5d2b7b6c66dd1e093195117421bfb64505ce7950e5b6ac66ab6f400537b36361 | Triage™

Login
Reports

Overview

overview

5

Static

static

5

Pasteboard latest.exe

windows10-2004-x64

5

Pasteboard latest.exe

windows11-ltsc_2024-x64

4

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

resources/...ing.js

windows10-2004-x64

3

resources/...ing.js

windows11-ltsc_2024-x64

3

resources/...tch.js

windows10-2004-x64

3

resources/...tch.js

windows11-ltsc_2024-x64

3

resources/...atform

ubuntu-18.04-amd64

1

resources/...atform

debian-9-armhf

1

resources/...atform

debian-9-mips

resources/...atform

debian-9-mipsel

resources/...der.js

windows10-2004-x64

3

resources/...der.js

windows11-ltsc_2024-x64

3

resources/...est.sh

ubuntu-18.04-amd64

3

resources/...est.sh

debian-9-armhf

3

resources/...est.sh

debian-9-mips

resources/...est.sh

debian-9-mipsel

resources/...tex.js

windows10-2004-x64

3

resources/...tex.js

windows11-ltsc_2024-x64

3

resources/...mon.sh

windows10-2004-x64

3

resources/...mon.sh

windows11-ltsc_2024-x64

3

resources/...est.sh

ubuntu-18.04-amd64

1

resources/...est.sh

debian-9-armhf

1

resources/...est.sh

debian-9-mips

resources/...est.sh

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

Target
Pasteboard latest.exe
Size 82.1MB
Sample260729-bdwhcssza1
SHA256 5d2b7b6c66dd1e093195117421bfb64505ce7950e5b6ac66ab6f400537b36361
MD5 eea7d0371ef18c02dc4780e7c19a43f6
SHA1 34ed85ccd1ebdabc0177bb986317857179b74b17
SHA512 6cff7c0b598a82e44d2db4cc3bf553e106e25f54f54621751e08a0930c45f82c226cb1ae02e756dc09a8bb6aee5eb78bd9207bdca642757b87e43f37ecc08314
SSDEEP 1572864:lNhipuuPSR8lpAXuntJnMi8tZ4H0VVf1yNQlcfFuCyzIEr2zV05ynP:lnnuPSR8UX8nM91UNQlcfF/vB0O
TLSH
T1B9183349B0214D9AF1FFAFBC61DA64DEDAD36EAC226410D3D213B60C64FAFCA0601575
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution linux

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Pasteboard latest.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

discovery execution

Behavioral task

behavioral2

Sample

Pasteboard latest.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

13 signatures

150 seconds

discovery execution

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/UAC.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/UAC.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/WinShell.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/WinShell.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

resources/app.asar.unpacked/node_modules/classic-level/binding.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

resources/app.asar.unpacked/node_modules/classic-level/binding.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

resources/app.asar.unpacked/node_modules/classic-level/chained-batch.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

resources/app.asar.unpacked/node_modules/classic-level/chained-batch.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/build_detect_platform

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/build_detect_platform

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/build_detect_platform

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/build_detect_platform

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

resources/app.asar.unpacked/node_modules/electron-updater/out/differentialDownloader/DifferentialDownloader.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

resources/app.asar.unpacked/node_modules/electron-updater/out/differentialDownloader/DifferentialDownloader.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/CMake/install_test_project/test.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/CMake/install_test_project/test.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/CMake/install_test_project/test.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/CMake/install_test_project/test.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/absl/synchronization/mutex.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/absl/synchronization/mutex.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/ci/cmake_common.sh

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/ci/cmake_common.sh

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/ci/cmake_install_test.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/ci/cmake_install_test.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/ci/cmake_install_test.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/ci/cmake_install_test.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  Pasteboard latest.exe
- Size 82.1MB
- SHA256 5d2b7b6c66dd1e093195117421bfb64505ce7950e5b6ac66ab6f400537b36361
- MD5 eea7d0371ef18c02dc4780e7c19a43f6
- SHA1 34ed85ccd1ebdabc0177bb986317857179b74b17
- SHA512 6cff7c0b598a82e44d2db4cc3bf553e106e25f54f54621751e08a0930c45f82c226cb1ae02e756dc09a8bb6aee5eb78bd9207bdca642757b87e43f37ecc08314
- SSDEEP 1572864:lNhipuuPSR8lpAXuntJnMi8tZ4H0VVf1yNQlcfFuCyzIEr2zV05ynP:lnnuPSR8UX8nM91UNQlcfF/vB0O
- TLSH
  T1B9183349B0214D9AF1FFAFBC61DA64DEDAD36EAC226410D3D213B60C64FAFCA0601575
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  resources/app.asar.unpacked/node_modules/classic-level/binding.js
- Size 54B
- SHA256 4e02fde8f9c61fef6fc42d64744b150de29a578dd7b6343d9dc2654c68d61843
- MD5 5592afbf198fe53d9640fceae506ad91
- SHA1 f6dc07d408612af023f29d9a89e4d4316cc313a0
- SHA512 3cae4007e91816ae95323c907800e4fa5dc5dbf25bfc43abd4e84b3dc1c45daf5d5610c3bf8c24cae4001ca1042f984dc787e99daf6c5f89725a28913f43968a
- TLSH
  T19390027A1991BE522249C143F174466654E1C5A10480401AC15547D652459445952995
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  resources/app.asar.unpacked/node_modules/classic-level/chained-batch.js
- Size 740B
- SHA256 33704ce152c1766575c2281a614577a4717da58de11a8a539ecb3d8a21462c3c
- MD5 dbbfd85c2242e79d2612f3533eb89812
- SHA1 bf56b74c2dc700375ef15c7930476e30b3baa6fb
- SHA512 8e92e44c7dc296654422c80add587fb81cd68115babb210488030a55485f8f606774a5ba7ec6ca3a145badbe610b7a03b734503bb729d2968387879a0d948144
- TLSH
  T1D0019C3671F25980A3E3299B874E0104A6ABC037EF0D8AB735FD534485C443864F48B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/build_detect_platform
- Size 8KB
- SHA256 2ef00646363c66676faaea740fdddf845eb935e421813893251a4274c35d27cb
- MD5 3021cc5b1c3d933bdb00788bf5300774
- SHA1 7cbc10024c233b38e2dbecf662195412372d1ffc
- SHA512 b0a00cc576b8b79b5406fc7af0ab59ce84cbd60646f522f3d3db7f18637a3a2b7cc4d74367bf61f3ed304a944489ddfd5b3acdbb69335c78101fcc9ebdfbfdde
- SSDEEP 96:e6FS5141sR55rdhe7ZLVCB7jvlijCpb/5QykD9imU7aID4j8lDaMjjgA3aCn1zfu:T7NVCBEDceIuIe8OCzWl2inkQAlQb
- TLSH
  T16A022093232416EB2ACD173C3E5E2782A6028A6F112B141EB97C93D5BF21F497077766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  resources/app.asar.unpacked/node_modules/electron-updater/out/differentialDownloader/DifferentialDownloader.js
- Size 12KB
- SHA256 740ede4a044562fb465a841326bd44a08fefbf0c50d903b71799f1276f621265
- MD5 aa0c6f60c1553b862f449f805f5e05e3
- SHA1 e008dbc3627c02038ead92c559d23b83b75dce31
- SHA512 084499a627a143e03bec753b521a414ca594af22706d148e2f5ada86a001ed3d49df105ea30829c83e4fe0b0d07696fdfa3df9dbdee3a96c2cc9511b26bc4a68
- SSDEEP 192:Kmxb8P4zf/74lNyx5H4J/KISwLliQbyPsSYb8Hxl3CHV+GlUNyXCd3iZ6Dsl3nRC:2+9aFl7muN+
- TLSH
  T15042314F5AE35122866B61598B9F4B067233D903340DC9283F6C9388AF91138D9F77E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/CMake/install_test_project/test.sh
- Size 2KB
- SHA256 326116ad40ffa22d3e6e38a672a6235668e9e04917df7a39369fc16b0c5ff815
- MD5 d96c5a251f4f012e497496e6cebb2fde
- SHA1 0c270f82a01b01ee70aeacbec66f3957fccb78af
- SHA512 5f9c52ddfe29ca3c88c7a46272035cdf0ac7b931a07cbffaa083d4886431f8605920ab9ae5ba699b567fe4fcf37266b001007abd1d805aadc9b2121e76c0a171
- TLSH
  T15051C83AF64439F2F379D66A34EB62D9E9168A7056BC6D60409B1C45322393CC4FB187
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/absl/synchronization/mutex.h
- Size 47KB
- SHA256 109e2c37797a70befddd527aa05ffb5562a8f40ced9b51286acbf275231c27b8
- MD5 8f39b078a92ce05d90a16c217dc7d702
- SHA1 a1802e33421181e42666744a318e0583c4d7f388
- SHA512 ca0127c8e61438f763c55674999f551b9a72d029433237edd4366057b984e3a165efda23bdd1047f7c8cdf2f9083cba5f7b2e9c4a345ca00d09a6db3bd58cc1f
- SSDEEP 768:MU81T0ImctQqW8/xUtWQiSl2dMNFPYF2nKgpkIoavoiK:Mr1wImctQaUt/8AFPJ+P
- TLSH
  T12E23972B2EB92B225D56D2E19B8B70D1F620C13D7B2DC951B04FD128576B038E22F5E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/ci/cmake_common.sh
- Size 1KB
- SHA256 03dd2ecb97cdc4086947daae61d0cbc3fe5f19ed7ad6c00d434cea8a3e599486
- MD5 2d0b96c23c508c9527938a31bf246b9e
- SHA1 2fa852a2cf2cedc7d144fb0e120e00226031ef23
- SHA512 c68b9085e6f171eea4d48edc9dfd4a7345d3f0907976d790a4c14d0a10c6d9499ec23a2a5cc026e684baeacf96c82c5ee0a6e5f5ce36aa20a1880486557eb733
- TLSH
  T1493175B6B58E367397B042A26E5D82ED6305F0881B7B4248324B45CF723E83D41F95E1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  resources/app.asar.unpacked/node_modules/re2/vendor/abseil-cpp/ci/cmake_install_test.sh
- Size 1KB
- SHA256 252a8f16228b6cc1def4847e5fc4f11d7516392c3d83aad9f4969a33d429d11e
- MD5 ce1893fa4b7120b79c8d8a4e0bafcd5d
- SHA1 1ffcf0f87025f0f3ac0e15bcd6a6f12dca3255ec
- SHA512 f522669d1bb316747f3eb30e8643967c7d84c47dbf2c57fec45580ccad57c949c26c78c0ae869cda6ce8dbf3e71cb3461221abe3e0778d9b4c1dd85bc15117ee
- TLSH
  T15B415430B60579B1159190523FDDA08F7617981B1E296FB8F0C742CA3B372AE50FA2D5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy