0835827ada12b772d3ab808946168d3f3e559bbe713f87315acbeeb568080ed2 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

Documentation.html

windows10-2004-x64

3

Documentation.html

windows11-ltsc_2024-x64

3

Contacts.xlsx

windows10-2004-x64

1

Contacts.xlsx

windows11-ltsc_2024-x64

1

Example-MMS.xlsx

windows10-2004-x64

1

Example-MMS.xlsx

windows11-ltsc_2024-x64

1

Example.xlsx

windows10-2004-x64

1

Example.xlsx

windows11-ltsc_2024-x64

1

ajax/add-b...ber.js

windows10-2004-x64

3

ajax/add-b...ber.js

windows11-ltsc_2024-x64

3

ajax/add-contact.js

windows10-2004-x64

3

ajax/add-contact.js

windows11-ltsc_2024-x64

3

ajax/add-response.js

windows10-2004-x64

3

ajax/add-response.js

windows11-ltsc_2024-x64

3

ajax/add-template.js

windows10-2004-x64

3

ajax/add-template.js

windows11-ltsc_2024-x64

3

ajax/add-webhook.js

windows10-2004-x64

3

ajax/add-webhook.js

windows11-ltsc_2024-x64

3

ajax/cance...ion.js

windows10-2004-x64

3

ajax/cance...ion.js

windows11-ltsc_2024-x64

3

ajax/chang...ord.js

windows10-2004-x64

3

ajax/chang...ord.js

windows11-ltsc_2024-x64

3

ajax/chang...ion.js

windows10-2004-x64

3

ajax/chang...ion.js

windows11-ltsc_2024-x64

3

ajax/creat...ist.js

windows10-2004-x64

3

ajax/creat...ist.js

windows11-ltsc_2024-x64

3

ajax/create-plan.js

windows10-2004-x64

3

ajax/create-plan.js

windows11-ltsc_2024-x64

3

ajax/creat...ion.js

windows10-2004-x64

3

ajax/creat...ion.js

windows11-ltsc_2024-x64

3

ajax/create-user.js

windows10-2004-x64

3

ajax/create-user.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
codecanyon-pmNP8RzT-sms-gateway.zip
Size 10.4MB
Sample260727-phr8dsel3y
SHA256 0835827ada12b772d3ab808946168d3f3e559bbe713f87315acbeeb568080ed2
MD5 a74b9830e1e3b7c49779e33889955460
SHA1 c56f26fac9869617f471fbe54e60da8c5cec8d6a
SHA512 21454afa047d2c5025a30be412e88521f04539574a13d73be9a72d8957a573910a8b95561bfa08f900a2e323ebf4f96d651c89a2aa0c12c8cc18fe47cbf56409
SSDEEP 196608:qaRsliCCccbLSmRAWfM9B91+SCzffQLxyycysyVqXZh/kzfg09lAp2RQNOW43G:qayQCd04xyynsFz0fhlzpW43G
TLSH
T1EAB633F889710BCDC9015C6C069813975E731BA92D76CBB1B73286F63364CF4AD3A629
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

Documentation.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

Documentation.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral3

Sample

Contacts.xlsx

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

Contacts.xlsx

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

Example-MMS.xlsx

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

Example-MMS.xlsx

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

Example.xlsx

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

Example.xlsx

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

ajax/add-blacklist-number.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

ajax/add-blacklist-number.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

ajax/add-contact.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

ajax/add-contact.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

ajax/add-response.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

ajax/add-response.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

ajax/add-template.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

ajax/add-template.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

ajax/add-webhook.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

ajax/add-webhook.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

ajax/cancel-subscription.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

ajax/cancel-subscription.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

ajax/change-password.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

ajax/change-password.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

ajax/change-subscription.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

ajax/change-subscription.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

ajax/create-contacts-list.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

ajax/create-contacts-list.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

ajax/create-plan.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

ajax/create-plan.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

ajax/create-subscription.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

ajax/create-subscription.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

ajax/create-user.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

ajax/create-user.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  Documentation.html
- Size 1KB
- SHA256 90053194e2abde3003ab1d9c6e911d85c51af06e6b251e134eeddad2fc96ac09
- MD5 60e9a5a587a1523c78fd4f50d2eb67e0
- SHA1 603ca80cf62b69a74ac212ca47b606c5b3b1b20e
- SHA512 6b877dd410c8192b33628a60e0ae417f4757b3f7b5791b2520a017aca967ba7d5e64ca50beef10a8a02189c41e5383d2214de89233c1e83a92aa07e889b56cdb
- TLSH
  T10D311E4FEAD3B21E5BD303E48457A02FD91350611E83D566D9FB41AA2226372D02B2AE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Contacts.xlsx
- Size 8KB
- SHA256 563e518b83b6b1ff4807898737b2da0bfee1bfe337881c2eb531e95a7312558a
- MD5 938844103da9a41a51050d624715322c
- SHA1 52e3101f5069ee4dacb2b593a6322bbc2babedf8
- SHA512 51c29d0d5dc1a191a66a9cd83aa8146342076670465027875e1746f21dac318217efda0ea8b0a3a23e19024c8c6b91ab436ac110d413111cd6af6197096471a3
- SSDEEP 192:fA9uQ59vQp+mFEBP6pIMTZpdU4gSvLEA/uAhDNpvzGu:k5lI+dBP+TZppLEUhDLzZ
- TLSH
  T12F02281EF318BC47C2BB2C3E801D15F1650824CB8A53A909BC55FA2E6B527D7429F2C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Example-MMS.xlsx
- Size 5KB
- SHA256 651b31de7ca35e07ee420439b614f764220fd475e89310adec48b1d26e842a65
- MD5 0a48ac4285eedbaa295580909d0c9d06
- SHA1 cc6f845f2b4472f66e9ba7768e742689cffd13a0
- SHA512 2fdc42d297ff67c70d523178c026a0b55df3ad1574385d9b7583da1bb22657657a536bd01bb227020e0cadd322e0b7c3a1c79355fe917a6653a5b892715ece6c
- SSDEEP 96:fEfkBi3NeFmHr+ez13YiPKbEGz7Aeff+bpqkGvl+gSiDGtC:s8kAM6oFPl2fnfl+g73
- TLSH
  T111B13D7EBD4E941AC4278A3C951AA60B950C52CD230CA8077881A0CC2DF9FDC4B4FCCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Example.xlsx
- Size 5KB
- SHA256 0a72de4ad97f5f3b6b7ee80c79f978796f9cb934b0a4322c43f3018cc2657e2f
- MD5 2b466a3c324bd36562b94410cbeb59e0
- SHA1 56f46d89d1c4535e6ad57bd79949c80a8d38b582
- SHA512 43ce9515b35db9c0dc07a7bb8da476998cd77b8a8995b11a19858a130f2f92a2f7bb282ba17d08f0460485d62876b7b75a2d331c629b978e380b30bbdec57889
- SSDEEP 96:8Efk+i3NPFmHrj4lrQmxXSIWhQo59Aeezhs9hcl+gSiQoK5:58bdM/upFSVGlzZl+g7c
- TLSH
  T18DB11A27BE86E855C617643DF891E297550C608E22008C0B6955A0EC6FBEFDC9B8F9CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  ajax/add-blacklist-number.php
- Size 1KB
- SHA256 be0469d6f01e28ad20c19cb3bbd365035d8f0ad09fb59dcb5d636eebbd48c200
- MD5 101a8c3d1adeb51f1002ec21d71f3276
- SHA1 9ea3b6cc6c84faeb0bbaaaa4fdc8567d9ad5e6d4
- SHA512 855d8360026160a849797645e7eabe7f0a998ea587fbd78de6f123659fdaed835cba267718783092b14d741b02001dce29adbda8a65a12adf18cbe5597f5310f
- TLSH
  T174217295D0F72191402F3E7C07AE9002619C8117111CEA49FE5D97A04FC297CABF03D9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  ajax/add-contact.php
- Size 1KB
- SHA256 8b56dbfd67ef8d66bd6f8875d5591c3d49f1ae88afd2dac09f6bbc5a1c46d505
- MD5 82d16190e7839013c8551c31e5560195
- SHA1 824e541c783ac0caa3e447d5140bce78dc050067
- SHA512 cc5e4593a0a2c5fceb96e29c051f121e5dcdb355be38264fe495e51afe4241ccae30fc90563a1bd9506a318c2596e95e2dadf33ef07262ab53b6f61f6d43a278
- TLSH
  T16731C011E8FA189210D7793C07B596052694D34F502ECE82BE5D929C8FC45FC5EE520D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  ajax/add-response.php
- Size 840B
- SHA256 bad337cdd719265c4b765b59623a08e93539407c30fdaab64d991d41c4d9b84b
- MD5 27898b8b447ac92c5449df2d907525b8
- SHA1 e5897752a92342c9568c35adbf304c69550a6d52
- SHA512 3bc5af916c155e1eae21171d1cbc221683ef292e5e94df2010d332e6df7e2f14e6cad4e7700c462a3dc0fd892dbe0108b758ecac008ec8892e14d2c062ac1f8a
- TLSH
  T1DA012812ACE954851BD728BD3B558E0234E5714B1648C082FE2E15E58FC4FF4AAE2243
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  ajax/add-template.php
- Size 734B
- SHA256 ef0ba3964618cf2124974fac0caead291db3ae50f12ee91bfc1adf63b57ab2a8
- MD5 a60305a1dbf530329c18d8b31d69bd13
- SHA1 f4568a4b6ceb5223f47929fa66ace0b1fbb0a2a3
- SHA512 b8a940b1506c93e891eb2c872ef6af6f36bbb7cf59ca5080cf5dedee9f735243c73b3303a9c02a644670843a316a036f56d680084e0c13089fc380393a5e6497
- TLSH
  T13F019E0190F9D6511AB7383C77558A0374F451471A08C083FEAE57A54F94AB887FB350
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  ajax/add-webhook.php
- Size 673B
- SHA256 85913093e88f4eb2adbb6f4006791ef1a949b91431a4b0521e116bd12f45b76f
- MD5 8f172e9d9cf0eab761e536a684242199
- SHA1 7c23fd39942054a9d3c031f0e7369c98e9eb499b
- SHA512 1e758946b0ecbf761e72ebf9672b131b143bb078fd34dbc51a8f8ae9ed5314eb5e4a16d95d5173bec81b33524be01b8362e95e04dae207dbe5b165af5d22b8e9
- TLSH
  T10E01AC31D1F81492818FBD6C17558A0A3084F1471008C8C2FE3DA6BC4F887A806F7274
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  ajax/cancel-subscription.php
- Size 920B
- SHA256 0b75c1f6725ce7a9f98afdfecc1ac8d381df0903300efd77dc6963ee271fb904
- MD5 7be6a5e166c3105f51ad1a2b9bbfbe39
- SHA1 e09fd706db97ca72b7991ae38975826a6a074161
- SHA512 947bacfc5bd32e334137ad0d99e6a1946b29d4c7af90c0eac221e43841151a47cf83a3a6c4058e3ded0eee1dd522cc0c4e9ee2178d31973cfd2db3905d85bd83
- TLSH
  T1CF11D2199CE6B08111CF383D0EEAC70AA1B4DA471054C681BEED56AC5F847F89EE3664
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  ajax/change-password.php
- Size 744B
- SHA256 c3cf484ed71ce7ceaba16f596ee8a8012d889dba4fe77e2970ff2b8c02e6958b
- MD5 bb919246ade7369b3779b57514d5ced9
- SHA1 23fb0e5097ae7e00422b080e7236e79fce9cc3e3
- SHA512 b7d3d919eb6ac757f4a761e21ccf603f0dff43ffaabb42643eab621dad218e4a9872dc66f4a880b247541b6c2400fb6a03a5b5cfe46a4713ff423a82a9bb9e12
- TLSH
  T1C001D31240F91890505BFC9C17944D1370D5E4071019C984BFFD2A9CBFE5FDA46E667A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  ajax/change-subscription.php
- Size 1KB
- SHA256 84c970e90c82c6f1c789631bd89035d621ffa099291ef3e50831cf33b65a52c5
- MD5 38ded6a3ea5e7e3d3aff15e450f9190e
- SHA1 332f83078e4d13d71550ed0d7fc52143f7b65e61
- SHA512 8c080e9e5254cdf08c436b65013485be2af8f3d4818a6276c25ddf9ca1d83652a618392d042844db452b36e2b82a07a6ba197dc3d130ba70454e14ed2c74ace6
- TLSH
  T110217D526DEA216404D7782D2B865C012328E453D11DCD96BEDC0A8C8FD46FC4ED796D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  ajax/create-contacts-list.php
- Size 796B
- SHA256 e8168e87a5ae7846f2fe1b770218ccbca4fa78012d342ae666b2ea28fb758124
- MD5 fb5fbe9ca39272268027afb5784805bc
- SHA1 f8bd22ea334029d68919720fe65ca28d23035d62
- SHA512 6318208aa07eead297e0f265e89737c03d18b7cc0e80d756e8f03ea10918f63d3ee47d66a596d7820a393b521ace88aaf1583e228d74721e4bb6a7ae24ecb7c8
- TLSH
  T18D017B1490FD105902CB7D2D0655AA126294E347606CDE47FE6DA6AC4FC46EC0EEA298
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  ajax/create-plan.php
- Size 2KB
- SHA256 ff1cc041c89e76ff75d949c54b7d1668e334dba01181817104e23fbde25d5a55
- MD5 27696f67223f603492034c6d1f4aed50
- SHA1 6a6b6b796e005537d48ece4177f51fa72f61f61c
- SHA512 b6b15a92b0fe435c0d36f80d26b4e2633b87c55e3e4c0447e857f863f395e20ffc673707513512f6a462f39644395120a6bada7fd5a69d78e0f7d99168a3151b
- TLSH
  T1EB41381900DB24A181A77C796F9A0403B27AD20F11B9C9D2BD5C61ECDFE48389FE5252
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  ajax/create-subscription.php
- Size 2KB
- SHA256 68725f98363daae2f5ff2bbddac98d3b63279f0b2ca7e7c5df60b3b769f9168c
- MD5 ed4946bb221ec477c0f8e1909b8cb64c
- SHA1 794f95692e98b22daeeb940b7785d35547972be4
- SHA512 67edee43fa70746f5a75b00e22f4145f19d999b4dec97663df6afbd72f47a3dfacd95bd42ba9bc70474248121ccaf2d2655d7f9d9246f2d354abca3a194dc71f
- TLSH
  T16441AA1A1CDFB241509F787E0FA7820DE5F0CD4B1094C141BEEC45988F84AE8EEAB2A5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  ajax/create-user.php
- Size 4KB
- SHA256 14ac9d3aeffcd9dbf3610dac782843279cd650db8aac5a74ce855d2ffa5a7a1a
- MD5 ce2a631ff54632c6e430ac224a293559
- SHA1 88d6a91f0d96afe26c4baf3d03a6372a36d67872
- SHA512 cd9582ab3cb53fed4f750e2aca4412708ff7bd7dac4c568344ceae90af333519c8d18b625392ffdec5eb3abf65718fb1a37f8e6470429db7505714ab60c40313
- SSDEEP 96:rnk8gncWCIRLZB8ShPFqB/WhXzwSARQ9Znyx:rkXpCIRLZB8ShPFqB/WhXzwnQ3nyx
- TLSH
  T16581825A90DB108210E3783C7B928E0335A0E11B04BDC880BF6DAB997FD4C74AFD8261
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy