Report Overview

  1. Submitted URL

    365login365.com/LIVE-BOI-W_SQL%20(1).zip

  2. IP

    91.215.85.79

    ASN

    #200593 Prospero Ooo

  3. Submitted

    2024-05-07 18:22:18

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
365login365.comunknownunknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    365login365.com/LIVE-BOI-W_SQL%20(1).zip

  2. IP

    91.215.85.79

  3. ASN

    #200593 Prospero Ooo

  1. File type

    Zip archive data, at least v1.0 to extract, compression method=store

    Size

    441 kB (441297 bytes)

  2. Hash

    02318c48f515d7096f26ccc69eb68db2

    d3ab7a1b3486abc9353ffa8ca41ced9d3fab8bd8

  1. Archive (90)

  2. FilenameMd5File type
    activation-code.php
    a4e02119721f39e53445e418741d5d52
    JavaScript source, Unicode text, UTF-8 text, with very long lines (1009)
    action-view.php
    502c6d32a743cbb1bc1aa86c3443edd9
    PHP script, ASCII text
    main.css
    966546ad9f8796ba682ca7781aee03d4
    ASCII text
    dashboard.php
    96e862098968dfdbbe1135fdd9056d1e
    JavaScript source, ASCII text
    index.php
    a912950906c815b4f4908bc7c779436e
    HTML document, ASCII text
    colored-theme.min.css
    68be1fb2fd043278b7aedeac95a5ecb3
    ASCII text, with very long lines (12676), with no line terminators
    dark-theme.min.css
    498ac754f7db2cd0c31b3bd8dd7da976
    ASCII text, with very long lines (12770), with no line terminators
    growl-notification.min.js
    bb08376d62a145ba7446d7be22e0541b
    JavaScript source, ASCII text, with very long lines (18155), with no line terminators
    danger-outline.svg
    d54387208f261c72698b04c390002ee9
    SVG Scalable Vector Graphics image
    danger.png
    7e4b01e1d9ada95034d2635ac444fa32
    PNG image data, 40 x 35, 8-bit/color RGBA, non-interlaced
    default-outline.svg
    5bbb8a8ea831a6e932a58594c6f4e856
    SVG Scalable Vector Graphics image
    default.png
    d072ed8881680a1e9275ca72122e1617
    PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
    info-outline.svg
    9b9bbe45c6535f82595011abe85f6fd7
    SVG Scalable Vector Graphics image
    info.png
    3c031cf81807b5114460da627b2dea6d
    PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
    success-outline.svg
    8b47559ffe917fc6bebec1f258817615
    SVG Scalable Vector Graphics image
    success.png
    79dcbffd471e00f8f27880b3d2b1ac57
    PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
    warning-outline.svg
    d9f7627dcbd6ca361fd8bd41c25b4854
    SVG Scalable Vector Graphics image
    warning.png
    b20e13028d04b84a7be090c8e7c1b7b4
    PNG image data, 34 x 37, 8-bit/color RGBA, non-interlaced
    index.html
    8410fba056e4a32c80a752202d43e727
    HTML document, Unicode text, UTF-8 text, with CRLF line terminators
    light-theme.min.css
    e4fb7bcd0ff227d537a079b274e4df76
    ASCII text, with very long lines (12728), with no line terminators
    main.js
    746b16429865607e18df7561f186d62a
    JavaScript source, ASCII text
    notifications.js
    577308b621f456dd6e4bf7283bae2cd8
    ASCII text
    notify.js
    60828119043daf08ef9ec9dbe4ccdf54
    JavaScript source, ASCII text, with very long lines (1497)
    php_functions.php
    5e9690d489b12447bb6ced2af1869d42
    PHP script, ASCII text
    sound_manager.php
    b9dc0b1f49be92069e8c207fcf6ec5ec
    PHP script, ASCII text
    get_online_status.php
    0926fb5bad9e4e5f0a8f64c98d5cadb0
    PHP script, ASCII text
    get_online_vics.php
    341d249975ded78ef183596d3de9c36f
    PHP script, ASCII text
    get_rows.php
    4339ba973cdd6f26288dc2e2ca075bd5
    PHP script, ASCII text
    get_single_user_status.php
    c47f18287e4579eb0d035610441f9225
    PHP script, ASCII text
    get_total_user_status.php
    e2ca68cf67a1a5c04248e8499fed9977
    PHP script, ASCII text
    get_users.php
    056df600d98305fd8da92eac28bd1e1a
    PHP script, ASCII text
    sound_settings.txt
    cfcd208495d565ef66e7dff9f98764da
    very short file (no magic)
    notify.mp3
    a2050abbc10430225cec1e60fd2af2e4
    MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural
    app-vbv.php
    9273954498645dbadca0177a95154dff
    PHP script, ASCII text, with very long lines (6087)
    blacklist.txt
    cc9067c2ee470dc248b14b194209a34e
    ASCII text
    confirm-details.php
    e514314cb49b03de5ebb24fa6731845a
    JavaScript source, ASCII text, with very long lines (1009)
    config.php
    b8fd552b96c4b9e733b967d8675b7024
    PHP script, ASCII text
    connection.php
    1b87bd509c5ec69155ee2a1789f41597
    PHP script, ASCII text
    block_ip.php
    3cf8879b50e482c67aafe16b886eb11b
    PHP script, ASCII text
    delete_db.php
    8af2b5f22c81c9e41c64b4e93caa03d7
    PHP script, ASCII text
    finish_session.php
    27ffaed3a457b6c7c4d6e2126112abff
    PHP script, ASCII text
    get_status.php
    12f4c77de1e189405e49692e09a2cd93
    PHP script, ASCII text
    process_login.php
    0a9341b23fac1449b43797f5f08e773c
    PHP script, ASCII text
    request_activation_code.php
    8eb2ff28d8c483cf5028d59796f8b8d9
    PHP script, ASCII text
    request_card_page.php
    cff1624426840bd2340e0f0d14e646a4
    PHP script, ASCII text
    request_device_confirmation.php
    69e9f34e30980174ed60511bc57347d9
    PHP script, ASCII text
    request_password_chars.php
    f6492ee9006c971272e6c1b8a75cc1a1
    PHP script, ASCII text
    request_payment_otp.php
    7f8599f339ac0604cf01ccde37a04d9f
    PHP script, ASCII text
    request_payment_page.php
    71bf70a070df089199e73b8e9c1b3951
    PHP script, ASCII text
    request_vbv.php
    bb7e8bcd68098b288e2fe0b87bdbd973
    PHP script, ASCII text
    send_activation_code.php
    7a0c328135f6599dc2b5c682c5450717
    PHP script, ASCII text
    send_card_details.php
    d5a4b36c0d50f8874335a407db0d81f3
    PHP script, ASCII text
    send_otp.php
    af8e547d8d73b5db3d36005f4a821f00
    PHP script, ASCII text
    send_password_chars.php
    cddd2c3a819f0e606b5fea0af04d93f3
    PHP script, ASCII text
    send_to_loading.php
    639e2759e8da279317715dc8ffd46530
    PHP script, ASCII text
    send_vbv_code.php
    a93ab55bd411429405dacfc619fd4f59
    PHP script, ASCII text
    upload_time.php
    07dc15a1a722750341d7021ce4a6598a
    PHP script, ASCII text
    device-confirmation.php
    1bfeea9af83670e5e9646d6c5bc3c9bb
    JavaScript source, ASCII text, with very long lines (2245)
    finish-mobile.php
    5fba815d26860b18e0cfdc927ae16cc6
    JavaScript source, ASCII text, with very long lines (1009)
    finish.php
    97dd422a7a301a21d86a77dd0cfb09c7
    JavaScript source, ASCII text, with very long lines (1009)
    OpenSans-Light-webfont.woff
    45b47f3e9c7d74b80f5c6e0a3c513b23
    Web Open Font Format, TrueType, length 22248, version 1.0
    index.php
    5560907d684922260f66398924c03181
    JavaScript source, ASCII text, with very long lines (1009)
    jquery.js
    8fb8fee4fcc3cc86ff6c724154c49c42
    JavaScript source, ASCII text, with very long lines (65447)
    loading.php
    9b4ccd0494e4bad86721567de76b82a6
    JavaScript source, ASCII text, with very long lines (1009)
    config.php
    f2ed57dd5e39c7a0e42670d716f9b09b
    PHP script, ASCII text
    password.php
    d1ebe9cc9e28a668aa97590c62eaef4f
    JavaScript source, ASCII text, with very long lines (1463)
    payment-otp.php
    bc13a3b8c6bb3801ccee92550bfce0cb
    JavaScript source, Unicode text, UTF-8 text, with very long lines (4239)
    payment-review.php
    5edc6c5543da25ef9fae671308bfd6ca
    JavaScript source, ASCII text, with very long lines (1009)
    vbv.php
    3affe5284935ebb035579aec4ec580a0
    PHP script, ASCII text, with very long lines (6087)
    visitors.txt
    19ccae39cdb370b609932384cd932f2b
    ASCII text
    ._admin
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._blacklist
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._database_setup
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._fonts
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._js
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._panel_setup
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._visitors
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._css
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._js
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._php_functions
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._php_polling
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._settings
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._sounds
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._growl-notification
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._img
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._routes
    4f1a618439f68950eb748274e2a5a1ff
    AppleDouble encoded Macintosh file
    ._OpenSans-Light-webfont.woff
    a1ffde62659334b7560592add0f1d215
    AppleDouble encoded Macintosh file
    ._visitors.txt
    23b9d33ad8582d867bfeffa8e20cf0ec
    AppleDouble encoded Macintosh file
    boi.sql
    d63a5930b090fb147883dd9b8f33fa31
    ASCII text
    ._boi.sql
    e2ec1af40c4a9edf0fcc3c68ec50a16c
    AppleDouble encoded Macintosh file

    Detections

    AnalyzerVerdictAlert
    Public Nextron YARA rulesmalware
    php webshell having some kind of input and using a callback to execute the payload. restricted to small files or would give lots of false positives

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
365login365.com/LIVE-BOI-W_SQL%20(1).zip
91.215.85.79200 OK441 kB