eb332835819a825146ef99ef57a8ea5d6ca18a162c0ba77440f0043539428116 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

marketplac...art.sh

ubuntu-18.04-amd64

3

marketplac...art.sh

debian-9-armhf

3

marketplac...art.sh

debian-9-mips

3

marketplac...art.sh

debian-9-mipsel

3

marketplac...der.py

ubuntu-18.04-amd64

3

marketplac...der.py

debian-9-armhf

3

marketplac...der.py

debian-9-mips

3

marketplac...der.py

debian-9-mipsel

3

marketplac...ine.py

ubuntu-18.04-amd64

3

marketplac...ine.py

debian-9-armhf

3

marketplac...ine.py

debian-9-mips

3

marketplac...ine.py

debian-9-mipsel

3

marketplac...use.py

ubuntu-18.04-amd64

3

marketplac...use.py

debian-9-armhf

3

marketplac...use.py

debian-9-mips

3

marketplac...use.py

debian-9-mipsel

3

marketplac...use.py

ubuntu-18.04-amd64

3

marketplac...use.py

debian-9-armhf

3

marketplac...use.py

debian-9-mips

3

marketplac...use.py

debian-9-mipsel

3

marketplac...top.py

ubuntu-18.04-amd64

3

marketplac...top.py

debian-9-armhf

3

marketplac...top.py

debian-9-mips

3

marketplac...top.py

debian-9-mipsel

3

marketplac...mit.py

ubuntu-18.04-amd64

3

marketplac...mit.py

debian-9-armhf

3

marketplac...mit.py

debian-9-mips

3

marketplac...mit.py

debian-9-mipsel

3

marketplac...art.sh

ubuntu-18.04-amd64

3

marketplac...art.sh

debian-9-armhf

3

marketplac...art.sh

debian-9-mips

3

marketplac...art.sh

debian-9-mipsel

3

Sharing

Copy URL Twitter E-mail

General

Target
84d2d12cd9d190ca879b8da95f783d0d7506bc3b.zip
Size 2.4MB
Sample260602-pdndmscx41
SHA256 eb332835819a825146ef99ef57a8ea5d6ca18a162c0ba77440f0043539428116
MD5 0afef11deff62d94969999034168247a
SHA1 61850c41698accbe89dbe823188e16142835e95b
SHA512 e5ebe65c3433f3231e337421b68ef1e2ceff04131701ddc335131e0ac26ca659de0e228c11a37607d6db12a077abefd4788719c65b8b8f407b61dd54fdbe112d
SSDEEP 49152:pNITusTJkJxJp1i8mcdlax/pe+X5LGfvA8jyN53Wx3:PirO9XmcdQZped4kyNUN
TLSH
T143B51233D88CAE54C0F6813897213FD792EF97C83253D69FB77B1B589C885A1CA16990
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Static task

static1

Behavioral task

behavioral1

Sample

marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

marketplaces/claude-plugins-official/plugins/learning-output-style/hooks-handlers/session-start.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

marketplaces/claude-plugins-official/plugins/learning-output-style/hooks-handlers/session-start.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

marketplaces/claude-plugins-official/plugins/learning-output-style/hooks-handlers/session-start.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

marketplaces/claude-plugins-official/plugins/learning-output-style/hooks-handlers/session-start.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Malware Config

Targets

- Target
  marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh
- Size 1KB
- SHA256 58efe97b7f5ccd384e0ee12a2f3dd2e75a38df35841a1b27ea6d9eb833c28912
- MD5 7d5691a61af8e42e13b19f694a5a596e
- SHA1 5784907d1b8cfde45cea0651a9d56764538d7c66
- SHA512 b2dba04a176db3349b8a6586e78c70fedc63107607e6605add7182d76177dcdd0787a120c09231220d4a5d4d7720a7d618dbd72097c6b97fcead8233c6085080
- TLSH
  T18C31107AA2D003663293C1CF23CE22C9963D791C3B804940845A32B453DD519C7237FE
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py
- Size 9KB
- SHA256 9f1d083cc43883323ddf00747e7696a4fd9d478ddd63f5b43038657da8516e56
- MD5 4b4024bd183e39dbadab43e725205c72
- SHA1 809fc494fc9f1f90f071015e0190d93163b4872b
- SHA512 359e4f6cf53c6079a6492a22813c45db3de5a9a6fd8828ea5d44035debe67560adb01b421713e800c78a4a58a642568174449683ae9ed3b1bb69487ca3c5ae7b
- SSDEEP 192:8pAiFQY1BXjuhBytdcq60PDPcvbX2BXsARLt:8pAiyQBXjuhEMqg7wsmLt
- TLSH
  T1E8124523E8501867C387456D9DDBA424E611D92BBA141138FADC912C3F8F578C3FAABD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py
- Size 10KB
- SHA256 6c70424f7eafdea4e803c7bcb93305e1e75bfd8c405834ebfcdf34bb79f66fb4
- MD5 65851729d0bc54efa1de4a7413c1ddc8
- SHA1 6bfaab2aaeb0b9ee46dd0d618e4918abe8bd7e72
- SHA512 ef3a765d6b2b1ed7ebd2eda4fdef869b3dbca783bf2d80663634eb31e98c2ca9613a565b45f60f239d22f17fa043b08d8fd107b719db7d0bbca3638db13240a5
- SSDEEP 192:/nwPIkaegGiCamhWS7ppDixca6ppVdlHJpePY/XTIYgX18VnoLni:/wAkaegGlaVS7TDKcXpp7lppKcTIhF8
- TLSH
  T1E9225272FCA97C168747D16C9DCAD8109725E86B4F441022FB9C9528BF0E634E3F5EA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py
- Size 1KB
- SHA256 52f3b71247cc376fb4226ab44258e89b02f997840cadbfd0e1ebd06009b76f32
- MD5 ea1019ee5f59fb3ec2307e98df7e2702
- SHA1 50d0aa05945087219f45b133a2fbe8c2dd65f69b
- SHA512 fa0199bf8615267800f18cf653bef87f2cec6d66147c29b0d26ba218faa521b2112e0f3306010e2098b944dcb0110ddb057c7e5d85ff56ec26fe2ce5d6f6643b
- TLSH
  T1F43110A2BC1544A582D7F58CFA84502551037DFF1604A93035CEED20AF82BB8E5FA3BC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py
- Size 1KB
- SHA256 5d28948f576f93caefcb4089959db2066147334c61be3139a1c113593255a8c7
- MD5 5e732c755897fc9e658cc8bc8a3fc5fb
- SHA1 0ae6dd72f6cab5d83b497936ad03e9705c3baaac
- SHA512 c56749b70cf19d4909cda0fdca86433c63cce536d418177128f5960e41b5fd8ce0c670aac6f787fabdb684280457b78d498852776e349cc309be70c5a86f2753
- TLSH
  T1EB315453BC0441AA82EAA28CB5854060111369FF1214A83031CEED30AF82678D7FE7FC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py
- Size 1KB
- SHA256 6ebc614e48dd994a4fe2aa1a3f2b5ab413ffd2b3c22f81c66cacd23f9c92919e
- MD5 572cd3c023592d84f0dd81b416cf4666
- SHA1 977ec947106e2499698c3d45ca6cf0a2f643b2b3
- SHA512 50339539e10d3b1c93874c09fd56ed9bae6ec61d5a1feec82d2d5bad2ab9da09cc0cd43c3c9e0fd3cc8ed61184207d000a23ac435a3dd72e14d8dbe6b54c2eeb
- TLSH
  T1B421F0A2BD04542683E2E68CF548407551036DBF2254D53470CEAA31AF817B8D5F63BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py
- Size 1KB
- SHA256 577824bc91e4510eb6f299b3485f35892eaf710108213e01f4c86eb350a813cb
- MD5 b649f031d79b00b4f1fdc4d0bbab2634
- SHA1 db26d91c3b90329a9432c469da78b4cd7563fcc2
- SHA512 9ebb019551f989c487e35ed2498dc3095567acab674656a0e4fac2e7e5214d0193cc307e05da4fc6e702ae298e08e19f5de9a3742a4a0813efe334462774d184
- TLSH
  T1DE21F362BC18446692E2E58CF648507501063DBF1624D53475DDE820AFC1768A5FA7BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  marketplaces/claude-plugins-official/plugins/learning-output-style/hooks-handlers/session-start.sh
- Size 3KB
- SHA256 2b2ef02fffeb9df6d587a3180ab3bb06e1364a75f70e2f534045b599b953731e
- MD5 c246db1e6df829339a671b2bbd50ff52
- SHA1 79aba70275ca4aeea8acf3d919f9e7c6aafc3afe
- SHA512 23b17c8a0ded4bc7cbb938de9cd045056cde26a0885772f844e68027d6c9099b2c34bff1c6bea6177082af9a74361f1803b3e0ff659c8282aa97b71e933d7fb1
- TLSH
  T11271747F79941765338BC08F538F62C99635B5093391017584A67AA873CDA54C333BFA
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Python

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy