8a98ba384651b6d23f308e4cfaf64f63e5f9172573ccaf2c3c731afad5034b90 | Triage™

Login
Reports

Overview

overview

5

Static

static

5

api/auth/continue.js

windows10-2004-x64

3

api/auth/continue.js

windows11-ltsc_2024-x64

3

api/auth/l...one.js

windows10-2004-x64

3

api/auth/l...one.js

windows11-ltsc_2024-x64

3

api/auth/login.js

windows10-2004-x64

3

api/auth/login.js

windows11-ltsc_2024-x64

3

api/auth/register.js

windows10-2004-x64

3

api/auth/register.js

windows11-ltsc_2024-x64

3

api/auth/send-otp.js

windows10-2004-x64

3

api/auth/send-otp.js

windows11-ltsc_2024-x64

3

api/auth/v...otp.js

windows10-2004-x64

3

api/auth/v...otp.js

windows11-ltsc_2024-x64

3

api/boutiq...rby.js

windows10-2004-x64

3

api/boutiq...rby.js

windows11-ltsc_2024-x64

3

api/boutique/order.js

windows10-2004-x64

3

api/boutique/order.js

windows11-ltsc_2024-x64

3

api/boutiq...cts.js

windows10-2004-x64

3

api/boutiq...cts.js

windows11-ltsc_2024-x64

3

api/chat/messages.js

windows10-2004-x64

3

api/chat/messages.js

windows11-ltsc_2024-x64

3

api/dashbo...ats.js

windows10-2004-x64

3

api/dashbo...ats.js

windows11-ltsc_2024-x64

3

api/data/h...que.js

windows10-2004-x64

3

api/data/h...que.js

windows11-ltsc_2024-x64

3

api/health.js

windows10-2004-x64

3

api/health.js

windows11-ltsc_2024-x64

3

api/lib/bootstrap.js

windows10-2004-x64

3

api/lib/bootstrap.js

windows11-ltsc_2024-x64

3

api/lib/chauffeur.js

windows10-2004-x64

3

api/lib/chauffeur.js

windows11-ltsc_2024-x64

3

api/lib/mailer.js

windows10-2004-x64

3

api/lib/mailer.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
tafuta.zip
Size 2.1MB
Sample260727-k9nbasztes
SHA256 8a98ba384651b6d23f308e4cfaf64f63e5f9172573ccaf2c3c731afad5034b90
MD5 ac346f6098002fda66b7a8963a2c851a
SHA1 b17f336c67ce91d49edb8124f5a904cfb5cbc363
SHA512 ae1b555cd5e971001c0f1c652ba9fcfd7c783ec67c1c4746a817d5bcc0743b33be9ceb36b27b5a651cd2b3341f111650ad82acb97a9efdae891917cb2b13e16e
SSDEEP 49152:XhRlTkCPtaj1sLCmRAoVcyvTmn37jbPdxwvhfCJJu3zTCgQSoMhB:X5wj1sOZo2IaPbVuvsKNQEn
TLSH
T1D2A5335FDDD90346D225333B3C5815839FD8EA903C45E1A34CBAE3BC6A660AE356835B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution javascript svg

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

api/auth/continue.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

api/auth/continue.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

api/auth/login-phone.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

api/auth/login-phone.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

api/auth/login.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

api/auth/login.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

api/auth/register.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

api/auth/register.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

api/auth/send-otp.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

api/auth/send-otp.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

api/auth/verify-otp.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

api/auth/verify-otp.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

api/boutique/nearby.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

api/boutique/nearby.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

api/boutique/order.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

api/boutique/order.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

api/boutique/products.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

api/boutique/products.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

api/chat/messages.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

api/chat/messages.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

api/dashboard/stats.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

api/dashboard/stats.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

api/data/historique.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

api/data/historique.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

api/health.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

api/health.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

api/lib/bootstrap.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

api/lib/bootstrap.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

api/lib/chauffeur.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

api/lib/chauffeur.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

api/lib/mailer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

api/lib/mailer.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  api/auth/continue.php
- Size 2KB
- SHA256 e01815c7e0af83c2d3642955609fd450f7cada83731b0ad08d9747c01655f899
- MD5 0be1c6b0d657830c1ad270d32f728eb4
- SHA1 877f32d303a588d96154f759c480fcc04cc9f138
- SHA512 d4033d2a1a398fe08d30b09eb25d0659b00d55b2a02b9e3f8587e1c917b0114352e1398f8f0287cefba0b95678ddcc39cffcee185af5a2f7f9a8cce079659048
- TLSH
  T1C9513F486766A5928B352EE63B517D40FA94E4131C018A00787E234D1FF5EE1FEA8FBC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  api/auth/login-phone.php
- Size 736B
- SHA256 837c8c01d2c1ab6e4b6172c73b6e7e4438d5e0f99b3227efa7a2f58db99aae81
- MD5 19963c76a60229ada566515ecc39b651
- SHA1 d7aef282e4114a5e0d3a568f403a97dcdaaaaca9
- SHA512 45a31081c8144f9fcafad5f922ddcaa262ecddb6f056a524a1ce6cfcb8eea30e9dad7a0cdecff33b6e68685117f7f09f073d9ac03e6c6f1ff76a9625699abda6
- TLSH
  T1E001D0C443A45C03D7A93FDB2215B441D6D4F4191C11BB50F8A227632ABADF6D7509FC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  api/auth/login.php
- Size 1KB
- SHA256 9bbf1323949179478b40c426ed9fdf367120cff0b036d543a87ee302301e67df
- MD5 324c0ab3cc55f8fe36e0a6d955f57d75
- SHA1 318f7c1a672efbd032a7960b03f787de25c50862
- SHA512 f20a420eaeb4a32022fe63514af60df8679c341633d119fab431610ebbd4904adbc5dcc6e6c808d0d3a3e65075a022bf752646001940e35a1cf81c6993c7e5ad
- TLSH
  T190311E40A7A7CD4063BA094F2B044940FE19E8273703426031BD76692FB7FB6CB20AAC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  api/auth/register.php
- Size 3KB
- SHA256 c2ccd68e2b1f27ccc14abb70a6bdab3a720a8aa3eba69b271bc75534ab219ecd
- MD5 df217b990bf1cc37aaf27555f442839e
- SHA1 f48b4f02388b7d57846f20762dfbc08fa1d374f5
- SHA512 d5cbdd52b086ee234a824a7b3d72f1e417c3c1bfd52eb33602eca77fbea38510947f9fc8fd13e7f374990c672aff01e03196d233a06429d3fc371b0ef5c89bdd
- TLSH
  T1A25173206691D69247B1BF620A51E878F74C91330A92C60477AD71D12FF1EA6ED38FEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  api/auth/send-otp.php
- Size 669B
- SHA256 2db9dbb019affb6041eb31bf243d7a73ed4991f97c2ee056ec5c8b9e9e4c3ced
- MD5 ff6b4a9df1e8d227132ef4e94488868d
- SHA1 ed0bcd9f17212d5cf614a1ba08408ad8c428d62b
- SHA512 cb30264b83a7ee621e3481693fe9644d2ce1245a09d8fa3506e4ee7e5410b1cd117944cee01c0e911dc0ab9fc6a815492c5cf1685c5099e585c10e2517779846
- TLSH
  T1390110C007646441A29836CA322E2980E490D01D0C005611F8A3275B0E7ADA1EF61DFD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  api/auth/verify-otp.php
- Size 2KB
- SHA256 ec9891f2430afe551b99f706e21e2895d2795393409f26c5a029b77be42b1990
- MD5 cbc2b37b98960c9f1f125c914f4b468d
- SHA1 7cb81c882cff2ff737598459990fa244de0ea290
- SHA512 a31ea8f93c36b16dd7d0520d8227fd03557b3bbde61744079a2bf6b4c35f73748b2ed6421abdde82510f44603e89a709bf87789fdce5fd262e447e92c80d112a
- TLSH
  T1DC4124C93AA68D4293B52AAB3F051588E296F4070C11C5507C5F23C40FB5ED9EF68FAC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  api/boutique/nearby.php
- Size 1KB
- SHA256 422e2fd73f271d0c8ba84b7931af3700cf97f61769be76b9e980d6c41e30d181
- MD5 9854015a49867f347ded241b4f70f77f
- SHA1 6d43fb5a7deeea4dec388c2e400fdde7452560ee
- SHA512 31c4a592de13a3ccb928b76ff07d381f35369dcb62b30f3e7f15f7859c41c47b29a5be249389107c6665379192224ffe1535acf104c8b1dd5511d894625c1203
- TLSH
  T193311F125236DC0023F405291D649B8BCE1987A7A791E3A0F76CA1C22FFCE79C632391
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  api/boutique/order.php
- Size 3KB
- SHA256 99bc597c07662091eb78a6bececd1e1dae42178cc156b6341486a24c1b6ad098
- MD5 304e0428af7609fbd593e6c37840f7e7
- SHA1 dd85f2686a6f784edc8f155ce83bd28f348b78f6
- SHA512 b82a4d82cd9a4424c5027f546dd9295e7cecf205192a9a132ed694f5dee6f24a771edf4cd06f8b46ef2c1bcbe758fabcc1dad16f945b57842328cb423813eb50
- TLSH
  T127816304E4FA872173BAA23D070195D1E1AE404FA5C1EFD1BE9D70926FF0D2DCE28668
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  api/boutique/products.php
- Size 700B
- SHA256 32d4eddb4f7b3986a9499035d117ffba4e556a7b957c4c43e47e9c164bdac75e
- MD5 526981d103eeec6a4409c4882b923311
- SHA1 ba99b9934ecc43551a3af0c561de552249fb66c5
- SHA512 49febc537dcbbbc13b666bb1c785e976f33ed9eb5f1bd24838e174ba093c5574f1814fcd6aa4ff0903e8e007f7fff801da880a1431d2581c40550af7dcbf73b8
- TLSH
  T1D7017B63FC37CB21417419BD1BD026CA814AA82F61D0F7A0BE0E72C01BE0A65CE2176B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  api/chat/messages.php
- Size 2KB
- SHA256 b53cae641850883ed412550f8184fcf05490563e9ddd29c40ff223383de2d85c
- MD5 d1f07633dd6602fb79abf64563cc17cc
- SHA1 bf1c350e7dc4c2dedea01081175a037c4b053f9c
- SHA512 18ccb6f66bb8a74b93c66fff79f955815572183f75d291a0e79a42c5a2aab897992a696a1054d3d2cf5673910c584fc9d6eb56e800f514e890bae85d93c7a931
- TLSH
  T11541459978A3899953B7095B3A013580DDA4A427C390797278CD61F02FF4736CAD8FDD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  api/dashboard/stats.php
- Size 3KB
- SHA256 e3fe73b7c3bbe26da905924587d4c0bcf53d2034b846dc6d0050daddd1358608
- MD5 d5528682d90d2e5c5ad685fda063e68f
- SHA1 3c817badb1f302d1a269fa72ccfdce14137a84d7
- SHA512 b3773be2507ab86453d31fb6a8c9b0167238fe770cc4d97ce7a8d7cd57821872209c0699819e2f6f0fd73ef7b08779a765b72d84897cef55af64db411852c086
- TLSH
  T1446115423837DBD01B796DA90F005DB0EA45BA230362874275BE75C46F707DADD38B8A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  api/data/historique.php
- Size 695B
- SHA256 22089db9af41facbc66eb3423f5a6d574cdfffff8871c41d7fbace2ee03ab925
- MD5 42373edec259c464b5148725df7ff6a7
- SHA1 8b2047d61f83d06bf31d52bb5f138c75d3428ec0
- SHA512 4c6dab64805a6b522d0119f96eaf5bf4bfdf2b91d5557181a4cd846931dd12ff78d4c2818e508772b9fa343b47275575a137bf76c215d1b02138d69d6000b25d
- TLSH
  T1DB011BC178611530ABF5298E2B00DA81F681F5272002A3E0B02EA2E01FF5AD6C621A3E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  api/health.php
- Size 283B
- SHA256 c0a7bcd34325768cecca0b93ad794468b5deea307c1b464512c9b2bae0841c7f
- MD5 2cc0aba44dd6233cfde5fd11ed24fc65
- SHA1 b74bccb727c3a411738dab52e53a25807cd45e79
- SHA512 b4947ac4f38982f852e64ce999c8309ad55db70c8ac5dea838a071423e3c157eb2ee42cf76cdb91285bbc3bba39e0ae1bc866046f0f79d7857124dc9bac46766
- TLSH
  T19CD0EBD24244294213B035C43801368095CAF00A68804032FF2133021FE2AFFCB22C3E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  api/lib/bootstrap.php
- Size 3KB
- SHA256 a05d3fcc7a9acd359169b02319a8003bf01f23e8e26da285083475e1ba157e2d
- MD5 faba57e2b94c8e6750839b7cc9cf6db1
- SHA1 7764a7b4757410144bfdc7cf57fb084178a6808b
- SHA512 803a64707ec5a679df8354d8b770dd7d085fcb921e259078e80fe0b656eea044cd80fdf10c75f07bbaf442e65dd046484ddab2c6a04e8856ddad3d64c5c836a1
- TLSH
  T17E8184593D52B65983F3BB394713D560F56A44179641F211FE8CA4E02FB0334C96AEEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  api/lib/chauffeur.php
- Size 2KB
- SHA256 f5e7caa9cbbeea4775dbb11ef189a6cb84f4f3356a837901a6bf3f98b4ae073a
- MD5 3ea162901460597e46cc91d53a0fa1a9
- SHA1 be9dbfe53411576257b2f032f4b46239f2121828
- SHA512 a8ceff6c1407e7339ecb276af08655942d43f3e0a3b3570cb7f9eb7c42b90cd57c342f08caace00db7ec5dbb6404031b771eba0dc336eda974774203ac3409e6
- TLSH
  T13D5180A978666A135A76633BC3DB845AEE564127440CA250F80F51B47FB0A3085FDDD8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  api/lib/mailer.php
- Size 3KB
- SHA256 49b30936fb079ea6625aad36e1a84032cda094dc02df501b1307fd70e9982d1e
- MD5 4fc9fda02093554e41cf97b2c4be6435
- SHA1 68ecccc12aa3dd37aeee5ad2bbee9f985d2c24b0
- SHA512 3e0c9ac1abae2fd38d99b34c213a252890733ac127708cfb1c6bff5c5b04fef42cbd567e01cd4e27901cfa914302ae79526be51fd874ec3c462a935029474434
- TLSH
  T127612E44BA57F9092271C62EBBABE018FA6805138104D715BE9CC2DA6FF951CD1A2CCE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy