← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
VirusTotal Box of Apples Sandbox report - Facade[.]PHP
WHITE msudosos 2026-05-08 Modified: 2026-05-08
135
IOCs
HIGH VOLUME
Dated 2021. This report failed uploaded multiple times. I will provide further analysis but I want to upload it while I can.
usereventagentip addressvirustotal boxapples sandboxsandbox sha256analysis datescrenshotsfileoperationsprocess openmitre attacknetwork infoprocesses extraoverviewoverview zenboxlinux verdictguest systemultimate fileinfo filefile typeget httphostuseragent macphp scriptascii text
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (2 / 135 total)
All IPv4 URL hostname FileHash-SHA256 domain FileHash-MD5 FileHash-SHA1 JA3
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 f6830b26c65524e937dbd8cac8d8983c — 2026-05-08
FileHash-MD5 a69708a64f853c3bcc214c2c5faf84f3 — 2026-05-08
References (2)
↗ https://vtbehaviour.commondatastorage.googleapis.com/00000c27e0786dd70056452f3a79c81aacb336bd88ad88f17e078179a2c7a639_VirusTotal%20Box%20of%20Apples.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1778220989&Signature=owHCTWTjrTpHitMkAs4ZzBnGfy822nfwhgfHCnNI6P3NVmpVwBBNgEGjZKJSNwLc52Yl%2F0OH%2Fzx9MFQdAxAwxjTlHyK%2FqZv5J%2BP4qi%2FYj5gM8X2b%2FgMN0DzO5kbKS94dYh12RGh5Ar%2F9rP09HyOy9eWEVzRTyVqUjXGbIfbAjV8fgA5RDNvYRGM4Q0X%2FVuECJjtZ1GNigkHztLt2QQKDBzADI91Dyy ↗ https://vtbehaviour.commondatastorage.googleapis.com/00000c27e0786dd70056452f3a79c81aacb336bd88ad88f17e078179a2c7a639_Zenbox%20Linux.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1778221012&Signature=BW1Hbbl7VGtXMKywoHZqeQRluX9X6H34JFbMTwpZr7S%2BKHXBfaU4v0akjdGvzFxRNJCrsrrAjX3JxKmur7emgzUsUVV9xAdAxAh8Bxh7RVYRNvq%2B%2FUGpbVWBorlGqZkvTGdlvZ4hV%2FrIxyQwQys80zRjEoVlwoeU207S1uzi5eYXpWwgcuuKXY%2Bds2GU%2Fz9JNl1QOWgXJt%2F%2FJvkx9JxznPmXklPzi%2BM7ln8%2BwwCzHS