f871f07d91a1629417befe28e7283ded8859616be6d60b0fadb418151b98146f | Triage™

Login
Reports

Overview

overview

3

Static

static

1

finans/ass...app.js

windows10-2004-x64

3

finans/ass...app.js

windows11-ltsc_2024-x64

3

finans/includes/db.js

windows10-2004-x64

3

finans/includes/db.js

windows11-ltsc_2024-x64

3

finans/inc...ter.js

windows10-2004-x64

3

finans/inc...ter.js

windows11-ltsc_2024-x64

3

finans/inc...r.html

windows10-2004-x64

3

finans/inc...r.html

windows11-ltsc_2024-x64

3

finans/inc...ler.js

windows10-2004-x64

3

finans/inc...ler.js

windows11-ltsc_2024-x64

3

finans/inc...ces.js

windows10-2004-x64

3

finans/inc...ces.js

windows11-ltsc_2024-x64

3

finans/pag...ts.ps1

windows10-2004-x64

3

finans/pag...ts.ps1

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
finans_takip_v2.zip
Size 50KB
Sample260720-wqbc6sct8s
SHA256 f871f07d91a1629417befe28e7283ded8859616be6d60b0fadb418151b98146f
MD5 8a9332ca956be8942a08e31403baf749
SHA1 bacb1b232f8dc53c4f4bd2e6b290ec8d9461b4a7
SHA512 8d5f702ea5a5e8c8a74c314edb003feb66786897b9569b5631063761172fc4e12c61a1c2f912beb78802e077f03a9d34300466308f55eb45708e5613b0e5955c
SSDEEP 1536:twqAYfGuH3h9ffI0p/L3dB6RvA4AErXG0P3m40M:twqhLfQ0pj3/sY4AAXG0vm40M
TLSH
T13933E0F4C3281861C38FFD75744B638780833B568A9D7DA969792201FD4B3BE3672862
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

finans/assets/js/app.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

finans/assets/js/app.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

finans/includes/db.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

finans/includes/db.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

finans/includes/footer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

finans/includes/footer.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

finans/includes/header.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral8

Sample

finans/includes/header.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

finans/includes/mailer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

finans/includes/mailer.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

finans/includes/prices.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

finans/includes/prices.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

finans/pages/reports.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

finans/pages/reports.ps1

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  finans/assets/js/app.js
- Size 2KB
- SHA256 384e9b1b2801bd8cf60fb7f25cc4a80bcafa6bb23a28945b7c1d317baa145acd
- MD5 fd6ecfca35f62521296e57a20358b920
- SHA1 d74fa222ed658583807a790df42ca2e1e39a61a8
- SHA512 f79cc20a9e91be6c7c8f871f069df0a16c3df7eaf45c4b9e7d3aa4e4d71b0ee1af16883d7c4a00febccb7b0c444b1a524e386d178a3b9f053fc362a023a32a63
- TLSH
  T13841745D33FD383201B71ABB60DF979C39381006A5C7DA48496C89888F819E1AA73DD7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  finans/includes/db.php
- Size 1KB
- SHA256 dfd0bbf8b8137c3cf7d02197e0c4c7d9df6460802cd735a2eada9242c604a775
- MD5 246b91dd326b751e484447cfb75314bf
- SHA1 eff2508f1b21b961b19e07c8a44d17de6d8cb578
- SHA512 5c311bf92613e4aca1cbe4fa6bcd7c674c49e3252b39cc4d2e82d3a260c0d94a1c308636ea5c70c9e6607577a4046d059ddce7296fe4f19c708051ef60969526
- TLSH
  T13641300931C3A77545E7F0188687D0A1682B98473BACA580B81F6D842F34D79AFF8E6C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  finans/includes/footer.php
- Size 1KB
- SHA256 f6ddf873407037cda3e64c9281702b7a4ea8c58135b7d41849f7b4cedd071b77
- MD5 31f47529b7cd10a2762755a579979f9c
- SHA1 2f484a2b844831629086c856c3998bac9cda70ae
- SHA512 60e3264d23d35455e37c5cd78776b57e7fad3cbf5a75d2dbf6ed136333ccb81fd8a498167a37014ce6898d42b806443ebc09c9f51c4b4fedeb1868ca68561897
- TLSH
  T1E52133B9AF6E447A20706CB750B9F4C57CE280035502D4F570FC99721F84F9C18B59D4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  finans/includes/header.php
- Size 2KB
- SHA256 e683dbdf4c63bbc8a63ec821d71ef992303fc44dc262411f8788c1178de95899
- MD5 7f8946658bc5d072390fa97490d90257
- SHA1 bd7546ea2a37af67fddc95cc17929c933f005179
- SHA512 4557dce69e2d156d76bd1ec440724ca03244e7d6788f9e11671632eb96b7def7cab5c479b0524ab8c185ee7b220313746dae741125d30358da7eb656d4cf9e31
- TLSH
  T19E513021C5EC672E618096E6B1B1B3116CEB2233770018B8B9D10614CFBCFD69897475
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  finans/includes/mailer.php
- Size 3KB
- SHA256 7c929ad9c1dcb269f6a2b63b806199ac1e6f6ea533ea6d71a22b379ee782ce61
- MD5 d3294d256b9e531ef9a239b608520159
- SHA1 e3a0f39414c5376ec4a97e2d8c1a6b500889f44f
- SHA512 3535ed3bbeb8caa221aca6648c2b67889e0a0f9365a3d35bd764bec5024ded3f82b76bbea0abef5ff22f3d324f4a09bce6b8098b4d203a008cf0a3aee329113a
- TLSH
  T1CD81630468DB64005ED3F028F7F5E411A99886037FD5B5B0FDAE01E57F88886F9B268E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  finans/includes/prices.php
- Size 9KB
- SHA256 358150d03ac02fa8a8a461bf4eed88611206845e1527eb2ad0dc7199a0e97cea
- MD5 463983a1a8b3469c750beb5f2bbe1cc4
- SHA1 71af522e942433c7288a88458a14e6eeeb257043
- SHA512 6cb64889768ab649963a51fa7e095e1f772511408cb89f295df2e7bb41bbc9ed2c425587f649559f24fdb486ce8d249126e04a2eb505241c815aef199ea4d0e0
- SSDEEP 192:u5yFLMhGRLqeSIe1gLzdlnzo5LrSql3HwHUzc:uKLNLwIe1gLPn4LZ3g
- TLSH
  T1B6226696716BC42390EB6029CB76F12029EF9D47B68CD4617ABDABC11F8103CD778972
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  finans/pages/reports.php
- Size 10KB
- SHA256 247f297c384675f68c11748af601260de35bafc308bcd9fdfbc24a6b3064bffa
- MD5 25e73eaf2202389a1d62e67d609d1f1e
- SHA1 c69acca33468abe130e8b2e30dec539e69ad363f
- SHA512 0e3c20f3e6d6e332e38a53c6e38de609672ea9180906fd03218fb2a622f134b704c6d6d557bd33c2689e6e0cd9eb2ae2e01b23faf39418821b946a373c400409
- SSDEEP 192:eMlV+3EDi+cvbCq0nlqxfvZQa1huRj0R3tlXQ1C6vEv:DEt7BxXZQr633XQQt
- TLSH
  T10322D7A0E5FB5B295572D2935591DE1E2EE0C203914B59203CBE4B988FCDDEADC272CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

© 2018-2026

Terms | Privacy