20755f296c146506fc395e9aa67e4dfb6bcfbb5bfbb63a9a3ac83dac6cb60f12 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

admin/auto...ces.js

windows10-2004-x64

3

admin/auto...ces.js

windows11-21h2-x64

3

admin/cust...ces.js

windows10-2004-x64

3

admin/cust...ces.js

windows11-21h2-x64

3

admin/header.js

windows10-2004-x64

3

admin/header.js

windows11-21h2-x64

3

admin/login.js

windows10-2004-x64

3

admin/login.js

windows11-21h2-x64

3

admin/orders.js

windows10-2004-x64

3

admin/orders.js

windows11-21h2-x64

3

admin/payments.js

windows10-2004-x64

3

admin/payments.js

windows11-21h2-x64

3

admin/services.js

windows10-2004-x64

3

admin/services.js

windows11-21h2-x64

3

admin/settings.js

windows10-2004-x64

3

admin/settings.js

windows11-21h2-x64

3

admin/users.js

windows10-2004-x64

3

admin/users.js

windows11-21h2-x64

3

core/auth.js

windows10-2004-x64

3

core/auth.js

windows11-21h2-x64

3

core/db.js

windows10-2004-x64

3

core/db.js

windows11-21h2-x64

3

core/order_manager.js

windows10-2004-x64

3

core/order_manager.js

windows11-21h2-x64

3

cron/check...sms.js

windows10-2004-x64

3

cron/check...sms.js

windows11-21h2-x64

3

cron/sync_5sim.js

windows10-2004-x64

3

cron/sync_5sim.js

windows11-21h2-x64

3

cron/sync_smsman.js

windows10-2004-x64

3

cron/sync_smsman.js

windows11-21h2-x64

3

index.js

windows10-2004-x64

3

index.js

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
admin.zip
Size 3.4MB
Sample260508-phra4act2k
SHA256 20755f296c146506fc395e9aa67e4dfb6bcfbb5bfbb63a9a3ac83dac6cb60f12
MD5 97f284b3448bf39a7fd3b835c4cb4e27
SHA1 bd0322cee94b84c1ba229fa2da2a57ca231504ed
SHA512 c3020c41cb81ce5d9861dcf316bd845d38a0747a6ae737ac84823651162b5bab9d439e6db98aaf4587a09b7ac0bebb7d5f6f1a575eb8a661de06a854d262303f
SSDEEP 49152:4MmJzR9a8OzEfXwXH3wKF/AHGd6SRdFnK0F9/xK502FAGS1QnmMlqyFbPjLDR:4MmJFmSg3gKF/AHQdZ/9w504
TLSH
T1EDF533A8E23F9A81C20B43DFB97F8C47D84F2D950D66915B621C29C65F0BDD0AC67D28
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

admin/auto_fetch_services.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

admin/auto_fetch_services.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

admin/custom_services.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

admin/custom_services.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

admin/header.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

admin/header.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

admin/login.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

admin/login.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

admin/orders.js

Resource

win10v2004-20250619-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

admin/orders.js

Resource

win11-20250502-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

admin/payments.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

admin/payments.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

admin/services.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

admin/services.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

admin/settings.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

admin/settings.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

admin/users.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

admin/users.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

core/auth.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

core/auth.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

core/db.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

core/db.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

core/order_manager.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

core/order_manager.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

cron/check_pending_sms.js

Resource

win10v2004-20250619-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

cron/check_pending_sms.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

cron/sync_5sim.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

cron/sync_5sim.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

cron/sync_smsman.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

cron/sync_smsman.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

index.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

index.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  admin/auto_fetch_services.php
- Size 47KB
- SHA256 9de0f419340912f00c580e96429863f2c0a0f64e55ed6fcc7161a789a83c981d
- MD5 03812cb98d5586cabe9b6ea333553720
- SHA1 8d523b00883d1c897197f21141e3d2e8d600dae3
- SHA512 75597711faed61cf475d61db3011eaee0e96e1232afb5ed443259b07258221c4a09cf2c10a3938052c1f3f8d585c16e1807b143348b4212abb819f108855181e
- SSDEEP 384:q5ndNLJVimNh/JGIYXIb4RoXAZesDOMJZZDSFMVib4q2HDUmN8dyVFClrouwT0hV:q5n1Viqh/g4KvNK2jULMi
- TLSH
  T1FA236436A05545327433DBAEAF928786FE986107E60142183AEC73D54FFDC549923FB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  admin/custom_services.php
- Size 12KB
- SHA256 7bf729ccf7b223f9f00ad456c587179011bcb9c4394d4110eb822ea014a4aec3
- MD5 f631af4cf9dc24f2c1c1eff475fa6340
- SHA1 29bed2643a3cddaa8636e8f64c649343a49d53d1
- SHA512 062f3cd1470bc47e248113f2ea5164a1d7979be5aafcb0cd7c172ad466442266d8ea5e2f22d3d3050201304d5da18f3cab953826f0557b5a24be7ad08316651c
- SSDEEP 192:FCKu2TXD+H0U2TqGPpkKKQow4uv7zJZTGf7y6dv1h:qUzUUYt4PCtdth
- TLSH
  T16542412634E82E72443B8AE2BA059E46FDD9C217C752260479FE63D30FF2C48D807A54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  admin/header.php
- Size 12KB
- SHA256 dda526352e00773ba70839e1db71eb289294baa8d9a7252864a57bc3c012238c
- MD5 98c518db21a6d0ecf3e088d2dd2efaa9
- SHA1 b89c647bbf621a2d3b075bd8def8979859c8faf5
- SHA512 983cbb159739cc1c9932ac8dbf986dbbbe258bcfa33154f75fe7e55a6608be3262bab355b3cb0049629b33fe110126463c68c7283e9f5dd6d1f1edb26773af65
- SSDEEP 192:/437O3Y/LFZdmHLFP5ASoHLKp8hVQicFEHrcJFcZ:oyo/k+4dfJFcZ
- TLSH
  T194423516D68521575037A7A89F769745FFE30047D30241253FFE22998FF6A5C4823F98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  admin/login.php
- Size 4KB
- SHA256 cfd50cbe7907c7db9ef8211248aa02eaae11803963cf4c304206990a79ffd542
- MD5 30a642d1e9d2de77acb5ad653079c15d
- SHA1 94cb950beecce1d361bd4e8e1a536ebc3bbd4991
- SHA512 d00e9cef9a17f8681aaa3c6b11b18e3717e8adf39d258c5cdd5677c4ab747d752e399d2a339d5738c583e6956e6ae5dada1252116ff18a630c2d808d875306cb
- SSDEEP 96:T8jAOTEMzfGJv7O9l1ikEmbsrE9VOExH2Yk:WAOoMz8v7O9lMkEmbT2d
- TLSH
  T17291831160D01B262476C7B8E740DA09FDF28147E223870079FE238BAFFDD59CAA7691
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  admin/orders.php
- Size 14KB
- SHA256 0f430b76e075e948a2e54f73175b4cd36aa70737af26c226f70ebaec892321c7
- MD5 849bb4a0b922891b82539ced7c771904
- SHA1 2965ae0692c0c3bd33821da942a61db8af0de8c9
- SHA512 f681c6ae562d732ba45923e1b0c17df1fc7aa1f29367f8f2458a8c823217c31e0cffd3c98461cc3ac45719a64c34a81c8529ddf9d7f02a3f06e1281fa3a0b915
- SSDEEP 192:LgMpDGSXpXk6fBKnUTWJgjATL7NCmG3N5q8h:M8PX9Xy2AXbIVh
- TLSH
  T1AB5282A375C52A324977CBE3A6828F52FDD9810BC202440538BE53E71FB2C889D97E95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  admin/payments.php
- Size 11KB
- SHA256 29a343b16b09a083a32452357781a6d54a1837cfde10aa69d5fd48e4ac489bc3
- MD5 227f27baad8ee29665d579d8505529d2
- SHA1 ab86f3d2798c63c8bea659eeaba6b030392428ea
- SHA512 07817ab5944dc6d19fc3cc0e4afc7a00262b644c849b0ce6d60bb660327aa525adc3fc4ca2345ed412472c7a77c04f7bb20560b620b1a2b7341a59e9c57ef4fb
- SSDEEP 96:eobBZAILVi0d7VWZkoo90py7hByU1EXOJs2LQ88PnXJBU4mXTKGfBmjnM8K:hj3F3iC0py7hBZEZcQfknX
- TLSH
  T1B8421C6630C17A7610B3C6A59B219F46FEEAC203D613812536EE5BCB0FB6F64CD03A55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  admin/services.php
- Size 47KB
- SHA256 640377bb594ec0cadebe42c8d886775c9dcb85bb4f7080291a1c60cc42b9249e
- MD5 5842cd0ac8d0d0cce5b40fdfe03a19fb
- SHA1 47fd8700b7f78715bbaab88081bd2bc4f6f9312c
- SHA512 be308e33aba7c68b7612ad3abd155b9782fe70c3b574b4c78a4bf2b9fbc53ac1abd224ca0d085489df3741b4b31539bbbe15d02500cc8051d59bfd989e0492d5
- SSDEEP 384:gr/nU/aGlhM5RrP5c4Y6f0gurmrOElg96Vs7l1nrlBllt1neIJr1h:Hlh0RrPSuV2mSElQ5llv
- TLSH
  T1C123813230D12932647BC6EFAA928B46FDD9A10BE602110079ED33D60FFAD45C917EB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  admin/settings.php
- Size 5KB
- SHA256 d241b7ec11b24bd49c88cda9808b825c42de8ba60322e12712acb7ab2601908d
- MD5 46a3a7d5444cf21bfd4ed7966b37d8cd
- SHA1 4b57d3bd0f030bce9951700c56c2e7bc5fe51c89
- SHA512 911e402e378be6883863b5cfef02fc75141876bf2344a0caf24cfa6f742e9bc6f0b417d8abf0ba18881a3984711c1414f20d1ce5d0bf7a2d42385cd52d4c7293
- SSDEEP 48:5H25E4tRo6a2O6uDMFAcA8hCbPYOUCPgriVmVlEDPo83SVCf3CU2pP4Wd2p7kUso:pEovhWKLwowVct3SAaUodUWqUUz9+Uh
- TLSH
  T114B1526130912E7BD0BB8DFA56558B46FC91C20BD947C66475FE73D21F72C82440BA86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  admin/users.php
- Size 9KB
- SHA256 0c2612888bd833ede10b867c09532e938db31b46414fff8cccdfbb770b45f76c
- MD5 edf740f099fbd9257ad63ca89024d420
- SHA1 c352a147ef22f5355a7b21c62d561d8b0e8a8993
- SHA512 f66aa58b9ffccdf1f8217abc8ccd7858e2c12a23defe02f0aacaed1986d03be3d59e40ff2fb0fee15d75958ab6942caa88c8dfc3d11ea92ec9929f09bd8bcaee
- SSDEEP 96:X4CkUt5w7Q8xpWROfiyFB7p7MjM7gNPCRMWBckCwSYa5sPXn6RMaxnCMc5D53r/v:X4CkUt6//Rx7N/9Xyn4D7mnymgh
- TLSH
  T1CE22713231D96A77467786F666158E42FCE6D307C603880639BE13D70FB2C54DD87A89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  core/auth.php
- Size 2KB
- SHA256 d896634046dc01257e649e2f63f3c2a218668773422351086c8c9a7fdddef71e
- MD5 f1b4709fb68c9b043364ac8ed4d619a9
- SHA1 8506a26163e93fc06bb9e01fdde399f680a82b73
- SHA512 38b16dc601d0b6d4f23c2ceeae82f5bad5cf0ad1fd18e1aae20e9f6907bb4d83ca42175556e283108c96a4c1499ca4d35ecced01e1bd189fd39714f4d0678b21
- TLSH
  T1D051EF6570666A9215F38139B2046810F4D9C10709D17692FBBDA28C3F35D2DFDB1AE2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  core/db.php
- Size 1KB
- SHA256 c9a9b112ba78f55a2b5823ded86f917b2e9d6c8833eccadfaba02a78d011c236
- MD5 38f5922a4151e50e2ff120aa5c1dbe60
- SHA1 2531d859dc0e9addbba1d769c2763304f9118766
- SHA512 3469d5a4b7d29518f5dd1d206c42d7fa95af776f0fc3f8c374a7935d733ea6650356b78d8999164432d32adae38cb319bbf86f384138fa88106941b8f4aabe9b
- TLSH
  T1E611EB131255C76926B614482F02C824F420A15B8660F1E6776EE2CB8FB42BCEEA27C6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  core/order_manager.php
- Size 3KB
- SHA256 7d97fb785a3eda0a3bd2362752a1ba517e9dbaaef387a75e99d71a0ce819135b
- MD5 0bef193a1373b8a7db1fffbed5e70d2d
- SHA1 51af6df77f4fcd2197523991fafff9bd6f0e2b81
- SHA512 e6ca5c29c8cf721b7f9dbb379893c5bded4e182ba20089cb8ea8653c7baa383c20c3886394220d9342b0234fc404ded2be1d89d949cdfdc26898f5cf114d602c
- TLSH
  T18D71E126359EA76507722A9FBF112C01FA4C82034A80E252BBBD62D53F7195CD5B1FE1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  cron/check_pending_sms.php
- Size 4KB
- SHA256 e73e5240529573aba25d9a0d3dd66dd120364ae8303dff46407be21f54845fbd
- MD5 3d03b2327557497e0b00fa0d80fe7200
- SHA1 d82de47c283e97602d7851b1b8a15838e22355df
- SHA512 325a87249fe474d1be39505ba70d81d7be254485cb2a8038d9aa09b52006c0015952fafb2b87feb73cde7e51b8c59da97af2c847fb4c10e114b6e862f0af0ef2
- SSDEEP 96:GE3oW8BH3DOfMeLdo5JRmPCXLVUsIGfN62YFXtX:rE3iThk7lhUpBtX
- TLSH
  T1368198A2319E01218DF59FAAFB417C65FB59D2234900C540BC1E83952F745CDC5AEAEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  cron/sync_5sim.php
- Size 2KB
- SHA256 0c618c518feedccc89b7b03b62f425b045864dc06c539fc620dd0106a1ef5406
- MD5 63aa516734dc792b667f7fa5e913a0bb
- SHA1 cd2483dc0292d82b7734cb8c9da3c75d72e03389
- SHA512 ebc86ea412c9d81223b03187102e2baa3a26ea57587bf6dca4e16a8f0ca972b524b254c7ec83c6272c2b6636ff6a9b80b4aad892ae238aef02e39592ac53a005
- TLSH
  T18051699BA433865B49F715FDBF66509DFB992113068182B0BDAC82411FF45CCE1E894D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  cron/sync_smsman.php
- Size 3KB
- SHA256 02a9b7583ce96a778c435085dc7c0f487184f2e2c43f3545bd98ec47dc743629
- MD5 a2f111a2c64e28818c3fa61abaf976f6
- SHA1 d454c7e290f85ec2d814af0e5fc021b32c3d978a
- SHA512 3440ac4c6f7bbed3a8a736cf38c106b6a29cb8d622d6bc1353ef45e23c79fbf98ac23b8fba7c1576827dc84fddf3b1ed90d068031b12deece5ec20621f4851b8
- TLSH
  T1EA7193622253DB66C9B35DF97F536058EF0D90130450E6303DBE82900FB54CFE52CA9A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  index.php
- Size 58KB
- SHA256 896b7d563127e78a159fba63c86580d4b9df4ac5346bed8ac49a0cbac385396b
- MD5 6f09146395e97245b5016e7822f8c002
- SHA1 edd774e620aa13257602e78d557ea4eaaabd5c39
- SHA512 5cba6994dde24ea26b0dd944b40b680bf1418da76029a3c2bd3473fb81915a944df3ef1f3103bbacc762d0ef6a7a098e60b71d6b0affaba3d505ea2b1d9f6a9b
- SSDEEP 384:lKDeW7b1y9yBYnvmei5IaMtu5/YKbKKDI8KdKFuKWlKpevPYhOm:st1y9yBYnvmeiqztuYjS9qauHlHoh3
- TLSH
  T116439518A59165324533D3A98FA6970DFFB49093C607461CBBED23874FF2EB48583E98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy