b090456eba0b455b37b0466b0c3b1d5fa3a5a52c9eb52037fe7e2f1aee2df7b3 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

api_v1/adm...rt.ps1

windows10-2004-x64

3

api_v1/adm...rt.ps1

windows11-ltsc_2024-x64

3

api_v1/adm...mer.js

windows10-2004-x64

3

api_v1/adm...mer.js

windows11-ltsc_2024-x64

3

api_v1/adm...oan.js

windows10-2004-x64

3

api_v1/adm...oan.js

windows11-ltsc_2024-x64

3

api_v1/adm...da.ps1

windows10-2004-x64

3

api_v1/adm...da.ps1

windows11-ltsc_2024-x64

3

api_v1/adm...ing.js

windows10-2004-x64

3

api_v1/adm...ing.js

windows11-ltsc_2024-x64

3

api_v1/adm...ji.ps1

windows10-2004-x64

3

api_v1/adm...ji.ps1

windows11-ltsc_2024-x64

3

api_v1/adm...ry.ps1

windows10-2004-x64

3

api_v1/adm...ry.ps1

windows11-ltsc_2024-x64

3

api_v1/pay...er.ps1

windows10-2004-x64

3

api_v1/pay...er.ps1

windows11-ltsc_2024-x64

3

api_v1/receipt.ps1

windows10-2004-x64

3

api_v1/receipt.ps1

windows11-ltsc_2024-x64

3

uploads/do...a2.pdf

windows10-2004-x64

3

uploads/do...a2.pdf

windows11-ltsc_2024-x64

3

uploads/do...7.docx

windows10-2004-x64

1

uploads/do...7.docx

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
api_v1.zip
Size 49.0MB
Sample260730-ptcxvaan61
SHA256 b090456eba0b455b37b0466b0c3b1d5fa3a5a52c9eb52037fe7e2f1aee2df7b3
MD5 38c5ea9ecfe9ae875abe74673e1d9389
SHA1 9df30be0cd31da3efc2c686f36c607ac2a0e5eb4
SHA512 13e68e816266ea6529b5144e2afd748adb2969d2cb84516093fea1aae04b88f80509178c3f099e4eacfaf1aa3e1c0830089cad49d5e1560ec6fdff782f4e5a88
SSDEEP 98304:8DmRDxzZzjXyJRjdGM8vRDxzZzjC5tT+NIWndhiD5u3O1pnWnj2NM9xCsGTLBPJN:8DaoRgM81HLO
TLSH
T182B723BDA29F94F3CC49F876C948D6A3D8DEFE90744C6520572604F38ABBF65289484C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery execution spyware

Static task

static1

Behavioral task

behavioral1

Sample

api_v1/admin/daily_report.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

api_v1/admin/daily_report.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

api_v1/admin/deleteCustomer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

api_v1/admin/deleteCustomer.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

api_v1/admin/deleteLoan.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

api_v1/admin/deleteLoan.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

api_v1/admin/faida.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

api_v1/admin/faida.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

api_v1/admin/fix_small_remaining.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

api_v1/admin/fix_small_remaining.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

api_v1/admin/mtaji.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

api_v1/admin/mtaji.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

api_v1/admin/summary.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

api_v1/admin/summary.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

api_v1/payments/vendor/composer/ClassLoader.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

api_v1/payments/vendor/composer/ClassLoader.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

api_v1/receipt.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

api_v1/receipt.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

uploads/documents/doc_68090454efca2.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral20

Sample

uploads/documents/doc_68090454efca2.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral21

Sample

uploads/documents/doc_6811d2d6e3587.docx

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

uploads/documents/doc_6811d2d6e3587.docx

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  api_v1/admin/daily_report.php
- Size 7KB
- SHA256 d66b7a991a313012abc06dbc51704eaa1e327b1c7f05eae610193c465583f47c
- MD5 17b11bd90299c52a4d25c99969c53140
- SHA1 f7474e4a058091a9325a3e21826ebf213cb889e5
- SHA512 6bb6b1f7779e9d5e7efbc848d45746856db4a84a6416c577fe0a9c2f04efa75d051227c22f3bc3a6c7b56ef60f19cd7f037158ed0f1df85aac655d71d0d142df
- SSDEEP 192:vZPspEHH49YL/VLXh7gLRLQL2YghhBKn/:NjbVDh7gNc/ghhBY
- TLSH
  T118E1F066FA03D89865B3E221CACE447CEB08AB7319411103BEFD57C45FF016EA5B8B95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  api_v1/admin/deleteCustomer.php
- Size 1KB
- SHA256 dfdf66762b4325c667c9ab41d69cf529356476a2a3220c0738fdaad36048653b
- MD5 88b17579b72b5699af1cb15a84de2ce5
- SHA1 e707f2ee890fa4a1c6b069a9d433cbd968491c58
- SHA512 ee0ceffc8ef4a0f2fbc5a544d44f53dac253815d5d10dcf83f9b5db1076920802567a1450557b912c7a57de169425b2d6500f63f67fbba3b1fcc3afeb02fba59
- TLSH
  T1EA41E01132375B74A8EBB80B4FCE25693811CD0336054D12B80E5AC19F945FC69F139F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  api_v1/admin/deleteLoan.php
- Size 1KB
- SHA256 bc68adb5cbfe6e9debb25c4798221bc3a73f7f8c3d563d10916ac68709f91cf6
- MD5 bc5773bb2bca0d18d9cdd9517c5fb76a
- SHA1 5497a65aa88d81851ec2b19a51d541c34650fbac
- SHA512 7fa940e90f5961865176ff7d482aa3a2170339090fe5930cf6ca4ab083e067725db03b575657884ea7fb8fd29059be2a2d417ab219d69c4750a1ca577673f526
- TLSH
  T1F5215CD53D1674B068BBE2A0A3D716D11C89CD0B3395CA6BF84E13494F012FC5BA62EA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  api_v1/admin/faida.php
- Size 3KB
- SHA256 09dc24f5d892bbd8e18a3b56b0c9f0629137de3bed31b032d1d1077edd36f50a
- MD5 e22929918bba3506932dc14c59ecbd89
- SHA1 36902da71b67fd0b7c2b913e2f621dc29f225e03
- SHA512 b5fcbf46d8bd68f7e9339d1e283f5412fefe39914fecb588e7a483005a90451f674264f874c6a6ddd26ca77db68391a6db87b9fe18fc34342f2100d76a6a9ea8
- TLSH
  T1475145557557293034BFF15D1BDA44B22A4E460306807A04F8BFC6F88F921D9E9F4AEB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  api_v1/admin/fix_small_remaining.php
- Size 3KB
- SHA256 9fa13d209729db95ad3b6b717c55067dae0b23ab9a4622d8f41e3873528c2030
- MD5 c5a353103a0dccd52f4d0a2d69a73838
- SHA1 2fbcbde647d9c2c50a2fbdeb46f8afd680aeb0a3
- SHA512 270bf68216d64533e3581e0bdccee854fc53941e156d71972e81b3938108a3304726173bd4c73e75eb135c04a61b08feb7700c22e5058b37b69b875916f797c1
- TLSH
  T1DE81409BB433891248A331ACA74A65E05C014A2767519739FD9F43185F812CDEFFAE4E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  api_v1/admin/mtaji.php
- Size 4KB
- SHA256 b18d4d52e4defc9028414b345ce63bbe0f72d615ebe2614e2ad7676924dceb1a
- MD5 825aaf721dd08dcf8d0d81ffb719e7e3
- SHA1 98e9ba271f5ef0db6fd57516444955a6d576c2db
- SHA512 96b9d61964068a8d6d8f6fd1956fd52d8e79262dc022ac0c128ea4a10a2541d4fab42b31c2f85051e0244aba4d3cf4ca0097962364a63dcef8f1aa5651ef402f
- SSDEEP 96:QnAjnh/Q8scqw2Kv249sFksC+qad/iVf9W5:xT28srwD+XFksCudi/W5
- TLSH
  T1E491FF9070531D6028BFFB1D9BD518601A3D47039ED46614F4BE91F44F8A0ABEAB4AAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  api_v1/admin/summary.php
- Size 14KB
- SHA256 5aedf7fa67358f94d0ac5b16228051c035789902f296686f741ad20f0afb484b
- MD5 da7c6af0fdd57abbd9c2a39d031b3918
- SHA1 0ea4d740847225c4c8965395332a1014becd97f3
- SHA512 6e71e92a8cf5fc86021c1343438cd82cf570a6e55f639ffd09fbfdcb16389aaeb0bad3a1a1b466aba011e23f9e46af375ee7c49077ecd5ced92a423e7c1d0442
- SSDEEP 192:PPXGeJIha67gGVYbiJWTGgNYieSaVQa0Wpwc3u0c4ebfyeca/E0Dg8:HW/ha677qIWTGmkSgQnWpwf4Sr9R
- TLSH
  T1AB62E2903173AE6024FBE51A4BDE44B83569660319C47D01B87EE1D48F990ECEDF4BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  api_v1/payments/vendor/composer/ClassLoader.php
- Size 15KB
- SHA256 d4b2313e562edf942838ec316d983c1a3459ca67da3e5658e861200b0b3693c2
- MD5 c02be6d96671f88d28aad3ffa134c8ae
- SHA1 7f146de662b0599355b3b049a161e23cbdbbdaeb
- SHA512 f73af132ef1159370f4da75d1477541c8fd55e82d64e1a29b199e8963597b3558853edd48f703118bb139680e80bbae5cd601580c9f62355f3e749214b40e162
- SSDEEP 384:bRMAJd+yMxhA6b9JmKj7YyiznGgewQbuUNN7dJUu8:bjxMHAS91Ex
- TLSH
  T18D721F6929EB042A085361BD978F9051E05FF13B622D4D65FDEE06F06F0072CC5B6BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  api_v1/receipt.php
- Size 4KB
- SHA256 218c475b5644116132588cbf9bcf4a16114ad92c88fc2986d4b658ca978d963e
- MD5 b6dabc8558a2de5e3c3ad80fb97bf7f1
- SHA1 d90afdfcb704b2a09b6f768af2a6f95ccc09cbb3
- SHA512 9f818047f73f4f598c14dc61af2548231bd9c68f01938dec741074b775ebaec4bd35ee210454de883603a6256e6ae155b3e5b1c4e2f8b8cd75caa766ed5ad8f6
- SSDEEP 96:w1hiJfYnJoFktt8Fuz2606gvWRSiy033ukT:IhiJfYnJoFkzIuzk6gv6Si7dT
- TLSH
  T1C181F0007563277418EF95A81BCF14F00E7596031949C514BC7EA3A58FE223CEDEA68E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  uploads/documents/doc_68090454efca2.pdf
- Size 123KB
- SHA256 12a84b67314eecfe6b406b99d3368f62690bda23791e9816558ee9ad37183c33
- MD5 eccca88a8e27aa185a67036be24ebdd0
- SHA1 9be0053564f33be4fddba551dc9b45dd14077b29
- SHA512 b3d0188457ef09f0fde8b3b96ca3a1b65beb959ccdb98123d6b411485d8b524e4754d1dfff6b3878f0f5e29d0af5f133803b4bbcb1acc07341a19f8beb2c873c
- SSDEEP 3072:TN/CkIKiYCrfAwTHeBC/kN87+r5ExrmpF:TN/CFrTeBAkq7+r5EoF
- TLSH
  T15AC30221E5ADC8C4D4C3A7F2AB6B3F476707B35601C459A3A98D465B4620FFAF44EAC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  uploads/documents/doc_6811d2d6e3587.docx
- Size 21KB
- SHA256 95c19c3425bf7e5dbf66a0b83a5d2e68c136890c2bc3d9c6bd6cddf2c901b0ad
- MD5 df478102f828d28b67a4572ff7656b2f
- SHA1 d810b839e7bfe87e841954e3647fe0031e95663e
- SHA512 e975683687ea32426f66fc560e77a6f7a499f452f5cf47fa49030f12fcafca3336d07c62df9bea800788ec3c80baeacbd8162d509fc934ea14c9afd06623d083
- SSDEEP 384:SmDaUTE0MRT0ikbo6mzomO33hWDBS+ZiQNUvswNxt/ZtNNUVDwREe1+bafjY2qoI:nrTP8zVO33cVv9pqxllNUVkhg63qozK1
- TLSH
  T1B7A2BE7CD70DA030DC3A627EC24A0BE6F86910833A92BA8C2195BFDDD14558F4B4BA56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

adwarediscoveryspyware

behavioral20

adwarediscoveryspyware

behavioral21

behavioral22

© 2018-2026

Terms | Privacy