4f9178569b596f8c373d451ea5c024a9da0ae51e8ec2541992c271edca9b8add | Triage™

Login
Reports

Overview

overview

3

Static

static

1

add.pl

ubuntu-18.04-amd64

add.pl

debian-9-armhf

add.pl

debian-9-mips

add.pl

debian-9-mipsel

adduser.pl

windows10-2004-x64

3

adduser.pl

windows11-ltsc_2024-x64

3

baby.pl

windows10-2004-x64

3

baby.pl

windows11-ltsc_2024-x64

3

bomb/bl3.htm

windows10-2004-x64

3

bomb/bl3.htm

windows11-ltsc_2024-x64

3

bomb/bl5.htm

windows10-2004-x64

3

bomb/bl5.htm

windows11-ltsc_2024-x64

3

bomb/bl6.htm

windows10-2004-x64

3

bomb/bl6.htm

windows11-ltsc_2024-x64

3

bomb/bl7.htm

windows10-2004-x64

3

bomb/bl7.htm

windows11-ltsc_2024-x64

3

check.pl

ubuntu-18.04-amd64

check.pl

debian-9-armhf

check.pl

debian-9-mips

check.pl

debian-9-mipsel

config.pl

windows10-2004-x64

3

config.pl

windows11-ltsc_2024-x64

3

data.pl

windows10-2004-x64

3

data.pl

windows11-ltsc_2024-x64

3

data/in.pl

windows10-2004-x64

3

data/in.pl

windows11-ltsc_2024-x64

3

data/mess.pl

windows10-2004-x64

3

data/mess.pl

windows11-ltsc_2024-x64

3

data/power.pl

windows10-2004-x64

3

data/power.pl

windows11-ltsc_2024-x64

3

del_user.pl

ubuntu-18.04-amd64

del_user.pl

debian-9-armhf

Sharing

Copy URL Twitter E-mail

General

Target
t1g.zip
Size 43KB
Sample260721-phebjavhla
SHA256 4f9178569b596f8c373d451ea5c024a9da0ae51e8ec2541992c271edca9b8add
MD5 14df3f25e544a5f05536fca52091e505
SHA1 4cab361cf624ca09a53135a06f699c0237507c7d
SHA512 d9a699e8670677f5cdab578110b70e0d00347203651eb3c65d4e6f629744b9bc7bc15069e341c14cbca0a0ac09bdddcf2a31f5a95756d552a475dbdca6fa4f52
SSDEEP 768:yewMKHIGBb2N284QzZ+q4EULwHtzfy/zBJY1ntz8wd+ySolByszF4VzDx0DxkWr:yewpYh4QN+Pklfy/1K1isAobys4VPm1
TLSH
T14813DF1BD5FC810ED567B63256980BB2E35E9D585088E22B952854F03D877F82FC335E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

add.pl

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

add.pl

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

add.pl

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

add.pl

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

adduser.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

adduser.pl

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

baby.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

baby.pl

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

bomb/bl3.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral10

Sample

bomb/bl3.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral11

Sample

bomb/bl5.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

bomb/bl5.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral13

Sample

bomb/bl6.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral14

Sample

bomb/bl6.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

Behavioral task

behavioral15

Sample

bomb/bl7.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

bomb/bl7.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral17

Sample

check.pl

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

check.pl

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

check.pl

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

check.pl

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

config.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

config.pl

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

data.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

data.pl

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

data/in.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

data/in.pl

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

data/mess.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

data/mess.pl

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

data/power.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

data/power.pl

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

del_user.pl

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

del_user.pl

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Malware Config

Targets

- Target
  add.pl
- Size 5KB
- SHA256 5bff1e26e8d8a6080a67c36cfe1422ad9b75f7959f3db2b8181acf855b57351b
- MD5 deb4912abec6ee455681ebea364f5496
- SHA1 0239fbbc88b169a954e09b213b1e02dee001c1eb
- SHA512 e51c4495d4b42ab1a15e02bed376ab650418413e2f06616d91e09a1f8ee1e66f4cdd5a5b0aea9be07c489483af26eb22ac0037ee3bb3956cde70ee2462f9f6c9
- SSDEEP 96:dKpT2nsdzn0h2+LEWo+Ngep5tNIBMQcpCBMh0h4UuC8p2dvSbe6Sx+Ngepud:Apqnsdzn9+xxta25hFgSZSld
- TLSH
  T12DC111A0AA0BED55C4331D1EEF015804E5ABE85315F67628BB7EC07ABFB102DC176E49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  adduser.pl
- Size 1KB
- SHA256 ae9b04a6721d410870aaf0d755516690df6a97e2e53b673f6cddd229a1502c91
- MD5 fe9d461da01965482ead6fab43c3ed53
- SHA1 336e49bcfd2fa7709b9239dbf2445e25ab77e09d
- SHA512 62b8a9b5c97ec7a25eae3dc686c3da9d109568cb2cb8c4a2e06e8fb80ced86dae2e55f8e9e3169907a06eafa0482c0557a656f23b4008ab5eebaa51a6bd34bfa
- TLSH
  T12031DE527EC3C05BC6121D9EE242EE3CA6B3D41145B33A383779E2BDB2745DC0527944
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  baby.pl
- Size 595B
- SHA256 5cc0dd339be2595146f7a46b78a8b58e618d2c75440fd89f23ef44e0f16ca209
- MD5 cedaa76fc59768661cb6ce1b4b75b633
- SHA1 1daec0ca1fcf88fed27150bc7b0a6977761b62ae
- SHA512 450c94e509d2f0e5b9abf4b901cede6240f1705726254345b20d20536166f9613baeec58ccff062b34b874b4ee258ff495bd8a2e743e4c3fe374e752c27b13f7
- TLSH
  T15CF022D46193092A40836EBB04EC824CF88FE8770B75225EF02D702DE76A90A3165ACC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  bomb/bl3.htm
- Size 143B
- SHA256 666dd29df84afa36d87a008fb913f09fcdc37917549ad26e28a215d408aa1abe
- MD5 a30c2a5b6e9693890219b4a6287528e9
- SHA1 eb7b7d7b130aab27ed9897c8878203203de30ee5
- SHA512 6be166569846e1d82e4febd52ce54bea7625cd9a2880eaaba0af19351184813b9caf8ce6e5c8bb1a967b5af0e6948a1c521c05efeeebf043724a09a452a76a2f
- TLSH
  T155C02B007D019F3FCC2774002076E84CC82CFB1C4AECC9C04480C57B78C16900C443C0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  bomb/bl5.htm
- Size 1KB
- SHA256 fe994d928dd71f3a96f13d38393c64c6fb3b2508d1229e68298f0289d6a4821b
- MD5 ea088693caef7ae0564e9614ab8a43ea
- SHA1 c6cae7e8178660c7fb2f9f597e93b5da9e9d6578
- SHA512 0402fddd89b0380296ca0f11ce52ab8d16e11b7fe03761cfa7fbace76b37e80c5855ec81ba9e579dd6012569e06151c40b3c80448f338a7e2377df20b37f1b26
- TLSH
  T146215C1C45769C41A750BB76057DF01E9B2F31877FFB9A1AF28D072CABA02108620C9B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  bomb/bl6.htm
- Size 483B
- SHA256 c98f1fb103b6eacfb01eb4cea0ba99fb8429aa1ecab5fd1ac0e2b1a4a263b548
- MD5 02dc4fbc13d757ba02371f3dc45b289d
- SHA1 d7bb2f0cbdee23cb5311a112eb10bedadac266ca
- SHA512 9e3854b5e6287c9df8e799e23cd2f12383d8cd12fc905f83b2730bfcc0878c371179462c0c02cee255d998caa385aa7af511b32285d6a8eafa6892b17c50c913
- TLSH
  T165F0A71D7B44889AC1A313F50EF1AB09916CF8366B831930B24F8447FF7256B5ADB651
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  bomb/bl7.htm
- Size 679B
- SHA256 bb587974c30c61bd6e22bfab667ea96cf0a57eee8d2edaad8c8e3047c6922fb9
- MD5 a0cff1cf1420c09d8f542bcf594cfaf7
- SHA1 c4b9a6174e967d5b100ca31c8ced5062f0702c7b
- SHA512 dd81a8927848a340971136801c1bae7e2485582cb3fd892f19fb0c00b35be245abbde043466eefaa7ccc3137ea8503a328bd69342cd8a64cb3d72726764aa471
- TLSH
  T1DA0123066A6BEE678712441810B4BF4D2E67D403C34C49F386E0E0A6A08EF40CCB6B51
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  check.pl
- Size 5KB
- SHA256 f320b2e3e5b71b6a96419dde0090a19879f5686a09f797f9ccff1fea1b6d2c9b
- MD5 0f34249004e13dbd53b72bd609987f06
- SHA1 c64a98aba8d5c820c1eda0331a0ed47159185942
- SHA512 e85cd8f32ee8a80cdf3386e5262dff5cb7484c3d277891ba69eaaaf621e8949bb4d489bb5b8cd53c3b31ccf8266adbf1422839560c93acd6c4466246bb75750d
- SSDEEP 96:lYypqo747N0huHnFhB0hEU1cAFcT8Rg0hRcvKgn8:lYypRMNLNvT8RgD8
- TLSH
  T169B1ECA12C4BD95288376E3EEB854418F5AFE84205F97A28B77FC0BABE7501CC171E45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  config.pl
- Size 1KB
- SHA256 e453214ce224d75ad7a0d82bb9d0a65355f4deb0ba42e1efadf99e30ea572751
- MD5 a68d473fb1a3d7d0e3229a6e15d35de8
- SHA1 be93c1f61180c44943efe4bfccecec345ecb3e5b
- SHA512 24eb54e753e9f086b6e9b9cd1737b202fd3ba9187b525aed5756885daa4111c36a7c975403f4225af48271b1a8218d27db9616e72e4cbe1700f20254f4fdfe09
- TLSH
  T12721D874D1D8443B13CF36A9FF6D9393A2715882155EF3B0B00E16EDE35114AACF5259
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  data.pl
- Size 820B
- SHA256 efdd8b987a6810aa173e3516b2d9b367bae2421245e254d584f1dc2397e3349f
- MD5 9bfa9580044c57d678c065e82c76acce
- SHA1 60d40aa58f918b70fb7b0e9c7fd39e59fefdfa2d
- SHA512 27e28f76b2fb2e553598981046cafca99d82b24e626d360c90e041f78b8dde3310bf24c59a399cd1c7132f3ced692654009ec3f6562d2898a6115082a64a739b
- TLSH
  T17801B5211031BAAF12763042E89D77B6D876E2E6035EF6F360F172940213B7A7DCA017
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  data/in.pl
- Size 266B
- SHA256 2e74a4941b58e5588b748987f8c2657ac3c94bf05d510faa370282f4e301e65a
- MD5 e1970204fd3f3bd3eb45b9474c12a420
- SHA1 76c5a8d6b572f3ebb21357dd9174ab1b9cf41f68
- SHA512 b8ac371580485a1ea7e7485e073fa00656efba272c700380c538348b6e7ada266df1caf8ab11dedf10986262731a6d9cdb9224ed61d1de2b17522ab8e4c45607
- TLSH
  T11CD05ECCE11DCFDC8D9881E2089C61A02DCB832BC52A9E548A8716723947E89320647B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  data/mess.pl
- Size 6KB
- SHA256 444cc0c9007286022b71e3747507b6bca3e7efab6611e7ad9580fd9b9ae97801
- MD5 261afb9b37b0212012be55a58349040b
- SHA1 c22488e4cc6c0d4ed1ae45580c2f59bb867a85f9
- SHA512 dc28bc7ba77b4e3064afbeca97117df65dad806e5d219d2b6e1f78599dc1b15e4c320e3f4a2587726bf9741fa7abf5d95b9d64d5adb284e25ac1e4bd83e2391a
- SSDEEP 48:4pfdlpf4jfvfqbxfsfmpfKno8i+pfJfPpf9jNfpfiUAafbkpfCfiUfzf+sfOpfDI:P8s5DjTirj/66pRDHTDUaxcf
- TLSH
  T1F7E1E5C4770D07DDA2518AA648C82F9B46A7E383404A7E16245F277E7B44E4FCB1B63E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  data/power.pl
- Size 17B
- SHA256 71c5e80c708f4668e0de14b33b9e0bcd309a413f9b9ae35cbc2a0d4cff66eb16
- MD5 16db511e926aa468014fa90b6250eb6b
- SHA1 d872770be60ddd141e93f3bce1e71e99a560cd48
- SHA512 6b40f347389d52406cc70346f27484f2b040375e570ab5f4a2cf5de8ab2a3c286c8a4f580701be241dd256993a12f49459c3cd91ff1e829a77c5cd187c60bf40
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral29 behavioral30
- Target
  del_user.pl
- Size 1KB
- SHA256 11c2836dd825da5b7a756011e2cf83e0b142508e756a3ef1bb5b9764ab3f8e37
- MD5 c18ad5f57965189dd521c64b5149cca3
- SHA1 73f46e1c16231fd2654f725a42380fa4ecba7481
- SHA512 99bc3c128f6ed52f54cac8abe9ee92efc08d8b25104e5a2034e487b3f0c74d9e1f6faee6be2635fe46aedba5573a9ac56c4bbf6afb15d5a9d026b7cc186d66f7
- TLSH
  T144318562784A93D2C5233E2CCA1350289B93F05309F77538373EC0BCA9B126CD533926
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy