400176d40bbbfdd22443b21ebb45c8d84526e89f48979f361a2bbd0aff3f8805 | Triage™

Login
Reports

Overview

overview

4

Static

static

3

dfsdf/class.js

windows10-2004-x64

3

dfsdf/class.js

windows11-21h2-x64

3

dfsdf/dede/php.exe

windows10-2004-x64

3

dfsdf/dede/php.exe

windows11-21h2-x64

3

dfsdf/dede/php5ts.dll

windows10-2004-x64

3

dfsdf/dede/php5ts.dll

windows11-21h2-x64

3

dfsdf/dede/开始.bat

windows10-2004-x64

3

dfsdf/dede/开始.bat

windows11-21h2-x64

3

dfsdf/php�...�.html

windows10-2004-x64

4

dfsdf/php�...�.html

windows11-21h2-x64

4

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/04/2026, 00:23

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

dfsdf/class.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

dfsdf/class.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

dfsdf/dede/php.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

dfsdf/dede/php.exe

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

dfsdf/dede/php5ts.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

dfsdf/dede/php5ts.dll

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

dfsdf/dede/开始.bat

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

dfsdf/dede/开始.bat

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

dfsdf/php一句话客户端.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral10

Sample

dfsdf/php一句话客户端.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Report Analysis Logs

General

Target
dfsdf/class.js
Size 41KB
Sample260420-apy7ysat5y
SHA256 400176d40bbbfdd22443b21ebb45c8d84526e89f48979f361a2bbd0aff3f8805
MD5 6f235711ad3ea60d49c935747c259b1e
SHA1 a771296a70dfcc68e33dcd67fcd5399d76e37952
SHA512 dd1fc4f9d5baa91ba4cadbfb3adbf82392ba80adf611f2ccaeadc5a8ae91715cc6e5af505ffb4ddf303f0432a225bfbbd3bb1692fc8088c58bebc381d17c2b4b
SSDEEP 768:9Bh0zsCessU4Su9j2QdB+FKsOfo3leYwCY:3+sSA9j2cwKsOfo3oYwCY
TLSH
T14713D7E0B400CED492724AED767A2985DC9E81D74204DF48748E79B2EFB889703FD9D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\dfsdf\class.js
1⤵
PID:4868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4868-0-0x000001D09B500000-0x000001D09B50C000-memory.dmp

Download

memory/4868-1-0x000001D09B500000-0x000001D09B50C000-memory.dmp

Download

© 2018-2026

Terms | Privacy