ec513136ca69195ea90b16d6c420e2844b3ebdafb543e39e4bde48c515f498b0 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

api/auth/token.js

windows10-2004-x64

3

api/auth/token.js

windows11-ltsc_2024-x64

3

api/createGameId.js

windows10-2004-x64

3

api/createGameId.js

windows11-ltsc_2024-x64

3

api/restoreGameId.js

windows10-2004-x64

3

api/restoreGameId.js

windows11-ltsc_2024-x64

3

config/Dat...fig.js

windows10-2004-x64

3

config/Dat...fig.js

windows11-ltsc_2024-x64

3

lib/jwt/JWK.ps1

windows10-2004-x64

3

lib/jwt/JWK.ps1

windows11-ltsc_2024-x64

3

lib/jwt/JWT.js

windows10-2004-x64

3

lib/jwt/JWT.js

windows11-ltsc_2024-x64

3

middleware...are.js

windows10-2004-x64

3

middleware...are.js

windows11-ltsc_2024-x64

3

models/gameId.js

windows10-2004-x64

3

models/gameId.js

windows11-ltsc_2024-x64

3

test_api.html

windows10-2004-x64

3

test_api.html

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Archive.zip
Size 25KB
Sample260730-hag9wsdc73
SHA256 ec513136ca69195ea90b16d6c420e2844b3ebdafb543e39e4bde48c515f498b0
MD5 2279f56cca3de8bc3f91f1f178b8c450
SHA1 1b0d2426158649f47c438149ad99b3b19260cc9d
SHA512 4ebc802cbc2bacb4a394410de63afda1ba148c36bceac018da7fc375e8c11b1c933899d5d979b037245cbbb1426e24936eca66537de23bcda8872992f6d246a6
SSDEEP 384:/9s+2eC8AooAFTiS6s7kp0DoYVXpJKhxBb6xVSBLR5afhBBqM2UfVoVsqW:FsGC8mAdiS57k4JK7aaafhBn2Q+jW
TLSH
T133C26B3EC41C1102E24F5DF095E9664D21DC1D1072A2AD727D28A60999EFFD62B23FDB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

api/auth/token.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

api/auth/token.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

api/createGameId.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

api/createGameId.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

api/restoreGameId.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

api/restoreGameId.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

config/DatabaseConfig.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

config/DatabaseConfig.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

lib/jwt/JWK.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

lib/jwt/JWK.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

lib/jwt/JWT.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

lib/jwt/JWT.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

middleware/AuthMiddleware.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

middleware/AuthMiddleware.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

models/gameId.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

models/gameId.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

test_api.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral18

Sample

test_api.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  api/auth/token.php
- Size 849B
- SHA256 5971499d27a825ceea4a55584a84bda9ec822639f5e5396887e7cc92c3eeb0e1
- MD5 11d31ea11889c4652507b53856939482
- SHA1 85f794d6258520452cac0441ad5ba2679e94eebe
- SHA512 23ae8c8916416402335d631d2ad8ece975dd26e8a948f305950664f1844a452fc0ffc2e0ae18a8f0215bb385b488ad5ad7c6c0d76f77d2a396d5806b740c3964
- TLSH
  T12501209210D98586C85B89B9EF56E6117A09202F29F68550FF1C53E00FC833823F7BB9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  api/createGameId.php
- Size 1KB
- SHA256 37d077cbcc53b914726725ed577bcc2312a26311a799517070793ec4ab08ca0e
- MD5 3ac2d9413d7cc294297d1229f0340bdb
- SHA1 41f2c5ee60bd6d7d559bbfa045aaee91eecea11b
- SHA512 0c97e7b75960fca25b9cabe524e035c11b92a7aedcc6065feb7ef087ef21ff240dccc3a7ba49b19c887422814235b0f0be54574a55da3f060b14609866dab2cc
- TLSH
  T1C5113E18B0DA2741D16B10FC9B32B611995AA12717D28C20FD1F83C81FC8398B771E52
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  api/restoreGameId.php
- Size 984B
- SHA256 d910a8a63284a0d4308d5c05adb5fbef8cfa247be52f1471d6bfaefbf6c06c17
- MD5 8b54817cffc926dd4cb6de481dd993ff
- SHA1 0546471e56338cb0a1264b8e71ff661a636b9969
- SHA512 8188909e73b55d25944e27629eb60140f1f8e10096e7ea73ba5c9ca8d38dfb805e2bc2b6475c2fb302632c0f7eb73cbf5c5fe7939a4a23c90d8381ff59a05ae0
- TLSH
  T13E114468B0DA2350C57B10FC6313B6109969A12713D58C10FD2F53D41FC4354B772952
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  config/DatabaseConfig.php
- Size 750B
- SHA256 cc35f5ad3e8668bda51925280beb83e7ea76d6f7a774cbcfe079986d66cbadc1
- MD5 33d5154c968af3ac7e1db80cafcb7680
- SHA1 f2abe21306775ae7e584a5961b93f2c3ee7b3b8f
- SHA512 0337895bf1348348c7ee815b90ac174246c47248cf2de035a05ff81d6022ff3c22e42766de4f8cadff473b9232cae96a6da34c65405d4feb5fe6bec54ce0f54d
- TLSH
  T1AE01992B98B2431B52672CC04A07A06424373A0734489C93FA3DE6C02FE24B0EE435CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  lib/jwt/JWK.php
- Size 11KB
- SHA256 f81c8cf1c2f0d4b0df8298c9b9c425c157aa512dcbce7dc90024ea1134f8f82d
- MD5 7e3653cdee04fd4e74546d7414ca9c6d
- SHA1 e8fcb4fab332f1c5dfea216abe1066629b3d7115
- SHA512 223e25eeedfa746b002aa69bc3a8e68c20a632b669ef9348154c898d3be6d3729f8fa325ff8b63058689851d2b74f5cbaafe02ace066e5b9c411ab1b1c117cb5
- SSDEEP 192:/gQ/KEBiwMmFFpVA+GW61YpoxaPP4DOvZqk:YQ/K2sqpozo
- TLSH
  T112327214B8EB452104A364790BDBA045D35F611F222CEED1BCAF47A41F84728DFBEAA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  lib/jwt/JWT.php
- Size 23KB
- SHA256 6d808ba47afed36415514c0e63cc07e701ca528a9d356817094feccf79d1f251
- MD5 1f6cc6ee2eb28643a7a6dec1755b5ace
- SHA1 1aa6636df2f43627a83ece9589fdbcfb2dd8df7f
- SHA512 b444e0b9fc9832571e2a7dbcabf2dee5cf5f9f0bdd753e2a4ff744360cfa8945e008c97a7a3b0d71fd9f34357afdee4dcca5b4900c18e828c714cb3422988d1b
- SSDEEP 384:PGrbbmGDTgSrh/wniUeVFxGRCiRqZxvxVoe:PcbmQTLQeV8Cxt
- TLSH
  T181B2CB0878D79112089730795BDA9040E16B612F22B4AED1FD5E4BB81FC4B38DBBEF95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  middleware/AuthMiddleware.php
- Size 1KB
- SHA256 85874f5412455f8054bf43cd5d26cf0e2457eca0b0f8576c99b74106890117b9
- MD5 c92d4d07334cab34c42f5b36ebaf4ea3
- SHA1 d0071eb98cc4b0f6b97794c58baba981363ea201
- SHA512 9eb78531ef92af275096f52ad18a285df80610b6e04d2613eb428abeb5dc1178143207f1ec8790331442bdc4da056be17274abe1b7591e17eb44edc703a1d584
- TLSH
  T1ED31E1A5A0C75261C1BB3CB8F3569411A9DA622F395DCD61FE6C43891FC50348BA7783
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  models/gameId.php
- Size 5KB
- SHA256 70ee26c471fa16a64cc62eeee3ac285cb1ff2f6c82f8984e6b1dca4e1668fa26
- MD5 ce8a63c6002f8df24bbed62d23d4b017
- SHA1 4283e6654dab8649f6e31a18273f9f525d89eb49
- SHA512 03780b6a54c5fd87784095263718ee632f1a9351af2656c3ce94f09dc87444ba114e48d114556097282469b0e873ae7ee034985cfca9edb4733347b3c3149b76
- SSDEEP 96:N5Aw3WhIaFCbgql+8gBQigqf1WA7fRtBfNvisG7QyjNgx8N8b1V8BkNb:N5AwF1bgygBQig45jVpisG7QcNq8N8ZZ
- TLSH
  T1A3C1CD2829EB9C62817364FD0B17F51065B3E2231959DD227CAC83C06FC4729DEA9793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  test_api.html
- Size 3KB
- SHA256 d1289914782998170ce6d38bf21c3ee232940786e12cef2f8df75fbe7c1aa1a3
- MD5 de28de4bc22d3f9b74aa2328ca90c475
- SHA1 57c384f0c760132884a0195bac61af837fe8cd09
- SHA512 37b222d3445b224c9f9e91767aef88e2f8ac93b0faef750126ebcbac3f27cc70d17e3c91e77dde5cac7bd345674f1c34360e0e8332d1923f3d4e9045e222a1d0
- TLSH
  T12C61FE2634B50C21CF8B34BA78F7974A39A5C0439B45ECC47D9C0989CF99F42997735A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

© 2018-2026

Terms | Privacy