f69916b9fd3477a7e770cd32ff49cbbfba6129e8c7f81dfebdb6b9e33548fb2d | Triage™

Login
Reports

Overview

overview

6

Static

static

4

revive-ads...ts.ps1

windows10-2004-x64

3

revive-ads...ts.ps1

windows11-ltsc_2024-x64

3

revive-ads...on.ps1

windows10-2004-x64

3

revive-ads...on.ps1

windows11-ltsc_2024-x64

3

revive-ads...on.ps1

windows10-2004-x64

3

revive-ads...on.ps1

windows11-ltsc_2024-x64

3

revive-ads...27.ps1

windows10-2004-x64

3

revive-ads...27.ps1

windows11-ltsc_2024-x64

3

revive-ads...28.ps1

windows10-2004-x64

3

revive-ads...28.ps1

windows11-ltsc_2024-x64

3

revive-ads...24.ps1

windows10-2004-x64

3

revive-ads...24.ps1

windows11-ltsc_2024-x64

3

revive-ads...27.ps1

windows10-2004-x64

3

revive-ads...27.ps1

windows11-ltsc_2024-x64

3

revive-ads...40.ps1

windows10-2004-x64

3

revive-ads...40.ps1

windows11-ltsc_2024-x64

3

revive-ads...46.ps1

windows10-2004-x64

3

revive-ads...46.ps1

windows11-ltsc_2024-x64

3

revive-ads...03.ps1

windows10-2004-x64

3

revive-ads...03.ps1

windows11-ltsc_2024-x64

3

revive-ads...rc1.js

windows10-2004-x64

3

revive-ads...rc1.js

windows11-ltsc_2024-x64

3

www/admin/...ion.js

windows10-2004-x64

3

www/admin/...ion.js

windows11-ltsc_2024-x64

3

plugins/ba...ass.js

windows10-2004-x64

3

plugins/ba...ass.js

windows11-ltsc_2024-x64

3

plugins/ba...ery.js

windows10-2004-x64

3

plugins/ba...ery.js

windows11-ltsc_2024-x64

3

plugins/de...ss.ps1

windows10-2004-x64

3

plugins/de...ss.ps1

windows11-ltsc_2024-x64

3

plugins/et...gs.ps1

windows10-2004-x64

6

plugins/et...gs.ps1

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
revive-adserver-5.5.2.zip
Size 12.2MB
Sample260802-phlevasfrb
SHA256 f69916b9fd3477a7e770cd32ff49cbbfba6129e8c7f81dfebdb6b9e33548fb2d
MD5 cc4082825d11cd0c6f84a37d791d4581
SHA1 6eac6a03f3b5088b84c45ff2019b0df2a0a65bcd
SHA512 8fa5a8cb8466c06a0bcea30b01916ec239dacc3903d9b5387e20d23d12137311fed753061ea6a2273db73345752215cd596adf2689cabce5cac34957a031fe4e
SSDEEP 196608:Iw0nAlcvhDwPMRo+5SgtZBRnKGgCHpu+OqH5deXqN/9neSSnUmm:qBtZBxKGgepJO854+1nxSnG
TLSH
T14CD60221C1442327EEFA3D7BD98860C2961F9804B225D021E6DEB5FF7DB67062EEB415
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution link pdf

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

revive-adserver-5.5.2/constants.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

revive-adserver-5.5.2/constants.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

revive-adserver-5.5.2/etc/changes/EncodingMigration.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

revive-adserver-5.5.2/etc/changes/EncodingMigration.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

revive-adserver-5.5.2/etc/changes/UserMigration.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

revive-adserver-5.5.2/etc/changes/UserMigration.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_127.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_127.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_128.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_128.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_324.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_324.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_327.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_327.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_540.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_540.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_546.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_546.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_603.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

revive-adserver-5.5.2/etc/changes/migration_tables_core_603.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

revive-adserver-5.5.2/etc/changes/postscript_openads_upgrade_5.0.0-beta-rc1.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

revive-adserver-5.5.2/etc/changes/postscript_openads_upgrade_5.0.0-beta-rc1.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

www/admin/plugins/apVideoUI/zone-invocation.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

www/admin/plugins/apVideoUI/zone-invocation.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

plugins/bannerTypeHtml/oxHtml/html5.class.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

plugins/bannerTypeHtml/oxHtml/html5.class.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

plugins/bannerTypeHtml/oxHtml/html5.delivery.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

plugins/bannerTypeHtml/oxHtml/html5.delivery.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

plugins/deliveryCacheStore/oxMemcached/oxMemcached.class.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

plugins/deliveryCacheStore/oxMemcached/oxMemcached.class.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

plugins/etc/oxCacheFile/processSettings.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

plugins/etc/oxCacheFile/processSettings.ps1

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  revive-adserver-5.5.2/constants.php
- Size 10KB
- SHA256 25359bc04ee1611dfcb41babdd6e27028fa007de79056c383f1b6ca0d0614a81
- MD5 b82d640cbd0b185d1acd25e06e8ab019
- SHA1 cf259fa5f81ac8c6a700724bce0a95a4da45f8d8
- SHA512 d1152be1eb4f2f876049395883362d0d51dd9722f22299c19ffa334ed2d0422c9f77b92eef03b583214e30f3a34ea45db20e659f5667d0009b93e56250a16fcd
- SSDEEP 192:jppKx1TtBlGVL5XZPVza4B1trPuCkVn88d9l2EwItpXdm5IHB0FiyQ1GipibLevq:iJC95XZPha43kLl2VItx/1G6JhQ
- TLSH
  T1D1321D102F4712B11923C2470B6F2827FA21DABB7158DAC6355F5AC81F40628FEEDED9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  revive-adserver-5.5.2/etc/changes/EncodingMigration.php
- Size 15KB
- SHA256 fbbfeb098ff20c73f7beaaac1b236159e1ce37eeee07120f6910aa8c4df8c592
- MD5 451c59ceaf0fc98447a94e5ef16063c2
- SHA1 fb63d5b0649f9ef269271e575e53a5b8766e885f
- SHA512 7bcb24cdfb19a01d7b8544f7ab1edb61753ac2a2763fa859f7065296ae34b2f07c7ae1c9265b106d98277906a687d7f3a9c8bf883505aee8d33a2a713c6fc84b
- SSDEEP 192:jzPjFjDoD7piA0RA47RCRl+UWgED4P6ORXk+Wk4O4zcBSHGAOayiAJXWvIfkCSCt:vdO3zie4zcBSHvbIl
- TLSH
  T17B621D125D9B6D302393E05ACBAEC169D32531278882E9DA7F8D52921F8837CD77C978
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  revive-adserver-5.5.2/etc/changes/UserMigration.php
- Size 14KB
- SHA256 dfb5ccc2aab7a13cc082464f755dfad7285212c629003ae8393fc38643e1768f
- MD5 42737c661c207bbe3c7c6d48df272e87
- SHA1 065ff6f474c672dd904f82393a49f600c19966c7
- SHA512 69ec1d2997c063c0105240e4775b7b1cbeb03d1c2e9fb8c3c50924b684769c7d14b5b267801367a076fe072b6976745c6ae511250a46acf60370cfbfe506875a
- SSDEEP 192:j8TCGsoRoDIPn+uNAKycopBQmCj93AmFCJzqVWGS9ajmoAZOFZqWyiUySCy/FmS4:K/sE++LNF5
- TLSH
  T1BD6210A22D4E4DB12247D4E537AB8118D691A5231D82AD0FBECD01C73F923ACDE7C4B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  revive-adserver-5.5.2/etc/changes/migration_tables_core_127.php
- Size 14KB
- SHA256 28cf81f3784c9cff2160520b2b1be9c30941a7b1eabcb6224ba8c0bfd6598989
- MD5 20e847e95163d9d3bc77a40ece56cae0
- SHA1 931d1157ad55cefa140ff4dd7d5c5838d693fba4
- SHA512 763f5dc5fbf92950f14a2cdf3997fee038e7925319224694ca682ddf4f26765f5bdeb954fe9dae51e2fc50e94349272a26c6f53551278128f4f482b3c13f2025
- SSDEEP 192:jzH9Y/LC6CUphctWC0VCRtCNCqDHQ+KGjTVKlCMA1IzCTIkGn:fHHChctLId5IGTIdn
- TLSH
  T1DF52CD587EFAEDF4E363D0D85767C200D210B193181E84D2FAFD8A951F23328D6A899D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  revive-adserver-5.5.2/etc/changes/migration_tables_core_128.php
- Size 11KB
- SHA256 77b3c03765380331c9ecf1db3fc7b114e3d2cdf027b05b56c0e467161206cb01
- MD5 274f5760fce0e925b78d82215b97bd20
- SHA1 1ff52afe7d6203fb9d5808e45371be4fdbdbb452
- SHA512 ee97630e72d853f5a2592c43037ca9ce6c90f034b22867193d1a2298a888176c8ef0264cbf27a9b3258b0752b519afd308dfba0212d2056d1f1ceb40b6120f0c
- SSDEEP 192:jrHrYy16QaRUx2hRfmuX1KCyjaN1n5neKCyu8ysHpA4NNGc10hytsZWdgvz/ZoBC:fHuLHysJAs0hyCvdSqV
- TLSH
  T1053244A57EDB8EB0A573D099475B8101D136B023681A8802BF9C02891F6933CDFBDA7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  revive-adserver-5.5.2/etc/changes/migration_tables_core_324.php
- Size 5KB
- SHA256 cca5782c21e529b8a3a7050f41a1acedc995988d3db11b239938286249f6b682
- MD5 496392d8903e098502fb357727ae20d4
- SHA1 2ceaf7ab2cf14b2fd3a4c9384f4c5cba632e2874
- SHA512 807d33fcfbd12bf5ae66fecaed5dc7829d0370f1a5d498b7912fc458577d9c721b5f66772239de6319188c036870b4ee7e286807abb5334e52f3b29d055ce26d
- SSDEEP 96:jXHHkawm8SzeyKUCAmzjNGc43jE0hnyc1Us/qHeB0lR:jXHN6yHCAWjNGc10hymUrCSR
- TLSH
  T107C10064BFDA8EB0E573D099971F8242D291B227501F8442FBBC03911F6933C99BD66D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  revive-adserver-5.5.2/etc/changes/migration_tables_core_327.php
- Size 13KB
- SHA256 e08473b0f9a56b57358540f90c03342f4bba578a81f2088174e0f6edadcb5033
- MD5 346a1d5d70b42dcce61bb225a3799c34
- SHA1 91cd1fe6217388c336d2e4b6710e5ae0a93d7430
- SHA512 59b92c39ccbea615dd8e03c981b19e3157765abdbf972a1cf8eb8de4b4fb79f153ad754a571f6126adb0795a1bf386240a7e18985489b952f0607172f90728db
- SSDEEP 192:jwH7X4L46CUphctW466ChzEvEqDHQ+KGjTVKlCyA1IzCTI7Gn:MHnChct86dfIGTIKn
- TLSH
  T10252AC487EFAEDB4E753D0D45767C200D260B193181EC4D2FAAD8E951F23328D6AC99D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  revive-adserver-5.5.2/etc/changes/migration_tables_core_540.php
- Size 11KB
- SHA256 5cc417732c92d65b3a5107d80a42ab2f8fb28b6de3b7bb236b41c69ae2044c51
- MD5 9f89f4b8336eedcde607f92dcaf10344
- SHA1 3cbfdfde43c649767328ffe6e4f801f6e3fa6391
- SHA512 6d20c0e4ba1a86c66b1508ba8aeec248449cb411e7cd9416380fb76c5b2ccae26fe42d21d4eb2436ce8784a383068900b3cea06e4fe47579b4bec359af51656d
- SSDEEP 192:joHtuFx1Y52NZzy/PkOBAxc4nqs1gFlD9:8HtuFx1Y52NZzy/0o
- TLSH
  T1E232BF586EEF9EF0F2D3E0D89717829492927B53404B85C6F7BC0BA11F32378916C5A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  revive-adserver-5.5.2/etc/changes/migration_tables_core_546.php
- Size 44KB
- SHA256 d1c2dfe0b58934a74fdcd91ee050abac3b6a696e757f2e72a56b33073462de31
- MD5 8c941bda223e650d622a14395c897c24
- SHA1 35fa17c96bb97f83de2840778d8c787d36c7f682
- SHA512 0ed3bc6f9ae81900fe55b82fc08f0ecde430a3e35b3fdd4b3570950e4b5be2bf74dc1796393d62f1d0a6e800d63f77743ee093be00b14996d26b6b9694324c30
- SSDEEP 384:hq7/XwO56gSFonF9a2E6ZGMY3zsR++iCrz:w6gSF50cgx
- TLSH
  T14B23203739D75DA153D14433E68E5348D129802B0CEA394AB6EC71260F8DB3CDAB96B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  revive-adserver-5.5.2/etc/changes/migration_tables_core_603.php
- Size 7KB
- SHA256 884780806a6ef38e861dd2d8eb8f192fa6875aa20642cc08fc2c6e2d82086a32
- MD5 91a7ce5d7f34157c45d09fb245dfbfab
- SHA1 b9752d3cdc0bc4f657abbef2d4a77d0846868c12
- SHA512 e2ee4004b16463233d08e9ee4ded8ab7b3b23476695178b5e5aea56b0a0f127b15143b9a58e13cf05ebf866388215f1cd4f29e20f4b28e8f1b2f3599c991c7ba
- SSDEEP 96:jX3HDIhxDyFwJsy5yFSVl5XRcCymS0SCLyTLrDMyqlDY:jHHD+xObyUGCCyMSCLyvrDMyqVY
- TLSH
  T17AF172E97DD61C614E13D4A7CB4FE200D731F28B610EA831F9BD53044F6A228A79F969
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  revive-adserver-5.5.2/etc/changes/postscript_openads_upgrade_5.0.0-beta-rc1.php
- Size 6KB
- SHA256 b580f4ac31e4d9c5247488e97af52e47f1401cdb381daa63a6b5a7edd10847fb
- MD5 b08e2b2128452b6c3989d2e14fd0bd9b
- SHA1 0322a146e49e3d266d89b1974163d7d887384da6
- SHA512 1b3362ea5efcb4ea0c8bc57215b2e8c2b53542f3ade5c657179c21c6d24201c89539a358c62482fd727621c9b8b6964ad999d9092635c85015bab23ea3424b71
- SSDEEP 192:jf5SSIQJTfwgiUIJjaggNLg4j6Zh1v8ybxL:OKfw7RiLvjIXj
- TLSH
  T111D145853DEE4CB0622BF0D9879B8155E526E43B08064A26FDDC12C22FC433CE9AD97C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  www/admin/plugins/apVideoUI/zone-invocation.php
- Size 3KB
- SHA256 cc0dfaf5ecfadd9f462a5aee88c4cf36f026d48b9c9aa7aa6d27cd655564921f
- MD5 3af361bd183b0227ffda5d4c3cde294f
- SHA1 c3aa848b31e38862a8125a9ebd8f37cf272ba220
- SHA512 fc8905ce7974d61219f6f4a55c9131ac778cc94288a9c1e1b0aaacc72ebfa0e7b9d59e24d522ed3b126e0f68cea8edfba7880907622e85d666bdc60292ce6465
- TLSH
  T196619326ACAC83738962D0862738C50CE708E6847E108924FCFD17A487E5FC0556CBDE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  plugins/bannerTypeHtml/oxHtml/html5.class.php
- Size 4KB
- SHA256 0f4dde1ce1754307cc54c6907ce1c92a1eb968609d322c41644b24416797ef42
- MD5 c1efb266cf33ddcd345d462e55c6ce17
- SHA1 c16ee89425b9f9a66c36cc69c935fa9132261ab8
- SHA512 fbf4ee98750fe8a3048db82b223559c0f5996ba6c31f1ca52c5be9443a736149ef15fe8e34e6cec2e8579dc97d6c534562db821aa4d63c97770d264d8eed88b8
- SSDEEP 96:jgFckgUzGfDZCBcAiJ9f1Ld9Nsq5SCOMw:jUckgUzGacAIf5d9NsuSCa
- TLSH
  T16EA193262CCA38317193F4AF57CE2D48E155A0A310558441FAAC07F99FD876CAF7E3A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  plugins/bannerTypeHtml/oxHtml/html5.delivery.php
- Size 1KB
- SHA256 a796a9f6c1e304af4e80e07ea9e412babacefb19166aec466151b7e41c4e37ba
- MD5 fe51236b29c898effab306fdd52829c5
- SHA1 4d6ce50e8c67e92141643e4896b96a6c4a643b9c
- SHA512 92fac1d68a4dc43a39b98cdf8f4afecad6fadba10afd393d058f4dd6d2e89bb2032288c3618a79669b500071ea74586328f2dd56120fef84ef0180011afdd62d
- TLSH
  T157312239BDAA5B3AC321C44A6AE1C708FB95741BD356C24176AC2540BB24F2068DD78D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  plugins/deliveryCacheStore/oxMemcached/oxMemcached.class.php
- Size 3KB
- SHA256 fe48e1463bd02bd6512664b7c0d91ea7136cebe0741846c595acf2a6f9186370
- MD5 a56c4c4bd07485eb0b2ac3e20c6c8f81
- SHA1 4dda6b1c3fbe7b835195e834973d3cff871535e9
- SHA512 253687ddfe5abc2e637a2bc514ae9526f04568f67a9e89e8e493c4514def5823e0d68fcb84a818b0833580f9d3ed04c37a69fb249ad432c3d28e1819d6679fd3
- TLSH
  T14D81DC9C9EEA047606A3E0A9870E20B5F73DD58723148800FE9D03A56F50F6CCEFD6A5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  plugins/etc/oxCacheFile/processSettings.php
- Size 1KB
- SHA256 ba8bdbb7a611594dc67546297d185c9ee650f54d9363f9a6340ffa8bf0ebcac6
- MD5 c880f25663fd78e0c9891a8be5a99a9c
- SHA1 75d37738ff15f1947898f18bf2afafe6be23c8e6
- SHA512 1fb1476241779dfa0cefe00d01e9397640787454033f5a09957f04558ed4460718dbe2f8b1c1acce850f0c64792c85391814b969d23f07815880656449755592
- TLSH
  T1D83112E6EF82043789A3C076670B6A15CB06406BA076DC627A0E13D41F517549F5EAD8
- MD5 SHA1 SHA512 TLSH
Score

6^/10

execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy