6cb53e2c8d6f396e60efedbd668140b0d6b33f623d421bdd10801dc89123d23f | Triage™

Login
Reports

Overview

overview

8

Static

static

8

leveldb.dll

windows10-2004-x64

1

leveldb.dll

windows11-21h2-x64

1

lib/enchan...ll.dll

windows10-2004-x64

1

lib/enchan...ll.dll

windows11-21h2-x64

1

libcrypto-3-x64.dll

windows10-2004-x64

1

libcrypto-3-x64.dll

windows11-21h2-x64

1

libdb61.dll

windows10-2004-x64

1

libdb61.dll

windows11-21h2-x64

1

libenchant2.dll

windows10-2004-x64

1

libenchant2.dll

windows11-21h2-x64

1

libpq.dll

windows10-2004-x64

1

libpq.dll

windows11-21h2-x64

1

libsasl.dll

windows10-2004-x64

1

libsasl.dll

windows11-21h2-x64

1

libsodium.dll

windows10-2004-x64

1

libsodium.dll

windows11-21h2-x64

1

libsqlite3.dll

windows10-2004-x64

1

libsqlite3.dll

windows11-21h2-x64

1

libssl-3-x64.dll

windows10-2004-x64

1

libssl-3-x64.dll

windows11-21h2-x64

1

oci.dll

windows10-2004-x64

1

oci.dll

windows11-21h2-x64

1

phar.phar.bat

windows10-2004-x64

1

phar.phar.bat

windows11-21h2-x64

1

pharcommand.js

windows10-2004-x64

3

pharcommand.js

windows11-21h2-x64

3

php-cgi.exe

windows10-2004-x64

1

php-cgi.exe

windows11-21h2-x64

1

php-win.exe

windows10-2004-x64

1

php-win.exe

windows11-21h2-x64

1

php.exe

windows10-2004-x64

1

php.exe

windows11-21h2-x64

1

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/05/2026, 10:11

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

leveldb.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

leveldb.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

lib/enchant/libenchant2_hunspell.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

lib/enchant/libenchant2_hunspell.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

libcrypto-3-x64.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

libcrypto-3-x64.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

libdb61.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

libdb61.dll

Resource

win11-20250610-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

libenchant2.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

libenchant2.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

libpq.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

libpq.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

libsasl.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

libsasl.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

libsodium.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

libsodium.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

libsqlite3.dll

Resource

win10v2004-20250619-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

libsqlite3.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

libssl-3-x64.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

libssl-3-x64.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

oci.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

oci.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

phar.phar.bat

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

phar.phar.bat

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

pharcommand.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

pharcommand.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

php-cgi.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

php-cgi.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

php-win.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

php-win.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

php.exe

Resource

win10v2004-20250619-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

php.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
php-win.exe
Size 38KB
Sample260508-l8a51sfx2x
SHA256 6cb53e2c8d6f396e60efedbd668140b0d6b33f623d421bdd10801dc89123d23f
MD5 8000594ebb4e1065bf45ec65d42860c8
SHA1 060131a84528b529905d262560484cfded2bf5ac
SHA512 c1ef8fab150b7b2698802fb46c7a77447ba103bf1ff9cdd8994cd3a3eb579a9ec5e8107c93b1a41a60c5cce3b1b286244aba72d34601d29f83f4dfa55d6dfa72
SSDEEP 768:/g+jcqsnEWv356922FGMlJA4Zyh36Z5+k:/g+jcLEu2FGMDJo3M+k
TLSH
T1F403280257A100E9E15AC379D2B32AA7D9B4F4575324A6FF3EC885541F22BD8DE3392C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\php-win.exe
"C:\Users\Admin\AppData\Local\Temp\php-win.exe"
1⤵
PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy