0a200a651236169e796303c48dc113b0aedf8f1e08cdbae6f8edb0842a5d7b19 | Triage™

Login
Reports

Overview

overview

6

Static

static

4

intranet/artisan

ubuntu-18.04-amd64

1

intranet/artisan

debian-9-armhf

1

intranet/artisan

debian-9-mips

intranet/artisan

debian-9-mipsel

intranet/r...app.js

windows10-2004-x64

3

intranet/r...app.js

windows11-ltsc_2024-x64

3

intranet/r...e.html

windows10-2004-x64

6

intranet/r...e.html

windows11-ltsc_2024-x64

6

intranet/r...ole.js

windows10-2004-x64

3

intranet/r...ole.js

windows11-ltsc_2024-x64

3

intranet/r...web.js

windows10-2004-x64

3

intranet/r...web.js

windows11-ltsc_2024-x64

3

intranet/s...0.html

windows10-2004-x64

6

intranet/s...0.html

windows11-ltsc_2024-x64

6

intranet/v...carbon

ubuntu-18.04-amd64

1

intranet/v...carbon

debian-9-armhf

1

intranet/v...carbon

debian-9-mips

intranet/v...carbon

debian-9-mipsel

intranet/v...on.bat

windows10-2004-x64

3

intranet/v...on.bat

windows11-ltsc_2024-x64

3

intranet/v...ations

ubuntu-18.04-amd64

1

intranet/v...ations

debian-9-armhf

1

intranet/v...ations

debian-9-mips

intranet/v...ations

debian-9-mipsel

intranet/v...ns.bat

windows10-2004-x64

3

intranet/v...ns.bat

windows11-ltsc_2024-x64

3

intranet/v...-parse

ubuntu-18.04-amd64

1

intranet/v...-parse

debian-9-armhf

1

intranet/v...-parse

debian-9-mips

intranet/v...-parse

debian-9-mipsel

intranet/v...se.bat

windows10-2004-x64

3

intranet/v...se.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
intranet.zip
Size 36.0MB
Sample260802-pkr1easglc
SHA256 0a200a651236169e796303c48dc113b0aedf8f1e08cdbae6f8edb0842a5d7b19
MD5 9502c6ab82a719f594ab515d250c2850
SHA1 b1dd2c4bff793ab874defb0167650dd668d7ab5d
SHA512 1224c6a608a3b1a546484aff419055365830f3dbfa110b4e010369def39149c716847341cd655c0d3fbee61f39847e4b22da28384e2c389284e52112ac87decd
SSDEEP 786432:QTV9LtOwCIP64G5OurzYqZ8RC/bEdoiQAmMO9PBEh9Pf502ZN0hu6QN:QTV9Lmr5D8Q8RkIe6fZ02HFN
TLSH
T1D9871236CA1AFBC6CD8B7BB1C7CAC3044196C244245054E63B946306F9AF5A42FB97DB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution javascript linux svg

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

intranet/artisan

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

intranet/artisan

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

intranet/artisan

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

intranet/artisan

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

intranet/resources/js/app.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

intranet/resources/js/app.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

intranet/resources/views/welcome.blade.html

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral8

Sample

intranet/resources/views/welcome.blade.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

Behavioral task

behavioral9

Sample

intranet/routes/console.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

intranet/routes/console.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

intranet/routes/web.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

intranet/routes/web.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

intranet/storage/framework/views/79f7cccd50d740c3f09490ee89aca5f0.html

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral14

Sample

intranet/storage/framework/views/79f7cccd50d740c3f09490ee89aca5f0.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

Behavioral task

behavioral15

Sample

intranet/vendor/bin/carbon

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

intranet/vendor/bin/carbon

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

intranet/vendor/bin/carbon

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

intranet/vendor/bin/carbon

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

intranet/vendor/bin/carbon.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

intranet/vendor/bin/carbon.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

intranet/vendor/bin/patch-type-declarations

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

intranet/vendor/bin/patch-type-declarations

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

intranet/vendor/bin/patch-type-declarations

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

intranet/vendor/bin/patch-type-declarations

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

intranet/vendor/bin/patch-type-declarations.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

intranet/vendor/bin/patch-type-declarations.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

intranet/vendor/bin/php-parse

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

intranet/vendor/bin/php-parse

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

intranet/vendor/bin/php-parse

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

intranet/vendor/bin/php-parse

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

intranet/vendor/bin/php-parse.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

intranet/vendor/bin/php-parse.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  intranet/artisan
- Size 425B
- SHA256 f91a517c0c5d3a904c3f390933964a5e08ec1fc68146882730daac4aca4ffcec
- MD5 e66bb13691f6184c762c196427d8e685
- SHA1 b8f0fc8820d5de0b4de5710b0184fa998e156089
- SHA512 fa3f43c9125e19995c2e8b17663396fdc20ca4007e1bda34cff35738d65b3b88ae1e31de1118ef116f00a8b2f2f25b940192f98a11f67d63f756b1659becc1de
- TLSH
  T137E0A3FB078C02A1DF9634DE164CD4031C5DC9177CC010A5F415395887C58DA77573E5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  intranet/resources/js/app.js
- Size 3B
- SHA256 101ead936a2281d53dcc064b7e2a2ab0d53b92ef3ef7b34b668673007895c860
- MD5 b519d08ef66fd54910edbedba6181ec2
- SHA1 8d06436c33a3086259f2f1ccaf03425707eeff17
- SHA512 f7195d19d40b60aa9f992c5830f88dcbed7348521eeeb426a2544a18f9e13efbe4acfbf03d9a3961ae8174572e5aba28d9013ab6b4849a18ef35508b1e011c14
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral5 behavioral6
- Target
  intranet/resources/views/welcome.blade.php
- Size 70KB
- SHA256 bdb9bb7d2eecceb3581e429545b6ec96014ccab6d0ae83d4c52930e9a15f7d65
- MD5 1a03818ea91deb4f3989c6c994e5867c
- SHA1 5d8b59ee3117f00be557a3901459a32ed4262ee5
- SHA512 edeb9324d258d4f0e71bdac497ae158bfd29ad0afb6977bdeddf0ad10954e7899e66e08d5a20f63bcba525bb07ad5abeb9b8abeab4b4f4473c2b27495fca4842
- SSDEEP 768:I7iFWFA/3o7wrnkAQBfKJ20Mka0rbitGA2SotgvxD2kUMkUtkUptXNsaoWjS:eK+d7whQBfKJnMkaUbitGA23t6xDJpuB
- TLSH
  T12763B5F8F22188AE5E03C7EB6B94F46C691B64D38C114AC9FB8CD1113BD5AF95CA2705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral7 behavioral8
- Target
  intranet/routes/console.php
- Size 210B
- SHA256 9adccc33e7dd400683e434774077c7fdb2f299c5712cedf16a43fdf56f2850fa
- MD5 3c6ce2e6d16444282b24a9aa63885563
- SHA1 302bdfc3b87dd1b70c1dc59645e1235395c9c0e3
- SHA512 02253aca936c9f2177ee2c737933cd44d9c4d8d75ddb000d22987d49432264cc5c94d40a86be53168baa9344cd728a81f727a3f5027c589360ac7c0ed8bb41df
- TLSH
  T1A6D0C94C23A94B15A41FB1F25319D02930108B213A274F2EA8E45267CA842A6553A1BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  intranet/routes/web.php
- Size 108B
- SHA256 248c7eeeb43bb61ee4fb6603e52b44843c64f72a841d671bcd41871aab23f970
- MD5 84625c52e743b1a4178bb27b7afb3615
- SHA1 2f63d05f77bbdde1a6ef48ce7c5d4dc1f126afa3
- SHA512 c77d525a5098190ac3153db8892cade684064c587e80770958a9726f11bd1a3984a42e2de996edccf512d67712e3ff4498c6ee598dcc70f96139bf133a0210c9
- TLSH
  T15FB0929835D0A300D9362398290D8009788A8D06241A2D005998D2216AC84B4A6A6AE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  intranet/storage/framework/views/79f7cccd50d740c3f09490ee89aca5f0.php
- Size 70KB
- SHA256 dac0d05dc7901a3948ea0dd04bda61eceb0e46ee514433cd2507ffcfec6f566c
- MD5 5f92216642032bdbb22abb3e4d6d9fb5
- SHA1 fc4e544857dfefdca93d2e1ad23a3685a9959a48
- SHA512 af31a75a494ec154d051c3e77a1a8e0a98db9652c9f4465f4211850ccbb62ac22c1d38f0abaa6cf7c93990792c0f7c7ec03d84e51725f2a1fb9b8b309f477d2d
- SSDEEP 768:a7iFWFA/3o7wrnkAQBfKJ20Mka0rbisYS2SotgvdD2kUMkUtkUptXNsaoWj2:QK+d7whQBfKJnMkaUbisYS23t6dDJpuv
- TLSH
  T18863B5F8F22188AE5E0387FB6B94F46C691B64D38C114A8DFB8CD1113BD5AF95CA2705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral13 behavioral14
- Target
  intranet/vendor/bin/carbon
- Size 3KB
- SHA256 bbf4e346ce47d51d9cdb49294a68c481be5a7d6dbea2b08c39dd39c882dbef4a
- MD5 4fe5a8d8f29ea4ef9893463f68193f15
- SHA1 e1755157a234eb6dc2974adb0c950c3d2987158f
- SHA512 3659551abc0e92e751ce917c3301fd4a48d43ca08aa552c40b19ff2b80157f2bc29cb330ad8a57632607e6d19e5841341a19e595b2c1c936d2ee064d1f17b421
- TLSH
  T1CF61CF5864BA2C605123A3B9578FD54511775163114D4C40FE9D83A0AFA232DFA36FAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  intranet/vendor/bin/carbon.bat
- Size 133B
- SHA256 b37993b07d6d69d00748228c6d40a48f1dcc10df50e11c33dbd37227dbdcc8d7
- MD5 9ebe30a6053c9d657187d48e41387a2d
- SHA1 9772786b33df53153e3d9a386fa1944dab23e56a
- SHA512 e8d0e493dc5728036b4a8234c80633a613347e8e152ff37318d1bb0f7f35fc76516cb2be55f590f42ca0101dde50749f0aa11e682f1759832e9ac54af18fd774
- TLSH
  T115C02B9879D772407924442CDC4B414A73D1E8F91F6A82877022C1101D18ADC2F8F01D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  intranet/vendor/bin/patch-type-declarations
- Size 3KB
- SHA256 fe851f81e57bb0b7e96508cbcc2c0452d49cfe6edb5a0587d4df1a0923af1149
- MD5 22214c721fd3ae3943bcf7d5389dc1f4
- SHA1 f5b136e8a45b18d3bf510e260644da550de29cb7
- SHA512 815571738e990ff65a6d72801c1a239e59df3e418acac259f371f30336a58fa5f943fe641d73936c08a558995b07b2cd9ff5313bd2a89eb7daf43ef482558a77
- TLSH
  T1E761D258A4EA3CA15123A3BA578FD54510765123210D4841FE9D43B0AF9233DEE76FED
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  intranet/vendor/bin/patch-type-declarations.bat
- Size 150B
- SHA256 65bebe04937f7249f074652f9098157e6cff1ba5a8b37418b1a29dac42cb0d9a
- MD5 0499f98aac1bae3826f3d46978e4a3bd
- SHA1 95acef87b815b4b0b5edbda23da1b3ba708d03aa
- SHA512 f1c06b6d0a0cd623bd1c13d914f39a7d4cb02bf20b5d4f184c4257d0e1635e6ee7340c65837870ccbe7c12823c60e67b09663eed821d45bc35e849ee68653380
- TLSH
  T113C08CE879D77250B925042AE84B854AB2A2E9B91E5A81476022C1282A0D9EE6B4F85C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  intranet/vendor/bin/php-parse
- Size 3KB
- SHA256 ce009acd363d1d66ff93614a2252d4f781b4ca2fc147fcf35946f2c011b62a57
- MD5 42b59dfa7f0a02ec0ea27153f6a9708d
- SHA1 81e3df269dcc98daed81a5314e9d52fa77063132
- SHA512 685f5c47db62a40cf55854326af6bfed7121614da3bc59abb329bb32030c54db83e6cfd97003ccf456e5ea4b6ab80d58019f77e4bc9e1443c3ff971504010aa4
- TLSH
  T1D661BE5864AA3CA15123A3F95B4FD54610765123110E4841FE9D83E0BF9232DEE36FAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28 behavioral29 behavioral30
- Target
  intranet/vendor/bin/php-parse.bat
- Size 136B
- SHA256 02ae1d682c88dc8aa657c039ca9896c7e268fa76f1eb5eae9c13011adb15f01a
- MD5 024eca83274cbd8dd0ba9782472da9ab
- SHA1 ff49383de87999f10c28c9bd1016ff817fbd1aee
- SHA512 a33af866f66691311b46473b582b537b4ba7655a4f79b2a94d4c061b1a4dfe4d490250329e36498e82f29fc151ff2b9938904092cb7c1071f41891d5fe44bbce
- TLSH
  T13CC02BA879D771917935082CDC4BC14B72E1E8B51F5B80577022C1502D08DDC3F8F01C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy