f178cfa62b57e7e6e54f1dd88ca7c5658bf94b2260d6c5d3312ac13484656eb0df1cbd465a3e6d992148fc6c
- TLSH T1BDA002D437441A85D2453569877E855421A95D7D8D3262AE0621159F038BA8581CE223
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target PPQCMS-free/PPQSQL/Home/index.php
- Size 12KB
- SHA256 e8548d49b0c22fc15f7e112cae5fc76701963b7c53ec11773bc421f8eaa12858
- MD5 db193e91d8f51c30b557d19a255a541b
- SHA1 54835497ba0bdfe814097a8105ee600d9c70d4a0
- SHA512 bfb4524ea352c139c93ee4ba0da616f3a47dccb392f8e6168c0faceba53cb0e9342de29122025f70de3127621fb83ff370b18f74a3834f011e2b424ac152f648
- SSDEEP 384:WFYpS7VAHsZNkKuZ3AeRHwTSrDoJVWZDv:p+NkKuZ3AeRHwTSr24F
- TLSH T1C642A62365AE703A513774A712E3411D32E5CA0B832B8E507EBE92F85FC0A59DD17B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/PPQSQL/collect.php
- Size 10KB
- SHA256 ea6cf3127c1e02c3c604f40ff41516a3eb93684c813a1f68834cd6f12f34d184
- MD5 38827e4cea36376ff37467fb4b11b6db
- SHA1 7596000f4128526d2142ca93b56db27f1bee9074
- SHA512 37bbc5881cf052c46e0e1e55f854c7a4a5f123c7df21a06f37156ac52259946bd6b989090bb6d6a8cb594ca1c311eab7566e9e0d05917e3fc53e3636be8530cf
- SSDEEP 192:BEVgsokUUDnHTIiy/ke9CQ/gWaXY3BGNFBCyLKDjCrqleSoLfF15xJ:tVkTM5wdY3BGNFhKfF2
- TLSH T1522282366877226868FBB02D0BCB70AA56B06413404DCE107E5E53C43FD46BAE3B9B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/PPQSQL/collect_lib.php
- Size 32KB
- SHA256 f5e87b89cd94e7aecf87b8afe23db0a00e5c38baa47aa01b0991b22323e1ecbb
- MD5 0d5aa554bf92b737f7bdc0836f22d1d7
- SHA1 335217f5a4c28ca7bc6cfcaf792cac6707ce6f6f
- SHA512 eed36587957b5ebd5347949c1edf1ea5a06da38758202c6333e3f67132e6c6814dc903f1e5d444edd58bb8a568d3c2fbe81be3954a196764d3c59b2e1b9bb027
- SSDEEP 768:8wSniW4cMHu0iIOJOf7/jckhN/Z1if/ewKi3B30tmNlGA2TOjnlzCHM:jW4cQ4OfvhNh1LiHlG6nj
- TLSH T1B9E2B63938E761AA09B360290FDFA05DA17094274149CE10BEAE47E43FD4638E7F5BD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/PPQSQL/index.php
- Size 9KB
- SHA256 797100e18afcca2d0feb8ebd3ebdb22fb945fb3d141b1319c60cc48aeb6a5814
- MD5 cfb700ac7d73701eaba1ae0c12fe672d
- SHA1 b61c607a23c00809c2089765e9eb2ac13b7c587c
- SHA512 d6233fe355901fe1edd9d6cda5b52ce9eb3b213a218446f44263bb535d5f51b4f98fe4377bc73fb69de5cc3d9f879263f39ca69df306522e24d36b96f760b870
- SSDEEP 192:SLCvyn28W+iozO0DCzyAS1S3fLsFVV9bkn0/pX+8ykYfgym8w5ImEZwuw:mCK2OFTCzwSj64Y5IgdJ
- TLSH T13E12F9B68EF544157523C0953683826EF3608407C54FC6287FAD72ACDFC0AD09AAF765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/Php/Admin/Home/Ad/AdJs.php
- Size 24KB
- SHA256 d4abc6da3e0fbdcce17e7e26e0532ffa1692a11277d9c018c1ecee2b10c7eb4e
- MD5 b92bb5194ac9dcc09c8f85b2b96d23c7
- SHA1 91528dda897a854695d54a07bd315767511d25a4
- SHA512 2afbaf265f798c514176ccb2d7e0ff43016451321e68773e79bdc48138f59966d7d6ca8544e190a2f4d1cbd915f6c9b5d8de1feed7634007cac051a379e4274b
- SSDEEP 384:7p5iu4ySFAFnCzSUFFF6ljetsbRUooY7r:95ivRFAFuFFFWjxRUoour
- TLSH T171B2444BE5F314262813A4741BE7AB293668D407C50ACF297FDC239CCF857EA9953398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/Php/Admin/Home/Ad/CoupletsMod.php
- Size 27KB
- SHA256 905aa897c2a74809f71c3be4d61a36aa78e2b4a0292785fa0254c3afe1ba46f1
- MD5 745391b825214b14764a715f11e55f12
- SHA1 ce9bccf79448e95b9fc6292fdbdc2f08368ab8f3
- SHA512 677d02c1132db2e88a1825e6e206807b820ca37e1fb63e01211b28222cc2bdb1787231abc7ec37d526a842d9f5376020a24614528d6fd5da458ddf4095ffe5f1
- SSDEEP 384:7pTiu4ySFAFnCzSUFKFBPOljetsbRgUJnLC/zxosT1Ty5r6Gr:9TivRFAFuFKFd6jxR1LIoshy6Gr
- TLSH T1EDC2960FB5E315235A13A4741BF7A76A35689007C606CE2C7E9C23D88F857AA9E533F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/Php/Admin/Home/Ad/FloatMod.php
- Size 27KB
- SHA256 7721d5a9eb54a0717b6fe881861bec15208b95c25c238cb5eddf3e7be9e44855
- MD5 66dc32548df4e1d3273274d57596eae5
- SHA1 9df86f43073cd28d14aa149a2ff339f727ab7a6b
- SHA512 da6a02ba897b83e9750e34c0091d27e9799d944fde6bae518594a6d567665af1524fd329fb6c32a9965f72dbad1c5c02a3fb40a6ed373ed05b5b8c3d2b377b54
- SSDEEP 384:7p3iu4ySFAFnCzSUFKFBPiljetsbRiUJGLCm4+ElxT1Tlar6P+dpCaOr:93ivRFAFuFKFdejxRmLjwlxhioaOr
- TLSH T12AD2980BF5F315221817A4B41FFBA71B3678908BC605CE197E9C23988F857D999633D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/Php/Admin/Home/Ad/IeUrlAdd.php
- Size 23KB
- SHA256 eec73efd10d3ee592948cbfd38a957534be8320a8f2c515a98fa88d30370d43c
- MD5 4b9322c0f845fdba2cf807fb42fea799
- SHA1 18982c1ae01df95c71436727fb28f0fdcad0cb76
- SHA512 9bba134468cda0477235ccfc858e7398ae03411884d734fe5160ad75ca55675831ad9326f4602dda8a609aed82f01881446de2e5a91f89f5b10c735be0ddb4b0
- SSDEEP 384:7prgHiu4ySFAFnCzSUFOFqljetsbRNNadDJ5wqxr:9rgHivRFAFuFOFGjxRNQdoqxr
- TLSH T13BB2431BA4E325321813A4781BF7A72D3679D407C50ACE1C7EDD23988F857DAA993398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/Php/Admin/Home/Ad/Top.php
- Size 25KB
- SHA256 82a0399cb4cde9fb811e8c70b11182a7d512c588d0e552eda38f8996e30930a5
- MD5 dd0c7d441323d2cf051889084839dd47
- SHA1 22b0bda2d25adacfd35344c7fc0e6c633eeb5c3b
- SHA512 7818379038905c4f1d527312978d4e6ae4476b53b402c1560e579ef8c084bcf894d63536dca309917bcbeb12d099468f951f4ffb5ea9284a5708437bad95b5b2
- SSDEEP 384:7pPiu4ySFAFnCzSUFmQY5LjetsbRwT8iPJNg3r:9PivRFAFuFmQijxRxF3r
- TLSH T149C2550BF5F321272813E4641BF7AB293678D407C546CE2C3F9D63988F856D9A993398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/Php/Admin/Home/Ad/TopAdd.php
- Size 28KB
- SHA256 b7b5940980d66ba823c33d811b20c2e336efa6399f347a9e96c03080e87b5bbb
- MD5 71e5268dba425fffef8caff37a90a935
- SHA1 cfc4b1ccf1fd86dfbf9c00a082fd6097b2c30d7b
- SHA512 7e7e83b2380f975fbd2c84db9a621cae7657ff60e0c13dd6af4018a8522a0ebeb852e7894a0be4f4f1e324acd0818beebb411a483b72f65f24a19ee283a48afc
- SSDEEP 384:7prZC3iu4ySFAFnCzSUFOF/6ujetsbRxC1RYtTUTjNMeJrBJpx44r:9rZC3ivRFAFuFOFjjxRxC3YtI/NlI4r
- TLSH T14ED2891BE5F315235813E4A85BFBE71A3668D403C50ACF187FDC23988F85AD599533A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/Php/Admin/Home/Ad/TopMod.php
- Size 28KB
- SHA256 c777e20ffa618226651f3c9a66bce61312a6f200ff02ce5d0b5bf25c37262f12
- MD5 6fa8b01eeee80f51cfde193c9591da9e
- SHA1 306dd2f5ec9b3e71b14094d65f36293607846452
- SHA512 ad8bedeafd9b72f9dbaaec1890b160f9c58bbbbeafe40c27b63357b89e51c1e45273db81fe0a5ef2b56392432b21e8e4a51366fe90c97373d23143b62aef1665
- SSDEEP 384:7pHiu4ySFAFnCzSUFOF/6ujetsbRaUJoqfRzT6TruTRr:9HivRFAFuFOFjjxRlRzgqRr
- TLSH T130D2970BF8E315235C13E4A85BF7E71A3578D407C606CE1D7E8C23D88F85A969A637A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/Php/Admin/Home/Ad/Video.php
- Size 25KB
- SHA256 fc821b5fa6cc1ce31f8ffd21b130f3471eb08f88146b4eec4696b3e817f869df
- MD5 acc665cd0cf411caa7954e224312ebf8
- SHA1 caf151613f50af3bd1934722e2020537bd01e048
- SHA512 3c823ba2c3492c09c2591ab107a288c0c93a9ed9501c884acfbdf3d43745595855fcd64b7de8694ce93f9aff313ebef7dda86666336026cf9be3e7ae1cb80b5b
- SSDEEP 384:7pciu4ySFAFnCzSUFmQY5LjetsbRznz8YPJh8jr:9civRFAFuFmQijxRjovjr
- TLSH T1A1C2550BF5F321225813A4651BE7AB293679D407C506CE2C3F9D23AC8F856D9A9533D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/Php/Admin/Home/Ad/VideoMod.php
- Size 28KB
- SHA256 301dcb917a4e95a40c56be2973f9aa92118594dfc2ed91a2848dce3d5743c33a
- MD5 b4f06ac2e725c60930d037a8d3950269
- SHA1 6dfc4d7e03799f4436cd5d2a8c6f0230400c13fd
- SHA512 c6b3e59c53566b066aec37de6710ded07cab99a236790c04709848f83409bda3eb89144e7e7c5f738a288624a9385ef4cba66dbdd893620337d9c99e5e47142b
- SSDEEP 384:7pLiu4ySFAFnCzSUFOF/6ujetsbRMQJgtmbJ+T1T0VrJK2WAYxp5Vr:9LivRFAFuFOFjjxRuIJ+hqJK2WAYP5Vr
- TLSH T111D2970AF4E31522982394B45FFBE7193579D00BC205CE1D7E8D239C8F85B9A99637E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/Php/Admin/Home/Basic/Basicsetup.php
- Size 52KB
- SHA256 8e94bf44a7a5af3283b19c5f935e8741f6d25926dbf46b0b4df4c32f7a065c8f
- MD5 a0b6907a27df6226cd9d94a5e5fa60ab
- SHA1 9b62a51ee6038f0350d57d422a4541867eb6935d
- SHA512 d4e401869b2d1cc5f1a9e17239a7b7872bc2e17e66cd4f78214be5d329dcdcbde73c3e1ba8a557582fa7dc395b652b2278bb197b29dd219f45066cb3f3b66ed5
- SSDEEP 384:7p3iu4ySFAFnCzSUFBFiSvjetsbR1TZKE2hLro6zX53y1Ph9OvqBxo2sst7:93ivRFAFuFBFikjxRuEuLCh9OvqUIt7
- TLSH T19333071E71F31632182BB4782BFBAB693565C403D10ACD587EDCA3D88FC1A959C63798
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/Php/Admin/Home/Basic/Collection.php
- Size 25KB
- SHA256 aa574e6ca27a6102f71f2a8c5b4218f06f4e0e4c118d6ec7f00e28f3f0116a59
- MD5 e80cae47d5f939b042b6cb1674c0b81b
- SHA1 4bb2bd9c8d433c1549ec73bdb627b30d9d1f14a5
- SHA512 c9e1e9625f7401b01bdd7af0ae8c3bddb86ec0bd9397a47729a747ff408efff9a3b502bee627067fd61c34657a94d0fc376ea9af8b7b81e7c92f0ded39629547
- SSDEEP 768:1HQW45trZwAiUh3jeB95as8ypjKsUg7BTzbV:1HQW45trZwD95as8ypjKrg7BT/V
- TLSH T124C21A26F49C3D3A602B98F0D4E6B3BE35A45023820B8E55BD6D33F4CFC4596685B64E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPQCMS-free/Php/Admin/Home/Basic/Seo.php
- Size 17KB
- SHA256 b2e041396f7a61433e5651e6768ac661c55ff9f784216200ea9e0837eca39fce
- MD5 94c0f88f75e1aaf8f55a25be91b50ae2
- SHA1 eeb89188d1521e59da6fd11b37257daa560322ef
- SHA512 a3a9cfb9e0cb7b06824965656401ffc10597e0b92bd96d545005f6c9f177abeace812e33bbf4b4a7572a81e8cc233424961ef116ec77afad00a7a16b8a29b2e7
- SSDEEP 192:r1NQezRNjMl7fr2iQElYQ1Db+nevtCbe1dRsBlbDVVPzlyv0pOUf+VJRv710qqHd:rLWr2iFYJjetsHDjb7+NTyVMWP
- TLSH T1CC82B6F1B0A46435A023C29327C1A7AEB57CCA5AC1334E1CBF5A63698FC1DDA4B5B185
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10