Overview
overview
3Static
static
1Faoxima-ka...rd.ps1
windows10-2004-x64
3Faoxima-ka...rd.ps1
windows11-ltsc_2024-x64
3Faoxima-ka...ory.js
windows10-2004-x64
3Faoxima-ka...ory.js
windows11-ltsc_2024-x64
3Faoxima-ka...oin.js
windows10-2004-x64
3Faoxima-ka...oin.js
windows11-ltsc_2024-x64
3Faoxima-ka...unt.js
windows10-2004-x64
3Faoxima-ka...unt.js
windows11-ltsc_2024-x64
3Faoxima-ka...ler.js
windows10-2004-x64
3Faoxima-ka...ler.js
windows11-ltsc_2024-x64
3Faoxima-ka...ler.js
windows10-2004-x64
3Faoxima-ka...ler.js
windows11-ltsc_2024-x64
3Faoxima-ka...ler.js
windows10-2004-x64
3Faoxima-ka...ler.js
windows11-ltsc_2024-x64
3Faoxima-ka...ler.js
windows10-2004-x64
3Faoxima-ka...ler.js
windows11-ltsc_2024-x64
3Faoxima-ka...ler.js
windows10-2004-x64
3Faoxima-ka...ler.js
windows11-ltsc_2024-x64
3Faoxima-ka...ler.js
windows10-2004-x64
3Faoxima-ka...ler.js
windows11-ltsc_2024-x64
3Faoxima-ka...ler.js
windows10-2004-x64
3Faoxima-ka...ler.js
windows11-ltsc_2024-x64
3Faoxima-ka...ler.js
windows10-2004-x64
3Faoxima-ka...ler.js
windows11-ltsc_2024-x64
3Faoxima-ka...ler.js
windows10-2004-x64
3Faoxima-ka...ler.js
windows11-ltsc_2024-x64
3Faoxima-ka...ort.js
windows10-2004-x64
3Faoxima-ka...ort.js
windows11-ltsc_2024-x64
3Faoxima-ka...ler.js
windows10-2004-x64
3Faoxima-ka...ler.js
windows11-ltsc_2024-x64
3Faoxima-ka...ler.js
windows10-2004-x64
3Faoxima-ka...ler.js
windows11-ltsc_2024-x64
3General
- Target Faoxima-kavir.zip
- Size 4.6MB
- Sample260916-sqf2wabd99
- SHA256 e5b263088d55b036d2fed1c55a20a6226090838bbd5f9784686c40f7537b8e57
- MD5 0fba70e68d58639a113f20ad95f1313a
- SHA1 e50e73e5b11b44ce27b58e299e338ad04fe3f738
- SHA512 081b40d30cc96a2dcd163bc1890b94b1196384a9012c1939a5dfdae30c3950793aa6443dd8565140cbf8f9e5eba780c0abdf34af00bd5cf670c431b8866c7b26
- SSDEEP 49152:31QUxRsbc0ZPneNlszUiQxXwUj+zsL039rlHZe4hvqABUCg2R5URmz1/jsvdcELN:3D6pZfHUyUGVdwIeQoRNpFIWvRKt2y4
- TLSH T15F26F1AC3C2CA0C0D5F619355E1D15E530643ED9A563A466F388B70A887BD4C0BEBE7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Faoxima-kavir/Faoxima-1.0.3/WGDashboard.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Faoxima-kavir/Faoxima-1.0.3/WGDashboard.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Faoxima-kavir/Faoxima-1.0.3/api/category.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Faoxima-kavir/Faoxima-1.0.3/api/category.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Faoxima-kavir/Faoxima-1.0.3/api/checkjoin.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Faoxima-kavir/Faoxima-1.0.3/api/checkjoin.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Faoxima-kavir/Faoxima-1.0.3/api/discount.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Faoxima-kavir/Faoxima-1.0.3/api/discount.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/BaseHandler.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/BaseHandler.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/BrandHandler.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/BrandHandler.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CardPhotoUploadHandler.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CardPhotoUploadHandler.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CardSelectHandler.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CardSelectHandler.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CardWhitelistHandler.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CardWhitelistHandler.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CryptoCancelInvoiceHandler.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CryptoCancelInvoiceHandler.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CryptoInvoiceInitHandler.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CryptoInvoiceInitHandler.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CryptoReceiptUploadHandler.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CryptoReceiptUploadHandler.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CryptoSubmitHashHandler.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/CryptoSubmitHashHandler.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/DiscountSupport.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/DiscountSupport.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/GiftCodeHandler.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/GiftCodeHandler.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/InvoicesHandler.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
Faoxima-kavir/Faoxima-1.0.3/api/handlers/InvoicesHandler.js
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Faoxima-kavir/Faoxima-1.0.3/WGDashboard.php
- Size 14KB
- SHA256 b3115e6e294e015c5254e983066023849dfbf9ef01eb46836effb692c113c689
- MD5 19600b79d483166642fdb2baefe10316
- SHA1 fa0b36c181dcffacfbb6f51638cff9032267b97a
- SHA512 76b9fa1d44a0e8ab8bf0c8c850e4938f16a7ca66dbdfc30b048e86c6fafefa0f42277148669261159b496a21cabe925d72480eeb99b1a914af8f99f49844d18c
- SSDEEP 384:7vPpUmzzJx+wqaekcud4s/FIOjw6iXmUadUc1MQ9VEoz+wfN:9hU1mUad11MQ9V/
- TLSH T10A6240EA7C5B44F3962754AFEB4F8D043D788407191BC9117EBD3280AF8462DE6B24AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/category.php
- Size 9KB
- SHA256 92533217cafa2ff008239e8add37e2b4bc1522eae0a0f98926908b42c858ef16
- MD5 4715a52ba62d1aa2e890a1b983d05175
- SHA1 d2ea4d5167b444e70705c85235c1f9fe10357082
- SHA512 e53be0e62a907696b62e4981a8af847ed9a995db5e6f1b2747193fb8e65cb6882c77c106683a6f396eb4a41b3c241793ff9d4393fd11deb0a8d273da03d35c1c
- SSDEEP 192:Vf2ltj81vuQWQkQYUxx6VFEyWaXmMeStCBT4otaHOLkcPtgTH:9+NUxcVmaNsT58ugqi
- TLSH T19312503A38BF15E2827B90AD9797DC4E379340035685DE847E5DCE801F8C4A8FB98269
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/checkjoin.php
- Size 2KB
- SHA256 52f9f73270ff1d212e842391e42b17a87511e6eb749a3bb58ee5c013695505dd
- MD5 3e492559c430c5211221c50b6e708b88
- SHA1 8b81d26b60719ba5219ec8f464f3d9efb6b62264
- SHA512 b7e3eeb97b5783b1f7cc44bb0243e6799c32508b7004e8d9992511f8a6f9ef1d046c9b5a017d0bec9b3d64f3ce06a2cd27abfffe11d322f9f20f25766fc15f0e
- TLSH T1BC4130499CD7216417ABB49F078E96541714500309CAAD91BD0E274A2FCCB2EFFF27BA
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/discount.php
- Size 14KB
- SHA256 b47f7984a3234504593312ccdd74c198d75977b8cfa8aeced6456c8b76fa8d14
- MD5 139c57f041c36452b0e32e082d417d6b
- SHA1 f111be0e6a5f58232fbdac7c07608c20f5ef7260
- SHA512 20549b9686da7b30d7e272e26a260b7ce3441bc5ff1f6679a6c3593656fc02b2cb7421ba58a662d2bcbc4652e9a2940911c9369d94020c592831529b1d8b1231
- SSDEEP 384:X+N1E7bM2A+StVztGCAxx7bM7A+Gs/BIpJGYwC5:81IFA+2VztGNx1gA+eJGYwu
- TLSH T1FD628412BCAB4D7185EB90BE7B57DC4A37E7509346C0E5407E9C97801F8C4EAFB50269
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/handlers/BaseHandler.php
- Size 6KB
- SHA256 d005f1c0c0a9d0504152639dc1beb66ad4052b8bf014fb771d02fac2a54a2a3a
- MD5 d0c06a53573b753ec3355133cec22c08
- SHA1 d53b574f1451a7a78df15401501852857cceaeeb
- SHA512 e0444a46bf1c92a497b39f353180323a7a863d660f34ea666083dbb1d22f071cb12e57a690d2422415025f25b6909877fbc9dda28bdb7f9499cf000aec27c53a
- SSDEEP 96:WCeT628epxo+Sa82EuqykydtU7yGNuhCAWVQo487jYE3EvWh9eqOOoYNJ:zQD8eIa88qy/dtUGGjyKpUvWh92OoYv
- TLSH T16ED1314CF8E760B85283B03D8BCF8418FB5D4003942A59A1BDDD56585FD063CDEBABA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/handlers/BrandHandler.php
- Size 10KB
- SHA256 c6e09ad21f3939889f555ed3f9174f5271ef81a45edc390feadd45e141fb696b
- MD5 90815d213372951fd0b791cff0654a4f
- SHA1 361a17205484c6c7f9278b8cd21dfaccacb8b0a2
- SHA512 0ee65c826cb88e688534c70355c8521cd4ba9b97319de76ccea6eb9a8ca26b67d874ea6eb5f77bd40c841af67ffc82ecd6faffc97e245e3573f552d84be54489
- SSDEEP 192:VHX/T1AOC3U4YC8CbNqXqSVwFvYROtIEXZgV1nU+nvxq0hCoxqy/p6/De:V1At3UyTbUaaca7hCe3r
- TLSH T1C222850C7DEB146A202371799FEF89193A9680274719CE52FD9D0390AFE021CD7F6B64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/handlers/CardPhotoUploadHandler.php
- Size 8KB
- SHA256 e8aeed78a0d57b2358aef89e1c39d1b41555c07321ca2c8844053411b9bce4dc
- MD5 5ddaaa24c51a5c3fef4c00bf0672010f
- SHA1 7f9ac1ae23c978f9278dd9b2899e93339a687155
- SHA512 0ce2cb04215008d897061d4517588bf91a60df3fdaec049a000ebec04512520cf7e101a0fefa5787e40a7b8690c4ba9cf3ddd83dddc57745f231433f95cac10f
- SSDEEP 192:fXOnzxNYL2XohKk9rO4aw7oXc24dSC6D12e5Z6+lQ:2EJWw0M24q2wU
- TLSH T10912D71434EB4875229B942F0FFF94C17316C91382A8C945B82D66904F6636CE779B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/handlers/CardSelectHandler.php
- Size 5KB
- SHA256 3d93f24636dc63974cb6c954ad65f955cc52b54d477b57a98cf91c81085ea66c
- MD5 943f9cf247340e11bc55a025fa56f3c1
- SHA1 07ba67b55b44a1921be3e72541f143548db0ad10
- SHA512 a1545799726ed8f2d31a6e8f1496531e718d4b674e727301e8883533b4f96b0710bbfb30acbdf1f5a949a240825d05446a9630b7c7714dd69c2f10d4388110b5
- SSDEEP 96:PfVAzPTbzzg1bSYbphZi1vpQ0yOzrheHjzdHSPLyALEZ0NXZD1nYuDE:l6/xozcs4rgH/1SPn40NXZD1u
- TLSH T19AC17418B8EF4CB420DBD1671BBBA4513706C813C165D996B83C13908F8B778DA76B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/handlers/CardWhitelistHandler.php
- Size 2KB
- SHA256 c93f0a4fffefb6244d11b61c0a9b6be899944e44213b5fa241a2a77dc39c16b6
- MD5 37185a2876a9dc0b8f8cf99c404f4998
- SHA1 30f1cb9ae03cd947e6b4c759bfaf01e725708810
- SHA512 5ad0d4de1a9d7f0630887fb306ea1b29e5d1cbfe0c37886aeeac41e1769f5d0021794085c00a027217999727ef2e7f7c4b60060d2b17c7284c5b4c7a0509e836
- TLSH T19C41E0193A9A88E013ABD76F02A7BC01624AED53C29445D67C7C33C05F877DCA97462F
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/handlers/CryptoCancelInvoiceHandler.php
- Size 3KB
- SHA256 a805e6e0e21578ef64d73a904c15232ae55f57d695e60de878b7782c6a4f2bed
- MD5 f675dfaff484bb3ca216af68750c86eb
- SHA1 44e0f73ce782efda28fe1b794885ddec94c8ff21
- SHA512 4b929aa7aeec928c10867198cc5a268497bb59b598b0bc41976a53c74b9a068d41c86229c2c7e9bf73c6fb6e4841da63ed2bff9cbfc5b144bd05687ded83c0b6
- TLSH T186719764BDAB25741AA7B15907DF88522392C813C0038EE1FD5E23209F82ABD9956A34
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/handlers/CryptoInvoiceInitHandler.php
- Size 6KB
- SHA256 9617cfb42ed5e5da21e1b7f4775de456b4335a9e2180aef8f7e9bee2fbf28548
- MD5 67653816326a4849aae9d6718ade9f77
- SHA1 fbacb917d98c9edeafa46d37e8f9612d1051d62e
- SHA512 d089131c05fa26e3e4f23804a14c1f6a61198db13a4000463ecc6b410d99d75b555d8f7543a9616201120305cac8ad9a327297e1f2b422772c31d4672088c3e7
- SSDEEP 192:mqxwkbpimcKMdfmNsS8sAWDffdTKbrHdTd8LnuaTF9:mUwm9cKOSPJRTEOLnukr
- TLSH T117D18334FC5E2C7033D35162ABFB940A06522933502AE5CBBDED52900FD6A1DE927E76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/handlers/CryptoReceiptUploadHandler.php
- Size 9KB
- SHA256 b484b17cb107914d7b1eac125bf5b254b4d7856d3a7c43cff4c61795cf595c8d
- MD5 b4bf140998c550e41f019a052e6e5c62
- SHA1 346cb4395a2d3f0f38afd820c7e1f0ff3dacbfbe
- SHA512 b28989ac3548bf1904134d0353670e7f41f512888cdebeede448496576d44da174eb9ce7a8edd60ab6cee63004ec17c3f86b5b75b835f4f2e50cf39db8dce2e5
- SSDEEP 192:2XOnzxxo5dAKL4kUopyHGR2g66177zV+5qPt2OhfZxTJk0Hla:xeE1s2mFEAljQ
- TLSH T11922B6647C9B88B525D7A05D17EF6884B322C61399A9D9D0FDAE02A04F90328D736F74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/handlers/CryptoSubmitHashHandler.php
- Size 4KB
- SHA256 463c3972425bbdbfb3ecd750fa487bf30a24e4b2205e60485a2989f882bc85a6
- MD5 8f7ea0c26633d414d0a6daca167dd18f
- SHA1 da1bed21c9cacd0aa573b9ab7c496792d653e573
- SHA512 8bac7b1f0227dbbf729170144ea8e45a402fb5bab19ae97fdacea5cc7c3f26b3131ba37ce93f52ca63b73191d2c603175aa2dc765af1d10a53dcf7b6a324bba5
- SSDEEP 96:+OadUpaed4R89L6zxHyjt4uQ7EmlRPoip41+1:radUpaOrx04R7MoIz1
- TLSH T11091C7A87DAE20B46253A05713FF5C226353D90384299E81FD6D17544FC622AAB2AF31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/handlers/DiscountSupport.php
- Size 22KB
- SHA256 db16e68704208b4f7aa8d21e7c4101b793d9ee661db8d05760f5ec7c142980cd
- MD5 13cba486ec86b4afbf56bd89ccf6df48
- SHA1 b2f631dba592987480b54f3cd68c998a8f6f337c
- SHA512 72af0bfb05caa144fc81c38547e3305f9d2e6a3fabbad2d532e6d35245a14e9300307a8d19d5bc28174e82e0668c901d8a303c293740939e86c228dc89098ea6
- SSDEEP 384:hTEJcqW/vaaka1Ypv72lhElihE3VxPcZC6sPRxjBFYI:hTp52pvSjEGEFQ0xjBFt
- TLSH T139A2939878FEA8A41693103A7ACB9004B65C8823425EF990FDBF67643F4497DC33DE65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/handlers/GiftCodeHandler.php
- Size 1KB
- SHA256 bf4663bb8e9161dc7d368a55e4babc9ec0c37e912a8c5692ee9870142d9fdf08
- MD5 8d6eef3aad734704da21869d260f0c02
- SHA1 fd859aa24f160157f123d91bbdff269c3e938ce3
- SHA512 0fd53703ccc9c634158609114f8ba6fe049bf37099cc4ad7e2c791175b9d8ca7b11c99526b19d5d5b45984fece424b36d5e9af75016d218ccad807d5d18afb6c
- TLSH T1094167B4786A0CF0249771D6BA8B3405620A6613C01EE7D5FCDD03654F8916CF675F39
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Faoxima-kavir/Faoxima-1.0.3/api/handlers/InvoicesHandler.php
- Size 8KB
- SHA256 7ad2f6d113043fdad24395921ec6c6c92615a71ca763e9d0703f70e095489521
- MD5 333561acd7daaace6605f56b013d17ab
- SHA1 b322e551f0ace5d2b58f930049ca7394f5aa1a96
- SHA512 a868d64352d9559a38b640bd120bc3ba3cb89317f26929d79519e4ff4203c65c50cb47f84c6d25de5688f60f906e86cd45531b3ee2153f2c3b3f68cfd829a4b1
- SSDEEP 96:XEMKzyCV2zrGQXz1CSRxXLWQnw5OXq/s9hqw3asykWSGOEj4:UXyDrGQD1C2xiyw5OXP9sLsykWSGOEj4
- TLSH T11502027C94F670A2C4CB702C875EF2902FD608376A02B940F58F43C5AFC7196D66A99D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10