65f77ec5488b3488b142df1944e5840c676f32edb79af52bb16a7d37462fef10

Login
Reports

Overview

overview

Static

static

release_Si...ler.js

windows10-2004-x64

release_Si...ler.js

windows11-ltsc_2024-x64

release_Si...nit.js

windows10-2004-x64

release_Si...nit.js

windows11-ltsc_2024-x64

release_Si...ole.js

windows10-2004-x64

release_Si...ole.js

windows11-ltsc_2024-x64

release_Si...er2.js

windows10-2004-x64

release_Si...er2.js

windows11-ltsc_2024-x64

release_Si...x.d.js

windows10-2004-x64

release_Si...x.d.js

windows11-ltsc_2024-x64

release_Si...ain.js

windows10-2004-x64

release_Si...ain.js

windows11-ltsc_2024-x64

release_Si...ack.js

windows10-2004-x64

release_Si...ack.js

windows11-ltsc_2024-x64

release_Si...lob.js

windows10-2004-x64

release_Si...lob.js

windows11-ltsc_2024-x64

release_Si....d.vbs

windows10-2004-x64

release_Si....d.vbs

windows11-ltsc_2024-x64

release_Si...ver.js

windows10-2004-x64

release_Si...ver.js

windows11-ltsc_2024-x64

release_Si...mer.js

windows10-2004-x64

release_Si...mer.js

windows11-ltsc_2024-x64

release_Si...hat.js

windows10-2004-x64

release_Si...hat.js

windows11-ltsc_2024-x64

release_Si...hat.js

windows10-2004-x64

release_Si...hat.js

windows11-ltsc_2024-x64

release_Si...i.html

windows10-2004-x64

release_Si...i.html

windows11-ltsc_2024-x64

release_Si...at.bat

windows10-2004-x64

release_Si...at.bat

windows11-ltsc_2024-x64

release_Si...fig.js

windows10-2004-x64

release_Si...fig.js

windows11-ltsc_2024-x64

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/07/2026, 22:24

Sharing

Copy URL Twitter E-mail

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

release_Siphon_v1/Bin/citizen/scripting/lua/scheduler.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral2

Sample

release_Siphon_v1/Bin/citizen/scripting/lua/scheduler.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

15 signatures

150 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral3

Sample

release_Siphon_v1/Bin/citizen/scripting/resource_init.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

release_Siphon_v1/Bin/citizen/scripting/resource_init.js

Resource

win11ltsc2024-20260630-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral5

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/console.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral6

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/console.js

Resource

win11ltsc2024-20260630-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral7

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/eventemitter2.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral8

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/eventemitter2.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/index.d.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/index.d.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

15 signatures

150 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral11

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/main.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/main.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/msgpack.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/msgpack.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

15 signatures

150 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral15

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/natives_blob.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/natives_blob.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/natives_server.d.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/natives_server.d.vbs

Resource

win11ltsc2024-20260630-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/natives_server.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/natives_server.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

15 signatures

150 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral21

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/timer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

release_Siphon_v1/Bin/citizen/scripting/v8/timer.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

release_Siphon_v1/Bin/citizen/system_resources/chat/cl_chat.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

release_Siphon_v1/Bin/citizen/system_resources/chat/cl_chat.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

release_Siphon_v1/Bin/citizen/system_resources/chat/dist/chat.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

release_Siphon_v1/Bin/citizen/system_resources/chat/dist/chat.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

release_Siphon_v1/Bin/citizen/system_resources/chat/dist/ui.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery

Behavioral task

behavioral28

Sample

release_Siphon_v1/Bin/citizen/system_resources/chat/dist/ui.html

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

discovery

Behavioral task

behavioral29

Sample

release_Siphon_v1/Bin/citizen/system_resources/chat/sv_chat.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

release_Siphon_v1/Bin/citizen/system_resources/chat/sv_chat.bat

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

release_Siphon_v1/Bin/citizen/system_resources/chat/webpack.config.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

release_Siphon_v1/Bin/citizen/system_resources/chat/webpack.config.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

15 signatures

150 seconds

adware execution persistence ransomware spyware

Report Analysis Logs

General

Target
release_Siphon_v1/Bin/citizen/scripting/v8/natives_server.d.vbs
Size 149KB
Sample260703-2bpvxagy81
SHA256 65f77ec5488b3488b142df1944e5840c676f32edb79af52bb16a7d37462fef10
MD5 8998dd90f0cc0943fba78f25432b3950
SHA1 6134b14cd9185c6df298ff777d328fbb36d4821a
SHA512 60688cdabfa5b6730eb173eb33ac632da4d67f47fd82cc8ecb16bc6def6f3cdcd4d7efcbd83f489dce115133fc4b6f0e0dbb674b4a5f3bd737db26e5ad5fa200
SSDEEP 1536:ZPwjFgzlafffPi+3LR9VyLRnxA5xZEMrPhiGiS2ftfVNCJSfBLnREeorUA88uV9C:fIER2Y9A8zIzF4gtuGl2al6By
TLSH
T140E3959BAF88333169B25262A1BF4048D965A224751131EDFCF4A9142F0FA7F46B7CCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\release_Siphon_v1\Bin\citizen\scripting\v8\natives_server.d.vbs"
1⤵
PID:4692

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads