Banco Santa Fe Phishing Kit 9d6d57a2

Banco Santa Fe phishing kit which uses the same CSS and JS files.

References

IOK Rule (edit) 

title: Banco Santa Fe Phishing Kit 9d6d57a2
description: |
  Banco Santa Fe phishing kit which uses the same CSS and JS files.

references:
  - https://urlscan.io/result/15daa469-aa14-45d8-91c7-2cba4ae7b940/
  - https://urlscan.io/result/0fd0971e-ebb9-4bc4-bd0a-b3d4c879a7c4/
  - https://urlscan.io/result/353e14c4-7ff1-45cb-b23b-3c1d50b17939/
  - https://urlscan.io/result/9d6d57a2-4e0e-47a4-9b2b-8abe691c8f4a/

detection:

  stylesheet:
    html|contains: '<noscript><link rel="stylesheet" href="styles.d234598b30cf55ae.css"></noscript>'

  scriptContent:
    html|contains|all:
      - '<script src="runtime.b6fbf617c2a6ed40.js" type="module"></script>'
      - '<script src="polyfills.ba7d2613d9af8d48.js" type="module"></script>'

  condition: stylesheet and scriptContent

tags:
  - kit
  - target.banco_santa_fe
  - target_country.argentina