6844c65ab7fcf78fbecf910152cc13248f041a5b4857430bc5ff87a4ede4fd9f | Triage™

Login
Reports

Overview

overview

4

Static

static

3

dfsdf/class.js

windows10-2004-x64

3

dfsdf/class.js

windows11-21h2-x64

3

dfsdf/dede/php.exe

windows10-2004-x64

3

dfsdf/dede/php.exe

windows11-21h2-x64

3

dfsdf/dede/php5ts.dll

windows10-2004-x64

3

dfsdf/dede/php5ts.dll

windows11-21h2-x64

3

dfsdf/dede/开始.bat

windows10-2004-x64

3

dfsdf/dede/开始.bat

windows11-21h2-x64

3

dfsdf/php�...�.html

windows10-2004-x64

4

dfsdf/php�...�.html

windows11-21h2-x64

4

Sharing

Copy URL Twitter E-mail

General

Target
1_0048481261.rar
Size 1.7MB
Sample260420-apy7ysat5y
SHA256 6844c65ab7fcf78fbecf910152cc13248f041a5b4857430bc5ff87a4ede4fd9f
MD5 fb6f74a7fd59fcbdf56065f81d8f06cc
SHA1 f7d4d3a86abbc559f8435d05f5a33d2157f76293
SHA512 d85483faa5e2b4afc14669466a378ede090630a9b2628f7dea8c149776fbf100cedaf74518a8b786e1d3b54c28f42ffcd770ce1a505cbb7fa3082c0247548a67
SSDEEP 49152:ARgv/C1/6g6uSSjyJDjUt3cK5QT6WGbIzgM+CLo4A:ARgv/Cl67et3hQT7GczWCLo4A
TLSH
T165853375B50AC8D9D63DEE912E5DF3A80408898F3A91A7208335B58D59F7DFB8CE019C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

dfsdf/class.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

dfsdf/class.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

dfsdf/dede/php.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

dfsdf/dede/php.exe

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

dfsdf/dede/php5ts.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

dfsdf/dede/php5ts.dll

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

dfsdf/dede/开始.bat

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

dfsdf/dede/开始.bat

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

dfsdf/php一句话客户端.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral10

Sample

dfsdf/php一句话客户端.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  dfsdf/class.php
- Size 41KB
- SHA256 400176d40bbbfdd22443b21ebb45c8d84526e89f48979f361a2bbd0aff3f8805
- MD5 6f235711ad3ea60d49c935747c259b1e
- SHA1 a771296a70dfcc68e33dcd67fcd5399d76e37952
- SHA512 dd1fc4f9d5baa91ba4cadbfb3adbf82392ba80adf611f2ccaeadc5a8ae91715cc6e5af505ffb4ddf303f0432a225bfbbd3bb1692fc8088c58bebc381d17c2b4b
- SSDEEP 768:9Bh0zsCessU4Su9j2QdB+FKsOfo3leYwCY:3+sSA9j2cwKsOfo3oYwCY
- TLSH
  T14713D7E0B400CED492724AED767A2985DC9E81D74204DF48748E79B2EFB889703FD9D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  dfsdf/dede/php.exe
- Size 28KB
- SHA256 e460f75a2f6597301150c12504b6acee43a3e1819b7464230bc45039faab5c97
- MD5 86d68e31618a3916896a1327deabc5e9
- SHA1 62adc0df2428d2b6f9d97d1a7fd530e2c8510ee7
- SHA512 e4c12def9e672d00768f1ca6f56e89dfc9801c4e7fbb7b3336c99860e5e2b749c073db13c148c8efa5dd857202df9cb5d0e8db38dd07b361622c0e864a5b440d
- SSDEEP 384:6SWJ7AGBk3vG6L6kpP2906+FBnezZGAGyNOtKD4xA:6SA+3v7WkpP265iBufA
- TLSH
  T16BD2080B06651475D3E4813132E6A677AA37B5430938EA3BBDCCCEC85F15960DDB2A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  dfsdf/dede/php5ts.dll
- Size 4.5MB
- SHA256 2d43933bc303756ba70d79b78f617eb732b9dab9b021f7cd53fe4d047f20ae34
- MD5 510d9ba73d946bf123b4e9104180e599
- SHA1 3f001ed48033c6891436cb0fadd154e21fa1714c
- SHA512 40a20be6d6b2d52d62933ddfd011f8fa53044f9d5e51669b339360c6503cb0933020a57736622df58eabda0d4d3b5d3e557b6434ae682a94e35d843e1ce97c96
- SSDEEP 49152:PYo8J3eG80UxTRU2kzTlGh5mz08GnnJMVhQGElW8xRjPY3QT4uscKu6GaXUT4IBf:Qow3eG80OTRFkSeVpElW96JBAUZL9WC
- TLSH
  T15426B042F28380FAEA4511B910BBB33FAB354E47551395D7D760FD825D32271AA3E38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  dfsdf/dede/开始.bat
- Size 90B
- SHA256 f422710e0bcd4ec20a859f0c08e816c73d582ddb214595a2a1c6019256fb8592
- MD5 7fad4659169140c94b26b4033fbcf63a
- SHA1 407ccc6e59ff9fe0847a74f10747d42b1d15bcc2
- SHA512 130182e612636f478083c3dab6b17ab682bc19978314bae99d15db3b5c48024eaae4a26a377c862bc2b0c7114690eee2891dfae496a8bde489d0d42d5cbfd24a
- TLSH
  T1C2B022EB0030C8FA083A8CEF00E33BC33CC300830880E2C0F888003E8C80088C22E0EA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  dfsdf/php一句话客户端.html
- Size 25KB
- SHA256 b962264e68d72bc1a9b119ee8e6e90bbdfd37c6de8ec4f647c879b6b24ada57e
- MD5 abdd0254ed64f4d8e9bf9f7959b46cae
- SHA1 a332133b4300d5f27c9977d35d3297de65cf6b7d
- SHA512 83d8979b0715316db91074dd1f17b3e2518fd0ad0d945a3ca6c733283b751bf279a934a0d6ad55310d4a4be6d5d144678d06b98a5b42349678717afbd9c8279e
- SSDEEP 768:VRE80Js5lbontxfBMhbrODLh4CIfqXq8gBS1P5EBlBKzPz3AV57ftP/RZsx9L:VRE80Js5lbontxfBM5rODLh44
- TLSH
  T1B6C2ACDABA5C6908C26B1FBF017E3AE159323B835391DCF42DEAD24C2914F68509B537
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

© 2018-2026

Terms | Privacy