0372561b4f6e94f0a7ad87f17fce238c6f9250d5390a7809604b0bee75dc7b16 | Triage™

Login
Reports

Overview

overview

Static

static

scripts/in...li.bat

windows10-2004-x64

8

scripts/in...li.bat

windows11-ltsc_2024-x64

8

scripts/in...li.ps1

windows10-2004-x64

8

scripts/in...li.ps1

windows11-ltsc_2024-x64

8

scripts/in...cli.sh

ubuntu-18.04-amd64

3

scripts/in...cli.sh

debian-9-armhf

3

scripts/in...cli.sh

debian-9-mips

scripts/in...cli.sh

debian-9-mipsel

scripts/install.ps1

windows10-2004-x64

3

scripts/install.ps1

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
libtv-cli-skill.zip
Size 82KB
Sample260801-h2ecbazhme
SHA256 0372561b4f6e94f0a7ad87f17fce238c6f9250d5390a7809604b0bee75dc7b16
MD5 7404279a3a743d35af3c060ee1ab3b4f
SHA1 c7bab36e0cee3e47c9e5b6e645e8f74dbc389066
SHA512 de661ffb3037aeadcee4a15e56b640274295d7e5ffdf7e8dea7e8cccdf191c7cfa45ac61d43439950ceb53aed847e5003dd3e072aa68183e3d4ff20543f8634a
SSDEEP 1536:2VM9WvnzFMMbbjR9rHpuo6F/OC5xQ3OPMZzaTeMdOgeKulVmSgkjPRWx:UM9WvuMVhHi/Xi3OPg+TgKc1TS
TLSH
T1008302FE97885290FA73333B8CAD6050C112A759DDE12E6738ECC5A06D2BAB70F45752
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

scripts/install-libtv-cli.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

scripts/install-libtv-cli.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

scripts/install-libtv-cli.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

scripts/install-libtv-cli.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

scripts/install-libtv-cli.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

scripts/install-libtv-cli.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

scripts/install-libtv-cli.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

scripts/install-libtv-cli.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

scripts/install.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

scripts/install.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Extracted

Language

ps1

Source

URLs

exe.dropper
https://liblibai-web-static.liblib.cloud/cli

Targets

- Target
  scripts/install-libtv-cli.bat
- Size 1015B
- SHA256 eb8af32739fdffeda0fb5f0cb8d3059f69ceb0348109f6725ae2764bb19328df
- MD5 31a95a1b346b26421e472b31f408a22c
- SHA1 832180701fe2752603de8c800075037e6ad527fa
- SHA512 d87428ef42c5e70b8bcd03d51afc0bc0178e26d65da3d28fd8e5fa4f365e2950abe0a5cabbaabc8757912a8792e8711f2d3231f2c9fed16e71b6174ae267cf83
- TLSH
  T12511CC231148E76E382D46E7A1E5C6A1682EC2CDB317B5C52BB0461EB00929ECAD83C2
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral1 behavioral2
- Target
  scripts/install-libtv-cli.ps1
- Size 12KB
- SHA256 2a1d04be7516639205d442c15e41c2c896336ac9eb5e136e09229b23d81aa89d
- MD5 db5d7a2bf768dd36fd1296098a027fdd
- SHA1 3f3bdfeae4929ab92a8a71718b0bf3ef924cfbe3
- SHA512 ad7075ddb4891f23bb641b6fb82457fed36c777a998fc6d50bae889e4c8d0880dad740bf3ada4600e3cf4c7fad933c1a0d46795e7daae52d50961f9e5827e20e
- SSDEEP 192:soG7MX6yCCjiQEgApA3Q8QRRpAO3Q+LWT4Ci4FhiQwAEBQhyqrhk0iQ9OV9h8qA/:5snxAqx08eqAuWXmu5ypjXR9O
- TLSH
  T1FF42980D3992A47670C623BBD4DD4044772E801F510D0B6CF96E9280FF6627E8BA57E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral3 behavioral4
- Target
  scripts/install-libtv-cli.sh
- Size 18KB
- SHA256 77e7b238e303f6eac998f7e129f4c2d81b4253255dcf875f2702283c0d97dd10
- MD5 ad11d1028a0de55350c15faf1da7ada0
- SHA1 1dc1e1a1a0398cbd76ae54a92332774184f7d0d2
- SHA512 b93a11cb3063b8bd31e41969c39c6405cd3734810996efaf99680f7b49f5611cf4a8974c5756090ac6ab24b86f1168bcda8fa1cac229f38ede1f112ea263155d
- SSDEEP 384:tUZzofnm/CORWWcUWjfmafy7HaG7xfh9F5478wEXK6gbYbN:8zQmpWWcPf9fyBlf9XCbg
- TLSH
  T1C482A7107DD8D4B62404E176DAC1A549F34881230E2C5D2BF15BDE5C37B9ABAA0AF74F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  scripts/install.md
- Size 10KB
- SHA256 99ce6249412bb46e6718a146aba5518f8b82c691484d229c610bcdc9efd72b19
- MD5 4f5e7a83186e975e0b2351017244b00f
- SHA1 01a9be1be6b7961b49edadeaaaf5f4d281dfa1bc
- SHA512 ef8e848f979fac93c41e4b5092e0a16b656310bd3e2e9961313e53c5624a047cee1538de23adc8a15c6dbdc545fab36cfaa6e4e5f7d1c7ae2638f5d21bad1607
- SSDEEP 192:LQ8nM+egEsC3Qfq3tJLstYbI3G0DRrT5FiQ1JioTTBb89oABi:LQCM+uAfq9JYtYbSJrTHx1J/fBb89oei
- TLSH
  T15922C5566D0AB6E13D39C143C3EAA74AF71C801F56751D6CFB9E49AC3388A37021E61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

© 2018-2026

Terms | Privacy