f2a63878e5cb1264011100f50162eedb39602241d50bba9b370bf642922cefb7 | Triage™

Login
Reports

Overview

overview

4

Static

static

3

filerr-mai...ase.js

windows10-2004-x64

3

filerr-mai...ase.js

windows11-ltsc_2024-x64

3

filerr-mai...de-gyp

ubuntu-18.04-amd64

4

filerr-mai...de-gyp

debian-9-armhf

4

filerr-mai...de-gyp

debian-9-mips

filerr-mai...de-gyp

debian-9-mipsel

filerr-mai...yp.cmd

windows10-2004-x64

3

filerr-mai...yp.cmd

windows11-ltsc_2024-x64

3

filerr-mai...yp.ps1

ubuntu-18.04-amd64

1

filerr-mai...yp.ps1

debian-9-armhf

1

filerr-mai...yp.ps1

debian-9-mips

filerr-mai...yp.ps1

debian-9-mipsel

filerr-mai...-which

ubuntu-18.04-amd64

3

filerr-mai...-which

debian-9-armhf

4

filerr-mai...-which

debian-9-mips

filerr-mai...-which

debian-9-mipsel

filerr-mai...ch.cmd

windows10-2004-x64

3

filerr-mai...ch.cmd

windows11-ltsc_2024-x64

3

filerr-mai...ch.ps1

ubuntu-18.04-amd64

1

filerr-mai...ch.ps1

debian-9-armhf

1

filerr-mai...ch.ps1

debian-9-mips

filerr-mai...ch.ps1

debian-9-mipsel

filerr-mai...n/nopt

ubuntu-18.04-amd64

3

filerr-mai...n/nopt

debian-9-armhf

4

filerr-mai...n/nopt

debian-9-mips

filerr-mai...n/nopt

debian-9-mipsel

filerr-mai...pt.cmd

windows10-2004-x64

3

filerr-mai...pt.cmd

windows11-ltsc_2024-x64

3

filerr-mai...pt.ps1

ubuntu-18.04-amd64

1

filerr-mai...pt.ps1

debian-9-armhf

1

filerr-mai...pt.ps1

debian-9-mips

filerr-mai...pt.ps1

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

Target
filerr-main.zip
Size 12.1MB
Sample260722-pkd4js1wdt
SHA256 f2a63878e5cb1264011100f50162eedb39602241d50bba9b370bf642922cefb7
MD5 95c0fd9b0a13114ef54972b7990ff267
SHA1 917663848a4bdb19b767ea157d6dbd457127e6b7
SHA512 b914a8bd4e5a7731c17a047f879d8eb452d82db1c8afb62dd7f88ab7b97ef606bdb042835ee46d89113b270e44b3f6095f3ee3599de637d0b4f502bb02dd5fb4
SSDEEP 393216:w7QBXF21a26wwTnVuC2h1RZAhtuvoFHqk:w6FLowLUC2h1RZAXuvoFKk
TLSH
T105D61258C6F60D02DB6F20FBBD806707D69CDBA04964DD13188C6AA6BC4A5353FE326D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

antivm discovery execution linux

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

filerr-main/database.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

filerr-main/database.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

filerr-main/node_modules/.bin/node-gyp

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral4

Sample

filerr-main/node_modules/.bin/node-gyp

Resource

debian9-armhf-20260513-en

debian-9-armhf

6 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral5

Sample

filerr-main/node_modules/.bin/node-gyp

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

filerr-main/node_modules/.bin/node-gyp

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

filerr-main/node_modules/.bin/node-gyp.cmd

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

filerr-main/node_modules/.bin/node-gyp.cmd

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

filerr-main/node_modules/.bin/node-gyp.ps1

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

filerr-main/node_modules/.bin/node-gyp.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

filerr-main/node_modules/.bin/node-gyp.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

filerr-main/node_modules/.bin/node-gyp.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

filerr-main/node_modules/.bin/node-which

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral14

Sample

filerr-main/node_modules/.bin/node-which

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral15

Sample

filerr-main/node_modules/.bin/node-which

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

filerr-main/node_modules/.bin/node-which

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

filerr-main/node_modules/.bin/node-which.cmd

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

filerr-main/node_modules/.bin/node-which.cmd

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

filerr-main/node_modules/.bin/node-which.ps1

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

filerr-main/node_modules/.bin/node-which.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

filerr-main/node_modules/.bin/node-which.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

filerr-main/node_modules/.bin/node-which.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

filerr-main/node_modules/.bin/nopt

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral24

Sample

filerr-main/node_modules/.bin/nopt

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral25

Sample

filerr-main/node_modules/.bin/nopt

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

filerr-main/node_modules/.bin/nopt

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

filerr-main/node_modules/.bin/nopt.cmd

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

filerr-main/node_modules/.bin/nopt.cmd

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

filerr-main/node_modules/.bin/nopt.ps1

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

filerr-main/node_modules/.bin/nopt.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

filerr-main/node_modules/.bin/nopt.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

filerr-main/node_modules/.bin/nopt.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  filerr-main/database.js
- Size 5KB
- SHA256 7a2e7c06dc5d0af38db9f0872be72a2d08bcac9fd210f24a89964cf454256c3b
- MD5 98386115ea5a51d0116ba84019b2d0f2
- SHA1 35d909c2fe342085b189e78d4b9efbac70031c40
- SHA512 7a20a2d3f94a0d124a7cbbd4a0a5785a66fa2931bcf04e7147a13036b050bccd48f77e695c6dae8d184eac4722808653264982586bf99c4b6f8ef853a3b89625
- SSDEEP 96:yQXfCj5+8uhjAicxek4hxpY1hYAM9ozw6g13Ew3fi2Z9ucuug9blpCk2:yQRSiplN9DNEw3fiG9uYgZlUk2
- TLSH
  T1B9C1623D3BBF1910216354B64F6368073039A90B2665BEC43EEC83910F945AAE6761FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  filerr-main/node_modules/.bin/node-gyp
- Size 397B
- SHA256 1ba02e2ff6a8dc9f19115f13942396d0cf68c3d8940057f4a2308dd905d5fdef
- MD5 912113af980621354f8e03688d1bfd11
- SHA1 0a5f673432106138713f4ddbd424757b2e29ac0b
- SHA512 9cab8e075ee990ccbce4af3227f1e51cae1be37f16367b4b9ca16c7a30e76cfdfcebaf1e97c2eca0731ce1121d12cd1b226fbddf4b0457cbc44f0d5bd7d70f0b
- TLSH
  T1FFE06D7925E15F36960B42FA8D015858416A038368043F5AFD0C3B839BA4319B2E772D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  filerr-main/node_modules/.bin/node-gyp.cmd
- Size 312B
- SHA256 18af1867d7c3574ee44d8fd56d4ed891cea67a1b1a377bbce6dbb848ba063cb0
- MD5 79b3fbf9ba09e5ab723c0d3424e10487
- SHA1 49551b8902a3cd898dc1a21ca3d6222faf471ffe
- SHA512 2ae1efdf81e0667b1651309558f6dfbbb4a20b41575083f8544be6a0437983f2d122b9d5b6a15979cf8c210355dc52f12513e1b1b630d7599c3b8d4e095f60da
- TLSH
  T105E07D7BF3806401354FAFB38047225220B7EB8984421877D47805FBC5457425ACB8A9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  filerr-main/node_modules/.bin/node-gyp.ps1
- Size 821B
- SHA256 78d9fe7e2c419aef5f787f1e9bda0c4d3d411fdd7686d92363ed17a62c3ad1f5
- MD5 66a864b4d792f5d9717afe2a3a00a34a
- SHA1 d8a1bc2e1b0525dd233934f2c72277a452c05fa9
- SHA512 3332f963062b34d0d11a8ba897e0f006d6d5d5d0d40253d2ba3b451d2420576d49431bec5cf7894f9a146a554269d5da1d7d7e5392156604d2a0154fca7f0fec
- TLSH
  T1BD01E52979F03A6A87079BA316651A01626AC5AB18441F2AD80C3BC3C6A472C73F767D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  filerr-main/node_modules/.bin/node-which
- Size 385B
- SHA256 00e26e0bb30a423ac72704dada679718e3920d797d76aa80ef969dce5e86cf75
- MD5 297c5c21b2a2ad46028995849bda581c
- SHA1 f1e6234d30a3b03536b6b7dffd8eedcadb6de1ea
- SHA512 cee5424d64a1d01dc488e31f48a44d3deb51ea49fd49a7b71f67ba62e6041a3414e431a8e07bb36c13dfefb8a003e09585415733e66937ec055a3b013029d60e
- TLSH
  T10DE092B114E96F32940952B88E059858415A0343AC04BF65FD1D3B429F6532EB1E7B7D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  filerr-main/node_modules/.bin/node-which.cmd
- Size 306B
- SHA256 71af591b1bbff1821cd804dd6f22904bd075810a7132116da58375567736e94b
- MD5 f092723c43341e72f0dd1f3dab7d70aa
- SHA1 20e18f786ed38dae692fa14fb2ff44118f013cdf
- SHA512 1b7c6f2499232156d91fa536c2ba701df7fc84e69eb1e8bc9cd87a363f6b49ca75e3486a2af116b80f02edf95741c31cf710fd80d18d5df9f852640b85ea1a3b
- TLSH
  T153E07D76F2407401344F9FB58447625220A2AB4C88420873E47505BB8A027524ACACA5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  filerr-main/node_modules/.bin/node-which.ps1
- Size 797B
- SHA256 951b24a10604321639e1ac23d5c0f0b2d56c2d8db7f50be37ef1dc6963899277
- MD5 fbdb809534a0d75205855acfa0b74982
- SHA1 f850543acb358998c2f076eacf92ce034cba8461
- SHA512 cb339c9a9e82678527c5db8325313814cfaf804d8fa8740384d38a6f7d69fa081ee3214c82389b212771ef4195d4a3007399c0b5086fd9409c892bc7a7841494
- TLSH
  T139018E6478FC3E67C206AB93176D5E406245896B1C448F25D8083F828F6573E33E7B79
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  filerr-main/node_modules/.bin/nopt
- Size 381B
- SHA256 15fa23344f314e078f77dcbd572cdbe956aade7a71eeaf8cba188207f17154d0
- MD5 8f21e826d7744cb7a39d37fc17eef475
- SHA1 1aa8056a5023f4c23a5276ec8fc096c162fe5372
- SHA512 172c531a617b798cf428251a394616bfc6eed7625df1d10fc611b2d3b69e4d45f8d6d0c05da27d4ddee96c3e30cd420efcce57744c0dde456a2d535cf8f80832
- TLSH
  T1EAE0D87116E15F36946D52F88D025858459A0353B8047F59FD0C7B835BB431DB2E7B3D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  filerr-main/node_modules/.bin/nopt.cmd
- Size 304B
- SHA256 76db86eb7332ae07a30a8031919734c7187f1ce054086a970c85029f727c0f62
- MD5 821cdba8dce6d5c291c5c117f1831048
- SHA1 288407b43efc76e5b570e77353b7b6e256cd2b30
- SHA512 a20ce00ea8603dc8e8a86eb37258fa7770aa20277c1b7865da12cc1edbca59fc69acaaaade12093bef210d47572e20a2689ad92d6cfcbdf6e263910331ca7e5f
- TLSH
  T183E07D76F2406401345F9FB29047224220F2BB5884470477D47805BB45457424ACA8A5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  filerr-main/node_modules/.bin/nopt.ps1
- Size 789B
- SHA256 08b2e0c384c9feb9d17908fdab0c583f5f3455884f0702a96ef7ed870b508eba
- MD5 fc0ab5626ec14545ae48b1c94fa8050b
- SHA1 a5a15e45d8abbd411cfddcdb435532124c06bc20
- SHA512 8f660d193e6657129a38150bdeab84b3fbc08f98fbe1eaf8b555fc3af40e978fb5ce54734b2d29c4fbbe03c39ea506b446a5b8f57d8086758dda20d8a88c0e21
- TLSH
  T11A01C8247AF03A6AD65AAAA313661A016385857B18446F2DD80C7B8246A072C73E7A71
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

discoveryexecution

behavioral4

antivmdiscoveryexecution

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

discoveryexecution

behavioral14

antivmdiscoveryexecution

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

discoveryexecution

behavioral24

antivmdiscoveryexecution

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy