80bd879aa8988b00e427c8c65c4f3b4035d054f27898247be58cb67819ac8733 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

includes/functions.js

windows10-2004-x64

3

includes/functions.js

windows11-21h2-x64

3

ping_cron.ps1

windows10-2004-x64

3

ping_cron.ps1

windows11-21h2-x64

3

status.js

windows10-2004-x64

3

status.js

windows11-21h2-x64

3

views/admi...ngs.js

windows10-2004-x64

3

views/admi...ngs.js

windows11-21h2-x64

3

views/status_page.js

windows10-2004-x64

3

views/status_page.js

windows11-21h2-x64

3

views/user...ard.js

windows10-2004-x64

3

views/user...ard.js

windows11-21h2-x64

3

views/user...ail.js

windows10-2004-x64

3

views/user...ail.js

windows11-21h2-x64

3

views/user_ip_form.js

windows10-2004-x64

3

views/user_ip_form.js

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
includes.zip
Size 68KB
Sample260417-alaeescx9m
SHA256 80bd879aa8988b00e427c8c65c4f3b4035d054f27898247be58cb67819ac8733
MD5 ee3b8aa6a9e79b1ed9b8ac9b84c82550
SHA1 6e8923418f6dc71f8624c19a104eb1328c66c4a9
SHA512 75869c0e7500adb12f5824d73aad129ec1782a4308848402acf468c42ed29f5ada9b56ea2bfdf7b6fbe1783c40ae5b099516bccd40cfd8a9d68a723cc3e03a67
SSDEEP 1536:s1w/+oMh5h8X2noy8gwory3iQcwlzpKpWq1oU5m+aSNSZxZtQn:s6mY2noyNlry3iQlzcz1oKm+aiSZxU
TLSH
T12163DF5FCC541E6BEC5E9DF1CAEC82CC8B9B7D0150049D971A9CC294E2231EF9A3E519
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

includes/functions.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

includes/functions.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

ping_cron.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral4

Sample

ping_cron.ps1

Resource

win11-20260130-en

windows11-21h2-x64

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral5

Sample

status.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

status.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

views/admin_settings.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

views/admin_settings.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

views/status_page.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

views/status_page.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

views/user_dashboard.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

views/user_dashboard.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

views/user_ip_detail.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

views/user_ip_detail.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

views/user_ip_form.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

views/user_ip_form.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  includes/functions.php
- Size 24KB
- SHA256 e449ba7eb0bbfdb5c3aa8feb41787ca82fde6aa458986b1351148b2510846791
- MD5 0d46cee4f8d49ab878bd20937d1f661b
- SHA1 6c3b40098c6e3b08471849f1758d90bd32e30f85
- SHA512 6773b61190d0d7644c236b5e1bce639cf98bc2b2fa9b7aee1fba45513a25117649c77dffea684f37dcc8a6da47f8e6e7580797b876b875d843bdeb8af3310c77
- SSDEEP 384:ZTgKPmtsGbxNn3gQtPZVgfZpXQsaXlMmO2tSr2juhjRaNy+b:ZT5PmtsGbVtwjclMmORr1Wyc
- TLSH
  T112B2C59074F3691401A3F03ACBDBE6097EA445030258DE50FE5D52F1AFC466CDAB8FAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  ping_cron.php
- Size 3KB
- SHA256 c78d7bef5bff9592154007288603894ddce15ab2cfe79f20fec43dd932647357
- MD5 a8b3e06ae1f2b4086b44c857aa80c4c2
- SHA1 25a4477e5e31aa2b365ffcc6ab6c920b7d8290dd
- SHA512 50d4eb437f1ca36b8c49d1800df32783afdeeba78ef8817fba0bd3b624318bbf075b84caf599fe2cad9790a037685aa5cbda1ddef709db4ab282393f113240ec
- TLSH
  T1286111D9B0F35AA06A43706546CB92582DBD9A03D101CD197D8CD2C4FF90AD8F29EF6A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral3 behavioral4
- Target
  status.php
- Size 10KB
- SHA256 d33cf5195b61b76896888419ccba623ccb938dc6eb5675beefbb37bfe9ad3166
- MD5 db82b0268e24d89aeddefebec75891f2
- SHA1 c47d6248167e93c12b489363638bfdd4e7cafc29
- SHA512 01d84fdb6bb5ff33ceea1a4839df586728816f9bd3d260ea44649b43a620369e119d4b2e46b32aca2a12ee546cf0b22564cc1c22e0f5b86f7b111cfdd9a64ab6
- SSDEEP 96:H9RD+vhUqQ5fqQ3mRCcNMxYs7w94M+qMMfG7JJ420iTmVdDOqc/Brcis:dRSvKqQpqQ3QCcNS7w942P+v4ATmVqRs
- TLSH
  T1D522525A30F244350AEBC4DA07554ABB3FE1C81B830786007EEE9AD86FC1ED5CA6F955
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  views/admin_settings.php
- Size 12KB
- SHA256 41b7e513cedb89ed1ad9a1540dc4c9164c90ef4282310c7ab687b06b1dc22f6d
- MD5 3fe2c4049a6ff0cb78e7fdde64960574
- SHA1 396a89182848106be365f05ffcbaa1f2e2fdabb4
- SHA512 2bc7ec8e35c0d4fba01e1c994eb54551eaf92a7381c48a671369f88c1cf3f1102bda7639896c70ec7bb84f8b526c935748351822af992e2bb2219f75bdfcf66a
- SSDEEP 192:0Ebvd7JjkCqmSRUyaCKuHSCXZyl7J5DETb61whrF0DJPmWMa+c7f6K:0SvA+EkCpwIroz6K
- TLSH
  T16B42741210F35871C442F5F3E76155157CA1C00B49254D26FEFD2AF95FC18899ABBBB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  views/status_page.php
- Size 5KB
- SHA256 9277c88346d716bdfb12153858e8e9c719a4992e82b7627f87ae6d0745b83a47
- MD5 f33a648f600517eb6d030a9ee5d7c100
- SHA1 138d76f98e26f748f8723ba174988e3130de4630
- SHA512 1c5fb7f264df318d53ff25a4815414e8bf005cdbc09b78b1a6ecae4e71d94478e280cf3596f301efedf94589d5f4a12bb3f43416a7ff83c71c99f2fc8b39b25e
- SSDEEP 96:c9HWYG4spIfSpAgu456TJ4ROXtlT9tJsDFNrdA:yHfG4zfSp3u4YTJtbxYK
- TLSH
  T168C1A925F4F2DE7489472CE92A9288C53E91D5171543C44C3E9E62C03F90DCAED2FB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  views/user_dashboard.php
- Size 13KB
- SHA256 30f81e47014e2779c57ecf2ecdb1e4f6f357003c16f8969db7013589ab110223
- MD5 3f2a2c961fa1a2ec94cacbc6d553ace7
- SHA1 3b3e48d1c4eae4140c4062c222c20b3302cd78ec
- SHA512 6142b7ff9cf764e39c71a96b231ef9e9c1e8cb25cf6ae8eba05cdbc6c635f136ec0ed02589950fc758f269c6cb06d6426afde1f3ad993baaf0f562840dcf6c22
- SSDEEP 192:heYXswBhQIOxIH3yueKEXZfuEkff+01FBCg1nh4n1NWrbYOf16CyxOESgK:4YXsw7Vz7QFkf2GCQOn1NWrbVrkK
- TLSH
  T1AB52D59370F2987511A394A20399078B3FE2CA0B650549097D6DCAEC2F80ED9ED3FD5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  views/user_ip_detail.php
- Size 16KB
- SHA256 7402379ed8754c5b2fe534dabc7418c0f0654f3e9c6ddcdb388e47c10dd62d20
- MD5 d29506fe3380cd44a0aeb2fd8a3f7b3c
- SHA1 0fe82f97691e2a935b20f3d013fb62cd32480adf
- SHA512 ac88769c94eb19cfa024dbc0b2b346a67423211034e7cbc16dd6a844f97b44a086224247174efa1eb2b5b5eb15d49069f67ed0ec83055ae54409c8628bdd9e2c
- SSDEEP 384:atfJg8s7m4yfdM2qwMUn2ksy8niZkKhlbx9K:4fJv+iV4w32dyxSKhlbm
- TLSH
  T11572A4E370F289611147A4E282584B5A3FE5CE1B86024D053D9D9AEC9FC0DC9ED3FE99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  views/user_ip_form.php
- Size 3KB
- SHA256 0cbafc6ec4d8e38577618c17d528ce23e155951739b8fbe34e6cb7041c5ed5b6
- MD5 0352d0488079ddf4193b7810227eab66
- SHA1 cf8b971151940d3ed7fafded6b7750714600ecc9
- SHA512 3e33e7cf6e6789c3717c25646429cd242059df5e2d9face905de1f9420f0c73d015311f54e60bc9b274080a8ceb3dd822f890258dbd8f44335b572a0dbada4af
- TLSH
  T103716583B9F65C80562025D713D54A403C5EE60B16028C4CBF6D71ED6FE3D868A2FFA8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

discoveryexecution

behavioral4

discoveryexecution

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy