5075a5188f8b26ddcc0042b82bab38a7c99535097cb592a979ab39f9a5e0b79a | Triage™

Login
Reports

Overview

overview

5

Static

static

1

barber/api...ish.js

windows10-2004-x64

3

barber/api...ish.js

windows11-ltsc_2024-x64

3

barber/api...ish.js

windows10-2004-x64

3

barber/api...ish.js

windows11-ltsc_2024-x64

3

barber/ass.../ui.js

windows10-2004-x64

3

barber/ass.../ui.js

windows11-ltsc_2024-x64

3

barber/includes/db.js

windows10-2004-x64

3

barber/includes/db.js

windows11-ltsc_2024-x64

3

barber/inc...ta.vbs

windows10-2004-x64

5

barber/inc...ta.vbs

windows11-ltsc_2024-x64

5

barber/inc...le.ps1

windows10-2004-x64

3

barber/inc...le.ps1

windows11-ltsc_2024-x64

3

barber/inc...ed.ps1

windows10-2004-x64

3

barber/inc...ed.ps1

windows11-ltsc_2024-x64

3

barber/inc...pm.ps1

windows10-2004-x64

3

barber/inc...pm.ps1

windows11-ltsc_2024-x64

3

barber/inc...hn.ps1

windows10-2004-x64

3

barber/inc...hn.ps1

windows11-ltsc_2024-x64

3

barber/index.js

windows10-2004-x64

3

barber/index.js

windows11-ltsc_2024-x64

3

barber/passkeys.js

windows10-2004-x64

3

barber/passkeys.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
barber.zip
Size 66KB
Sample260728-wzef7ascng
SHA256 5075a5188f8b26ddcc0042b82bab38a7c99535097cb592a979ab39f9a5e0b79a
MD5 a0d4c136def10e9f434eeb4ceafae7b8
SHA1 8a3de8d006e0756640b0bf5121cb658e4136d38b
SHA512 2a10cd361705dd3b5d0682de189f099bd442d3e3a6e999ccc86de999a4e9c947f07e3f000c9a7ddd1797fd316923e8fa17d3def944fa7a8e3d253332c78a2500
SSDEEP 1536:9ibt7LqMI2QnnZr+u5Ymxd+61xTbXYOsIA+HFuYHR9op8U:9Ch9QnnMu5Y8cQxsIp4YIp8U
TLSH
T1DC63C0F9DD380116CA0D593C80EF83A7A75E760D3E5225FA69257280ED098DE2D3369F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

barber/api/passkeys/login_finish.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

barber/api/passkeys/login_finish.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

barber/api/passkeys/register_finish.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

barber/api/passkeys/register_finish.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

barber/assets/js/ui.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

barber/assets/js/ui.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

barber/includes/db.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

barber/includes/db.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

barber/includes/webauthn/src/Attestation/AuthenticatorData.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

barber/includes/webauthn/src/Attestation/AuthenticatorData.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

barber/includes/webauthn/src/Attestation/Format/Apple.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

barber/includes/webauthn/src/Attestation/Format/Apple.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

barber/includes/webauthn/src/Attestation/Format/Packed.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

barber/includes/webauthn/src/Attestation/Format/Packed.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

barber/includes/webauthn/src/Attestation/Format/Tpm.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

barber/includes/webauthn/src/Attestation/Format/Tpm.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

barber/includes/webauthn/src/WebAuthn.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

barber/includes/webauthn/src/WebAuthn.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

barber/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

barber/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

barber/passkeys.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

barber/passkeys.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  barber/api/passkeys/login_finish.php
- Size 2KB
- SHA256 328d5151b808ce59c2347401287a43fdbd7a7f8a69ecd616bbe43f92611e6bcb
- MD5 a62d44bb7ffdb6d15b5a0e03c3806c7b
- SHA1 f8c30e9f8a6823c59eb84201cbd91dc752ba6be5
- SHA512 4f78ce5b35e1421a2d9a17f660aa466a6e33f117187582352a174f3ad3a53c086ea3339eaa9b7e0da7def34d3b02bb69ed8a4995c4047e2a6b3b818a0a0f985c
- TLSH
  T18B514F9CD0B520C3ADF87BE42306845473B8C834126AA364FEB607522F647A99BF544D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  barber/api/passkeys/register_finish.php
- Size 2KB
- SHA256 2e57449d25d3be93b9004f3565b653f19b9f78a405f22a045e649ecdca2d7bef
- MD5 ddb073cbcbf067985270078507349ef8
- SHA1 ae0a7dd4483d31afdddb66941bc24d4de398f56b
- SHA512 92999eebe326646b86304a3a3f50c2520b1cf9049c4cc915999acfd10a5fd97839183b9f951c0984c7d1f6f520afa40dcbd269ba549e5adf1d7b7e3581ddb33a
- TLSH
  T1DF5161E8D8662183AEF5B3E16316D404B7B9DC181B7B9290BEF203462DB468CC37598D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  barber/assets/js/ui.js
- Size 1KB
- SHA256 c3bad89ae6a7e6bd7093d7aaa4722e948c471f4818a0976ccaa112e71ac4ad0c
- MD5 b8b89d81f31b1ed2bccad695feee9bf0
- SHA1 e0e849600daccd0241f6d4caa2b05900c8689e8a
- SHA512 2fbbd25f8a9c5688ab96d99a064cbc8df8752bd9c6cf8413453aeb2a4a04dafe69d6e5b67d3c51ceb1ea4dfd81a1435788890242142b4f45c0bc9c83aae6ee97
- TLSH
  T1FE31DF9282390DB18AF2A3390307A629DA77003750C1D7953DDD4D541F6CB9C0070BE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  barber/includes/db.php
- Size 536B
- SHA256 9798705e579e4df1b04680f52c920c280debf4593fdfac727f04306330339f9e
- MD5 ff6087837dc02940dad3faff7aa24290
- SHA1 354abbafc1af0b73cc2f44c7159dfd4610683b1c
- SHA512 a26e47520fbca165e0eeddd687d565d2375fc21695846036971136c354f1427418b91b9dd827643725ade54c03407449ad111e6947bf394a2215cd5c91a37dca
- TLSH
  T1DBF0C0A7259FDBDA23BDB984DD81C010BEB0F2451108B6A53B9C714E46418348F72D48
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  barber/includes/webauthn/src/Attestation/AuthenticatorData.php
- Size 16KB
- SHA256 4539fc9eab08ec38835b332c0afbd09832985c57a421043d12d92bc42e66762d
- MD5 9cdb06e5b58c982f610416a4e4bb0cb5
- SHA1 464ea021aa97d5329dc850057d3b877bf2851273
- SHA512 b39b301b2f7717cf422e1f61fdf39212b5b9e77859440da00cd6aea4553bd4b9677d616c7f522263d1cfaf7ef96982669e9274c7c77c4e422534509820695293
- SSDEEP 192:TklOyOc33yAYCEnorAcplVbkZjqc6GKSnYIqcpGaGFGIGa6J6Wn0fC2GFLG8Gpc/:TklOyOWNE/nJvpc5W9cKRtvNVMC
- TLSH
  T1C57220486CD714736907A0FDC3876081F99AE21B06AD8D61B96E03A16F50328DF9EB77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10 behavioral9
- Target
  barber/includes/webauthn/src/Attestation/Format/Apple.php
- Size 5KB
- SHA256 2a3e7a26bf057c0488cbcdf9fa2ae047042a44c0d06eeccd3ebd9eeb32cc44f5
- MD5 471411059249f55ec8b772cdb06d6165
- SHA1 439fc093293daa4efe0b95b245152161067d946e
- SHA512 6fbe6d0ec16e0c1388231c4ebaf9dc37d3d5b51b4e4d451a837e52617ca28b82fb98c9003e32b8dd45fe620261ad1cbd0f395b5a5ed88f7487bfc3f39725a8bb
- SSDEEP 96:VDzVhl1eqoUCxknASkgCEoIAz+/c/pSuF0EDCOIK2Q7m0/TPh+DFDWadpRsn:VDzzl1eLxkASHCEoIm+c/pSuFRCyK0/1
- TLSH
  T16BB14648EDD259376C1710BC479790C2A6B36213222BDD06F99F03502F9562CEBBDBD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  barber/includes/webauthn/src/Attestation/Format/Packed.php
- Size 4KB
- SHA256 42b8740014e9846de50801a476b66c7b65fae4b1844c7e714650ef32e204bb76
- MD5 65afc93fd9baf2045cca0ef0a15a2a54
- SHA1 8b452f85a9115c7577d65b2d4e45fb710414e0c0
- SHA512 3874524d99bea0c42154c5a077fba69e180a976ab4c069c10f7d835582bfa2777f58d3fcbbc775e445437e888e055fd860225e5cc7351def2022ce193c1e1a2e
- SSDEEP 96:VDzVhlBNeqoUneiMxknASkgCyIw0zj7KXX/pSuF9ki9Db0gYN9DbqDu4uQ:VDzzlreS/MxkASHCyIwCiXX/pSuFrxb3
- TLSH
  T1D9A10159A9D21976A85320B90387E082B763961330674E05FC8D43942FA4B3CE7BDBF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  barber/includes/webauthn/src/Attestation/Format/Tpm.php
- Size 6KB
- SHA256 3cfeba175dc6c88e6891a33bfbe8bcb5b5e357f3337439c91a51630402245a4a
- MD5 3dc01d87a35b18fdd5eb6097e0ab258e
- SHA1 f72ec945bfd3db8b7778314ff567b0722e54f367
- SHA512 46ad818d622a5f07b8d2cf3e2e5595710211dd2f4ad9dfa6bf134965ba42dc0e394593ab4072c2a0e0bc3db459a7090979d617442771efaab2031e0bf1be473f
- SSDEEP 192:VDzzlwwehn/bXCxkASHp2IwC+X/pSuFGe+Cyt6klApvdO:VDzzlJeO+n6klUdO
- TLSH
  T13BD104497CD21D66B81320BD0387A4827A63921731778E05FD8E07402FD476DDAA9FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  barber/includes/webauthn/src/WebAuthn.php
- Size 33KB
- SHA256 500236020ff7ac224989d752c52a85aa6a48468689cf85a827ce92cca24a209a
- MD5 78d4ff065df34c97ab9bbcc713294e1d
- SHA1 2d27573152c128e764f9748ea1d1049192202208
- SHA512 70f16fd7e7ab4b8a1ed87daf4ae162582ff284d61375a087d1bbe8addd5940e2023da6b51c01b09adf3f6e6b73b237df3528a4a6bfe7e4048844c7970b8f6bec
- SSDEEP 768:1Ffc46zIF7DqFFAtLPts5WzWMvwjHgNsrncm:7j6zIF7DqFFAtLPts5WzWewjHHrncm
- TLSH
  T1A7E2D746ADC201B3694361B98787A582EB36C11726779552FCDE43D82FC0A38DB786E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  barber/index.php
- Size 8KB
- SHA256 5cac8dde8cea7f42859ab1dc37d7783d9ae428c6d8b33402e1ca861c8df41db6
- MD5 a31726c4ce0bf63a6af91727d9bef014
- SHA1 34b34b1418327d063427294da1a24f4d7bcbaebc
- SHA512 0940a9f77f31ee43835aea590bf94979eb4abae1511d845da1cdf79d5e453ca8cf0634028a8c2bb70c799f46aecbc6bfbe68f599180813efb865325044d53c83
- SSDEEP 192:2+lboVnfBF1OPkW890jemtWxdOkd5gguWEmwx:fUHh5gguW+
- TLSH
  T16E02845404E61423497762B68E634A19FF83C217DA46C7447AFC178B1FB6C48DDA3DD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  barber/passkeys.php
- Size 8KB
- SHA256 7ea956eeba0e51978032907574e8dd3e5b9e52ee4a46986a32ccb07fe0048c43
- MD5 52d0f188e806393e6b46ff3f46d36835
- SHA1 ec61dbb759831370e0562758f30d98365f75e994
- SHA512 599a6b903f1fd61ff9945ffe9c1960f103105474067768c77491949e3ae10687543bb19ca883301628c7d082792054b038368e7ab08642f7b52d79d5c25f5ebb
- SSDEEP 192:FO3y7KSOPkE890jq+mtWxdOkdzwfZ32XcuMpHHueEuAn:Nl+HMpHHueA
- TLSH
  T1AA02C80848EA2423497762B78D07855CFF1B81076AC5DB487ABC13491F75D48AB63EFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

© 2018-2026

Terms | Privacy