op.zip
- SHA256 fdae792a318f5b2db6f63409f2bcb3f82448e335645f3afae6e8d34fd280ac17
Overview
overview
4Static
static
1op/assets/...go.svg
windows10-2004-x64
3op/assets/...go.svg
windows11-ltsc_2024-x64
4op/assets/...ode.js
windows10-2004-x64
3op/assets/...ode.js
windows11-ltsc_2024-x64
3op/assets/...min.js
windows10-2004-x64
3op/assets/...min.js
windows11-ltsc_2024-x64
3op/assets/...ipt.js
windows10-2004-x64
3op/assets/...ipt.js
windows11-ltsc_2024-x64
3op/assets/...ode.js
windows10-2004-x64
3op/assets/...ode.js
windows11-ltsc_2024-x64
3op/include/is-real.js
windows10-2004-x64
3op/include/is-real.js
windows11-ltsc_2024-x64
3op/index.js
windows10-2004-x64
3op/index.js
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
op/assets/imgs/logo.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
op/assets/imgs/logo.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
op/assets/js/auth-code.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
op/assets/js/auth-code.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
op/assets/js/html2canvas.min.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
op/assets/js/html2canvas.min.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
op/assets/js/script.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
op/assets/js/script.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
op/assets/js/sms-code.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
op/assets/js/sms-code.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
op/include/is-real.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
op/include/is-real.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
op/index.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
op/index.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target op.zip
- Size 74KB
- Sample261014-pgqceacy3w
- SHA256 fdae792a318f5b2db6f63409f2bcb3f82448e335645f3afae6e8d34fd280ac17
- MD5 5dc23dec287f76a537782dd90402dd5d
- SHA1 6915698a7ec2aed6cc139ddbe31791079f58e9da
- SHA512 ff6dc81db42e33b95bbadc60ede9d593031782a0683f79c73d01fcaa4d01764009d40eee5dc2bfe5f237afeea80b35acb4821dc11065836f26ec6fcaaaa37dd2
- SSDEEP 1536:OSSrMb5qNg1WR6rGCO4mkzr7P1cenk2p4RxZOhyj4nxQ:ONgwNgulkTP2EkbwPQ
- TLSH T19D73F27DCD9D0088C05A7F3DB0CA01C67D7A2698F964E40F84E8C9C9AD9F9B99C1EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
op.zip.zip 74KB
-
op/ajax/auth-code.php734B
-
op/ajax/flow.php822B
-
op/ajax/heartbeat.php987B
-
op/ajax/index.php351B
-
op/ajax/login.php607B
-
op/ajax/sms-code.php752B
-
op/assets/css/style.css9KB
-
op/assets/imgs/favicon.ico1KB
-
op/assets/imgs/logo.svg.svg 289B
-
op/assets/js/auth-code.js.js 2KB
-
op/assets/js/html2canvas.min.js.js 194KB
-
op/assets/js/script.js.js 1KB
-
op/assets/js/sms-code.js.js 2KB
-
op/auth-code.php.html .js 5KB
-
op/done.php.html .js 3KB
-
op/include/config.php241B
-
op/include/google_ips.json2KB
-
op/include/index.php351B
-
op/include/info.php1KB
-
op/include/is-real.php.js 3KB
-
op/include/server.php1KB
-
op/include/session.php5KB
-
op/index.php.js 2KB
-
op/loading.php.html .js 4KB
-
op/login.php.html .js 6KB
-
op/sms-code.php.html .js 6KB
op/ajax/auth-code.php
- SHA256 d25a9c5390c2b02e984b0fadc11b279765132bc32e52c22379dff2b3351726b5
- MD5 2a0223d995b4472d00ab0398ad1ea578
- SHA1 9bb4274744c252db44c9d2448e9dd010220c2a86
- SHA512 7b37f46805def63484cf7450ad0fba8dfb4318f08c843a7cc9d6b371a20d961786dbaad3793fcd07b6dc9e47ee73e7f7c73074516aa2dd276389dfd47494fc26
- TLSH T16901CBD5381BB855983B28E67C7119126A89120E9F80D1627C0F26DC9FE07CBB6A12A6
- MD5 SHA1 SHA512 TLSH
op/ajax/flow.php
- SHA256 84682fbc5e54fcc479cef4fcccf166dbdcd003cfe69d0e35d47cec0eecd0d674
- MD5 0cdeb380e44ed8ed2a3836c60a9aea58
- SHA1 d26271605a554399b28067c1d5ca588931161a6b
- SHA512 6960f76c40d7a3d86e7473642b8cc7d4c41d0d75ab071c9fc266facc96ec0e8edd94e0f2296570ff1e94ce24e72eee910c7241f0737d919e1b4a872849a0864c
- TLSH T1D401D06E1D5B11A25DF9E0D93A751C09EE591F0B64844912BB7337A04F907B033F64E9
- MD5 SHA1 SHA512 TLSH
op/ajax/heartbeat.php
- SHA256 1524dfeeccdbceda32c5c365c47f83422360732d1a040c197a34a2367794aa06
- MD5 f968a77a0036ff15082b6e1c74c75440
- SHA1 71aebb1bab8458ec0597f2ab8c5b5aee69e74fda
- SHA512 8cbffb07c765b2cd139b3eb35e8a5793c76483efde815522902c9b274d1d0a4f955590e1b90ae84f456712888afd1e62df7b4fdf0a56a2164b5a5a5505d128ca
- TLSH T1FE11EDA42C4E00635AB490EA63AA1986E6DD045B19D7C310FA3312A11FF038673B1C7E
- MD5 SHA1 SHA512 TLSH
op/ajax/index.php
- SHA256 c7021fb980bdd4fb5d83e0e88ddbd321db9c41c22d584ed03d3c6a208d191c24
- MD5 09308a2e536fd4abdcbd1622fc443b3e
- SHA1 e4617736090856f7865295726f4e237252147feb
- SHA512 0395e998c8121c9b719967811edef90cb11c5cd5aab7a19784dee4899390d797d4540178fbb8b4d61a4f6933b7d89ff916895e35ba2ff0be7b90138527088ea9
- TLSH T1AAE0C088349F107A09D2AC5C80A02901FE69C14BB814CB1475B3B3890A81DCCD37340A
- MD5 SHA1 SHA512 TLSH
op/ajax/login.php
- SHA256 dacecd40d90fb859cd77b6229622cad7b2b5b3d1b6365baf1e3694a2f4270508
- MD5 748504d26a83d8f4e6abcfeeaba694bb
- SHA1 e48f1bc5dbac2f9cf0e0002c0387f93add04df42
- SHA512 065408a6a10917781205441f418f56b4bfef7a810200c2476af1eb0c755ff1e5b18fb5eb883fcbe19e79ea0435bcae4bd0b06bc7796675b39ee01e8f49b502ca
- TLSH T1B2F0ACC238292825986774F275702C1236E9650E13C4E522A92373886FE0BCBBE026E3
- MD5 SHA1 SHA512 TLSH
op/ajax/sms-code.php
- SHA256 fa127fde0f25e063e79eb1e365f08602b87fd393cd6c7382acc0ac8fb89f5361
- MD5 4c5491a43f86e35694553db2643bb341
- SHA1 897a2511a1f964097049a628e812cb2098f48749
- SHA512 20a1d9ead5e90111a4a9a319891bafa3f637ee2f3a74b2d135ed4c37aca64fb209a5cb1e1bc3d008116fabb7e5f9602b516c15e676ea486789497f343dc7bfbc
- TLSH T156019CC97C9A6C22986738E37861281366CD160E938CE0217C0F137D5BD07C7BA23B97
- MD5 SHA1 SHA512 TLSH
op/assets/css/style.css
- SHA256 bf0f9189f229f33d49ecdd3c5ed74658a5bc16d6aafa91808a60731c3c46ed46
- MD5 5c54e219e7f432d0b9e491aa15bc3ea0
- SHA1 9e462dd950ab2789fac8ef544dc61f673b1b174c
- SHA512 a89b13df73e2e84ea1e02bbce20e5c048cfc5b9b7519053920dd856ecced440adfbfd1bd81b6da23500ab35c5c33e7c7fb6e3c46eb196d9ab2d81f2a96acd34b
- SSDEEP 192:nbmywuTIOH3wGvNKOgx96ukOOaFimOs4lb4nUHb4ykefjRltnB:bvAGvNLg36GFH6bDHbAonB
- TLSH T17D120DDB2B651504B807C86CB6839FE2731C9543A10ED9787EE1109CDFCD2996AB2BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
op/assets/imgs/favicon.ico
- SHA256 86eb78f63ac7391a6d99b9f3069074bba1bf6e81aff99a066b18c448eaacc3af
- MD5 4048f1e8863c7d2dbd74eae7819e574a
- SHA1 cdbb68f5be2b24e9ad4034cf0d27be9f8a7268fb
- SHA512 12f6ca26bb2a7ecb59197231b887dc5d88aee17a7ffb43457560da5327cfa3c320439600a77472a0a927b28005ccbb7333aa0d51e89d5bd7a58770ad34c9e329
- TLSH T1E321764FB6F5D706ED428A745009F61B0202CFB369A8924F69CB36D2E9B0B4A0462D93
- MD5 SHA1 SHA512 TLSH
op/assets/imgs/logo.svg
- SHA256 c8ad35536a64e3ff9fd9f2a1bd9c118e9994c2780a11f17cdda7b1147a62c93a
- MD5 023073333e357e248bc401900b41a10a
- SHA1 00ccfa64da3fe34bd5e9d3260885bbc898a36056
- SHA512 aa3e7e46e792cb1223a765c1dcfefded062ad6bded25e6c1e9fa8d14a6af5741cb0d4b1e37acc8804c883135be8edcb68f0c2302f7302b4a04aeef206dfd7224
- TLSH T1C7D02BFC33D82C6E3A1E4B32EE3C6400892F385111462528500D8A2EE007D4F1EF14E1
- MD5 SHA1 SHA512 TLSH
op/assets/js/auth-code.js
- SHA256 c65783ace5f717dfed36a4bfc43b7228dc00ac5129389b20f1d3a9723ed315ec
- MD5 f08f84f3bd46f3b01e31945d417b691e
- SHA1 4d5263990b1382e59195299366193ceff0c944cb
- SHA512 9670c2335b50915f0972ac6091e25c535ad1815584979c1b25baa65262844c2c8c9b58935adbf12b9c409ee64709a57f54c87001600c81db119158e250a93a88
- TLSH T1A051002D7AF720619BB770FA6BCF521C553948872844FA013D5C52848F84A3A87FCEE9
- MD5 SHA1 SHA512 TLSH
op/assets/js/html2canvas.min.js
- SHA256 e87e550794322e574a1fda0c1549a3c70dae5a93d9113417a429016838eab8cb
- MD5 d7530aa0b7587e627484c49fdf8f13f2
- SHA1 b987dc0cc6cfcdc2e34499375f505470c5adb891
- SHA512 04d6914276096223d2a871c36f9f01d3268f7c2bbe5a076cf06a7f814df792a06d80d4b8b523c7b8689bca87aa315fd326548a75ae855f3a04c981a34defaf5c
- SSDEEP 1536:dLkw5M8eKEsqi5xpg+n1sPMecC9JmgxBQSFkkZQRlNM7IgeXzh:dLUtZSpg+aZmabZQz9
- TLSH T1121457B46BA71CDE0A7EF49B00172D838D981B67117FD1E8F24AADA62D70702CEB1574
- MD5 SHA1 SHA512 SSDEEP TLSH
op/assets/js/script.js
- SHA256 1fcb3b86db55ae6c01985e6ff1d81dc7380616cdc1eafe2bf4040ef0d196d1de
- MD5 7c8cfdf76052f5d123de150fb0c0d3c6
- SHA1 aa97307ace62ec142aee12ba3ad6c7a3e1637410
- SHA512 c26f6a0f1e8f7d7fe0a48b3bcb16e3734a1dc5675f9a2e5c16e0a39d2acb7d4d5c692b7e70124ed38198d29f188af5064057d3a784e6599f9bd7cb67939fa9a2
- TLSH T1A131F06E68B119B04FBB707B939F532C706410071445D7113FBCAB085FA4F2B19B16D6
- MD5 SHA1 SHA512 TLSH
op/assets/js/sms-code.js
- SHA256 8b43260a534ba91cb231da54914aece07a95e00fed82a16a2276396639762347
- MD5 ae40e5e3e820442400c7278e579ae5b5
- SHA1 70599a0bb34065c4debe35ef1cc5f04ad5d90abc
- SHA512 bfa22da605263572032b130d55b39371d31a8590ce130f9406f72c5ba4422946e64f568317277967e9cb88f8885d74feb5904ffc471e3aacf256d9be1e1ba8f4
- TLSH T1F551F12D7AF320619BB370BA6BDF5118653A48872848EA013D5C56808FC063987FCFE9
- MD5 SHA1 SHA512 TLSH
op/auth-code.php
- SHA256 7dc233497066d7b8cfa3055a448e77e842c31f24d7701ffdb80d2f6acdcc7b85
- MD5 cfb087dcdd8f42b21bb1624bcb3a06dd
- SHA1 99c2dc63db4282960eaa9e93a9de7d67b6a08389
- SHA512 da6e0031c71b2153f1b95a39033df235765db1f2ddf9218cbba34cf21dabd28303afe4d0aac77aa8fdf12ef43bcc506cb36d07a8c2be5557f86e3309a495206d
- SSDEEP 96:GGxf9goIeCc5BfJz77YfuqJtmmyKUK9pxIpJegUmsNDNl8:Gy9iWBsuc092UJeel
- TLSH T122C1E80894F6043B829310566DDF360B3E61C543A34A81403C8D0AA09FFEE4DDDA7DDE
- MD5 SHA1 SHA512 SSDEEP TLSH
op/done.php
- SHA256 260c5bfbcd3e313bacae85aa73d4b2e97fe31fd12af7f6b9fa15c028a1d470fd
- MD5 1ad70cb8f4099094ba8803115f310bf5
- SHA1 ec4a4c6187995a9bdae5bc6e94905e7d8c9556cc
- SHA512 04512c6076def3d333036e715dce6743d129cfa94506c7bf50e2c914d736c2a65e6008a6ecc165bbc7fbd8b730d2a88baef3c1133843e827b4bfa4f661d4fe60
- TLSH T197813F2959C1543A537382A6FB763B09FFA3804397494C0835EE06A74FF29158CA3EEC
- MD5 SHA1 SHA512 TLSH
op/include/config.php
- SHA256 f2e002c9fa464bf4235243d75631770c939dc38e45be70c77152610f5fb8d375
- MD5 48d1d1a37d6eebdb4bdc9c47a75eee82
- SHA1 913642d89e19b9295da975eeb69dbb4a1fefb48d
- SHA512 141c5f833da1efb7e2d6c96e1f78b813e4e914312fd215ded20e575b9fc7c5385a482d17f6135162b94f69904170a90f0636028ddc656f90fe9adfc985c5b401
- TLSH T1C5D097F9D1F301B200A3CD4C01A000540B30B00BB4002800703BA08027E0E4CC2BA005
- MD5 SHA1 SHA512 TLSH
op/include/google_ips.json
- SHA256 cfda670e09c721e559bef6a4cdba60b9f1821b6148b4feec588849b1ab96865b
- MD5 1a11101271c4ca76d2e4a753431a222a
- SHA1 20723895c58803ec738d24fe82b83f250fc09707
- SHA512 0ba33cec2bd8100fa58a68cc40a31b12bdf72f4cfa262a55b396c20085be37bf4a1a9f1351bb86a244cf086e7e1bdb0e92cf3c4f624f993fb4c29e460fd37191
- TLSH T1CD417F90C4611FD0D9CBF4197152B22028E05AE71D42B5447B4A29CE1F7C39F7EB8A2F
- MD5 SHA1 SHA512 TLSH
op/include/index.php
- SHA256 c7021fb980bdd4fb5d83e0e88ddbd321db9c41c22d584ed03d3c6a208d191c24
- MD5 09308a2e536fd4abdcbd1622fc443b3e
- SHA1 e4617736090856f7865295726f4e237252147feb
- SHA512 0395e998c8121c9b719967811edef90cb11c5cd5aab7a19784dee4899390d797d4540178fbb8b4d61a4f6933b7d89ff916895e35ba2ff0be7b90138527088ea9
- TLSH T1AAE0C088349F107A09D2AC5C80A02901FE69C14BB814CB1475B3B3890A81DCCD37340A
- MD5 SHA1 SHA512 TLSH
op/include/info.php
- SHA256 f665f1732aef9b69c600c6591f92d49878efde138cb752e155ed03cfbe1fd2c0
- MD5 f6a1f519dd103054a6d39e728c21ffbe
- SHA1 a4fe82d8699d06a4b5ac8032eca680b4958acab0
- SHA512 beb9b999867917be1e11158e85cf8e4196736b1bdf7e0f0c4a63e39a8308a06a381fc49bdab1a7f8e9cc2f8da7ca3977627c9d4fe0abaa11d7a982608c054908
- TLSH T19031DFC0646674975377AF6D2F06CA28F58E15231925D80ABC6C01843F3420E63F4FEE
- MD5 SHA1 SHA512 TLSH
op/include/is-real.php
- SHA256 8c3192f9ec6e9d33134152af835e2a801d2833f29a896c5613e76f18cdaedd19
- MD5 8492893a70be4f0fefab597bf10f0c19
- SHA1 a17888f9da9deb7b46c9fbe682fe07e572fefbf3
- SHA512 4a7b4b0033a54095712d6646874d7cfbe0dfd6be46eb09a71cc760306e9397a86022bd2ca9a05093b80cffe1cb2dd925a07a95f828afd125526e95ccb11c82cf
- TLSH T1898196567446087A6FF397765690BAC8F762011BE74AC10230DE82422FB5DE4C7A3DED
- MD5 SHA1 SHA512 TLSH
op/include/server.php
- SHA256 23619551944127a22f6c7fa448dcbbb91a3416dda54cc0590a8fc71fca946871
- MD5 1877dd1f358038fe5fc371a8b16f7b72
- SHA1 2c8c9c3ff2eb2be22e0d3e354bf303ef1eb57d50
- SHA512 19a7e66b2a2105313c4bdc83dbdcfae35bc4dc6bb2e5300a1b9993a578f3d6d18c5eb77aeb8f9534888820d94d35318d781907ee1a862e98c25439acc762642a
- TLSH T1C741E2953D17417B09B981D9273AB14CDBBD594736441580B87B83C02FB9B88A37185E
- MD5 SHA1 SHA512 TLSH
op/include/session.php
- SHA256 51c440838b9bfc8d59f040289d158a23a3dd74fdcaed2eeb514a141728e2786f
- MD5 759fdc7f8bf96e60f1100d96f351df35
- SHA1 79d0f919843c94a816dac12f67c122bea458dd82
- SHA512 f3f51cde2700d87e22705ab8fcebaaf138b8ec44cbdba8aebbe0c57437bbfcf6221713c45c1f384e0733507646a27c3a1ba0ffe53413bb4ac49b9292626d19cb
- SSDEEP 96:fPZRA1i24+vlMYOjlBd7rS0tXL7xljRHDCiw/ggmONP:HL04tndXf9L7xbHDRCNP
- TLSH T166C133D6746264B74532EB784B819405FAA7585BCB0591047A1E828C2F7072CD3F6EFF
- MD5 SHA1 SHA512 SSDEEP TLSH
op/index.php
- SHA256 f66e9eb70a27c4ece46368abce338ff2bcb34172a35a258b0847057419c316ef
- MD5 ac57af812d061f4547b9b18a3e7a59e5
- SHA1 f32e0669a98aaa8535eeec4c63fbf0cebdcad7c1
- SHA512 c39cb3aa23242b5df0170ae82f3cd7e9936783b9da61b22b462cd45a22075deeeb482845fe2dcba4605feda7d1dd430a062b2a67c359ccaee945912800653331
- TLSH T11D51956D2891543904F2E2664BA23144FB329347B346D941BAFF43832FF1D5C8AA3ED8
- MD5 SHA1 SHA512 TLSH
op/loading.php
- SHA256 1b6543949ee4a60ff00aa55e3d2935b5b06fb55ccf75b6b3b67086e704182896
- MD5 127fd1b5ac71e82ecdaabaf0f1e2d456
- SHA1 ad6ba1049efb94786255ddc940b5c5220f3b57cb
- SHA512 7ff6025b055e14a5239c7bb63055686132675a656c1720c04ea8c83b7117792f8e6f058b10a626a03957dd8320d91525c776ed0d36868b0152963b1c17731ce4
- SSDEEP 96:G0xf9goIeCc5BfJz77YfuqJtmmyKUK9pxIpJ0DNlD:GE9iWBsuc092UJC
- TLSH T1ACA1971DA8F6443F859260522EAF321A3F61D143230AD544398E4A80AFFAE5DDD63D9D
- MD5 SHA1 SHA512 SSDEEP TLSH
op/login.php
- SHA256 861c9eecabcab93304220e7d3b28bfb8147515f70931b8e3285839549f77db69
- MD5 994e4e26011e0ef5c2745feaf3e84c17
- SHA1 6f36608c74bfaceae5836a6ce9239871ac33d769
- SHA512 4b3182b6444806da27bc744e6d48575353c1730a97376d0975b136048dd7030ccae31e1a01522d4fa428defd61596c36c6fbb102f633630e0f3d33f46b1aa0a4
- SSDEEP 96:Gsxf9goIeCc5BfJz77YfuqJtmmyKUK9mxIpJWDsTGMiniDYfETbakDNlr:GM9iWBsuc09tUJW8VHDYsTT
- TLSH T1C8D1C72C68F9493B859250992AEF361A3F54C143A20ED50434DD4F806FFAD4ADD23EAC
- MD5 SHA1 SHA512 SSDEEP TLSH
op/sms-code.php
- SHA256 7eeb4c060fb3c359896b75134a1ad5b8def014669db4f60563e7a63248e8b5e2
- MD5 3df22e648de8170baa5a56b2997e67fc
- SHA1 dac1caa52740ec99325fb52bd792b56e49f2af81
- SHA512 9b505206f8c6fb9e606424ff60d92bc0fa0baf64f308f36626051560e82761d2af65b016579737f4c36a8716d273503c9bdf67fff9db5e960e7cba684bde5f23
- SSDEEP 96:GAhxf9goIeCc5BfJz77YfuqJtmmyKUK9pxIpJeyZsNDNlF:Gu9iWBsuc092UJeyZi
- TLSH T100D1C50884F9457B8293609299DB3A073F65C143924682443CDE0BA1AFFEE48DD67DDE
- MD5 SHA1 SHA512 SSDEEP TLSH