arsink | 041882276ace2132d030c1287b4734defd780bc50d734efdaced8c133837a0ff | Triage™

Login
Reports

Overview

overview

Static

static

com.eewx.h....0.zip

windows10-2004-x64

1

com.eewx.h....0.zip

windows11-21h2-x64

1

split_basi...es.zip

windows10-2004-x64

1

split_basi...es.zip

windows11-21h2-x64

1

assets/cc.html

windows10-2004-x64

7

assets/cc.html

windows11-21h2-x64

4

assets/final.html

windows10-2004-x64

4

assets/final.html

windows11-21h2-x64

4

assets/index.html

windows10-2004-x64

4

assets/index.html

windows11-21h2-x64

4

assets/method.html

windows10-2004-x64

4

assets/method.html

windows11-21h2-x64

4

assets/pin.html

windows10-2004-x64

4

assets/pin.html

windows11-21h2-x64

4

Sharing

Copy URL Twitter E-mail

General

Target
com.eewx.halidoms_1.0.apks
Size 4.0MB
Sample260420-xk4cfaew6x
SHA256 041882276ace2132d030c1287b4734defd780bc50d734efdaced8c133837a0ff
MD5 6341f68ed8859df64e75c6f8ab72f517
SHA1 e9a900fe8145fa96bf7a6983980e783f8aad6801
SHA512 f48756f1c41fa0da012e8a0a2cb3a9a85ab40ffe4f4eee367a422a385922ede6cc790d1ad2867a14005ade4a54607fcef75b7990e99f321050531cda8080d1a0
SSDEEP 98304:7TALB9ppnoW8GHlAEX/OriLdUTorcbvkJcEEZod76V:HALB9PoWVlp/OriyosvaGcI
TLSH
T1041633E23FA489D9FF76503A1C9E8969C3257E5C168D81CAD80E110CD16B05FEB48F7A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

arsink ghostbat discovery infostealer rat trojan

Static task

static1

7 signatures

rat arsink trojan infostealer ghostbat

Behavioral task

behavioral1

Sample

com.eewx.halidoms_1.0.zip

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

com.eewx.halidoms_1.0.zip

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

split_basiccomponent.config.res.zip

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

split_basiccomponent.config.res.zip

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

assets/cc.html

Resource

win10v2004-20260130-en

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral6

Sample

assets/cc.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral7

Sample

assets/final.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral8

Sample

assets/final.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral9

Sample

assets/index.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral10

Sample

assets/index.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral11

Sample

assets/method.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral12

Sample

assets/method.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral13

Sample

assets/pin.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral14

Sample

assets/pin.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  com.eewx.halidoms_1.0.apks
- Size 4.0MB
- SHA256 041882276ace2132d030c1287b4734defd780bc50d734efdaced8c133837a0ff
- MD5 6341f68ed8859df64e75c6f8ab72f517
- SHA1 e9a900fe8145fa96bf7a6983980e783f8aad6801
- SHA512 f48756f1c41fa0da012e8a0a2cb3a9a85ab40ffe4f4eee367a422a385922ede6cc790d1ad2867a14005ade4a54607fcef75b7990e99f321050531cda8080d1a0
- SSDEEP 98304:7TALB9ppnoW8GHlAEX/OriLdUTorcbvkJcEEZod76V:HALB9PoWVlp/OriyosvaGcI
- TLSH
  T1041633E23FA489D9FF76503A1C9E8969C3257E5C168D81CAD80E110CD16B05FEB48F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  split_basiccomponent.config.res.apk
- Size 176KB
- SHA256 27f81f8a1879e209189cfc84f81655cf8fadfc78868af3d0bf7bb236206c8d8e
- MD5 29e09749f015f887fe6e779dad05cb3a
- SHA1 1a1c11732ca92ac61ecaef8baec99915013b1cdb
- SHA512 ca54d7fcb82f4cd2aeb6cb28d91f1c2c8334e66374dbfa17e65cf434fcc27aaba8761fe098efd4c302c6d86eefd19d2b9081d93e6480c09bcb2cd0e774fd65b9
- SSDEEP 3072:/G9gsVhaugPyRvs0N6OEnThAP+dcIfyyPcbXLQ+AvlCGapV6JkFzVz:Kbh/QyRvVNHGhg+lfyVLQ+A4GafzzVz
- TLSH
  T1F00423F33371E05EE11F3C30541E8E60722F75E39942641E46B8A1D767B1911AF9ACAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  assets/cc.html
- Size 6KB
- SHA256 e553e8d50a326619404057f702846f0329479e81f2554c0bd5c534b9349b320c
- MD5 79ab11ccd3f263f587104e609c7e6336
- SHA1 899ba68e817e6cb4ad3c0f5a4e76f34b9a1be28c
- SHA512 4193a455b8320fadda09312e5b2dd44a6d80249af882e7e9a8fc9bd4280eb18de1f441e2b8ef3ba7138a2b36dd31b924b1655fb84bdae0b18ef801f3bb089c96
- SSDEEP 192:NCNa47XlSe9kwxwD8Vu2Wdua/yEfFluIjJNua6EiMA2p:N/qjdxwD8wFdpGwCEiMAk
- TLSH
  T1AAE189D227B61010B65752E477D39B5A77285003AA89CDBC7EDC9098CF84AC486B7B9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral5 behavioral6
- Target
  assets/final.html
- Size 4KB
- SHA256 a13a35e2ea3cfc023381487e4ccf9338a544ba32e47a4d272c4c2149a38e6cf7
- MD5 5fc8d3b0eb86c6377b99fc960b9bcabd
- SHA1 628f558cd5386309dd28f4b82dbf8b40b29245c8
- SHA512 5f51724a536b5fbda50f6b4cf401adc65ae0d5e8020669476afcf26b0578ee0615ae1cd492daa604a0332ab5fafa2df365801041ff1aa69372a6c27100197ca5
- SSDEEP 96:NxcTJcSCQi/qExYhDib5QyAxrkl2Kb/dp9x6nhfrhHwHWiMpLRXjYdBUiVr:NWTJcSCQi/xYhDib5FAYl2Kb/hsBKYEd
- TLSH
  T1CB91405B676320527C56B4A537F7573A3194A523D10BCEA83FCC2288CFC5AE469D274C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  assets/index.html
- Size 13KB
- SHA256 de689e10bab60ec5a656900f4a5bacfe939a090e5829c4bc82f35b0ff9a495a4
- MD5 49debd0f809d2ebf82041d8b9904f28d
- SHA1 9f3bd420b00c714554f1fa23da8d6572f16eb508
- SHA512 3aa87c9501ace6acf91728e615df78f6df04a20b31b44a4b463bf5b531c506cd611639b049f1ef0ccdeb6743d4b283c9dae6363a369aad423c8066c3a672c69a
- SSDEEP 384:3bA4yIgA8rqrf1Vee/bCU/buZUsgj9iI550qWIujbUc6JYxioiEImp5:9YkXJqTbjAc6JjFEImp5
- TLSH
  T13552C97212F36523255B422677D72A4A7272C007C746CE087D9C6395CFCBE869AB73E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  assets/method.html
- Size 7KB
- SHA256 7835b94b50a6e1865cd6fddfc07b6fbf05217665467d0f68349514b8936e0b7e
- MD5 c03497b44648d2636330a08f125a0868
- SHA1 a9ee590947b5fbd21033c734b9ba268d47285093
- SHA512 7f0258f98311c82613ef9c892e919808bdb499c3827cf3c22b29fa1c3ed655d31c5aaa8578a8441b0f562e6acf885152d34c00ac40eb8c74559ef0f379035c3b
- SSDEEP 192:frZdOwkN5pZK644zOA6Bc1lREEOSifpFClOFQYEIPGfUca:frnOlNF/4oHiEluQWmXa
- TLSH
  T15BE1A5D236F11422764380D82ED39F8BBB994407540BC9B97AEC01DD9F88AD58A73B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral11 behavioral12
- Target
  assets/pin.html
- Size 6KB
- SHA256 53b29bb4b1cb189b87c4c04353ffc63b4cb91e7edcef20d6f94fe663843cf1bc
- MD5 309455d46f0baf1ce1b64b4cbbfc85ef
- SHA1 e844a9a7db2d92af9bc6fc90d785fd1199e48120
- SHA512 dbd77d6cda25438945a7303e8d164c51b4265a25ac5c52bbaa0563fad9bc6e33d73fdfe2e0a972cac3d40a57fa874bae95597c04e8944ac505cfc944f208bc2e
- SSDEEP 192:QEG4UKa+m/FU/CNtfa44444Omn4xJX0yTBaeo2:QEGFU744444OPDdaex
- TLSH
  T18DD1534211E31041A153E4A52FBB671BB261A407964EC52C3FCD62ED4FCB989E6E378C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

ratarsinktrojaninfostealerghostbat

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

© 2018-2026

Terms | Privacy