8741635fa15b894ba53efe624789a17ac783b9aecdeaf7386ec46f6484bc03a0 | Triage™

Login
Reports

Overview

overview

8

Static

static

1

社媒助�....4.zip

windows10-2004-x64

4

社媒助�....4.zip

windows11-21h2-x64

1

assets/bilibili.svg

windows10-2004-x64

3

assets/bilibili.svg

windows11-21h2-x64

7

assets/douyin.svg

windows10-2004-x64

3

assets/douyin.svg

windows11-21h2-x64

7

assets/kuaishou.svg

windows10-2004-x64

3

assets/kuaishou.svg

windows11-21h2-x64

8

assets/notice.svg

windows10-2004-x64

3

assets/notice.svg

windows11-21h2-x64

8

assets/opt...j4.css

windows10-2004-x64

7

assets/opt...j4.css

windows11-21h2-x64

3

assets/pgy...hu.svg

windows10-2004-x64

3

assets/pgy...hu.svg

windows11-21h2-x64

7

assets/sid...ep.css

windows10-2004-x64

7

assets/sid...ep.css

windows11-21h2-x64

3

assets/tiktok.svg

windows10-2004-x64

3

assets/tiktok.svg

windows11-21h2-x64

7

assets/xia...hu.svg

windows10-2004-x64

3

assets/xia...hu.svg

windows11-21h2-x64

7

assets/xingtu.svg

windows10-2004-x64

3

assets/xingtu.svg

windows11-21h2-x64

8

background.js

windows10-2004-x64

3

background.js

windows11-21h2-x64

3

chunks/_vi...Irs.js

windows10-2004-x64

3

chunks/_vi...Irs.js

windows11-21h2-x64

3

chunks/chr...MWn.js

windows10-2004-x64

3

chunks/chr...MWn.js

windows11-21h2-x64

3

chunks/fei...VHl.js

windows10-2004-x64

3

chunks/fei...VHl.js

windows11-21h2-x64

3

chunks/opt...EjE.js

windows10-2004-x64

3

chunks/opt...EjE.js

windows11-21h2-x64

3

Resubmissions

04/05/2026, 04:14

260504-etmryafy9q7

04/05/2026, 04:08

260504-eql18sfy5n8

Analysis

max time kernel
598s
max time network
439s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/05/2026, 04:08

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

社媒助手-v3.2.4.zip

Resource

win10v2004-20260130-en

windows10-2004-x64

15 signatures

600 seconds

discovery persistence

Behavioral task

behavioral2

Sample

社媒助手-v3.2.4.zip

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral3

Sample

assets/bilibili.svg

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral4

Sample

assets/bilibili.svg

Resource

win11-20260130-en

windows11-21h2-x64

12 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral5

Sample

assets/douyin.svg

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral6

Sample

assets/douyin.svg

Resource

win11-20260130-en

windows11-21h2-x64

12 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral7

Sample

assets/kuaishou.svg

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

assets/kuaishou.svg

Resource

win11-20260130-en

windows11-21h2-x64

22 signatures

600 seconds

adware discovery persistence ransomware spyware

Behavioral task

behavioral9

Sample

assets/notice.svg

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral10

Sample

assets/notice.svg

Resource

win11-20260130-en

windows11-21h2-x64

22 signatures

600 seconds

adware discovery persistence ransomware spyware

Behavioral task

behavioral11

Sample

assets/options-azv7urj4.css

Resource

win10v2004-20260130-en

windows10-2004-x64

4 signatures

600 seconds

Behavioral task

behavioral12

Sample

assets/options-azv7urj4.css

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral13

Sample

assets/pgy.xiaohongshu.svg

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral14

Sample

assets/pgy.xiaohongshu.svg

Resource

win11-20260130-en

windows11-21h2-x64

12 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral15

Sample

assets/sidepanel-DHBbuRep.css

Resource

win10v2004-20260130-en

windows10-2004-x64

4 signatures

600 seconds

Behavioral task

behavioral16

Sample

assets/sidepanel-DHBbuRep.css

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral17

Sample

assets/tiktok.svg

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral18

Sample

assets/tiktok.svg

Resource

win11-20260130-en

windows11-21h2-x64

12 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral19

Sample

assets/xiaohongshu.svg

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral20

Sample

assets/xiaohongshu.svg

Resource

win11-20260130-en

windows11-21h2-x64

12 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral21

Sample

assets/xingtu.svg

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral22

Sample

assets/xingtu.svg

Resource

win11-20260130-en

windows11-21h2-x64

21 signatures

600 seconds

adware discovery persistence ransomware spyware

Behavioral task

behavioral23

Sample

background.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral24

Sample

background.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral25

Sample

chunks/_virtual_wxt-plugins-CVOG8Irs.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral26

Sample

chunks/_virtual_wxt-plugins-CVOG8Irs.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral27

Sample

chunks/chrome-ei6IVMWn.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral28

Sample

chunks/chrome-ei6IVMWn.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral29

Sample

chunks/feishu-sync-config-DQEibVHl.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral30

Sample

chunks/feishu-sync-config-DQEibVHl.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral31

Sample

chunks/options-BHuSiEjE.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral32

Sample

chunks/options-BHuSiEjE.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

600 seconds

Report Analysis Logs

General

Target
chunks/feishu-sync-config-DQEibVHl.js
Size 1015KB
Sample260504-eql18sfy5n
SHA256 8741635fa15b894ba53efe624789a17ac783b9aecdeaf7386ec46f6484bc03a0
MD5 62612ebac4498996c4d991bd813cfbab
SHA1 5027ae2d5c8558a7a351987fec4d2b546455bcbb
SHA512 726f36a67347f286a9ea34b49309d729eb00c360dbe251b612c82a6cc5721297c8f8711945056173f3c4606ebd7a04176afd952bbbace31e4175fe1fcbdab923
SSDEEP 12288:6oD5zcYFy0YcaKLQE2oZ2Uwj9la9jcD+QcvKrZ8dhR92soe:6WHFyT9KLQEDwj9la9ID+QcvaZ8fRR
TLSH
T13A256CE87294B47556A781E9407F450AF33A3945A80CC8A0F279C8DE3AF0A0D9577F7E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\chunks\feishu-sync-config-DQEibVHl.js
1⤵
PID:4520

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4520-0-0x0000017DDDF40000-0x0000017DDDF70000-memory.dmp

Download

© 2018-2026

Terms | Privacy