Overview
overview
3Static
static
1import_from_excel.ps1
windows10-2004-x64
3import_from_excel.ps1
windows11-ltsc_2024-x64
3vendor/com...er.ps1
windows10-2004-x64
3vendor/com...er.ps1
windows11-ltsc_2024-x64
3vendor/com...le.ps1
windows10-2004-x64
3vendor/com...le.ps1
windows11-ltsc_2024-x64
3vendor/com...on.ps1
windows10-2004-x64
3vendor/com...on.ps1
windows11-ltsc_2024-x64
3vendor/ezy...er.ps1
windows10-2004-x64
3vendor/ezy...er.ps1
windows11-ltsc_2024-x64
3vendor/ezy...ze.ps1
windows10-2004-x64
3vendor/ezy...ze.ps1
windows11-ltsc_2024-x64
3vendor/ezy...ns.ps1
windows10-2004-x64
3vendor/ezy...ns.ps1
windows11-ltsc_2024-x64
3vendor/ezy...nd.ps1
windows10-2004-x64
3vendor/ezy...nd.ps1
windows11-ltsc_2024-x64
3vendor/ezy...er.ps1
windows10-2004-x64
3vendor/ezy...er.ps1
windows11-ltsc_2024-x64
3vendor/ezy...te.ps1
windows10-2004-x64
3vendor/ezy...te.ps1
windows11-ltsc_2024-x64
3vendor/ezy...nt.ps1
windows10-2004-x64
3vendor/ezy...nt.ps1
windows11-ltsc_2024-x64
3vendor/ezy...le.ps1
windows10-2004-x64
3vendor/ezy...le.ps1
windows11-ltsc_2024-x64
3vendor/ezy...ng.ps1
windows10-2004-x64
3vendor/ezy...ng.ps1
windows11-ltsc_2024-x64
3vendor/ezy...ost.js
windows10-2004-x64
3vendor/ezy...ost.js
windows11-ltsc_2024-x64
3vendor/ezy...v6.ps1
windows10-2004-x64
3vendor/ezy...v6.ps1
windows11-ltsc_2024-x64
3vendor/ezy...or.ps1
windows10-2004-x64
3vendor/ezy...or.ps1
windows11-ltsc_2024-x64
3General
- Target import_from_excel.zip
- Size 1.8MB
- Sample260722-pgd95sef89
- SHA256 a8ab4bee1525bf76a10c33d478857bbc2a9089bb8c27305fde129e6ab6eb377b
- MD5 8c66e76ad712dcc6a71c17e9c1fded20
- SHA1 0fe94cfc95dba419e7c09dcf2e635bd6d9fdbfae
- SHA512 bbdc42ce314dec26313a42e64f8bfece267e38dcf317ffde3270b5e727de49728615f37dcf9694ee7de3c7d52b74d4a65532052d2cb33521cac70bd7f07d1250
- SSDEEP 49152:jqYtd+OoX3rJtpffchcEOakD7dTYPI+u8jr1KvA:p4vX3pnc1Fy0PRugv
- TLSH T11195CF3A830E5080FF427F30EF46B626B475A6822121B4966BD5CA978967CCC67DFF14
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
import_from_excel.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
import_from_excel.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
vendor/composer/ClassLoader.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
vendor/composer/ClassLoader.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
vendor/composer/pcre/src/PHPStan/InvalidRegexPatternRule.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
vendor/composer/pcre/src/PHPStan/InvalidRegexPatternRule.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
vendor/composer/pcre/src/PcreException.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
vendor/composer/pcre/src/PcreException.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier.ps1
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/Arborize.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/Arborize.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrCollections.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrCollections.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/Background.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/Background.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/Border.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/Border.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/Composite.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/Composite.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/Font.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/Font.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/ListStyle.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/ListStyle.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/Lang.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/Lang.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/URI/Host.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/URI/Host.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/URI/IPv6.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/URI/IPv6.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrValidator.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrValidator.ps1
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target import_from_excel.php
- Size 1KB
- SHA256 4d8953f70628f5197981ca2cc3e17932dde808d2e08c88e93811890485859fb6
- MD5 df91f17af225abe453bf4361d9ba233f
- SHA1 de0e4ecc3f99274698d2cd424699637e9823b36a
- SHA512 8f4f523cac14d1e6a8766ef5ca98acb2e5c4665ed0f11688721aa5293c6c349f05b56b402bf055c1ead1f3eff78221e244a1c129f7b620bb58d32ad4a02d7d1a
- TLSH T1E121CE3D7C8ACB60410DF8E84A0441A5E959FDEBB225B50CF20EC897DF599D84AFC5D8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/composer/ClassLoader.php
- Size 15KB
- SHA256 d4b2313e562edf942838ec316d983c1a3459ca67da3e5658e861200b0b3693c2
- MD5 c02be6d96671f88d28aad3ffa134c8ae
- SHA1 7f146de662b0599355b3b049a161e23cbdbbdaeb
- SHA512 f73af132ef1159370f4da75d1477541c8fd55e82d64e1a29b199e8963597b3558853edd48f703118bb139680e80bbae5cd601580c9f62355f3e749214b40e162
- SSDEEP 384:bRMAJd+yMxhA6b9JmKj7YyiznGgewQbuUNN7dJUu8:bjxMHAS91Ex
- TLSH T18D721F6929EB042A085361BD978F9051E05FF13B622D4D65FDEE06F06F0072CC5B6BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target vendor/composer/pcre/src/PHPStan/InvalidRegexPatternRule.php
- Size 4KB
- SHA256 c29ca457386311f9e33c33158fa8e4a8aaffe281009c79810a621cbead0cb342
- MD5 5469da7aa4af8cab8b4371ded6cdf96c
- SHA1 5cd7c2020bdec378e8328834f875c711eda2697e
- SHA512 68cbfe9272871f66be78c9013d8c35ef541739b3f97deed12ba4e511de0b3c6225f5112c33cb8ad86309a27f904175038e66f3493a21f6e00b9ac5769d344b81
- SSDEEP 48:gwy9YUvJV6Dij4G+/qsGblxTFElCeGba7/PpQbtSZPrtCrnqhC0WEOU69ot:gnYUxqijS4z+CeW5SZBCrnP6Omt
- TLSH T1EB81216EBCE71D23450760BC6ACF9028F539A41324B89F92FDAC0B95AF41469CDE470E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target vendor/composer/pcre/src/PcreException.php
- Size 1KB
- SHA256 4bc7e85c1bf83faca234aa72b1208c5665a2328c105969de55318d1ba1b73393
- MD5 46fe5ffb722d40c309e4623e3b0757c7
- SHA1 cb3d167a3ce11fe321d1503cfd7839269de8de52
- SHA512 814cbe3ced96e10e6d0fbf40bb5560839c11a57a6529a6f4e643d0037357ce51cc5aa699c99d7b4903cd903df461322bd625789778052d00934e2a509b0c9367
- TLSH T1AF21D2245CDA9432054710F9238F605CF5BE761B605DD9D2FE9E5B74AF00629CE31E8D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/ezyang/htmlpurifier/library/HTMLPurifier.php
- Size 9KB
- SHA256 0aeaee6d17529c7a2a5a778eceea8092f3191d68cef762652fe3e8e82d759cbe
- MD5 50a6042fe50496941ba24292bca32f22
- SHA1 3a5f50d076925f30557b69db7d801786f43027fd
- SHA512 8b084b83f0754d01d8e4677ee7e4c079f3cbeb9bd73934076f4e7503c358dd195d00b9804312d8b32e86335348af21196cac2e22709aab8d178a7f529fa39717
- SSDEEP 192:5L6/jdUuQEW8ITJTWdHzyF3OY7oB3kn7g2vv1y39egYx6V4bf9GtazQBjYYOu1Q0:5L6L+uQbUylWRnMv1y39VYxHGtazQhYy
- TLSH T19C22321556ED083321425639E78BF0849B338257D119B0E638ED9BF88FA7F24C7E9668
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target vendor/ezyang/htmlpurifier/library/HTMLPurifier/Arborize.php
- Size 2KB
- SHA256 61033e22a54cf43d69007b77a9c642f75ec6900e9c0ecb40ff3d8f687fe52d85
- MD5 7e1c1940096df942fbcd171302f8927c
- SHA1 b614e511247e494e5e65530745bbd4ba0149075b
- SHA512 4d680299e83fdb9a83f84f2b8d7133f223180fc4011247afbf16926302bca82f7ee82f5db881315e7c67e0d0e65af80fb8342d81cd1e982bd47a303b3b67d069
- TLSH T14F519B6675D718263423AA3D9FDF910476B9814B600CEFF17C2E9BE09F50429C9DFA48
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrCollections.php
- Size 4KB
- SHA256 1ac1c160256e4d0f6db13cc5dd70af57f40c765f751349265e9a16fe071115ae
- MD5 a4bf2f1435e3086c16e412968d39a7cc
- SHA1 236ab3a5d41cf38a74b2665efa7a1b8a17feedb8
- SHA512 d43a34d5545189fa5fb2b5846584c810da5a296141628e6100371b2526e1da83bd34decc7211b51626fc96a79d6c0fccb714b1b4a891710c08d6d677c3279f92
- SSDEEP 96:+3y/Oy3hz27nCyn/PXtGCqCpakszyyN2O/E8TRmV8m5Pyw:SMOy3hz27nCy/PXtHqCpakszyyN2O/Ez
- TLSH T191A1EF282CF906B75697357693C71084E425E1A7320985C03CAE47F4AFA473C96A6B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/Background.php
- Size 3KB
- SHA256 b21dc99d65c888f381dc30d6dea34818dbe84fd45fc5c269b882c5dd11ac276c
- MD5 99310e8ff458aaf39b0de712ae1d1173
- SHA1 be8097bf6348d61df5a5b08dddab06cc8efa1b10
- SHA512 7d03b8bcb9a8e7190e31c5e0090699d5020376b1a2d0e9247344a1919a2e8238a7efca8546616eec54ee73486983aceca2fe156c44c61b086479540dd24e401a
- TLSH T18661AE7D68EB046BB403A93D4BEB9401D9299D13500DCBEDB99DA2E09FC0638C2F5B64
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/Border.php
- Size 1KB
- SHA256 2a5f34fcace3c13d749297c880d139c0803585e7879ae4f10c562e6e55b4804d
- MD5 bfcec5667278ee0bd42ec80ceb94b924
- SHA1 ce0cf2d01edafb67aa77d2123a205aa07792293a
- SHA512 4ea4374b3916c7a193baa3c4c7ad7697a46e2198d3ccbe2e31bfe1521b35ae5238115d8f70bdfee5efe6263e45df379e0bc04d4d7889ca989b95012e2f62a05e
- TLSH T17731AF22B8DA49232853A57D97C7DC80C5559B135219C1D5FA8D27EC8FC0B28C9E4858
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/Composite.php
- Size 1KB
- SHA256 e426ee39a9d07ef5680d783342ceb2c893829b215332606cd305b5d51db6938f
- MD5 d1456a381affaa3287a559770dd825c1
- SHA1 7f7e4255ef38b3391c29c961b300dc990babcbc8
- SHA512 3f60efdf3dd8eb816ffd704f6153f7b914c1cdb98309bd5398088b1df8ff820f30f5fbc1135628f12bf34b0c9ae6590d6ba9d1b414ad627dd8c41e261bfc7f4a
- TLSH T16021E0457DDC54355A0A51B5A7CAD4C3CA81931B931E20F8BCEE97B49F91F3406F0E98
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/Font.php
- Size 6KB
- SHA256 1173692d54b07dad462eca3702abc9f1f5819a4cdc17ff92d9e24a3e6d4461e1
- MD5 cadcd652415401722a2e6690371adf1f
- SHA1 9cb176bc08f805fe739d8f2e29f8e9eee355e1fd
- SHA512 28ff042f0949a14a887ebe5e97378345ca0c0c75273314141b2ecf08f284239b214ffeb01bdd385a74445985f5e581eb0f94edee40eb99fed0f4bbb6d52f7942
- SSDEEP 192:k063Su9M+AfL8UAiZ9VU7MuPHS2rKXyefOjoey8:khL1N
- TLSH T1E3D1016A68FB153A6843283E2BCF7454D55588038205C595BE8DA3D8DFC0A78D3F8FE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/CSS/ListStyle.php
- Size 2KB
- SHA256 028f8f4c733ec434ec8d1260e6e6c08424d13623c16ca46e88d9d61d6bfe7b2b
- MD5 184f255d1cfe8ab3bf620757a6700b84
- SHA1 d2e7dd96c3b0fd4b44825928e08bf30e138e8994
- SHA512 1668248ef75755af744ef0e56c6678346de4e42e3d2b05f6daac5a813836d7e7042ef25e79f473f2f2ed1bea6816cb567b2d5fe8cc4e03ef4a7c7ea997304387
- TLSH T16151775D68FB00276443797D5BCBA400EA21E903221DCBD9B99E53B09FC0638D7F5B98
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/Lang.php
- Size 2KB
- SHA256 cf55021bc7b40850d127e91eb0b7dc515f2dd7dfd76a65d5b006184e4270f653
- MD5 2e6384ec55c011122ae49c2ab31c5188
- SHA1 a20390c7c9be79528fde9e9074d6bb72cec65228
- SHA512 89adacfd8d0d73c55ccf81aad7347aff81752ae1e18c0fa489a0e1a1fb04a05ea214e2fcb8ad613429a2bc5b899293ac91630f75d02c4f2d8226d73e370e2889
- TLSH T17141655956DBA1FC0D42A03C4EFBA502A43A40031B2DABE8FCAD42E4DF80974D1F0A88
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/URI/Host.php
- Size 4KB
- SHA256 5d07c488bb0138217571776f3e6c47fb50a120dfc88ed3628393444735c04a75
- MD5 3e9bf5f819617e8c8d97344a543c2050
- SHA1 4faab96c53e37eba9dd9b169d3bd2441785df1e6
- SHA512 15ad9c2b69279420fb5de7bbfe1136cced3984a1944ea7d3297f5c1e18a8e7d9f6ccdff0d2ff658b6fb5ec81083845db62203c9303dc5c0905737530cceebee5
- SSDEEP 96:kBaaX7UFvn8/jOEupJpsMVvdVz/MMm1o1iXMS/yO8:kgaXI2/j5upJKMVQo1iXMS/yO8
- TLSH T171A1B65A75DB92324E8611744BEBB002FA20D2375569E9F0FCDE13D85F415B8C5F02D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrDef/URI/IPv6.php
- Size 2KB
- SHA256 51f12166f84e0cfd453ba969c16f702cb2ff80dc6da931fa123a9227d02f8f4b
- MD5 c2ef0853a10e582d038ee7944ec6b55e
- SHA1 43ffed81e899763792b6779ac56160e71083ad5f
- SHA512 977bb72a30144497761fa9dd13516277259723d4ecddb0c720721fa7d0ccf604b4bd16a29863d17b27a8e5f8fe97ddb570852194dab57f29cee1466cab99851f
- TLSH T136513E4D28E3513264A2A93A9F8FC0096656BA07831DDC58BCEC17D4AFD0334D9F4F98
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/ezyang/htmlpurifier/library/HTMLPurifier/AttrValidator.php
- Size 6KB
- SHA256 7bc5c216a7fe3c6d7e4c9cc629e4990f92ada7c63fadcdfa4f5370e2931ab964
- MD5 201b069d430b3d6d1dccebb209b1b00a
- SHA1 0f0f281dc625fa8485dea67579135c7667367750
- SHA512 b8457f8aff44b6311e1f1808658dfebf7e78f6cdfe544dc72104fea14400949553a2fa178d7fd8a2e88af0b588b75988a00c3be3e50786db352ffaa606b7d9a1
- SSDEEP 192:kdcoWddXD5sM39ugY5Hl/YCn9aCN9aC55Ft99cML79aCM9aC8t:kdcoWddNsM39lY5l/l3VRcCwe
- TLSH T191D121592DE605368903B57ACBCBF8505B24C683401AD0E53D8E93DEAFC526C85F6B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10