073685b44c08a2e2e2c1e2eed4de671d17ea41350140849fea7ed5b61386acbb | Triage™

Login
Reports

Overview

overview

8

Static

static

1

build.js

windows10-2004-x64

8

build.js

windows11-ltsc_2024-x64

3

fix.js

windows10-2004-x64

3

fix.js

windows11-ltsc_2024-x64

3

hi-eu.bat

windows10-2004-x64

3

hi-eu.bat

windows11-ltsc_2024-x64

3

hi.bat

windows10-2004-x64

3

hi.bat

windows11-ltsc_2024-x64

3

replace_config.js

windows10-2004-x64

3

replace_config.js

windows11-ltsc_2024-x64

3

src\banner.js

windows10-2004-x64

3

src\banner.js

windows11-ltsc_2024-x64

3

src\colors.js

windows10-2004-x64

3

src\colors.js

windows11-ltsc_2024-x64

3

src\config.js

windows10-2004-x64

3

src\config.js

windows11-ltsc_2024-x64

3

src\llm.js

windows10-2004-x64

3

src\llm.js

windows11-ltsc_2024-x64

3

src\memory.js

windows10-2004-x64

3

src\memory.js

windows11-ltsc_2024-x64

3

src\notify.js

windows10-2004-x64

3

src\notify.js

windows11-ltsc_2024-x64

3

src\skills.js

windows10-2004-x64

3

src\skills.js

windows11-ltsc_2024-x64

3

src\spinner.js

windows10-2004-x64

3

src\spinner.js

windows11-ltsc_2024-x64

3

src\tools.js

windows10-2004-x64

3

src\tools.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
hi-eu.zip
Size 397KB
Sample260801-136gasyblb
SHA256 073685b44c08a2e2e2c1e2eed4de671d17ea41350140849fea7ed5b61386acbb
MD5 1555ca93273173ced4f6f01246bc52a4
SHA1 5dd3c08812194673ed2bc019eb133950abc537b2
SHA512 a38de42b88d7f7f10f415642063df9a251e23914d72a9f8be7b66ea422601815b449f84d73da307de9f915db2664d030fd1aa446a092a5c856452a86909d5274
SSDEEP 6144:4XesvwPvh6UpLkxLe5DQU3WildGuExMmdWRE2RyjBqgYzW6i292UezW6i292UN:4Xesivh3MOQvivXmEa7Qq2E3q2Ea
TLSH
T1CA842323CF6C8264FAF76636D83A0192597D56992A59F9D20021171EBE0324C4BFF8B6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

build.js

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

discovery execution

Behavioral task

behavioral2

Sample

build.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

fix.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

fix.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

hi-eu.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

hi-eu.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

hi.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

hi.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

replace_config.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

replace_config.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

src\banner.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

src\banner.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

src\colors.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

src\colors.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

src\config.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

src\config.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

src\llm.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

src\llm.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

src\memory.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

src\memory.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

src\notify.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

src\notify.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

src\skills.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

src\skills.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

src\spinner.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

src\spinner.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

src\tools.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

src\tools.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  build.js
- Size 1KB
- SHA256 d2b650ee8ab4ec6523ea097cb7376412bcf2964ded9db440182bc5a427e5b658
- MD5 6232d973859879a55b0eb26fdbe11d04
- SHA1 9c53e24a98bc058452b8bb789e549096a412ac61
- SHA512 09fe874ffd48402aa945d57a366d2e57994768d6a129c58e6bd225a9f71c9969aeddfad5aaca1839a70d3447286cdaa47da76768527ea852aedf8f53d129a927
- TLSH
  T1542132510831ABB02FB218F77A0B75B280EAD861B654FE54C44C4A0B6FDA51C40274FA
- MD5 SHA1 SHA512 TLSH
Score

8^/10

discovery execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral1 behavioral2
- Target
  fix.cjs
- Size 6KB
- SHA256 132ec021046359017583e5fdd021bd9e9e358ef43ac0c1519fefafbe5634e985
- MD5 f4ebfc7cdf85a6c5172823b658f94050
- SHA1 df1352c4a2a9b4ca1dd700f93d26c9b0b8d99188
- SHA512 c6f6b1ddc8ec685a48849ef4e52cef4eec5aa15dcbde2e4399669d411e02f39cc6ffa69a80e8b625ee9eb5edbe307e57fe56e5b986e53c819aa356198e155c62
- SSDEEP 192:8YYEhcHGOCWea2c+oy5pVhTEz5Yw/a9Tl9VAa:SEhQp2pbia
- TLSH
  T1E3E1861A44FE2031106335E8FFC32114B726A7C77896D848395DD16D0FDA69196FA2ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  hi-eu.bat
- Size 71B
- SHA256 5394cadcf2c442574dc1c1d8a5f5bb892470751753208333e2fa35d408f93540
- MD5 98020925e1095a953abcef1d4cd38f65
- SHA1 6e8eaa132a9d7acef2b0909ab7f6f48803d2d911
- SHA512 91b85ecf22ef39c96b5c8e56159056bf89dcccb3f4a1eff78925d43ad22d5794174746cb027d9868fecfd80712f05474701baf6834719ecdc904ce51cdc8bd28
- TLSH
  T15DA02232800F0A833C32AC3EB2CE00E03C2E0CC320B8B300EC000383BC8E0008C08003
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  hi.bat
- Size 71B
- SHA256 5394cadcf2c442574dc1c1d8a5f5bb892470751753208333e2fa35d408f93540
- MD5 98020925e1095a953abcef1d4cd38f65
- SHA1 6e8eaa132a9d7acef2b0909ab7f6f48803d2d911
- SHA512 91b85ecf22ef39c96b5c8e56159056bf89dcccb3f4a1eff78925d43ad22d5794174746cb027d9868fecfd80712f05474701baf6834719ecdc904ce51cdc8bd28
- TLSH
  T15DA02232800F0A833C32AC3EB2CE00E03C2E0CC320B8B300EC000383BC8E0008C08003
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  replace_config.cjs
- Size 5KB
- SHA256 32b875c3bdbfdeea1de2394f89812f0037fdccff67e40f9b7caba11839c84810
- MD5 175e7b6d2a0e66ba950652515a018cd5
- SHA1 e6b7bbc82a9b28f1fbaafb2e272e5aa9a15a6287
- SHA512 fea5b3389d1b11009b37021b927259d62efb2936591634bbfca743fafad847301fefb685e5ce9192caac39f62f8b318c2dde3ec20e73b8e2c4d8467dba2fb7f5
- SSDEEP 96:oG2OZEM2cHMzOXfOeOykg2fU19+cty5pVOz2iSlTEz54/qPqa9TluSVl8:9jZEhcHGOXWeh2c+oy5pVhTEz5Ywqa9U
- TLSH
  T150C1441A88FF2035107379ACBFC32014B62667837856D804365DD1AD0FDA69196FA6FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  src\banner.js
- Size 928B
- SHA256 eb8d6c7a2e2a4ef797194037eaa426f448228b14c56e8fa2b57ac7d01571a59c
- MD5 b95e66cf80f4bf340fc1bd930bd725d2
- SHA1 53f17279ba51e30988ed34c9e8554411587cd3cf
- SHA512 b3c769da1c25ef0bb80623edb3ff0aa5d8c848e9b08b19f7e7844159e8f161b1d56bd149e87ad93a9a71aaecb4d4b6a0e62dbdd236bbf23194682ff7ba9e27a2
- TLSH
  T1D111A921D5853F6FB6F6D4486A1ECC49B04A026E24CF8C857EBF06DE5BAD461D2A8098
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  src\colors.js
- Size 1KB
- SHA256 118b82cd1f6bba93d695b2eb521884983fabe29eac76db556fff45a02c397a19
- MD5 b483908b87f786d593c615790d5e2871
- SHA1 da3eef957a15a6727de5a54bb553b721b4d5bcd7
- SHA512 8a6a0f5d5bfd2f92c0197ba73481b8903c301394a60aeae53cb2b970dbf5e3e2dfa133639e19c915e732011775b7bcfb62ca1dbf5826c3aed68f401bc5507dd4
- TLSH
  T182218667229A0E004F20A106A50384247358A373356FFEBC7F4D83866ECE813A0B77AD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  src\config.js
- Size 3KB
- SHA256 52dd83bb85dfa9588d2ed0d5b9ce57507534767bb123fc7799586d28f60fdb60
- MD5 d6bfa2044e384d25e69f5f031997f863
- SHA1 c89b43774ba1d4d9a6a8d2a9a084a1c46b317192
- SHA512 7fbb65511066650209e6b92a0799687ab9c0a4046ed2e39f474a9fef9b94413441391846f50785091a86ad3c8e2e1d855aadfede07ed8f8b904c5dc0855be1de
- TLSH
  T1F75175BB14E9165340B1FA51E31F52293A26B1833D0FF980B54C969C6F8F019D2F752E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  src\llm.js
- Size 5KB
- SHA256 5e6f5a3aa0753f6b33501923c4990fad81ef92f4f7b9efc89ec587b8c268f7b8
- MD5 94efdffaa652f527600c813da4db9c13
- SHA1 104ff799555ab65baedd28d3966ab3c0770c89ea
- SHA512 39f99da0cd67c92dcbf89791c221631572b4474f81a43050b9f1e5c869487713aa5d9f3c66d984a4e52e7cb536101501c010f11b41ef93bb4c75f8298894cad1
- SSDEEP 96:n+DS8QmvEmKjIwQlSooRJ4KPh9Xa4ZjuP6vgSgXA/yTe8IvafXKhcEF:gS8vLwQlSooRJ4KPh9a4VuPCvgXA/yCV
- TLSH
  T127C1950990FB146302937A78AB4BB0656E20A5473956DCC8FA8CC2845F8D879D7F7B9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  src\memory.js
- Size 3KB
- SHA256 4d0c4f9871e5c7a46b64babc3b0468a6b8abec7de9e38a37642c38b3b52b86cd
- MD5 103a0708461b0c2162bdf378cc177eae
- SHA1 36624c24cdb7d1a72bb2fc1708c8f317948ffd28
- SHA512 380e8a170be6a7388813f628a1e78aebd1e4a8410910b819eb1b3dacaf0fddee712aff12428febf4efd1be1eb3aee2994de01009d100c5c36d44d0815f5cd6bd
- TLSH
  T14751259E3AB5635C8372E169161BD00C73B7EC823519E8A9B4AC41871EE9514C37B8EE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  src\notify.js
- Size 1KB
- SHA256 319403569e43984b12e5a2f725dd7e4e959d2dff98779302bb1d7f303107eefe
- MD5 123bfe15e4ecdc0a70fc3328007ec585
- SHA1 49693336b44559350830c346e97b05202af72562
- SHA512 5fca6f086e4573863e62e160dde7c9f3234d67eb78cdaf2117e760054dd3f3c80cf0284e5d4115dfbf2a0f596f0cbd0f456349d5ee1fc15c5d0f0a5dda910982
- TLSH
  T1B821DC3D91E66EAE42B6E2A11D8E203402B9416306CCEE41B1DD07942F78A29C9F0DDC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  src\skills.js
- Size 1KB
- SHA256 c9cd0232b8ebbf0afe5f7a569335e83496d6ba21ffd4f22012d4d475e14184fe
- MD5 b0a1d4bb0249a99bdc66a51859d38dcd
- SHA1 cf65509091b1cd3857de53f3949a5d83e54750a6
- SHA512 da995411345e25301e2705212caa7b53993677352dfef43a8e88008ad10ceab1e2706704027cbb7707f26b5e66b1e671e9987ef1b1a4ee623626110898f5f335
- TLSH
  T1C241740761F6721196F360892A1F6959B234E5133A2AE490E56C87E53F63074C2F7DBC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  src\spinner.js
- Size 1KB
- SHA256 9d31c2b4a2c09820031fdb8bcff6d2550dcffb61bf83b6038d9796c4d4c30b53
- MD5 995cb1bc866ddc4b26528f08cc4ca6ad
- SHA1 6b05d147837bbac24b45501ccc48527470ba0bde
- SHA512 2d2d6af1f6a904f880631b2b1ca6fcbc1e58ac4eca64850a8469a189e17c5e7f0b5ac428757f7e66f3e9e1a896afac54408dde8affc701cce3524448a3f9349f
- TLSH
  T121410FAB33F22D16817770A8C64BD1925A6ED444350FC7D1612D43457EEA63883A9E0C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  src\tools.js
- Size 37KB
- SHA256 8dbc738743b87653cb0be3755b228d7f00b71bb2c858b54006584eee3e62e1b2
- MD5 23aaaf91b03347edf2dc5c880e2bdd35
- SHA1 c13cf973ca93d81c40ef4d0c9076900bbfbf2246
- SHA512 8cea626fbcde99f63785c350b910922ca339fd196d6bba6ccd24ba058747145e481526e53b0ad8e1e2f04d7ed8564f1fb314b68d8962647dd047f550e8836b9c
- SSDEEP 384:frULDmsQnm2ywTiGWF99mk4lqHSuGZ2CyME7E9NQyGnrvvcuVHoKWIGk:fr87osFz4lQxLDZoax
- TLSH
  T11103B8095DF671228B67A0A8191B8105F93C9283795AFC74BACCC2A43F4D16DC1FBB9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

© 2018-2026

Terms | Privacy