bdd1a07a57ffc646c7731a2b3b5f6a354abea35ea8b6f1e2ccc3146580af0e1a

Login
Reports

Overview

overview

Static

static

courier-sy...).html

windows10-2004-x64

courier-sy...).html

windows11-ltsc_2024-x64

courier-sy...).xlsx

windows10-2004-x64

courier-sy...).xlsx

windows11-ltsc_2024-x64

courier-sy...8.xlsx

windows10-2004-x64

courier-sy...8.xlsx

windows11-ltsc_2024-x64

courier-sy...el.ps1

windows10-2004-x64

courier-sy...el.ps1

windows11-ltsc_2024-x64

courier-sy...d.xlsx

windows10-2004-x64

courier-sy...d.xlsx

windows11-ltsc_2024-x64

courier-sy...d.html

windows10-2004-x64

courier-sy...d.html

windows11-ltsc_2024-x64

courier-sy...ase.js

windows10-2004-x64

courier-sy...ase.js

windows11-ltsc_2024-x64

courier-sy...ard.js

windows10-2004-x64

courier-sy...ard.js

windows11-ltsc_2024-x64

courier-sy...ter.js

windows10-2004-x64

courier-sy...ter.js

windows11-ltsc_2024-x64

courier-sy...cel.js

windows10-2004-x64

courier-sy...cel.js

windows11-ltsc_2024-x64

courier-sy...ory.js

windows10-2004-x64

courier-sy...ory.js

windows11-ltsc_2024-x64

courier-sy...er.ps1

windows10-2004-x64

courier-sy...er.ps1

windows11-ltsc_2024-x64

courier-sy...le.ps1

windows10-2004-x64

courier-sy...le.ps1

windows11-ltsc_2024-x64

courier-sy...on.ps1

windows10-2004-x64

courier-sy...on.ps1

windows11-ltsc_2024-x64

courier-sy...eg.ps1

windows10-2004-x64

courier-sy...eg.ps1

windows11-ltsc_2024-x64

courier-sy...er.ps1

windows10-2004-x64

courier-sy...er.ps1

windows11-ltsc_2024-x64

Analysis

max time kernel
148s
max time network
137s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 12:19

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

courier-system/OLD/download (7).html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery

Behavioral task

behavioral2

Sample

courier-system/OLD/download (7).html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

discovery

Behavioral task

behavioral3

Sample

courier-system/OLD/download (7).xlsx

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

courier-system/OLD/download (7).xlsx

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

courier-system/OLD/download 08.xlsx

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

courier-system/OLD/download 08.xlsx

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

courier-system/OLD/process_excel.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral8

Sample

courier-system/OLD/process_excel.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

courier-system/OLD/sample_shipment_upload.xlsx

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

courier-system/OLD/sample_shipment_upload.xlsx

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

courier-system/OLD/upload.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery

Behavioral task

behavioral12

Sample

courier-system/OLD/upload.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

discovery

Behavioral task

behavioral13

Sample

courier-system/config/Database.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

courier-system/config/Database.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

courier-system/dashboard.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

courier-system/dashboard.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

courier-system/includes/footer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

courier-system/includes/footer.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

courier-system/process_excel.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

courier-system/process_excel.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

courier-system/upload_history.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

courier-system/upload_history.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

courier-system/vendor/composer/ClassLoader.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

courier-system/vendor/composer/ClassLoader.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

courier-system/vendor/composer/pcre/src/PHPStan/InvalidRegexPatternRule.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

courier-system/vendor/composer/pcre/src/PHPStan/InvalidRegexPatternRule.ps1

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

courier-system/vendor/composer/pcre/src/PcreException.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

courier-system/vendor/composer/pcre/src/PcreException.ps1

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

courier-system/vendor/composer/pcre/src/Preg.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

courier-system/vendor/composer/pcre/src/Preg.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

courier-system/vendor/ezyang/htmlpurifier/library/HTMLPurifier.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

courier-system/vendor/ezyang/htmlpurifier/library/HTMLPurifier.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Report Analysis Logs

General

Target
courier-system/config/Database.js
Size 1009B
Sample260722-phbkms1thv
SHA256 bdd1a07a57ffc646c7731a2b3b5f6a354abea35ea8b6f1e2ccc3146580af0e1a
MD5 0937c81fa2069f7a8679bcbbb956313a
SHA1 7aa02c4dfe3b89778c6ec92a4328b977c2fa02cb
SHA512 4304931cd59d8471354a356c454254a254fb0ddac6bbc633b4788bdf1196258dbb7dffd764cd6a34ea788c40cb52150559e16c7ba4bef0273eeef9cce583a3ce
TLSH
T1C0112C1825489C61217373B5DF0BC251F8672167570A1A067DAEC3524F3069CE9E3FBA
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\courier-system\config\Database.js
1⤵
PID:3272

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads