4e1e30c2b283ca2b1a915279725dc07e76e5b1621936d4b8e7a50d05ed7e5a49 | Triage™

Login
Reports

Overview

overview

7

Static

static

1

M4X_F1/Don...ent.js

windows10-2004-x64

3

M4X_F1/Don...ent.js

windows11-21h2-x64

3

M4X_F1/Don...ver.js

windows10-2004-x64

3

M4X_F1/Don...ver.js

windows11-21h2-x64

3

M4X_F1/Don...er2.js

windows10-2004-x64

3

M4X_F1/Don...er2.js

windows11-21h2-x64

3

M4X_F1/html/menu.html

windows10-2004-x64

7

M4X_F1/html/menu.html

windows11-21h2-x64

4

M4X_F1/htm...min.js

windows10-2004-x64

3

M4X_F1/htm...min.js

windows11-21h2-x64

3

M4X_F1/htm...min.js

windows10-2004-x64

3

M4X_F1/htm...min.js

windows11-21h2-x64

3

M4X_F1/htm...der.js

windows10-2004-x64

3

M4X_F1/htm...der.js

windows11-21h2-x64

3

M4X_F1/lib/Proxy.js

windows10-2004-x64

3

M4X_F1/lib/Proxy.js

windows11-21h2-x64

3

M4X_F1/lib/Tunnel.js

windows10-2004-x64

3

M4X_F1/lib/Tunnel.js

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
M4X_F1.rar
Size 14.8MB
Sample260425-2splgacv7m
SHA256 4e1e30c2b283ca2b1a915279725dc07e76e5b1621936d4b8e7a50d05ed7e5a49
MD5 66a0074ed1c1abfb21ba45f417fb6e1c
SHA1 d81a6dba86a12d4a5c27ba2628317bcb0fec4a70
SHA512 7abc265e927a5e2c57766fc8a9879318af301d3a3faf84d59c9d5df61c7bef861d1ece7bd84f34db33aa4354cd7e92aa61579f89afd88034ebcecf4d12bfa0fa
SSDEEP 393216:ioFT4BO0ukc6JuT4amI2BksIA6TncLqj+yLDqaia3ni7:ioFT4BO0MHQBksWbcejtDZni7
TLSH
T1A7F6331946227072E6307D929FCCA76F649B996EC41EB2510C3BE85A20C47CF93E977C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

M4X_F1/DontEdit/client.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

M4X_F1/DontEdit/client.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

M4X_F1/DontEdit/server.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

M4X_F1/DontEdit/server.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

M4X_F1/DontEdit/server2.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

M4X_F1/DontEdit/server2.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

M4X_F1/html/menu.html

Resource

win10v2004-20260130-en

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral8

Sample

M4X_F1/html/menu.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral9

Sample

M4X_F1/html/raphael.min.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

M4X_F1/html/raphael.min.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

M4X_F1/html/wheelnav.min.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

M4X_F1/html/wheelnav.min.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

M4X_F1/html/wheelnav.spreader.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

M4X_F1/html/wheelnav.spreader.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

M4X_F1/lib/Proxy.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

M4X_F1/lib/Proxy.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

M4X_F1/lib/Tunnel.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

M4X_F1/lib/Tunnel.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  M4X_F1/DontEdit/client.lua
- Size 11KB
- SHA256 92a4fe1bfea4e35ac5f7f3d17d96727f4cc07efa9e6eaa4d6b8b0cd385f3b375
- MD5 777af42f6d57cf1bd7830c432738ad77
- SHA1 66a48818bdc8d20253ca88429310c0c3e0782470
- SHA512 5102feebba4b3eef9b28f4c89e86824471a850b590407ae54d25a340ea07f939d2ccca24ced31936367e0c36eea4f854fe9c91b145ee65eef7dcd22e9611f713
- SSDEEP 192:0B/gQV770IT1fjC70t4MPcb4J70gex1N570p4WKlZ70zLX2O70t4La7l70yeGH7f:8XfjC/WpW3EZ+TeGHDTtG/s
- TLSH
  T1B93254BBA17D487C8383D23D94C38C466D4EE1B3884501B7F64E8928CF5823BE5DB8A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  M4X_F1/DontEdit/server.lua
- Size 214KB
- SHA256 468ec91d845192587b4d858bd23370d814b32a55f58fe70d488421dc274daf7c
- MD5 e3b464bb92a432d3c30e6d87fab4996b
- SHA1 d48b8b63f85a86a68480636fee939325784e6889
- SHA512 e311bd3e532ad587a5b6d10101e7c7f45020717d626e00832afb28af02fed08d8ae81e84de01cd4d2b33b803d25c4fde747c1c43c76422f7911e7e93c48a712a
- SSDEEP 6144:lpweixzqXb0M5MmjEYjM1DLBjLmpJyb1EnCKQwQfQ:lpRixzqXb0M5MmjEYjM1DFLmpJyb1EnB
- TLSH
  T1E2245213B586197215B3B754CC3B2411F0B25613223A9225F83C26F92F7E2DD62F7EA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  M4X_F1/DontEdit/server2.lua
- Size 74KB
- SHA256 813c64f961fe63ba53d1a26e0161948aa4c697ef97fe63f9f610e1dee3fa6d66
- MD5 06f5bef8d74b741652d8dc32ed5c8f06
- SHA1 1e8b8a50c18e48ad959cd2b1073cd367e1fd7b67
- SHA512 8433d18f166e437b1068f4df724679c9ee05ebc84c70c174d0e609593af11429e4cca9a2edcad359a37e3c1c4a51822e9e6f3dfd3fbb67f17fcc744abcd1749e
- SSDEEP 768:n9WDOSOtZLfrGkdU8DvrfvrtyIJYpPL7fwTzeYIrBpRAukLzuADL8xPIbE46dNAh:n5+bPIbExdNARKN4gVsQN4S+N4AN4i
- TLSH
  T15773430A728C14166AFF7293BF7A6E55F89CD3336122615232FED53C9F7C00A45B2A94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  M4X_F1/html/menu.html
- Size 6KB
- SHA256 4e028349b7fdda00be78dbeacb1e9aafda4d9a4cc3ce24eb42dd02464e7d7660
- MD5 62dbc0e83138bc9235ceb78bf8db737d
- SHA1 d91c9d95f6520b74b139f542e8d741d714917616
- SHA512 ba092ac61969dbb24acb030fb5ad88109021521377192671440f52be1cca5b4cc627d7f91821cd861d981370be74bf522fe44505216fa4a11b4b2efc7258a4ec
- SSDEEP 96:dFE7JKTyGoYIsoD1WhNdvvOTaJdJbUFqPIRZSQaokM:47AIYIsoc5Lbp3QIM
- TLSH
  T1D0D1CDAA690813E494373325A799C784FA7AB12F01154168FA5CFC776F74CE498E2F1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral7 behavioral8
- Target
  M4X_F1/html/raphael.min.js
- Size 170KB
- SHA256 09305aa675f85f5184b7bbfd7290e34b2572496578e8cea3c9ac00a754949c7f
- MD5 efd6dfe435baf1f2ce3590530c9361e3
- SHA1 1cf5c630fc2f2c06714d1cd7fdfe2a06e28c4d89
- SHA512 272fadfdea982acd3e43b621cd44063a02218765e5c98dfbb089a93b3715c92db35f592b213b0d873889d98bf3de5cdc785618f5eb263e08fc651e9ae1b50af7
- SSDEEP 3072:VllYjVsxuP38cIxDl/qRh1hTkUuJeX9YVj3VfmNCeraL1:VllGVsxuUc2/qjkUuJs6jQNCeraL1
- TLSH
  T13604321A6BE325359203F03D8F6FDD09722A540B1E99FC1A394C61A49F1843C5BB9FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  M4X_F1/html/wheelnav.min.js
- Size 115KB
- SHA256 6d8ac37c475d5895e33d12e2ffe67ce9d5e139e6b282031bc12e9c85cad0352b
- MD5 fbf1aeb05daebc17405da588c7a8c606
- SHA1 90082af5b8e3a53b36907a3ac46a0e5c0403ed1d
- SHA512 feeababa2fd41f2938a34d715ba6902a8c00a58b4cae8f55dbbe52da1f1c5efd5277c1efff9deef9d0fd790ec603e66500ff93d01b5c1072332f10b0aebc9bf2
- SSDEEP 768:8RQC/bzdHuDFH+NNEykfj0yWE0oaSoHJOghW4IWyGYLxMRWyfYLxgJ3viSJ6wvXv:8RpwiTe05lVlN1NnaYzs2fK7LoX728SO
- TLSH
  T175B3FA527BAD1570CA57B2298DCA5B886167991F0E2628EE796C45CF0F8C02CC7F2F35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  M4X_F1/html/wheelnav.spreader.js
- Size 18KB
- SHA256 c1c76125f4c4a7a06e92f7f7a2fd34ac255d3037f28c50825aa6a1e04786e4f5
- MD5 f549fe76beff788cedbe22731f1d494c
- SHA1 a77803984c227feb9d24d874328db873fa6da92a
- SHA512 705cf47cd95762d05550abb086f6b25c01578967a324562ff045a1ec279e393041e1e2fe0495593e455a24c065568e2568306576178b0d0cdbb810f75ddead64
- SSDEEP 384:9BgaxNWG0fofJCKTuN/lr6fMGDjKKaHJnqoSK0HisnqoShsHisXqoSWHisnqoY5L:9DxNWG0foUNlr6fNDjKbHJqoShHDnqoy
- TLSH
  T15E826B2576AE21708E573728CECE1E6950E3A407165259D87B6C8ACF4FCC798C672F70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  M4X_F1/lib/Proxy.lua
- Size 1KB
- SHA256 9b86407adac84e5b2855655dee5241b74e963bbced31961f777b5ed6527e7829
- MD5 94689926d5a86cf6e70353a267fdbbcc
- SHA1 a65641ccf3fc297c9d9779d617d1fd54acbb5c25
- SHA512 6aadf23fbdaf5c2238d58a9ef80d504d6c59fa9a00e24bc799e1d43d09c6f101072dd43ec52d61b18dcff816d0cf437c49bcee7b26daa9eda550065872f8640a
- TLSH
  T1FD31104F720233A08A3AB771958F1B747A7CF00B461854BD60C489817F6391E82D7E7C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  M4X_F1/lib/Tunnel.lua
- Size 3KB
- SHA256 7befad1e21094087b091078d49d543d44e1fcd480638559d6a37254800fcdd69
- MD5 cfe7e8df4cbb289ea6cc1116ffb8e66b
- SHA1 2762665ec8b66171e1f2616b93222c55189f0d7d
- SHA512 e36bfb257facaf4bb1944e6905076ff883f7af4e648d302dba8824cd7984748ddd0e167b361579a6665e1b6e0695b95285ece85ec22410d2b959e52bbac4c0d7
- TLSH
  T1C17123A9629236619623EA68DC4F6735267CD013125C54A934EC82D27F31E1D83E7EE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

© 2018-2026

Terms | Privacy