06e2774bf6828f594e7d79e0f3c0cf90dbd999617c91eff62204cdc62d5fb992 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

1player_api.ps1

windows10-2004-x64

3

1player_api.ps1

windows11-21h2-x64

3

api/get.ps1

windows10-2004-x64

3

api/get.ps1

windows11-21h2-x64

3

api/index.js

windows10-2004-x64

3

api/index.js

windows11-21h2-x64

3

api/live.ps1

windows10-2004-x64

3

api/live.ps1

windows11-21h2-x64

3

api/panel_api.ps1

windows10-2004-x64

3

api/panel_api.ps1

windows11-21h2-x64

3

api/player_api.ps1

windows10-2004-x64

3

api/player_api.ps1

windows11-21h2-x64

3

api/series.ps1

windows10-2004-x64

3

api/series.ps1

windows11-21h2-x64

3

api/timeshift.ps1

windows10-2004-x64

3

api/timeshift.ps1

windows11-21h2-x64

3

api/xmltv.ps1

windows10-2004-x64

3

api/xmltv.ps1

windows11-21h2-x64

3

get.ps1

windows10-2004-x64

3

get.ps1

windows11-21h2-x64

3

images/index.js

windows10-2004-x64

3

images/index.js

windows11-21h2-x64

3

includes/index.js

windows10-2004-x64

3

includes/index.js

windows11-21h2-x64

3

panel_api.ps1

windows10-2004-x64

3

panel_api.ps1

windows11-21h2-x64

3

player_api.ps1

windows10-2004-x64

3

player_api.ps1

windows11-21h2-x64

3

requests.js

windows10-2004-x64

3

requests.js

windows11-21h2-x64

3

timeshift.ps1

windows10-2004-x64

3

timeshift.ps1

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
megapainel5dns.zip
Size 239KB
Sample260423-av58fsey8z
SHA256 06e2774bf6828f594e7d79e0f3c0cf90dbd999617c91eff62204cdc62d5fb992
MD5 ed566573404c715417012b1507e187b8
SHA1 e46b4ce0ac455cb11ffc61fe2b8766113e9e4795
SHA512 11068f1733d368fe93ccf124562aae08da3c57bffe1ee40d091a34c3270977c6c95a549f324ebed55b4f84e56cd8d24054c1e68845dfeede3213665cc5d4ef49
SSDEEP 6144:bxNWecyLW66dQRccNqQxfGFpnPwikX3eTRDEyqnAV4J:1NW8WTcZxf0nPwZ+TRDDOAo
TLSH
T13E34127CE3C15852C6DEDC71AD8D0FA6B4733D8F67246A5E1F403A03BB04A487A36994
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

1player_api.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

1player_api.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

api/get.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

api/get.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

api/index.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

api/index.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

api/live.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

api/live.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

api/panel_api.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

api/panel_api.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

api/player_api.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

api/player_api.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

api/series.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

api/series.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

api/timeshift.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

api/timeshift.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

api/xmltv.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

api/xmltv.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

get.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

get.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

images/index.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

images/index.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

includes/index.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

includes/index.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

panel_api.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

panel_api.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

player_api.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

player_api.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

requests.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

requests.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

timeshift.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

timeshift.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  1player_api.php
- Size 3KB
- SHA256 5aec92330a181c0e102c6bb2103f303ce4c1442b0a9b1f45f9c4a507a3185750
- MD5 2f54accc414cf50ec2fa2972de2d437a
- SHA1 c0d22cb94f5a99f30843b22960dd1c1a4c379f7a
- SHA512 61c8dfe85c70388739c9c44ff963ee77b7c0870b864bfcf59c0b06110fd8f12d3e9c89d8957adc08a0e88e3298f55236315a6a8cc1364c0cef7920012ae890d0
- TLSH
  T19061644D26620616853E828DB3AF116D61B8080B3484C544FEFD53CE8FEB2CBB67B0C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  api/get.php
- Size 3KB
- SHA256 7f2b4a152f5a6b87e6e4c62bf1d4d5467d721f330673293e06945ff6e2a233eb
- MD5 0c11ed51ebceb4a3c95d8929714fe969
- SHA1 8b56cc15a5ad85dcdc6eefaed8fe904fbe92580a
- SHA512 207346748326273111d1cfad203422933db125e1310579fd45f5aa05fd66d2543e590ae9bd8989eae77223706345cf1ee71c80f900807568171960ea72e4e265
- TLSH
  T1E571524C26630626453F868DA7AF516D20AD085B3480C548FDF913CE8FAB2CFB67B6C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  api/index.php
- Size 7KB
- SHA256 51787d70a991b0d9676e69ff8f75b68408eeaf5557250e81d25e738c6d0f9db0
- MD5 60021f06d41b2d307e0bbf7cd754ae7c
- SHA1 f332afe20df9c0383bd22c9d21c0fc1aa4d8abb3
- SHA512 527ddcef5f3feff8a6df183180a5289e1fc50b60e03749c2931b41b0c7ac99ef508a9b56421f0bdc2e446d85d36d80ad53d5068ca6cb72b36da20d60ece4804f
- SSDEEP 192:QxhQ+HYhkCUcCdf/Y83hYCk+AhaaWHPrC49iwfwdmAjcaaYQro7:mfHokCUcuf/YpcPXFiQro7
- TLSH
  T1ADF18342B2E6502989794F3F2B36DA15A99400020913718FF94EB141AFB5A2CF779EFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  api/live.php
- Size 3KB
- SHA256 fe9a1fe11cf153111bd42a0e5be915005a884e0fa58222936d65e6a53968e5e1
- MD5 dd7645db866578a692f822430badc964
- SHA1 00efad93f76325f4b57fdc61fdd1b2552ed165a0
- SHA512 e0bb43744ad34ad2061bfa3a8e7c740e015e86f33a75a97de290ce6d537b8d146d49a5f661dbf49635c1caae275d5ac936ab8d619f7590c696d49033d1a1396d
- TLSH
  T15561640C26230626453F868DA3AF516D21BC084B3084C548FDF913CE8FAB2CB767B5C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  api/panel_api.php
- Size 2KB
- SHA256 29296ee05ddba37e9b2c2e24c4fcf2618f4de7da44941e21f06fde625b3853a3
- MD5 5dcb0cb276a8d874621de553428361ad
- SHA1 daf5e3f168f80ec868ae9562ae5789b1dc994626
- SHA512 2a3f7275e283ec9dc6b70d1076badf58bf0cba9f317c14c3e27d31dd5fb9ecc3bf7d738da0e81f2dc929fdafe5fee2de4325f01df6f13cd1d1e1ff524f72c13c
- TLSH
  T15851344D26220651862E868DB76F16BD21A9081B3444C504FEFC43CE9FDB3DB7A7B1C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  api/player_api.php
- Size 2KB
- SHA256 5441c03436fbd987a7922dcf23322790b29815c36a9f7ac3a48cba9e1cb6bcee
- MD5 c689437a50e68ede01a4a3e2b428144c
- SHA1 0f728e9289b9418e93741c0d725a3780d0ff6ab6
- SHA512 f1356e9ff6a1cdb7e620bcdbdbaf03a65fb8d300dc0904f423ca3c102b49609da67ed9f39d3378207aa9bce04b6aac6d60cff2e76f1157a6e71daa1b8d3b553d
- TLSH
  T11051344D26220651862E868DB76F16BD21B9081B3444C504FEFC43CE9FDB2DB7A7B1C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  api/series.php
- Size 2KB
- SHA256 d83b8f66135cac80e99556cec0e00f033443f45b7ae5e73a482eb9875340288b
- MD5 fa79590f251427b74edba05f43fa254e
- SHA1 ca8698e1ab2ded54291add04b9add39abe4e7b3e
- SHA512 8b342db1ccc95bc3315cb49f566c72cbee0ab5a2e208711090c828fe708b30acc84d3d994cc35e6a507faaad89772d86dc5d1267880e0a6f212612231a7f584d
- TLSH
  T18251204D26270622852F864DA6AF15AD60A9084B3484C548FDF853CECBAB2CB767B1C8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  api/timeshift.php
- Size 3KB
- SHA256 94cd6def4dea28fecc68b85a388a86cab1d4fdbb2ed4e70617597ef5b8bee23e
- MD5 de938f10706aab243aadd29d42c55f00
- SHA1 29e903811bba3eb772a506f23f4fb9ac87fc8c9e
- SHA512 fe8ea41494850ebc87a67af13a1187c0d9764283ee66437fc8a62d6b1e455701c6e1e71812f30facdd7f6825c29873630439b6c5526cb6e2626d586e25174c10
- TLSH
  T12661424D26230626452F8689A7AF55AD61BC085F3440C548FDE913CE8FAB2CB367B5C8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  api/xmltv.php
- Size 1KB
- SHA256 89afa04994825c76e0f1759ae11b887570407c55cd3e7d853f1b825b335f18c2
- MD5 d274a76f425a54826129af74fe8a8b3b
- SHA1 149e55161025b742737a3750df216051ed2696ff
- SHA512 0dc84c719c29b912b6d74c0f888c06c749e8650b214f23bc8bc6f82e4c57d6bf4f99b2a091192183cf8466c96b4311e0be1c4747e51fe0d4243ba4f595551f22
- TLSH
  T1663102C96A230A66417F89CD577B01ED216E08173454C548FDA843DD8FEE58FBB751C8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  get.php
- Size 2KB
- SHA256 01f0c35a09bf73ad008e90b336e7a9474550ad5863699251206ed2cc3d642e47
- MD5 c91e105f110b1479a27274cdf9be51c5
- SHA1 9eb5e3e1c35768f993da04c702c62ad533b2e60a
- SHA512 0e085d341de9c9cc4a5bffec5d321cbaf87839365cf6182e9bae9b69bf9f4c01524f745b06ec618dfb40324d786a9b64411f8cec95020617b8fbed23a5353704
- TLSH
  T1D351244D26220652862E868DB76F16BD21A9081B7484C504FEFD43CE9FDB2DF7A7B1C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  images/index.php
- Size 8KB
- SHA256 125f2bd7d5fec15cac287fc9d3f535de3ca664ad6c82f3fbfa3d0984ba46ffe6
- MD5 fc4b56b6405a6a0f7f9b2b720f6bf119
- SHA1 d67e3a0ffa80d88b42be88b7525c9aa9edd45fa7
- SHA512 3b4bddcd9ac606642bbe375fb62b7396690092c49be3b9c7ce9d59d0da8cdca32e591bb14c9849db724e8fe20014318670d081d185d189c4ecc6e38b13eeade0
- SSDEEP 192:QxWQ+HYhkCUcCdf/Y83h1Ck+AhaaWHPrC49iwfwdm8AjcaaYQroG:FfHokCUcuf/YicPXFlQroG
- TLSH
  T141029546B2E750598A794F2F2B36DE05A59400020513718FB94EB241AFF5A2CF379EFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  includes/index.php
- Size 8KB
- SHA256 125f2bd7d5fec15cac287fc9d3f535de3ca664ad6c82f3fbfa3d0984ba46ffe6
- MD5 fc4b56b6405a6a0f7f9b2b720f6bf119
- SHA1 d67e3a0ffa80d88b42be88b7525c9aa9edd45fa7
- SHA512 3b4bddcd9ac606642bbe375fb62b7396690092c49be3b9c7ce9d59d0da8cdca32e591bb14c9849db724e8fe20014318670d081d185d189c4ecc6e38b13eeade0
- SSDEEP 192:QxWQ+HYhkCUcCdf/Y83h1Ck+AhaaWHPrC49iwfwdm8AjcaaYQroG:FfHokCUcuf/YicPXFlQroG
- TLSH
  T141029546B2E750598A794F2F2B36DE05A59400020513718FB94EB241AFF5A2CF379EFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  panel_api.php
- Size 3KB
- SHA256 63628a791b3b3994fae72f3e9b67f6e20952cb92da80132810f8c99f6da03aa9
- MD5 f65081e05130cb0eb53268df3af7cb1e
- SHA1 a0bf38c08d1afe05dae9d853b6051bfd95e1a11d
- SHA512 8560b7c8ab9a1239eee38856a2c9eb39f5a676665a5a80da7a7093f1aff21174e989b97ca2e28ca8457d525e65092cdb37d2d9cbff242d7e80e33951cb11665e
- TLSH
  T1B861630C26230626453F8689A3AF516D61BC084B3484C548FDF913CE8FAB3CB767B5C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  player_api.php
- Size 4KB
- SHA256 2272ed63be347c88acd0eb21ec62ef73d8ff1576bd14888712637f6eb6fd2846
- MD5 329d6886bcb5d4ec3b6f75edbf643a4a
- SHA1 f315d0c390218043e2c6e68ece0be923241d37e0
- SHA512 f8132f542c8657dd72b305da404f39f169aef31d12823f61dc5db3d8660b623e42be2f234ab0bafea9401385dc6672836a42c4c408518d746ad3f2483ccd5c6d
- SSDEEP 96:zByMY3RjL/OUbgyVFo6hQ1IzgkDYygesbr:JYhP/OUdyUQWkkDIrbr
- TLSH
  T1DF91C74E22270915852F469DA6AF016D21BD480B7148DA48FEFC43CD8FDB6EBB97B0C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  requests.php
- Size 2KB
- SHA256 8c7d643a2d1b94c8502c189a625f970ee2b14dba11681ff573cdeb67d7e35761
- MD5 61f893b7c2e4cab5f52c09960bc31f08
- SHA1 a6cc4ef28acbe96709b6885d8769af35017d1790
- SHA512 32c7b0b90d3f25f5cdcfdafb4bff14b49e4eb6bf8949799e54f679eae9a4e3c2046dcbdb726a2b9f4c61b6436638a2faedf7a1929abc120c7ec584baf94dfca9
- TLSH
  T1C651123539EEC1215116C4AB6A2A5E09B89691276D0B9C0C3B5FD2E99F87CF19F8F006
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  timeshift.php
- Size 3KB
- SHA256 2f2301ed4437281f96d0d01cf0081cff503f4812da63b7b69984b02ec863536e
- MD5 6c0c3682fb9dcba4c2f2505cadf42572
- SHA1 f2f94e2266c28e0b74a8c902ab86e24e01147009
- SHA512 00e72f6c54cc9c1cdc7dad0aaf6116899995a65163288204633cbe683efedcc50d5db89ab2f1f23a2db6b492d48d7dff5c851c23ea8e543c40510db43241d2eb
- TLSH
  T1F361424D26230626452F8689A7AF55AD61BC085F3480C548FDE913CE8FAB2CB767B5C8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy