4fe4957983100566ec361d87c014577ba355713fe5e79606fdbee10623ebe683 | Triage™

Login
Reports

Overview

overview

6

Static

static

6

candycbt/aturan.js

windows10-2004-x64

3

candycbt/aturan.js

windows11-ltsc_2024-x64

3

candycbt/a...jut.js

windows10-2004-x64

3

candycbt/a...jut.js

windows11-ltsc_2024-x64

3

candycbt/b...x.html

windows10-2004-x64

3

candycbt/b...x.html

windows11-ltsc_2024-x64

3

candycbt/b...bt.apk

android-9-x86

candycbt/b...bt.apk

android-10-x64

candycbt/b...bt.apk

android-11-x64

candycbt/b...x.html

windows10-2004-x64

3

candycbt/b...x.html

windows11-ltsc_2024-x64

3

candycbt/b...esh.js

windows10-2004-x64

3

candycbt/b...esh.js

windows11-ltsc_2024-x64

3

candycbt/b...get.js

windows10-2004-x64

3

candycbt/b...get.js

windows11-ltsc_2024-x64

3

candycbt/b...bar.js

windows10-2004-x64

3

candycbt/b...bar.js

windows11-ltsc_2024-x64

3

candycbt/b...hat.js

windows10-2004-x64

3

candycbt/b...hat.js

windows11-ltsc_2024-x64

3

candycbt/b...out.js

windows10-2004-x64

3

candycbt/b...out.js

windows11-ltsc_2024-x64

3

candycbt/b...enu.js

windows10-2004-x64

3

candycbt/b...enu.js

windows11-ltsc_2024-x64

3

candycbt/b...ist.js

windows10-2004-x64

3

candycbt/b...ist.js

windows11-ltsc_2024-x64

3

candycbt/b...ree.js

windows10-2004-x64

3

candycbt/b...ree.js

windows11-ltsc_2024-x64

3

candycbt/c...der.js

windows10-2004-x64

3

candycbt/c...der.js

windows11-ltsc_2024-x64

3

candycbt/c...on.ps1

windows10-2004-x64

3

candycbt/c...on.ps1

windows11-ltsc_2024-x64

3

candycbt/c...s.html

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
candycbt.zip
Size 40.8MB
Sample260724-ah3a2adn4y
SHA256 4fe4957983100566ec361d87c014577ba355713fe5e79606fdbee10623ebe683
MD5 44968df342128822393befc7392e6fc1
SHA1 0fc73864b07ac750f0d1e09d1e27639529b8e000
SHA512 3fd1901f33507ca94d37cff29d773fda87a220b53f679f49798684cefb7b12665342064fd10ae4447819422e1d9f383f1ea697f065b5cf44766ea03ee6f93517
SSDEEP 786432:h8+wrQ+Dcp2ZOJx/nh2p9X9A4/6G1JNuJNcUJNj8VaCuLJNS6b3:xIQYiO0K9m4/6GhMPDt7hb3
TLSH
T1A897233CEF7C1956E81D7E3A89EB5A98CCFB5212130DD4066DCC4B65CE6E0E21638B25
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

android discovery execution link qr

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

candycbt/aturan.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

candycbt/aturan.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

candycbt/aturanlanjut.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

candycbt/aturanlanjut.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

candycbt/berkas/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral6

Sample

candycbt/berkas/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral7

Sample

candycbt/brocandycbt.apk

Resource

android-x86-arm-20260325-en

android-9-x86

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

candycbt/brocandycbt.apk

Resource

android-x64-20260325-en

android-10-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

candycbt/brocandycbt.apk

Resource

android-x64-arm64-20260325-en

android-11-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

candycbt/build/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral11

Sample

candycbt/build/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral12

Sample

candycbt/build/js/BoxRefresh.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

candycbt/build/js/BoxRefresh.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

candycbt/build/js/BoxWidget.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

candycbt/build/js/BoxWidget.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

candycbt/build/js/ControlSidebar.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

candycbt/build/js/ControlSidebar.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

candycbt/build/js/DirectChat.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

candycbt/build/js/DirectChat.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

candycbt/build/js/Layout.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

candycbt/build/js/Layout.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

candycbt/build/js/PushMenu.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

candycbt/build/js/PushMenu.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

candycbt/build/js/TodoList.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

candycbt/build/js/TodoList.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

candycbt/build/js/Tree.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

candycbt/build/js/Tree.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

candycbt/config/class.excelReader.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

candycbt/config/class.excelReader.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

candycbt/config/config.function.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

candycbt/config/config.function.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

candycbt/config/dis.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  candycbt/aturan.php
- Size 4KB
- SHA256 58dadbcb85a2c9abd3c798290aaab9b334ddc80760a4d7eb7f846f101bc6ad6f
- MD5 bf869b44d6b2089acee62219ae5ac5b7
- SHA1 520accf7bf6d33539ad8f3cef96b3dfa43c0df8f
- SHA512 67f9b988a0c98ad7c8afb57954c3421dc6a5d29cecbdda4967384f4722e81820432acf79cdeff69122f64614d473e02aa8870ab2d27728f1ef1fdf3756f7d76c
- SSDEEP 96:I465p5lkIv2Mlq9LLg+k1DN7wdJIdCZC9WOu73B/nzPvz:I4m3lkhfM+kHyJUkPvz
- TLSH
  T11D91412BFE070EE489A6821F8F925001416510270A9176353F5EB1DC7FFD73DEAB46AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  candycbt/aturanlanjut.php
- Size 1KB
- SHA256 c2004a149aada3815937646a60d7a9ba5cb786f0d45be4c4bd5b3793f3471140
- MD5 f87b32683f290e160c3b21555e6a0dae
- SHA1 254550368b7c6d63b59d2771adfdc011e72a378e
- SHA512 c78817536ad4e16d1254a06fc3a2294bdf1dadd5014884d9a8f75887f036eae39b132ca81e3af87463351fb7888c4261aad120e6ea38807eb6375325ae7d4c3a
- TLSH
  T13A31DC1F1E170F2468F9C36FEB911103C175111336A1A0A27F2B69AA7F75234AF848CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  candycbt/berkas/index.html
- Size 3KB
- SHA256 a9aaf0087faa0ed8f51388c1bb331dfaa231b18cfa1aa14344630a061963d4e8
- MD5 d4edd62ed542e34cbec1cf8d2950d8da
- SHA1 21aa6e4a7f50c7aed4b80c4e23067ea207c75245
- SHA512 472de72ac9a9dc1546e6cb20a87c9298e9cdc0d33de75f800fec9b2563fee1112fc0a9ed2d8021aa61ec4911f85905d403017651f8a233e3c60de1445cb62255
- TLSH
  T1EA81D77347803728AB338C763AC5BB5576101423C152A7A1F450ADB6CFDB4977EA638D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  candycbt/brocandycbt.apk
- Size 2.3MB
- SHA256 e3c2907ab86f10231e0de8b1a24503e669e0e5a0a40a4acd9a7222cc9d6e3ff0
- MD5 9da2dcb2c8d9fb054231a4b22fc244e2
- SHA1 23fd04a708c1064e18af5e056eb1823c5576d2d5
- SHA512 9e2a0d9c79473beb3af56742af1b8dfee7a6dc469519ccb7007ffad3f1f3418569dec6cd420700ef82a5cfe915765869f8e0c514a985dcf22203235b1b3df9e5
- SSDEEP 49152:7IV0BZsqVqrTq4H0LyHreQunAzjgp0oKIZG1n7YJlK:w0BZrVqHqDcerAzgKY2
- TLSH
  T124B50181E754B427C977903246B60B6645664D0A4F85DB13369DB32CAF7BBC08F8AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8 behavioral9
- Target
  candycbt/build/index.html
- Size 3KB
- SHA256 a9aaf0087faa0ed8f51388c1bb331dfaa231b18cfa1aa14344630a061963d4e8
- MD5 d4edd62ed542e34cbec1cf8d2950d8da
- SHA1 21aa6e4a7f50c7aed4b80c4e23067ea207c75245
- SHA512 472de72ac9a9dc1546e6cb20a87c9298e9cdc0d33de75f800fec9b2563fee1112fc0a9ed2d8021aa61ec4911f85905d403017651f8a233e3c60de1445cb62255
- TLSH
  T1EA81D77347803728AB338C763AC5BB5576101423C152A7A1F450ADB6CFDB4977EA638D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral11
- Target
  candycbt/build/js/BoxRefresh.js
- Size 3KB
- SHA256 d317b475ce03f1aada81a66de5988dbf38c2606296cc35cc82b660b0cc92864d
- MD5 4fbfa6b85694685e6cd74bed58db60ab
- SHA1 a72976f1994f57d009b5ce29d8106aa28289d967
- SHA512 18cf63faf65679d213bced70f24a655f68f6c53a3fd314ac336e30deee7c9f52e4cfd6ca07cfd8d89b3f4923269fb8cce922d553240c64b23b26862d0f9b3dbf
- TLSH
  T13D61BF893A66651185BF33F5DE0F241CF330823B5542524479ACCBD65FB8738A292EED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12 behavioral13
- Target
  candycbt/build/js/BoxWidget.js
- Size 4KB
- SHA256 c6742875f065e07593fa8387587529ba7691c1878ce2bf8aa4bf82d75fa7dfc5
- MD5 d67c23db6d62ca5151e23e2b576f1ad2
- SHA1 4fdab5698bbe7aa0c9f5efbb08967d6d091c2501
- SHA512 9f29334a37fcfbfc8313d19ae32ad903899a851ada357159038abdccf0be5fb149768306748cb2a7b66987f17a25e6f7db640287c4fea771b7dc3835852007f2
- SSDEEP 96:XyO/dJuWMRrsrAzr+FrsrASre1VNtcJ5wPoyz:5/dJ7MRrsrAzr+FrsrASre1VNt2GPrz
- TLSH
  T173910D44759A795168BF72E74A4F400CE33042AFC101C619B8AED7CA1FB0695B291FFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14 behavioral15
- Target
  candycbt/build/js/ControlSidebar.js
- Size 3KB
- SHA256 aa69ce098ae83c4de9f4ef5ed9ceeeca572454158db5c76c2b7df39db40cfdba
- MD5 d6f9916011f5978b66e42673ae369be2
- SHA1 792be89f59f5270d5c5a7b030bc7507b15bf5bc5
- SHA512 9ff5cc3e1b8e388d7843cbcf9dd77f893b0b781d2ec19f4b53a6c06e3e4202786fb80c824a44bf71e15319442b91fe077c9bde121d23c9ee90a98243e623cd4c
- TLSH
  T10871BB4634772A32487732AF5FCB4418E3299DAB8305820575AC9EC42FB07256297FED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16 behavioral17
- Target
  candycbt/build/js/DirectChat.js
- Size 1KB
- SHA256 7ae1a4c5eb1bcf1e357b4e1babc853366c27cccdd97edb2df5223b9f52ad8d0a
- MD5 84dcc61a05c15e60065168a7406779dc
- SHA1 d8da840feb4f3f6d86f69ecd12655a6730d39244
- SHA512 7fe579df962c308ccf20f66ffd8c9d383e59133728f2a14bda02f8cd9614c0ecfd8cfeaf00a94b2e5f6f967a7d0b5cf89ebb7ac13860627eda13da7e78436abf
- TLSH
  T19A31ABB575E2542168BB3AB78B8F444CF318A01B920D823879EC9F801F20F792195EDE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18 behavioral19
- Target
  candycbt/build/js/Layout.js
- Size 4KB
- SHA256 0bed4b674b5ab442d8d4cf410eb91b82421ada2d5570d0893b1d6f39c79cf585
- MD5 207e2e00cdad95962355366dcdfd3084
- SHA1 e0f1f4705078396ead44659089cf2be9b39d4c66
- SHA512 3e1694d76d7c45b0bfc0c90c9ee61de3275d02db32efbe00420eab71c827fbe973548dcc9220d895eb95599a5ae8070cf7fd31d72f529ddd5d88c01b4e5ee777
- SSDEEP 96:RJZNtS5VnLPnrIk/PSxgrKIuk+d/5vpU3XEZQ1yY:RJZXaVnLvrfPSKrKIuFlpU30ZFY
- TLSH
  T13AB1126927623531983732BB8FCA2108F7758577824141147EEC868E2FB132AB756FED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20 behavioral21
- Target
  candycbt/build/js/PushMenu.js
- Size 4KB
- SHA256 a1ddd72181769b5f8bf6de6df9c6caa75ef7c5f1ab731a80055fe9c449e47737
- MD5 18245c9ea00c1220942f050bb4cba344
- SHA1 b48c87c0ee9c937c98be9aa1b348dfbe1cfe4aad
- SHA512 25cf44e8a5f74a77850162afacb7e9281f3bb241096f3ee0b6288f246e029ea597481d38e4817363211a4c80c78f3ebcd35e45a2ea2c2d0d0f2392fb69c7802d
- SSDEEP 96:G+zq0+W4i10sX4gSYj6XLxuhdeJCiu8AyJf:FAIojY8TE0zN
- TLSH
  T195A1BE883466295104B772F68F9F041CE378067BD24242147BBDD3C8AFB12297391EEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22 behavioral23
- Target
  candycbt/build/js/TodoList.js
- Size 2KB
- SHA256 d60c9b3a7d81e1553f97d9ccd313596dab65f172da46cd871627fa83d78adb73
- MD5 378aafbc6b61bfb82c6c3a3a32b0c0f0
- SHA1 1d5ed823a3ac4dc85d7290e8a216128759b94e89
- SHA512 bd14a38721731ea2708a7ea1a4f3e06c65d3055ca0a3a5c97383e5c117445662806a0330ccdba4517923ec64d0368c85a066dd0447276708dff70697877e9058
- TLSH
  T1345170853A5A682155F733F24E8F540DF3B4912B5181421475ADD2C05F787B9A2A3EDC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24 behavioral25
- Target
  candycbt/build/js/Tree.js
- Size 3KB
- SHA256 566364b6847efc155b2d69503ced4f593d14745ea20e690fc40024014094f9c7
- MD5 eb4d5589a8a8d037161be5f1c35e3fdd
- SHA1 a3215a59728d3443c0d3dc9c2b93058f70717033
- SHA512 eed9997e9c01807efdccbb5303059dd22843d54356d2a983957658c2f7412f7b9059479388d143dbd741d7e564945d53230e25b4bef8739365f6243cf7e4979e
- TLSH
  T10771DF88B996A46058773BA74E0F140DF360616B61058E35B5BCDACC2F3032872D5EEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26 behavioral27
- Target
  candycbt/config/class.excelReader.php
- Size 58KB
- SHA256 61526177a7d4fdc826d5b100facdfd58efea14b50758a0e1b41cdafd616fa199
- MD5 c774a7eb252b5fa16701133729b9e974
- SHA1 f41a8459bdbb2981e39db9840833614e4e95281c
- SHA512 f5343525e699b43c7f0e39cf15c94b4a5ef2a2125453ce4cc24afaa5acae773927fcd10edef3deba00abce5f7e5b8adf9ff55a97305888a73e16721587a1810c
- SSDEEP 1536:AdATi/RHUkUwn+oSwgj8AmlaZ1QiCNrTBCTBabP8CxC7pmFEOriuq:AuTi/Tn1Swghr
- TLSH
  T19A43D54D7E8E68D6670363A6237A8814CE2CF5761156A5FAFCEC90897B70B2C534CB70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28 behavioral29
- Target
  candycbt/config/config.function.php
- Size 11KB
- SHA256 6b346239c055ae3a3bab398e98e6109cb9f8ec1befa518481a7ebabea049026f
- MD5 f9e0bd1185f69190be9dd57b787d2523
- SHA1 22b91894d87e2a9b0d7b04d8cc200db0d6957617
- SHA512 00a2aacc2b5720be4f47b590f307a57f9b6c0185cd3d294c865f80d98152bf1d8f32cc609e4ab6ff909e7310d4c7c903fbfa408526a43856951cfccb258c7772
- SSDEEP 192:C2p2yxcX/XtKXGXgXB1XvOXaXcXt28oKEY+EYhwZmHBw7LlLtRpdwSpcnPFP8J1r:C2p2McPdKWQx1/OKs9jmGmHBw7vX
- TLSH
  T1FC42A572741FD53B9BD1738426BEEA4EDE7DC1300316818AF9DC0A8CA29D92C47F54A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30 behavioral31
- Target
  candycbt/config/dis.php
- Size 146B
- SHA256 ade1fa8d5a15fd65479fc968687a0d05adc02c2bcaa9a8eb466a9f7081d6ca04
- MD5 c9daac248fd1b939f42045fdeab63039
- SHA1 0040090b175123253136be42b3248d64b8d91c67
- SHA512 ed330853de9d716f1ced555bd12570d3d7d75e9c1d1d0cf7f1a468d3f0cf7cc7be5cd05a93ebdd245a818c795f15830a49441c589691691af52dc9181e67d267
- TLSH
  T1DAC02B780DA4CDB411B2F2552367EE189D76808B9044FE1831CC1C410FB08C829C2D51
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy