a0e5a1dc155e1e130bca59b4a981209437ba3f74f57a34cb9589abdb77b99292 | Triage™

Login
Reports

Overview

overview

4

Static

static

1

xsser-1.9.tar

windows10-2004-x64

1

xsser-1.9.tar

windows11-ltsc_2024-x64

1

xsser-v1.9...le.bat

windows10-2004-x64

3

xsser-v1.9...le.bat

windows11-ltsc_2024-x64

3

xsser-v1.9...t__.py

windows10-2004-x64

3

xsser-v1.9...t__.py

windows11-ltsc_2024-x64

3

xsser-v1.9...ure.py

ubuntu-18.04-amd64

3

xsser-v1.9...ure.py

debian-9-armhf

3

xsser-v1.9...ure.py

debian-9-mips

xsser-v1.9...ure.py

debian-9-mipsel

xsser-v1.9...ler.py

ubuntu-18.04-amd64

3

xsser-v1.9...ler.py

debian-9-armhf

3

xsser-v1.9...ler.py

debian-9-mips

xsser-v1.9...ler.py

debian-9-mipsel

xsser-v1.9...rol.py

ubuntu-18.04-amd64

3

xsser-v1.9...rol.py

debian-9-armhf

3

xsser-v1.9...rol.py

debian-9-mips

xsser-v1.9...rol.py

debian-9-mipsel

xsser-v1.9...ork.py

ubuntu-18.04-amd64

3

xsser-v1.9...ork.py

debian-9-armhf

3

xsser-v1.9...ork.py

debian-9-mips

xsser-v1.9...ork.py

debian-9-mipsel

xsser-v1.9...driver

ubuntu-18.04-amd64

4

xsser-v1.9...dec.py

ubuntu-18.04-amd64

3

xsser-v1.9...dec.py

debian-9-armhf

3

xsser-v1.9...dec.py

debian-9-mips

xsser-v1.9...dec.py

debian-9-mipsel

xsser-v1.9...DOM.py

ubuntu-18.04-amd64

3

xsser-v1.9...DOM.py

debian-9-armhf

3

xsser-v1.9...DOM.py

debian-9-mips

xsser-v1.9...DOM.py

debian-9-mipsel

xsser-v1.9...Psr.py

ubuntu-18.04-amd64

3

Sharing

Copy URL Twitter E-mail

General

Target
xsser-1.9.tar.gz
Size 16.9MB
Sample260721-plbptahd88
SHA256 a0e5a1dc155e1e130bca59b4a981209437ba3f74f57a34cb9589abdb77b99292
MD5 a4a3e5e9c3a9c8a4edf6f652e8504b41
SHA1 c5e2b2f7b28217c845e5b46055c707114775fa31
SHA512 ba70ccc434ae7f9cbbb1ee66301851f743878bf8c3df355bf49b358787e4af6bad1bb939375f01a392af81986da8562053b72178a06b42a638070f31733efd11
SSDEEP 393216:6SZltwbs34wiT3ZpqRwKx/XTDy/t0HGdPSxAuxzFnM7CuFIbVwFm2yTV8AZbK:FZltwbI4wWpqRRXfy7xSmuxzhM7CFeF/
TLSH
T1B50733238877448B59E9766C30786BBF3724E4C0E2E6B54E7B9C15DCC51E2B3A9B1183
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

execution linux

Static task

static1

Behavioral task

behavioral1

Sample

xsser-1.9.tar

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

xsser-1.9.tar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

xsser-v1.9/Makefile.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

xsser-v1.9/Makefile.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

xsser-v1.9/core/__init__.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

xsser-v1.9/core/__init__.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

xsser-v1.9/core/_ensure.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

xsser-v1.9/core/_ensure.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

xsser-v1.9/core/_ensure.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

xsser-v1.9/core/_ensure.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

xsser-v1.9/core/crawler.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

xsser-v1.9/core/crawler.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

xsser-v1.9/core/crawler.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

xsser-v1.9/core/crawler.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

xsser-v1.9/core/curlcontrol.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

xsser-v1.9/core/curlcontrol.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

xsser-v1.9/core/curlcontrol.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

xsser-v1.9/core/curlcontrol.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

xsser-v1.9/core/dork.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

xsser-v1.9/core/dork.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

xsser-v1.9/core/dork.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

xsser-v1.9/core/dork.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

xsser-v1.9/core/driver/geckodriver

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

xsser-v1.9/core/encdec.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

xsser-v1.9/core/encdec.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

xsser-v1.9/core/encdec.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

xsser-v1.9/core/encdec.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

xsser-v1.9/core/fuzzing/DOM.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

xsser-v1.9/core/fuzzing/DOM.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

xsser-v1.9/core/fuzzing/DOM.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

xsser-v1.9/core/fuzzing/DOM.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

xsser-v1.9/core/fuzzing/HTTPsr.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Malware Config

Targets

- Target
  xsser-1.9.tar
- Size 30.0MB
- SHA256 75699b3179806ff3b32ef5e6f5dc3c7235a46b48550c21034c9eba2b4bb4b1b4
- MD5 9318da3897e3b647b0ce7c691698ba70
- SHA1 191aae776965e6a6589b3a1d13cb9a20948bf789
- SHA512 c7c61ac465add650a49ee6fa03bfba475802eddd90f87712f789013d2897c56dbf70ff457fba491f28d886c8fca4ce71a9f971d3d08650d7687090d32980159d
- SSDEEP 393216:uqwG4ldWkdXMl/elCC7TCsttt/YWcmU6BDAtzxSxAlv8E:ZwG4ldWkhU/bCyUb/YWbtkJUOb
- TLSH
  T15567E112B99018B4CF9DCB30468CEE77BA31B25E554F3E2E3B6C92D02F11657AA1DB44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  xsser-v1.9/Makefile
- Size 921B
- SHA256 2b108972ec3de045515cf39a8f431a4595cd0d4910bf9404a273bd31f782cffa
- MD5 2673e7a4fce82a6c4365b5bacf7fdd78
- SHA1 39322a5f8e4b86e9451146f590f93f74f71937c7
- SHA512 caef6a935e563013f979cd2759837ec035a8e72fdfe74d1446ea127853264e9de4765265a982bdf506d891df1551d294e0ad462ddcfdd7e5eed9727143d265c3
- TLSH
  T10D11507F274B61252C04CABB233A0A06AF556C27A02747E8A64E0230C54F8D9752BE76
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  xsser-v1.9/core/__init__.py
- Size 733B
- SHA256 a4f595757fec87a983a8c55252cc65b153e043678b610dda1b7b79d094c7c5f3
- MD5 6b4578882290f76f68b8ae0fde9975ac
- SHA1 aa3d08550675ee2e33ac531283b600e7f40b0c95
- SHA512 ad3a76c681219ec9edc67657dcc6ac709ce58ccc47ce35c3e61a66e213df2db10869bf62f6a9d48d28b7d165bc4502b108979e349b94ffddc52bb501bd5097c6
- TLSH
  T15301D0581614C37A09401395354F74EAE2275BCB76EEA4514199D399684EA781BF10D4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  xsser-v1.9/core/_ensure.py
- Size 2KB
- SHA256 b3cb1f7fd877e20ab189436014eb75269a93b833e2a710fb39feb1d632399f38
- MD5 09b49d768a6cf1fec609ab3bfcf5e30b
- SHA1 e276b41fb1890b7664e2022b15f9c77c9312883b
- SHA512 46b528da9a4b1387b532f31a65dddbbebbe5cff710a9d22562dca1e17f407458023d4ca2ee49b8f0db18f041091e5cc7a092eeff3a76b49844251398f21b1f4d
- TLSH
  T10C5195052B1055339B01C27CF04B81D9DB9B1B472665743076EC86922F86634E6F09FF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  xsser-v1.9/core/crawler.py
- Size 11KB
- SHA256 c9225d57c8f86715c19daa8a569efbd9e6d8cda759093e82c2ea1907c22d9b34
- MD5 ffbfa05ab9b7880379a5228c87859e5c
- SHA1 124ca0135c64b8b5569d67792ef52c5eecf7c42b
- SHA512 04bbd594eef2d6021dde1c0d5e9856faa64e32d81141aeadf7ab95c6bc2ba8adc33b9dfb71ab8236b19cd47690ca62dc9643de6f3a3f23993d25b2cf84720729
- SSDEEP 192:A3WYHtJWj5kkx64DSMDI+MI7CEdbhHmHgUD3lNwUP4owAj2K:4WYnWjykx6MSM8+MIsbDXd2K
- TLSH
  T1844241B1A5501E3BD2878B2A49A7B847331B7C63121C563078BC62946F94638A6F1FF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  xsser-v1.9/core/curlcontrol.py
- Size 17KB
- SHA256 8a8fd95c0b6d6dabdd4c475930a6fe384cd5781b5045f7c30c640c596e543daf
- MD5 c13364d8ce8834e9aa48d8e98a1f5d7b
- SHA1 2c84f01c609eaf7a5c4611025d4120cd7dc2b34e
- SHA512 589cd0c8982c23eb8f6fef17ab7beb7442c30ec9b7d8ad87de3ec5622c9fe2b1f2c262a5664d4d825074f52bb402b617df88b5edf27f4353c8f378370006959d
- SSDEEP 192:A36IWJK0CbjnfFBbnNRZDn0xp84cnaYai2FAFTV2F6w5w+Ikn:4kJ+Hn9pzZLapcnDl2FAFTV2Fxz
- TLSH
  T1DA82EF0296019967C393DEBBC446F007373F1513064EA93A787E428A2F51939E2EBDF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  xsser-v1.9/core/dork.py
- Size 10KB
- SHA256 0ca8e319307e73454f71bc2d02b4258fce3b0fd08736e00a0af50c8d86413bc8
- MD5 4e75daca2566beb613bf4f69e61de53c
- SHA1 418805a2deced4c412fa2c5b1de730cffca4acd7
- SHA512 136708c370282431194eedabdc9c4184ac34f3704784a74fb9f3db9e8af38616f2ab40c69d54aa1d8eb342b29ffda2bde7fec066a43e5b8bf13a870c2a7ea063
- SSDEEP 96:AVNlg+QQsA9uaekY/scjCjF4Zj9L9n/98p0H08ME+VF71atvZxa8nWhod:A3LQ51C85RVo8eVBctBxa23d
- TLSH
  T1A0223FB10D12A563C39BD468D549E6D6A30B7C171568B930F0FC90A86FA4D38E6F0EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  xsser-v1.9/core/driver/geckodriver
- Size 5.9MB
- SHA256 04cbbfc94032017dfde16490940dbc1ccfdfe5c02079fd07948542fb512a4f2d
- MD5 1087c001ca623d517527a8d61d902828
- SHA1 287fb1191a3a0c445655c392129ba81f32910002
- SHA512 21a6ed7869e1817f6cc0cf58b7c1368e7996ac0b13a5d177604279cfd7270e6b6b08bd8b3410ce586069f7385dc8d515ba1b9a03883c63358d85c8d641f1cd95
- SSDEEP 49152:9Me/s9haRuOPA93Ub7TcBx8+CbthUE4uKe426dzr50B1hL9fdT9ztxy49rRpYM2r:9MlquOkwDR52/YiDGKu3A
- TLSH
  T147566D03F9A224ADCABEC834871E6537F735781D4015AE672BE59F203E16E119F2DB90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10
behavioral23
- Target
  xsser-v1.9/core/encdec.py
- Size 5KB
- SHA256 7d0f20187ea2113a29629b5fa114aa4ae57ee1bca8d1fa0b742c51755c738f8d
- MD5 30359336da73f1b8efd472db8e0140ad
- SHA1 30de3a44785920ca28f954d8c76faec20f89b27a
- SHA512 8d46214373bb3aecc2c9334ae9c370d00a4569cb8d1b30071c5d13a2aed66c7dc71f2de4fec84a9467ad17fc8ce3cb45c38b9d64bbbabc11928d1324b315e58d
- SSDEEP 48:GH99Vv5iytH5l11vTE9oiBnUSonJloE0qWw+OZLL4aeUwo046nwtlfnZhPdf:AVNl1Lvi5s14aQXWzPdf
- TLSH
  T122B1796BC90AADD15D97D039508BD89EB20E3A531A2835BDBDBC331C1F04628A1F5DF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24 behavioral25 behavioral26 behavioral27
- Target
  xsser-v1.9/core/fuzzing/DOM.py
- Size 4KB
- SHA256 060d24cc65ffe25a11882c8062ff15fa80a5cb3188674578a69088e3b3dd0292
- MD5 b67e1e3744e1c8cb8d89ab41c81d53a8
- SHA1 693ec88b8a25916974e2a92270d76faff735d774
- SHA512 4b33fe51ba20df4d6d931961ac69b14fef5eb0b69eb6e31ae3f441e6d4488e47e7ae02d241843fa24a13a96baa3054f0ead25adbb1df296b7ec13aa912625666
- SSDEEP 48:GH99Vv5iytH5GLfrDGnXDXXmEX2XzPvv3aJf8mYmXZXtX+cXWMXmcXp5/XpXBXek:AVNYLfrDJLY
- TLSH
  T1C29127C82D0BF9824952C1D3571AC888BCA8B9977CD4B07436AFD8A24F9C7DC283591F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28 behavioral29 behavioral30 behavioral31
- Target
  xsser-v1.9/core/fuzzing/HTTPsr.py
- Size 3KB
- SHA256 00fc7c67c94fd0c5d85a3103b8db568c72200c22112ccd3db1b697791eabe980
- MD5 aa80f71104f77a7ff8b8c0bb2417e4b8
- SHA1 4df82b430e45a01b7b979d5b1891e6d54d5cb833
- SHA512 75febab5dea1ad2be6ef127d7c0283fcf4b9e5e13740ad7c50e51f894da017eb3bf6a99cde47634bf3cbbd7a5f440cc0c7436cf662eaa747d07a5f0c6c3a53bb
- TLSH
  T18C81B1CD991BFEA52E05C4230389EE40FAA81757F48B9474722D51380FCCB1EA9B679C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Python

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy