c9b70bf890443a29f56963640f3f026781c1bd803ccea55136ae55335be49972 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

forshellAt...tp.ps1

windows10-2004-x64

3

forshellAt...tp.ps1

windows11-ltsc_2024-x64

3

forshellAt...ler.js

windows10-2004-x64

3

forshellAt...ler.js

windows11-ltsc_2024-x64

3

forshellAt...uth.js

windows10-2004-x64

3

forshellAt...uth.js

windows11-ltsc_2024-x64

3

forshellAt...op3.js

windows10-2004-x64

3

forshellAt...op3.js

windows11-ltsc_2024-x64

3

forshellAt...mtp.js

windows10-2004-x64

3

forshellAt...mtp.js

windows11-ltsc_2024-x64

3

forshellAt...ing.js

windows10-2004-x64

3

forshellAt...ing.js

windows11-ltsc_2024-x64

3

forshellAt...g.html

windows10-2004-x64

3

forshellAt...g.html

windows11-ltsc_2024-x64

3

forshellAt...q.html

windows10-2004-x64

3

forshellAt...q.html

windows11-ltsc_2024-x64

3

forshellAt...ocs.sh

ubuntu-18.04-amd64

1

forshellAt...ocs.sh

debian-9-armhf

1

forshellAt...ocs.sh

debian-9-mips

forshellAt...ocs.sh

debian-9-mipsel

forshellAt...tor.js

windows10-2004-x64

3

forshellAt...tor.js

windows11-ltsc_2024-x64

3

forshellAt...s.html

windows10-2004-x64

3

forshellAt...s.html

windows11-ltsc_2024-x64

3

forshellAt...8.html

windows10-2004-x64

3

forshellAt...8.html

windows11-ltsc_2024-x64

3

forshellAt...ons.js

windows10-2004-x64

3

forshellAt...ons.js

windows11-ltsc_2024-x64

3

forshellAt...x.html

windows10-2004-x64

3

forshellAt...x.html

windows11-ltsc_2024-x64

3

forshellAt...mtp.js

windows10-2004-x64

3

forshellAt...mtp.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
forshellAttachBCC.zip
Size 339KB
Sample260730-fx5ycsdk4v
SHA256 c9b70bf890443a29f56963640f3f026781c1bd803ccea55136ae55335be49972
MD5 cf0f72c1251dcf68d1becf8e9504ddd6
SHA1 433b8a0ce5377a69a2dc8412c3eb05db615013f3
SHA512 c649c74648c069f876c73c615bc769af310721b0b2e4c83d6956d71d23d86e661a199cb418e7d29897df64632bef1d1ffc9f10d6c1bd1e10fc6128b042cb3f62
SSDEEP 6144:n/rHMn2sAXKY8T8IiU29W8xzlCRjOWVyrefkshBefFHW6TE8Nkk:DHMha8YIcm8otcshktXTj
TLSH
T1F074D063B941101CEFA6EF35315B9C52F486D2844B53BB7D178D0F5C9CAA888BAE350A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

forshellAttachBCC/FILE/Gmailsmtp.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

forshellAttachBCC/FILE/Gmailsmtp.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

forshellAttachBCC/FILE/PHPMailer/class.phpmailer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

forshellAttachBCC/FILE/PHPMailer/class.phpmailer.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

forshellAttachBCC/FILE/PHPMailer/class.phpmaileroauth.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

forshellAttachBCC/FILE/PHPMailer/class.phpmaileroauth.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

forshellAttachBCC/FILE/PHPMailer/class.pop3.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

forshellAttachBCC/FILE/PHPMailer/class.pop3.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

forshellAttachBCC/FILE/PHPMailer/class.smtp.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

forshellAttachBCC/FILE/PHPMailer/class.smtp.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

forshellAttachBCC/FILE/PHPMailer/docs/Note_for_SMTP_debugging.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

forshellAttachBCC/FILE/PHPMailer/docs/Note_for_SMTP_debugging.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

forshellAttachBCC/FILE/PHPMailer/docs/extending.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral14

Sample

forshellAttachBCC/FILE/PHPMailer/docs/extending.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral15

Sample

forshellAttachBCC/FILE/PHPMailer/docs/faq.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

forshellAttachBCC/FILE/PHPMailer/docs/faq.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral17

Sample

forshellAttachBCC/FILE/PHPMailer/docs/generatedocs.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

forshellAttachBCC/FILE/PHPMailer/docs/generatedocs.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

forshellAttachBCC/FILE/PHPMailer/docs/generatedocs.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

forshellAttachBCC/FILE/PHPMailer/docs/generatedocs.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

forshellAttachBCC/FILE/PHPMailer/examples/code_generator.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

forshellAttachBCC/FILE/PHPMailer/examples/code_generator.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

forshellAttachBCC/FILE/PHPMailer/examples/contents.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral24

Sample

forshellAttachBCC/FILE/PHPMailer/examples/contents.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral25

Sample

forshellAttachBCC/FILE/PHPMailer/examples/contentsutf8.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

forshellAttachBCC/FILE/PHPMailer/examples/contentsutf8.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral27

Sample

forshellAttachBCC/FILE/PHPMailer/examples/exceptions.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

forshellAttachBCC/FILE/PHPMailer/examples/exceptions.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

forshellAttachBCC/FILE/PHPMailer/examples/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral30

Sample

forshellAttachBCC/FILE/PHPMailer/examples/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral31

Sample

forshellAttachBCC/FILE/PHPMailer/examples/pop_before_smtp.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

forshellAttachBCC/FILE/PHPMailer/examples/pop_before_smtp.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  forshellAttachBCC/FILE/Gmailsmtp.php
- Size 3KB
- SHA256 dc1adfd147d485abe2f77dfe8acff5361dfa0a8ddb4c6a4d240d28dab8b8ec82
- MD5 87b5a785a98c63ee503191523f6ab78a
- SHA1 e983801efaadf31681c59383e6f337966a73de20
- SHA512 1473f955033fb14150af6c6028b0a262b85c77ab693d540b7c59f87605f04b672c3723732a72838700d5836a7bb7658b3640c2e5bbcc89e2f631818c22c6b9c6
- TLSH
  T1D38171912503E2A42373F92A7BF53C01EED902093D40B1A034CE819F9798C16BEEC6DA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  forshellAttachBCC/FILE/PHPMailer/class.phpmailer.php
- Size 139KB
- SHA256 faf4c090535cb43a1c1755ed4f58a4f9fbc113d4306179767d174c2cb648b1b9
- MD5 fd098f2c360c0e6c8f18c0a6de150c19
- SHA1 bf6b204ed7f5e154f99c0c93c2362592253b8a74
- SHA512 da277e40f9588e4e68409bacee7ea8e3c84d9d4dd683ab9408afbbad9fe4e3ea5041c48996f5d9b8408577a9fdfcc10c442207c0f9051c0b7310af67719899c5
- SSDEEP 3072:LPM8J4vHDy23kLg0IjvrKeRDpBvOw5PAOzxd7/DZW5I7P5uecDkVvICmJs:jM8J4QLQjvrVnBDZ6I7huecDkZICmJs
- TLSH
  T173E3C8187AE72CA1125364BE67CFE045E13DA13B1519A9927CCC83F88F8473CD9B1AB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  forshellAttachBCC/FILE/PHPMailer/class.phpmaileroauth.php
- Size 7KB
- SHA256 9a529029e92f8cf84f844a010c80e9682f5c8a61ba91d102816d1305851330e5
- MD5 c8801b86133b744827ac50d61d4952ba
- SHA1 7054efa3862b12af362c44a9f6a04db0c53bb3c2
- SHA512 34a28ea0f250a87c111fe9893950b48c8b7a74f49ca71db267d2ee8e27ce1a0125bc95bdfb633e0460d76e59fa9f3f7c5f47d6b751cea4f3b49a7588dc1ee3f3
- SSDEEP 192:fmWFkdhPB6Sm+1DRdAvViC2JQJT35g60ie0CyqY/:fZ2gm+yk
- TLSH
  T10FE1510571DB0DA2B79311EE678BA0849165E13768A5DD167DDD03E08F40B2CEAA2BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  forshellAttachBCC/FILE/PHPMailer/class.pop3.php
- Size 10KB
- SHA256 37e6613931539edb94cf6130e1500578cb3f452545a9503327012f4978e9cdfe
- MD5 0357b90d0044f24b7acb246488d93847
- SHA1 f95beb481083bf2a38191b60716e63559bcb3cc6
- SHA512 598e839aa54dfbadaed14685943a6f4898395c4794e4e683adce5f9124d9211ef53022b6975b53e5f8642effa872b5707b19148081abd03023864010d70dec39
- SSDEEP 192:uwHe5sSb5w7bgvip1k7q4h7dHLyz70PIGwcHetAB2GxD22LfyCavycmykX+XT0MM:uMpr6I22G4c
- TLSH
  T11932961D3AE70822224784BDD74FD881F236A01B22959AD57CEE67741F50B2DC9B06F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  forshellAttachBCC/FILE/PHPMailer/class.smtp.php
- Size 40KB
- SHA256 7b5198c8ac8492fa33c1fd85d4bae05220fb9462e4135c18bb08eaf23ea1d70d
- MD5 c0a391cb8d1684b1d629a4a2c876f16a
- SHA1 6e7796557964aa2d40545a7100a4396c52afa183
- SHA512 337cf656993a228ce6d2655f208c193dd5716e99e7a3b8b977d78bd15bed3a93d3a34c63c1f79ef97e30c13ccc1ec52633412c59eba64f9c5abddce2f4b2171e
- SSDEEP 768:9g8jYoExzrq/PWt4guhvUzVGrMhr0TYSlZ6R8L6kYJ:91EoExzrqXC+UzVGrMh4TYSloR8L6kYJ
- TLSH
  T14603C94A35E71872212311BEAB8FF040E23AB52B11299D957CED5BB45F0472CCAB1EF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  forshellAttachBCC/FILE/PHPMailer/docs/Note_for_SMTP_debugging.md
- Size 2KB
- SHA256 c294c1a3a60bd0b552970980bd23217325c713019a1c41ab84c6ec3a5f7d38dd
- MD5 4c79f1be09131350628fea40f91e243e
- SHA1 e50124dcc55ed1b69e207333b7ec5a48b6e091db
- SHA512 444dcded8c78715b39f5153cdeaa8cd1265f64196f47d2c030a1af3f3ec690dc60b6b43848b3c95ee0a3b3f64b9f4887e4fc2b32c84071f34d0a67d1b9234627
- TLSH
  T1DD415317E807362346032272BB8931D52B38101627647D9138ADC7BC672A9263BB77F7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  forshellAttachBCC/FILE/PHPMailer/docs/extending.html
- Size 3KB
- SHA256 90841231ae7cb5280032b1b4910d9d66b71e45cee0fc4274e2a4b02d00956d5c
- MD5 8a93870d6204cdc793eaadcb9310d052
- SHA1 83610d92094a41481162ed52102138faefe69544
- SHA512 47a07e2bdfeeadd528fceaa51a2b6201eeab881eff91f5d5eaf5df88dbb3d89f613e469f53e4ccc7dee87c32f4e3387871a9f951fe1fcc9d5d5f320bf477d518
- TLSH
  T11B71B714A9935AE525A7A56AB38D70827C0541073A10F9B078DE43D8CF41C17FF796ED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  forshellAttachBCC/FILE/PHPMailer/docs/faq.html
- Size 1KB
- SHA256 34f1453d9d2bc915c8941a85d6c57f794daac895e174aac1609c3a5168016307
- MD5 dc17fa572db619e87e123cc5f0be3fb7
- SHA1 f19074833e4b60ebb891252065b0a0680a87e847
- SHA512 de4b2d64e2cd0811fa5cc9136a4da29c7df2fae2640278e7c301c0d2b59dd5fd002ae3304f476c65e06f3c38a869ec6dddab3c9b1eb0d3f447eaaec4934cdf15
- TLSH
  T14D31449BF79923551E6003602B5913A76B8970EEF50220E13DDEC1746B00A39AAF2DF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  forshellAttachBCC/FILE/PHPMailer/docs/generatedocs.sh
- Size 608B
- SHA256 563e644feb3a5d724d8553244ac37490df80d6f40432167b91417fd1c47be6dd
- MD5 4003c0acacee7c93da198a3c89cd7b33
- SHA1 27c241b407f15859885b58a40366b27962616034
- SHA512 95974466867ef6c78b30f39d408ec61b1a45c1d645fbb7c6b4488e53b722cc69b9d85b51dc0263319afe0f80b80714f0f5eb5dcffed10e55a91f8e523502a565
- TLSH
  T1CDF00C3AA30B0A143B4D4BADF7A4C930AB02834C6F86D833820E00C0C2E6857F4DF4E6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  forshellAttachBCC/FILE/PHPMailer/examples/code_generator.phps
- Size 26KB
- SHA256 1936827b5f2889ce96f7873aa7498d79cb9b71bef5c06eb06e8f6267d566c6aa
- MD5 97f03c2cf4b09d1109058d18133a3ce8
- SHA1 a277b3ffd3afd27e5fa91874fd78c2b3b00a1059
- SHA512 c7474a363df388dedd68420399891b7398fd628513780743c8c264ad5c65d0c8d3aeae86a26328fd42de1acb30560beb84fb60e463ef46340b99d000b2f918f7
- SSDEEP 384:yi5LteS+R4PfYpt5hiAnDiPixKozhN7oLYtR/e:b5LtkROYl3mKEwN7oO2
- TLSH
  T106C28200A4F21D01A2A7A85677A568063ED9430FCA15DD903DCCABFE8F49C1BAC773D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  forshellAttachBCC/FILE/PHPMailer/examples/contents.html
- Size 645B
- SHA256 0e30c0ca8cfc422e14df688bb3d5d99de0828cf69c7b8fbce79357f12adfcd25
- MD5 8e28283b8e1fc5599df3042b107d60de
- SHA1 5eaae70a785e842129bdd60e0e0e5faa70c8cfff
- SHA512 3fc39632f5e07185789e27e41e8ac2d1896e86a256dd617e71bf5e78d6230c0da9544f1092913bc74b7b7c1f6793a0db725622edb9cb848363f776566485b457
- TLSH
  T1E6F0625EC005120AF78297843FB2BB962E40C30ED2AB44E471C68046E48E05AFCF329C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  forshellAttachBCC/FILE/PHPMailer/examples/contentsutf8.html
- Size 830B
- SHA256 5a1021d31f3b045ed9465335a83855492721c42cc02f6a03fd036bd74ee86037
- MD5 8eef8f38558b22e288fbbd08154565cf
- SHA1 f8a03b70ae6801e267b0588ecdb88d21e6aa7ca4
- SHA512 0c999f0d49529dd12c6b118e85f0b6e2d44263eac560de13d41d042e2545828393f278547893cc6a19526e52a5f694581f2c9671541387a4e6ee972ebdd6c2aa
- TLSH
  T12D012A5AE00F130FE7C1F3807666EB492944E74D5766C1E571848452D8960E6F9F3554
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  forshellAttachBCC/FILE/PHPMailer/examples/exceptions.phps
- Size 1KB
- SHA256 dc734cbc92bb64c5566db4e34068d6086416e2ff927eae6b6647fc3a3bec5802
- MD5 199e38accd6138fb2beb8256b3d45a50
- SHA1 9a39a9616b97a6f146b768c05f1a201cee2083ef
- SHA512 3dd4921195059cb7959c47f627674b60e62edaa5fcaa1d984e26093b9fffe233bd307f00df830b83fdd5be0e4f6d8fb9bf855aef5e7815808c34db084b33a5a4
- TLSH
  T11A31031168810B56169790E5336E31D0AD75424BB564F5B2F4CE4355EFC0D16FFB3A82
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  forshellAttachBCC/FILE/PHPMailer/examples/index.html
- Size 6KB
- SHA256 895e29fe77b240b4661a71c5720370ba64c09de377cdf2570dd33e14ef135c06
- MD5 638b2b4cb188f91686fe3b2447c74d38
- SHA1 51ba91e83d9648a309f358babc817c65951d679c
- SHA512 c1c2760d0930d640257564d0e222c4a21a9e7e9b059297f357b117d2b2f016076c7e0e5bf5bd29da3b8238f72164fade75e6674e898dae1b79d60384ffe31e6f
- SSDEEP 192:mP864Tdhju+TQhYGmYMgVXfXZlB7dSR9+n1r/q:p64BhjXINmYMgVPpnxSR9q1rq
- TLSH
  T1EAD1D72BA3802327478613A67A26B394D33A815C4F70346724AF5176B401D6FFAF35D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  forshellAttachBCC/FILE/PHPMailer/examples/pop_before_smtp.phps
- Size 2KB
- SHA256 e717d897d106d2e134edee533c5db29117853ea00604e327ac161f5d191d320e
- MD5 d79397b5643050aedb763569b3247cb8
- SHA1 a68249295ac36b6be78341e4b4eb4028cd07d7d8
- SHA512 456a74e51b164d8de1ac86809f626fd3e68459cae77471a12fb22bdf96f0dcd4ca0cb9c69b46032f4df1244f25ba42b2ce15a6269855f05808997c42437ff259
- TLSH
  T1E9417311A8820E265757B1E1B35EB1807F74411BB464F851F0CF83A89F81D17FBB3692
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy