b7d9732745909bbd7a3ebf73a3dda103724a1e32a4e9184985af6dba0ce01648 | Triage™

Login
Reports

Overview

overview

5

Static

static

1

README.wsf

windows10-2004-x64

5

README.wsf

windows11-ltsc_2024-x64

5

bin/dg.js

ubuntu-18.04-amd64

3

bin/dg.js

debian-9-armhf

4

bin/dg.js

debian-9-mips

bin/dg.js

debian-9-mipsel

lib/auth.js

windows10-2004-x64

3

lib/auth.js

windows11-ltsc_2024-x64

3

lib/budget.js

windows10-2004-x64

3

lib/budget.js

windows11-ltsc_2024-x64

3

lib/capital.js

windows10-2004-x64

3

lib/capital.js

windows11-ltsc_2024-x64

3

lib/config.js

windows10-2004-x64

3

lib/config.js

windows11-ltsc_2024-x64

3

lib/data.js

windows10-2004-x64

3

lib/data.js

windows11-ltsc_2024-x64

3

lib/portfolio.js

windows10-2004-x64

3

lib/portfolio.js

windows11-ltsc_2024-x64

3

lib/scout.js

windows10-2004-x64

3

lib/scout.js

windows11-ltsc_2024-x64

3

lib/scrapecast.js

windows10-2004-x64

3

lib/scrapecast.js

windows11-ltsc_2024-x64

3

lib/transcribe.js

windows10-2004-x64

3

lib/transcribe.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
dg-cli-1.0.1.zip
Size 45KB
Sample260729-ppmlgswwdt
SHA256 b7d9732745909bbd7a3ebf73a3dda103724a1e32a4e9184985af6dba0ce01648
MD5 090a5122037e42c90b37d83f60a377d6
SHA1 63b53e50874b4c3bf0244e565d27ab7031343274
SHA512 5fa0da76b75fa55f61b3415407eae491b1e3b3c50d35608b705d37d702b58918e91dada51e5e2653f68a4c2ac5d2f7299e46558574ecee75ec6d34503be6bc47
SSDEEP 768:5e+V6o/cD1Ga+PKXmSt1VpVJ8tF3CH31jApDqGYySw4gYdqu9ec7JPxB10JXcWFg:k+V6o/cDf+SVVb51jqDtSw4gkeW1xBCq
TLSH
T16423E1BACB6F1A26CF0E9C74644DCAC74790E6A79183FD035C0C52662D0E48A3D77B86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

antivm discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

README.wsf

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

README.wsf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

bin/dg.js

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral4

Sample

bin/dg.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral5

Sample

bin/dg.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

bin/dg.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

lib/auth.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

lib/auth.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

lib/budget.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

lib/budget.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

lib/capital.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

lib/capital.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

lib/config.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

lib/config.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

lib/data.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

lib/data.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

lib/portfolio.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

lib/portfolio.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

lib/scout.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

lib/scout.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

lib/scrapecast.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

lib/scrapecast.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

lib/transcribe.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

lib/transcribe.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  README.md
- Size 13KB
- SHA256 970e4803252c21edbd67a77618f7e6d0f914be9bd765f99ca78c703fdf24404a
- MD5 09618c70185b5b354e18c66e15c67671
- SHA1 3a7384773f63e82a5484920e085c6f758e061d71
- SHA512 58ae38ee27d9b5a2a36f29981ad98b14cbc53c6dfa7e324e5102992ead5a8a073fa8dbcc010bdf7cfdd61b15fd13ba5b36c9c95af232747eca26917147909ab5
- SSDEEP 384:WD/CYiAo1N0ILQn+Xh973UQ6XgtaIS5R1Xcu:WDa916ILzXbjUQ6XNlXx
- TLSH
  T12F52C9765D8562720A53C2E37B8F7D67E719B11492C12D1ABC9C8818B34B3DED24F28B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  bin/dg.js
- Size 28KB
- SHA256 85103f2e63bff80233522bac0427b0412ebb847b7b702dac94bea2519ab4b2e7
- MD5 bf815bbb75b9ca6598589c816d38cade
- SHA1 0a32ff98f1915e68cba41fb41a56e7674f27fcc9
- SHA512 cf4c2adb521ea70a1a22a4133d84828f69d06841f5ada0d87aafa2ae9f7a5d7dbadd50bd01bb1255de7c44826a3f14388f68de2d0793f62cd068aad3a8cfac49
- SSDEEP 384:5k13nuXgTd6fLA7Twqax1h1hDt7Cc75N5d614Y8PXGI8q6WDn+rtMfOw5UBU55:Wd6TFqaxhVtbl16nwlyaOwh5
- TLSH
  T189D263166AFB103509AF15B6678B500B2BF8D5032344DE067C1D4368AF869E8CAF5FDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution antivm
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  lib/auth.js
- Size 4KB
- SHA256 12b1feb9b46ba831e9fb576ce3755cb274d4a399d048a70bc8fdc1c25d5d0ecf
- MD5 0e813bcab93531dffa263d3e370a8337
- SHA1 3f7675a74adcdc86628432674b702c512cf4d59d
- SHA512 1d31ba02271213989ccd0511aad0e768d736903c12c0ee7c7a95af56063575c83c77d95da4031dd9d62b17a592d28a90be8ad553be3145066e311d51c027f59a
- SSDEEP 96:LF7FgF/sOnlPt8fPG37mr/xZa48f8uK+cKyvfi/b+FSBS4JsYyaW+FIu:LhulpFp37mzPa4Sy3i/KFSoVYyarFIu
- TLSH
  T14BA163854DFB24320BA75839DF5FE01B3124600F619FD9717A6C83E42F89618CA63DD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  lib/budget.js
- Size 3KB
- SHA256 008da634df342baa5f6135b3ac97c904ec0d3d4141860f1e54423fa5f8fe994a
- MD5 78fe01180dca3218236e3781243f7f15
- SHA1 0b5affee3b54bf25080d87a08fdc22d316caf139
- SHA512 45c9675b4cbe6204362ba9e6ec32735c39f1bdad51a3860c141b1756291e78df81f834d19ca7cc8eb3d6546d4d279d929f883f206039b3ef0d5f04d032ae7f57
- TLSH
  T1CB81C58671E91332492725D4A28FE0E25619D61433BA98857AED42982F0D07A8B3BFC7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  lib/capital.js
- Size 3KB
- SHA256 5141b5451a2ca697090a06ce542a3bd6b5d115c8141b396e40bed106d39fb48b
- MD5 c05dec7abd4d4cc72eebda1af05b4187
- SHA1 ab9cddd1b4cf2a373b941cb5791201b00e14db86
- SHA512 a8203ea28826c11ebe1847e5551690df0d2b78128803174b6198669ba61520bf9fa10084d2d50e1e1c8e6a9e05fd2a9c8ea7fec43f4ca0f227ccecdf85beba75
- TLSH
  T1EE616EDE71E16732D273F62AD70BD045613EEB813C595E806CBC66C14B9102C9E62EF5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  lib/config.js
- Size 1KB
- SHA256 e199dea099ef636f65e58e077d6f6e74f3d20f4957f7b25f3634303ae0ec4ba6
- MD5 9737e620e7ece16dcd627a73f7addccd
- SHA1 8de5151fba0fac8adf0bf074669f320b5e1af057
- SHA512 8454dd533e4e7cc7a56e505673caeb2603379cf76c821b83c3c8f7542d9d5447dfebd0788671056e8c91c11976bc181f1d3e3daee45d116d6e3048c87643ee7d
- TLSH
  T13D212D873EF62B04CA51F458972FA0587234E1103D8CA960E1AE4BE23E7C359217339A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  lib/data.js
- Size 2KB
- SHA256 b05e09a22feabef09ef83835107c0a7912f04ca382ae55b48d741a88cdc1f1dd
- MD5 bc02d9408e6461d5f4970f041ea2bcff
- SHA1 6bf70e39ef7e5b470207ebe822f67e7ecf57ba82
- SHA512 f112985ce24545df4be84831a4a8a68fb1d326191180b05867ade12a932cb1835c812e7589610a561c378deaa2e9535bdf0f892a314ff400e6e2aa282d1e5eea
- TLSH
  T16F41748F31911530886670D5A34EF815B729A7597AEADC80B65C8284775943ABD31DC2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  lib/portfolio.js
- Size 64KB
- SHA256 ed2d84305d2294835eb15e0cf2b56a1abbbbe2a36697bdcd76438512c53f30ab
- MD5 7854bdb78d8272756afc202290ea218b
- SHA1 c8016e71c6a14e3a52f54f9e88fe5ffb93a6318e
- SHA512 b0b6b0ef17c416db668c7ba1c8943666e7aeff6ca41a8f27412e5846d3f875e836a6e10c6d53fc9b19b586d49dc3454a31a22419ce32163f4137afd2fb04e238
- SSDEEP 1536:UtEDBUe4hIsISX2EmyTSoSwKUNpaebQtd:YEKJIs2I6p
- TLSH
  T15B530A6772F212319B3291BC9A8F9147662CA103F689E4D4B66D92401FCF41CD2F7EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  lib/scout.js
- Size 960B
- SHA256 074b3a201c5ff823e791c6418a7cc5688f9ee3343ddc61d5527e08f3a4c66e95
- MD5 d39d42adf02ae1a8121eddfb5201d0b8
- SHA1 db2d7d6c3597c4c836869c02a5a7534a0ce6669c
- SHA512 e9da5f10f791d0b429c95f6655dbd27112eec68917ddefe14fb58f8a288a8da9162ad59caee1376a9a9049380bc3dfec15a31ddf1d928477a7040099acb79811
- TLSH
  T1D511E1E968F6663680E674FB920FC4176615DB543C59CC84736C41D06F4A43D8D22ECD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  lib/scrapecast.js
- Size 3KB
- SHA256 c62fa3bb54bc53fba6b12e4f4f73c9e70cabcc88e8eb5b3a121863bbc0ef624e
- MD5 a88a2019c0ff98494a691fca1d73f3a8
- SHA1 6624d77b99311bb2726ec4922c5a48b2692b1ac8
- SHA512 9acb6e13ba04281e0d6686d13add194a6d361b404b9dafd0e2ee3f7a226249fe0188129e459cc4b2b028c41fc08f2cc2d24022859c5c2f0455fc93fce7442610
- TLSH
  T17D6130A6AAB7133A486524A957CFD42B2A18F01635C7EA50734C41D8BFCD838DDA1BCD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  lib/transcribe.js
- Size 3KB
- SHA256 10cf6449ffe056b0654829d836afafa3b6a9f109faa585029434ec6935fde868
- MD5 faba8e5f239be07e5df6a949a4f5057b
- SHA1 7656786771bc9452592dcedc92380080314ed06e
- SHA512 fc1a23ffeda52b23c052b75b7ae649fa737827cbed8619b3052fbdabfd8ccf1011055fe27c4493bc3b71fcee751c1ff6b9557b4c36c0373b2616a6019bec33cb
- TLSH
  T1136168D9AE7B2236865B61DA824FD02B256C510472DBCD4033888199BFCD57DECE35CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

discoveryexecution

behavioral4

antivmdiscoveryexecution

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy