e2dd6c35ffed6a9415e36ae35f93173f2937bb59b4bcfc3e83fd067bebd3ef68 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

App/Defaul...s.html

windows10-2004-x64

3

App/Defaul...s.html

windows11-ltsc_2024-x64

3

App/Defaul...efs.js

windows10-2004-x64

3

App/Defaul...efs.js

windows11-ltsc_2024-x64

3

App/Firefo...al.dll

windows10-2004-x64

3

App/Firefo...al.dll

windows11-ltsc_2024-x64

3

content/br...ULA.js

windows10-2004-x64

3

content/br...ULA.js

windows11-ltsc_2024-x64

3

content/br...A.html

windows10-2004-x64

3

content/br...A.html

windows11-ltsc_2024-x64

3

content/br...log.js

windows10-2004-x64

3

content/br...log.js

windows11-ltsc_2024-x64

3

content/br...s.html

windows10-2004-x64

3

content/br...s.html

windows11-ltsc_2024-x64

3

content/br...nel.js

windows10-2004-x64

3

content/br...nel.js

windows11-ltsc_2024-x64

3

content/br...ils.js

windows10-2004-x64

3

content/br...ils.js

windows11-ltsc_2024-x64

3

content/br...ser.js

windows10-2004-x64

3

content/br...ser.js

windows11-ltsc_2024-x64

3

content/br...its.js

windows10-2004-x64

3

content/br...its.js

windows11-ltsc_2024-x64

3

content/br...ibe.js

windows10-2004-x64

3

content/br...ibe.js

windows11-ltsc_2024-x64

3

content/br...e.html

windows10-2004-x64

3

content/br...e.html

windows11-ltsc_2024-x64

3

content/br...e.html

windows10-2004-x64

3

content/br...e.html

windows11-ltsc_2024-x64

3

content/br...ata.js

windows10-2004-x64

3

content/br...ata.js

windows11-ltsc_2024-x64

3

content/br...ion.js

windows10-2004-x64

3

content/br...ion.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
FirefoxPortable_fred_feuerstein.rar
Size 10.9MB
Sample260716-phpr9sc13r
SHA256 e2dd6c35ffed6a9415e36ae35f93173f2937bb59b4bcfc3e83fd067bebd3ef68
MD5 2b714b65101f66297ccc2f109f63dc01
SHA1 9c8e9150c15ae81e06e7dbd6496f4d3f9d87d451
SHA512 e58409580e465e04a6c0a0b1ac52333793606c4a97de8df0233fb860229b4ab144587cd83dda21f7112229b23f7203002d59d71e94eb589ccc22752c0f85993a
SSDEEP 196608:+CgIpwsZSKrJ8YPGzxUq8j63I+PkSrt+RTQC3AaT+0cMPkmDulB0N/:pptSKrJxezxncWV09TjkUu4
TLSH
T1A3C633A7F700E6DEE9F2123C07B6267543A56438F4217A358DAAD8D9F0D5F35830A728
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution installer

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

App/DefaultData/profile/bookmarks.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

App/DefaultData/profile/bookmarks.html

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral3

Sample

App/DefaultData/profile/prefs.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

App/DefaultData/profile/prefs.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

App/Firefox/AccessibleMarshal.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

App/Firefox/AccessibleMarshal.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

content/browser/EULA.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

content/browser/EULA.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

content/browser/EULA.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral10

Sample

content/browser/EULA.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral11

Sample

content/browser/aboutDialog.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

content/browser/aboutDialog.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

content/browser/aboutRights.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral14

Sample

content/browser/aboutRights.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral15

Sample

content/browser/bookmarks/bookmarksPanel.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

content/browser/bookmarks/bookmarksPanel.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

content/browser/bookmarks/sidebarUtils.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

content/browser/bookmarks/sidebarUtils.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

content/browser/browser.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

content/browser/browser.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

content/browser/credits.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

content/browser/credits.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

content/browser/feeds/subscribe.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

content/browser/feeds/subscribe.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

content/browser/feeds/subscribe.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

content/browser/feeds/subscribe.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral27

Sample

content/browser/license.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

content/browser/license.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

content/browser/metaData.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

content/browser/metaData.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

content/browser/migration/migration.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

content/browser/migration/migration.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  App/DefaultData/profile/bookmarks.html
- Size 10KB
- SHA256 810b5d2199b935c83c833a5d32e52be1fba7abb3d677f823bdf5cf8a64a813f6
- MD5 b630972041e5162a7d4e4bc8c89de2b6
- SHA1 d90459255078749b55cb9f905e89622307d7497e
- SHA512 53c442571081a802a1d6383e38ef0d378cddfd1b71a556fdeeaabe68f630d8f806b7830f5323d34b5c2917e2392a0067cdda5f41c90d5aed5150535bd81fd5d4
- SSDEEP 96:fh321nnfJf6NWvblL77bNGkVLx7PLCb77iY4xcAcS2vFa0hzJSn7bNGkp7bNGkWF:fhm1R1lDF/PLCb7uMIO8SeF5FHFTFS
- TLSH
  T116322BB62335DE0F17E8FE04D410AA304C3E2D9350E9849AF5547F26AAE3A55D0ACEF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  App/DefaultData/profile/prefs.js
- Size 611B
- SHA256 7f965d30632e1b9fbc25808a89c1bbc908e694acf9dd0451f3e1973e6185c818
- MD5 5a4f5e911e5fdc401b0f8d773e83a566
- SHA1 173a79a15910e58da2ac841d0e3d5a1f84d4ab0c
- SHA512 34ab6dc4846db9c6bdd17c003eee697bf4f69b395e8d5efb0f4e2e5d539a236d0183b4ab3e821efb010effbb10249a0fd5c0513a433133e4c4308b7c074e505b
- TLSH
  T168F0A2EBFD098B6D11B13AA8340D8393499392BE3DBF0881346C94441108F54026EDEF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  App/Firefox/AccessibleMarshal.dll
- Size 16KB
- SHA256 5f091e6ebcad554277673b127c234498dafe517d10a4661714ff816bb49d9623
- MD5 a1019a3ae04f38b13207232c0a061e73
- SHA1 42c89ac5d4e70a09113605746852a6ee20a94893
- SHA512 a09095c6b6870254b69ee3defc130b183057788c20d7cd865fb0c470e14defbbd04250973fdcc9809c1e16d82c83d58c14f43e8d8eee6d6018b31e40a47f868a
- SSDEEP 192:+MLn85weaI/2VNts1lC8b3s3X5EqZA98S0lEyncjWOeyowJL/te9Xx5gOmyvLt:h9m2VNGrt0pDSYnNYJLtIBz
- TLSH
  T11F7229976F241021ED965F3000FAEA275937BA40AFA2019B25F1B1D13CA27E07F75A4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  content/browser/EULA.js
- Size 4KB
- SHA256 f20ac55ccce697b1e4a52b4b88a067d7f61974646595f7e7f22c0551a0ce77cb
- MD5 ee89df35963d9131cb4a418941eee766
- SHA1 b919c84e63e9b243337d271b632ebcac622c7608
- SHA512 a06520b676412cc3c0c4e712240d184ec85bac4e631ed05635702f0d4902cbe1eec6aa7d64c43c66db4902489119c617e75134f0f8e37444fc55ea35bc891909
- SSDEEP 48:srUcNoEzBi9BcEgRxKKcjYj36/F8KTKMDbgegL6mLmzkS/yalD1u2h2e8pGAe9WK:YjNPJRckqmc/3gKHt/yaGu2e8NIWTSy6
- TLSH
  T1D191971A16A620745E638D66532F57C12B91400329BBB411787D92DCCFD1F784ABFBC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  content/browser/EULA.xhtml
- Size 7KB
- SHA256 95db2a3ea099869b1cb84c085ae29bdda1640e4af68468d0e3ce5d8db785b6c6
- MD5 2d3bfb905e0fce1fff60e63ee5921397
- SHA1 ba3b5e0e9acff941d0b9b80959ab0f597f99d19c
- SHA512 820ee9eb8397ad0878657435c9ea54480f80baa6a71e0bd10468657d4ae47f79b4254c64af18ec3a5077cef1bec8a903142a86891aeaeff728a57a46d038154b
- SSDEEP 192:3GHVVfJ8Uf2OIHR5zdSH9wyhUbLyKqZTchK/s:3GHVVfJ8tjR5B8vUmZTcIU
- TLSH
  T1B9F1C87F63C8233319C646B9376FA6C5F3A787A8737A984034A9C1581357D20537E2DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  content/browser/aboutDialog.js
- Size 2KB
- SHA256 bf12e10db48b4a8b97e4f564ec4429045942dbc50f19c2d11af362c410d221ce
- MD5 675c6359d8aa973126eed9247f02fa79
- SHA1 9963d607c64f708ed86e83636d74ed8eb1425fb0
- SHA512 e9549f047dd1aa78589bd31a569da777fc55f53e0f0ec14af77d9d929da9ce910da8b84f27b8f8b6248c25884a3d97950b13d9d30d6d5b73d9662073595320e0
- TLSH
  T17251987F284215712E9F38E6765692C43EA141232042F850BC6CD4D25FAEE43847BBEA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  content/browser/aboutRights.xhtml
- Size 2KB
- SHA256 b78cb071e3b49ea2aa806be59521d5e9161cc596baffd82ac95acafbaacecb49
- MD5 f922966aea0aabb4ae2064ef665e6404
- SHA1 32292350201db2ba324e14c7c8a03514750f4a5e
- SHA512 d08acd727eaab802baba6a85939a59553d5fd31f4aa2cfbd1f8c939dd688bb6b852abbddfa72b12e82fb7cd236ea80d58895d08b5e822a790abe3ce0d57602d8
- TLSH
  T1AC41CF4A18CA41B0B5ACCF9BFF92572019D7E30271CE75417AF4913B99E4B9C4C3A1AD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  content/browser/bookmarks/bookmarksPanel.js
- Size 803B
- SHA256 3dba422b447535a498a0a3eef4a74774ec74832550d735fe7d8c5ada853c06ae
- MD5 4b85b0504c6d38f7e3fe5dc1dcc669bb
- SHA1 09931679d5e64eebb69dd3d125ed252e53c1aa2f
- SHA512 47a909656eb8665dd2164b1339a5054bb7700fa19a6a0c302a825fbbb4ecb1b1f9444b7142b3bf36ca6168424c65b090c5a06dc08483013565321891c83755f4
- TLSH
  T184012B6BBC8A1874A4BF1AB731767FC0267549039C3166367C5D60880F68FAE80A5BD4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  content/browser/bookmarks/sidebarUtils.js
- Size 3KB
- SHA256 8cea1a077ba26218524e3fe8ad9e885f7e332771b2eb52ea44e89b0b0ac8a57f
- MD5 c6b43b3333367436ecc828721770d810
- SHA1 8383d79d3f5cd4e9786398a1474512f481c017f5
- SHA512 06ed4bb084c86caa347e3a4643e81d7cc4015354b23282a253f2543e6e7f45ddfb4615253476917bb2f072439bdf4ce2b632c704777d928882fa9146169c3d69
- TLSH
  T1E4618458F9A932F5395529791B7BD2927A3503A7C005C9A07C6E8AC48FC053312BEFCA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  content/browser/browser.js
- Size 264KB
- SHA256 5ae0888f4eeeb6de95f27695f3e40bab630a7440a80c01c5a362f584bd313bad
- MD5 82872322e975f285cdebd41fdf4960ac
- SHA1 4b32d83c672a37ad26b1ea847c644463a79bf4a9
- SHA512 f507f25315166762b1006bca994be50e22e6e794cdf6c0513c0b97c2ba7332acbcd35000732de1e50c527303f59c84fb875cc0ad0658b3c1396df27233b43106
- SSDEEP 6144:Pe3UpYXKpickiKgPUOmnC3yL63UhayKp+rayFv:Pe3UOKpickZgPUBnfLVKiay9
- TLSH
  T17444082EA5DA21B16E6B24755B6F71D436364013540AD8103CAEB3C41F8CE7982FEFE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  content/browser/credits.xhtml
- Size 15KB
- SHA256 3657c2bffc12206fe9ca42f8e8b0323ad20a31f4e8b662d3f20c699a88df8d83
- MD5 fe3aa19856dc4a5a87fdbf9b77819d42
- SHA1 129e2fcd3d5783a98954209e23304d9b3fb402ec
- SHA512 b6fe74dd69e1edd86e7bae79bb89783f99c2cc895e8d478001237bfd937a2b25ee77eb26dd85b8d942e297e04a1e2c5c09f61691b27950dda15bd68cedf86be2
- SSDEEP 192:QSDSDKJ9jPTzFR82+HtcaIXtEXUlGWAC94T85BWxMksHdQz:dDSDa782+HtcaIXO6AhGBWGM
- TLSH
  T1EF722C4668FB991B6B85A16B6FD72B712D634083C64EBB03380DA54CBFC25C49E5330C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  content/browser/feeds/subscribe.js
- Size 2KB
- SHA256 7977db601680340fb958e8e7fe433536db86f36d8ae6c9ec73569c8e67065bdb
- MD5 44696188421f29f66e3f8c506aef8775
- SHA1 3da8d1ea5f865c1080be593cd87289c1974f9a4f
- SHA512 7cdf1465ba59c466ac5309693cf839d9e7430c9b1b37f88cfcf4641a2bb1195f6cac7e974eb0e6f423e297a0306a84776315287a8a1b0d9aabf0d5cd60a68f6c
- TLSH
  T19841213D2B881B33420101B2AB4FF4C7A265D82D797B4E54385951E45F55E3E1BB4DF8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  content/browser/feeds/subscribe.xhtml
- Size 2KB
- SHA256 cc0039c5dd513293eae8ba45cb9d7c277320cec2c07b9893d49cbc118909dbfc
- MD5 939f3700cdf1f50d0c488fb006165167
- SHA1 1cee86b5642e588bc95c54f603d0e1a0c8baf680
- SHA512 efb38a2d0aa5ad61115181cba59b2d6460eba05302cceed91bbdd325637e7391da5900d17eb18c3f96f0d9a2489f76f9b1820dbe008f074edb018b7069e4a2fc
- TLSH
  T14F51F0018CFDB981538971557DE2B9262A20F7534B88AF60B5EC06C95FC7B9C8CE719C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  content/browser/license.html
- Size 118KB
- SHA256 24e9f62744249916e779aa2dc6a5fe4a5f5a84d90bfc00b46de88b31aa4b57f6
- MD5 233bfaa72ba61755a0a1b4aaa3d787f2
- SHA1 bc7fc5c4093276cff02b1181b959d4b9b1931e21
- SHA512 d21883579c60da7a3305ac5ba430a0fd7b6fd4ad4b2760b06f5054b77e587d5896479431043d800dda6f80eb019b0554bc1614e4ea942d33b3e2c656df5065d3
- SSDEEP 3072:cXNKFl6tTioIX9w/6Iwl3clcZPQ/er4PqNXnQZdg+7ZAdZP0d3mP:cXNpTioIXm/+Q/HiQ63r
- TLSH
  T125C3C82E7784137306C302A26A5B69CEF32A903F726B1950346DC15C2F6793593FB6DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  content/browser/metaData.js
- Size 17KB
- SHA256 170b105ce834d9a81d24fbe5f8bd9b2196985342bb7bfc80764d9580fbcc8587
- MD5 ba5bbdd9c7759c83219e84691d7745dd
- SHA1 9f0da95c575094f3a60f582d53bc703802f6134d
- SHA512 88f01ea0c183920932fdeac2f0380411c2b3e332b95b266067ef093f30d422fda9bd70359619ce846aab41cb2ea8d908f6ca7b7bb7f4b6c5bac234b259f0f9d4
- SSDEEP 384:a/kBt4wpwnzGlVxKuws4DYHpnBW/vC0+Ofr3sCq3xFcuKQa1BEFgPHK8yBS2FmSL:JpwnzGlV0uwJMBWS0JD3sCqL1KQa1BEJ
- TLSH
  T18F82626A64A731A7142260BB2B9FB04575A84123210DCF517D8CD790BFD4FBA02F6FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  content/browser/migration/migration.js
- Size 15KB
- SHA256 f4e8abee0abeac9036405d9bec1c7f32dbb27fabf06b1b36b4dedd671d79c5e7
- MD5 24cc3c4cf82a3355cc26df66a1b79818
- SHA1 62857fe2cc7129004c057bc73e5e84185aaf69d6
- SHA512 772a82542b73cc2edb3ec5dfe41d85bb59d65995d609c50965d142f8bc3682ce9e76ced340d7c3bc58cbf9e95559a89fedd16d3f013f76946e46475bc68dcc87
- SSDEEP 192:yentBDaOlzTimJs4BxCCmZo+iNRlzCV5i22WAOrTf8Awzhc1ag0C+CWrXFP:yEFlTjr9rz85iiMRU0b5
- TLSH
  T14D62502F659B5031D87332A63BBBD18235A480139613D859788CD3DC4F2C92A95FBEF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy