c94171681c3f2b70e9656c88d8412eebb83ceda50a2c268d6e07689d14390027 | Triage™

Login
Reports

Overview

overview

4

Static

static

1

marketplac...r.html

windows10-2004-x64

3

marketplac...r.html

windows11-ltsc_2024-x64

4

marketplac...art.sh

ubuntu-18.04-amd64

3

marketplac...art.sh

debian-9-armhf

3

marketplac...art.sh

debian-9-mips

3

marketplac...art.sh

debian-9-mipsel

3

marketplac...der.py

ubuntu-18.04-amd64

3

marketplac...der.py

debian-9-armhf

3

marketplac...der.py

debian-9-mips

3

marketplac...der.py

debian-9-mipsel

3

marketplac...ine.py

ubuntu-18.04-amd64

3

marketplac...ine.py

debian-9-armhf

3

marketplac...ine.py

debian-9-mips

3

marketplac...ine.py

debian-9-mipsel

3

marketplac...use.py

ubuntu-18.04-amd64

3

marketplac...use.py

debian-9-armhf

3

marketplac...use.py

debian-9-mips

3

marketplac...use.py

debian-9-mipsel

3

marketplac...use.py

ubuntu-18.04-amd64

3

marketplac...use.py

debian-9-armhf

3

marketplac...use.py

debian-9-mips

3

marketplac...use.py

debian-9-mipsel

3

marketplac...top.py

ubuntu-18.04-amd64

3

marketplac...top.py

debian-9-armhf

3

marketplac...top.py

debian-9-mips

3

marketplac...top.py

debian-9-mipsel

3

marketplac...mit.py

ubuntu-18.04-amd64

3

marketplac...mit.py

debian-9-armhf

3

marketplac...mit.py

debian-9-mips

3

marketplac...mit.py

debian-9-mipsel

3

marketplac...art.sh

ubuntu-18.04-amd64

3

marketplac...art.sh

debian-9-armhf

3

Sharing

Copy URL Twitter E-mail

General

Target
e5cf040923e9d931763c51f615e9f877247075c4.zip
Size 2.8MB
Sample260625-pg1hdabw91
SHA256 c94171681c3f2b70e9656c88d8412eebb83ceda50a2c268d6e07689d14390027
MD5 56446e7af39d33461d685b38e12451bc
SHA1 53a7d67802319998d6980ee38930b083d365fe75
SHA512 f2c5c24e6a9ebac475d9b73774ea46177920259c8de73ed6b85d7c9f2e981520f600421da043ce7be75faa4af276eca98d8e35ad4cf9a2793204ddd6b13f6ac0
SSDEEP 49152:dTmNITusTJkJxJp1iAmcdlax/pe+X5LGfOK6JS5ZXn8jyW53PBwxL:dTcirO9ZmcdQZpedOvSzkyW8Z
TLSH
T128D51233988CAE55C0F6813897223FD792EF87C43353D69F777B1B585C885A2CA26990
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

marketplaces/claude-plugins-official/plugins/code-modernization/assets/topology-viewer.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

marketplaces/claude-plugins-official/plugins/code-modernization/assets/topology-viewer.html

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

Behavioral task

behavioral3

Sample

marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

marketplaces/claude-plugins-official/plugins/learning-output-style/hooks-handlers/session-start.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

marketplaces/claude-plugins-official/plugins/learning-output-style/hooks-handlers/session-start.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Malware Config

Targets

- Target
  marketplaces/claude-plugins-official/plugins/code-modernization/assets/topology-viewer.html
- Size 78KB
- SHA256 9a3535b27bb08ac41bd5e8695900c5549288a4e8078abf299358e24d35182732
- MD5 867ba60a1c78ac584806fe10d6e927c9
- SHA1 f99a6be6915133da1fe18de0c5bd62c6f8222ab1
- SHA512 dbc5aa987d2880cfc81fb90ed6612d6a225c0c088c58367a3e42d2508601a14e19ceeff763d656b6f8e811e3733d72bd35f3b9fe3f0e9d8956bff9c6d790d9f2
- SSDEEP 1536:bV/UlJWNYjY99tGoe3oSxVsB9F4m8qj5i/iUNWGgrYRtRjQNPUh:byCNYjFBdxCBom8qj5i/iUNWVYRtMPUh
- TLSH
  T1737393B932927075A363A17840AF590BF23A7945740A8454F12DF1D97FFC82942BBEBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh
- Size 1KB
- SHA256 58efe97b7f5ccd384e0ee12a2f3dd2e75a38df35841a1b27ea6d9eb833c28912
- MD5 7d5691a61af8e42e13b19f694a5a596e
- SHA1 5784907d1b8cfde45cea0651a9d56764538d7c66
- SHA512 b2dba04a176db3349b8a6586e78c70fedc63107607e6605add7182d76177dcdd0787a120c09231220d4a5d4d7720a7d618dbd72097c6b97fcead8233c6085080
- TLSH
  T18C31107AA2D003663293C1CF23CE22C9963D791C3B804940845A32B453DD519C7237FE
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py
- Size 9KB
- SHA256 9f1d083cc43883323ddf00747e7696a4fd9d478ddd63f5b43038657da8516e56
- MD5 4b4024bd183e39dbadab43e725205c72
- SHA1 809fc494fc9f1f90f071015e0190d93163b4872b
- SHA512 359e4f6cf53c6079a6492a22813c45db3de5a9a6fd8828ea5d44035debe67560adb01b421713e800c78a4a58a642568174449683ae9ed3b1bb69487ca3c5ae7b
- SSDEEP 192:8pAiFQY1BXjuhBytdcq60PDPcvbX2BXsARLt:8pAiyQBXjuhEMqg7wsmLt
- TLSH
  T1E8124523E8501867C387456D9DDBA424E611D92BBA141138FADC912C3F8F578C3FAABD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py
- Size 10KB
- SHA256 6c70424f7eafdea4e803c7bcb93305e1e75bfd8c405834ebfcdf34bb79f66fb4
- MD5 65851729d0bc54efa1de4a7413c1ddc8
- SHA1 6bfaab2aaeb0b9ee46dd0d618e4918abe8bd7e72
- SHA512 ef3a765d6b2b1ed7ebd2eda4fdef869b3dbca783bf2d80663634eb31e98c2ca9613a565b45f60f239d22f17fa043b08d8fd107b719db7d0bbca3638db13240a5
- SSDEEP 192:/nwPIkaegGiCamhWS7ppDixca6ppVdlHJpePY/XTIYgX18VnoLni:/wAkaegGlaVS7TDKcXpp7lppKcTIhF8
- TLSH
  T1E9225272FCA97C168747D16C9DCAD8109725E86B4F441022FB9C9528BF0E634E3F5EA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py
- Size 1KB
- SHA256 52f3b71247cc376fb4226ab44258e89b02f997840cadbfd0e1ebd06009b76f32
- MD5 ea1019ee5f59fb3ec2307e98df7e2702
- SHA1 50d0aa05945087219f45b133a2fbe8c2dd65f69b
- SHA512 fa0199bf8615267800f18cf653bef87f2cec6d66147c29b0d26ba218faa521b2112e0f3306010e2098b944dcb0110ddb057c7e5d85ff56ec26fe2ce5d6f6643b
- TLSH
  T1F43110A2BC1544A582D7F58CFA84502551037DFF1604A93035CEED20AF82BB8E5FA3BC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py
- Size 1KB
- SHA256 5d28948f576f93caefcb4089959db2066147334c61be3139a1c113593255a8c7
- MD5 5e732c755897fc9e658cc8bc8a3fc5fb
- SHA1 0ae6dd72f6cab5d83b497936ad03e9705c3baaac
- SHA512 c56749b70cf19d4909cda0fdca86433c63cce536d418177128f5960e41b5fd8ce0c670aac6f787fabdb684280457b78d498852776e349cc309be70c5a86f2753
- TLSH
  T1EB315453BC0441AA82EAA28CB5854060111369FF1214A83031CEED30AF82678D7FE7FC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py
- Size 1KB
- SHA256 6ebc614e48dd994a4fe2aa1a3f2b5ab413ffd2b3c22f81c66cacd23f9c92919e
- MD5 572cd3c023592d84f0dd81b416cf4666
- SHA1 977ec947106e2499698c3d45ca6cf0a2f643b2b3
- SHA512 50339539e10d3b1c93874c09fd56ed9bae6ec61d5a1feec82d2d5bad2ab9da09cc0cd43c3c9e0fd3cc8ed61184207d000a23ac435a3dd72e14d8dbe6b54c2eeb
- TLSH
  T1B421F0A2BD04542683E2E68CF548407551036DBF2254D53470CEAA31AF817B8D5F63BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py
- Size 1KB
- SHA256 577824bc91e4510eb6f299b3485f35892eaf710108213e01f4c86eb350a813cb
- MD5 b649f031d79b00b4f1fdc4d0bbab2634
- SHA1 db26d91c3b90329a9432c469da78b4cd7563fcc2
- SHA512 9ebb019551f989c487e35ed2498dc3095567acab674656a0e4fac2e7e5214d0193cc307e05da4fc6e702ae298e08e19f5de9a3742a4a0813efe334462774d184
- TLSH
  T1DE21F362BC18446692E2E58CF648507501063DBF1624D53475DDE820AFC1768A5FA7BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28 behavioral29 behavioral30
- Target
  marketplaces/claude-plugins-official/plugins/learning-output-style/hooks-handlers/session-start.sh
- Size 3KB
- SHA256 2b2ef02fffeb9df6d587a3180ab3bb06e1364a75f70e2f534045b599b953731e
- MD5 c246db1e6df829339a671b2bbd50ff52
- SHA1 79aba70275ca4aeea8acf3d919f9e7c6aafc3afe
- SHA512 23b17c8a0ded4bc7cbb938de9cd045056cde26a0885772f844e68027d6c9099b2c34bff1c6bea6177082af9a74361f1803b3e0ff659c8282aa97b71e933d7fb1
- TLSH
  T11271747F79941765338BC08F538F62C99635B5093391017584A67AA873CDA54C333BFA
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Python

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy