0e19eec5c31dec194a9acf2dd2f08acbbb868ce74ac606edef991d3aaec8eb3b | Triage™

Login
Reports

Overview

overview

8

Static

static

8

leveldb.dll

windows10-2004-x64

1

leveldb.dll

windows11-21h2-x64

1

lib/enchan...ll.dll

windows10-2004-x64

1

lib/enchan...ll.dll

windows11-21h2-x64

1

libcrypto-3-x64.dll

windows10-2004-x64

1

libcrypto-3-x64.dll

windows11-21h2-x64

1

libdb61.dll

windows10-2004-x64

1

libdb61.dll

windows11-21h2-x64

1

libenchant2.dll

windows10-2004-x64

1

libenchant2.dll

windows11-21h2-x64

1

libpq.dll

windows10-2004-x64

1

libpq.dll

windows11-21h2-x64

1

libsasl.dll

windows10-2004-x64

1

libsasl.dll

windows11-21h2-x64

1

libsodium.dll

windows10-2004-x64

1

libsodium.dll

windows11-21h2-x64

1

libsqlite3.dll

windows10-2004-x64

1

libsqlite3.dll

windows11-21h2-x64

1

libssl-3-x64.dll

windows10-2004-x64

1

libssl-3-x64.dll

windows11-21h2-x64

1

oci.dll

windows10-2004-x64

1

oci.dll

windows11-21h2-x64

1

phar.phar.bat

windows10-2004-x64

1

phar.phar.bat

windows11-21h2-x64

1

pharcommand.js

windows10-2004-x64

3

pharcommand.js

windows11-21h2-x64

3

php-cgi.exe

windows10-2004-x64

1

php-cgi.exe

windows11-21h2-x64

1

php-win.exe

windows10-2004-x64

1

php-win.exe

windows11-21h2-x64

1

php.exe

windows10-2004-x64

1

php.exe

windows11-21h2-x64

1

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20250619-en
resource tags

arch:x64arch:x86image:win10v2004-20250619-enlocale:en-usos:windows10-2004-x64system
submitted
08/05/2026, 10:11

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

leveldb.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

leveldb.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

lib/enchant/libenchant2_hunspell.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

lib/enchant/libenchant2_hunspell.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

libcrypto-3-x64.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

libcrypto-3-x64.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

libdb61.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

libdb61.dll

Resource

win11-20250610-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

libenchant2.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

libenchant2.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

libpq.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

libpq.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

libsasl.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

libsasl.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

libsodium.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

libsodium.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

libsqlite3.dll

Resource

win10v2004-20250619-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

libsqlite3.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

libssl-3-x64.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

libssl-3-x64.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

oci.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

oci.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

phar.phar.bat

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

phar.phar.bat

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

pharcommand.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

pharcommand.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

php-cgi.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

php-cgi.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

php-win.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

php-win.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

php.exe

Resource

win10v2004-20250619-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

php.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
php.exe
Size 141KB
Sample260508-l8a51sfx2x
SHA256 0e19eec5c31dec194a9acf2dd2f08acbbb868ce74ac606edef991d3aaec8eb3b
MD5 3351d30470033630fc2758d064fdce82
SHA1 af5f142d1e3bdba10f15d292b595dc5f281d9108
SHA512 b385d350cc298c00af854991fb581aae6983002563d9fa7b26e5dd761742ea43323f3f18dd3f8ffa123c95dd57c8012ec0f0ea55b749c2fa5b678cbbcb5921ac
SSDEEP 3072:z+KISw16lW9cG2XYY7qyvjL61jM+QYLPrjJgzBh3Bpi01i:z+dclW6rujxQ0Pf6zb3ji0
TLSH
T1B5E308D7719230D5DB97A13E88628192B772F53D0B9093DFBA94C0290F062E85F7762E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\php.exe
"C:\Users\Admin\AppData\Local\Temp\php.exe"
1⤵
PID:1588

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1588-0-0x000002998B300000-0x000002998B3AD000-memory.dmp

Download

© 2018-2026

Terms | Privacy