93306f86baafe13186cc3e705c201040d68b0192a50be667a1f576ee4711db0d | Triage™

Login
Reports

Overview

overview

5

Static

static

5

apache-tom...ap.jar

windows10-2004-x64

1

apache-tom...ap.jar

windows11-ltsc_2024-x64

1

apache-tom...na.bat

windows10-2004-x64

3

apache-tom...na.bat

windows11-ltsc_2024-x64

3

apache-tom...ina.sh

ubuntu-18.04-amd64

1

apache-tom...ina.sh

debian-9-armhf

1

apache-tom...ina.sh

debian-9-mips

apache-tom...ina.sh

debian-9-mipsel

apache-tom...rs.bat

windows10-2004-x64

3

apache-tom...rs.bat

windows11-ltsc_2024-x64

3

apache-tom...ers.sh

ubuntu-18.04-amd64

3

apache-tom...ers.sh

debian-9-armhf

3

apache-tom...ers.sh

debian-9-mips

apache-tom...ers.sh

debian-9-mipsel

commons-da...re.bat

windows10-2004-x64

3

commons-da...re.bat

windows11-ltsc_2024-x64

3

commons-da...tch.sh

windows10-2004-x64

3

commons-da...tch.sh

windows11-ltsc_2024-x64

3

commons-da...ns.ps1

windows10-2004-x64

3

commons-da...ns.ps1

windows11-ltsc_2024-x64

3

commons-da...onf.sh

ubuntu-18.04-amd64

1

commons-da...onf.sh

debian-9-armhf

1

commons-da...onf.sh

debian-9-mips

commons-da...onf.sh

debian-9-mipsel

commons-da...td.bat

windows10-2004-x64

3

commons-da...td.bat

windows11-ltsc_2024-x64

3

commons-da...ce.bat

windows10-2004-x64

3

commons-da...ce.bat

windows11-ltsc_2024-x64

3

commons-da...td.bat

windows10-2004-x64

3

commons-da...td.bat

windows11-ltsc_2024-x64

3

commons-da...er.bat

windows10-2004-x64

3

commons-da...er.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
apache-tomcat-9.0.120.zip
Size 13.1MB
Sample260802-wtyb4sdh49
SHA256 93306f86baafe13186cc3e705c201040d68b0192a50be667a1f576ee4711db0d
MD5 e0d49963c37fc00a655a45dc1bee84d2
SHA1 a06dbf0eadff4454c315050b9635d657dbd8605d
SHA512 fca7cfbe8255b61fac0e474a9a7ac6fbaf2792c72061fda2666b26eb5ba60718adc4fc0cbd013f14a41f101bcd7f5b70b2d3eedc37554ff0db4bdb6e2e2898f6
SSDEEP 196608:3qZAxvT7VZHLQwQg/KNwDlLnAS7BZVVpWtzJIyj5ZPzRzwIhqe/5rL9eSgmD9srT:6ZSPyeKNinAS7BXVpaNZPewD9AmxsrT
TLSH
T12BD6336DC8087020D6071575A32D0F353AB7D0DFC64AAA381B9DA5363D6AF61BB8F907
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution linux

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

apache-tomcat-9.0.120/bin/bootstrap.jar

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

apache-tomcat-9.0.120/bin/bootstrap.jar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

apache-tomcat-9.0.120/bin/catalina.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

apache-tomcat-9.0.120/bin/catalina.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

apache-tomcat-9.0.120/bin/catalina.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

apache-tomcat-9.0.120/bin/catalina.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

apache-tomcat-9.0.120/bin/catalina.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

apache-tomcat-9.0.120/bin/catalina.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

apache-tomcat-9.0.120/bin/ciphers.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

apache-tomcat-9.0.120/bin/ciphers.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

apache-tomcat-9.0.120/bin/ciphers.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

apache-tomcat-9.0.120/bin/ciphers.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

apache-tomcat-9.0.120/bin/ciphers.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

apache-tomcat-9.0.120/bin/ciphers.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

commons-daemon-1.6.1-native-src/unix/configure.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

commons-daemon-1.6.1-native-src/unix/configure.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

commons-daemon-1.6.1-native-src/unix/man/fetch.sh

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

commons-daemon-1.6.1-native-src/unix/man/fetch.sh

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

commons-daemon-1.6.1-native-src/unix/support/apfunctions.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

commons-daemon-1.6.1-native-src/unix/support/apfunctions.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

commons-daemon-1.6.1-native-src/unix/support/buildconf.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

commons-daemon-1.6.1-native-src/unix/support/buildconf.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

commons-daemon-1.6.1-native-src/unix/support/buildconf.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

commons-daemon-1.6.1-native-src/unix/support/buildconf.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

commons-daemon-1.6.1-native-src/windows/apps/prunsrv/test/scripts/cleanstd.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

commons-daemon-1.6.1-native-src/windows/apps/prunsrv/test/scripts/cleanstd.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

commons-daemon-1.6.1-native-src/windows/apps/prunsrv/test/scripts/deleteservice.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

commons-daemon-1.6.1-native-src/windows/apps/prunsrv/test/scripts/deleteservice.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

commons-daemon-1.6.1-native-src/windows/apps/prunsrv/test/scripts/isemptystd.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

commons-daemon-1.6.1-native-src/windows/apps/prunsrv/test/scripts/isemptystd.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

commons-daemon-1.6.1-native-src/windows/apps/prunsrv/test/scripts/mybanner.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

commons-daemon-1.6.1-native-src/windows/apps/prunsrv/test/scripts/mybanner.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  apache-tomcat-9.0.120/bin/bootstrap.jar
- Size 35KB
- SHA256 ed3dfd655df5990144a295f7389af39934f385b902b9072139d42c0c9b95fbe6
- MD5 8e9cd55de40755bfeac58562e148373c
- SHA1 bc950c3ea03effd5f9bc9a76c23d69225a0ed5ce
- SHA512 eddb3c05088f4fc2b31d2e4f89bb22964cf108f73396e1be11d4b2d1d9d157868869814c581fe32f7f01de2ffaf39690d49a6019b319cdcb0aa050d245c7a1b2
- SSDEEP 768:FNnV0bdEQpmMhwO3fFjBYa++NXY0Q7prirgLv:FP0aQgEZ3fYXaItc4
- TLSH
  T112F2D079E48840D0FE79A272608A0D717333D89DE4472BA472FD3752B938E64CF076A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  apache-tomcat-9.0.120/bin/catalina.bat
- Size 17KB
- SHA256 a178f1ad0f1b1ae3908317e6c521759c26d6e2e75b93e297b9526721e3a36b33
- MD5 8ebe9aeeb96a2cc12b541d4f8ffb82f2
- SHA1 ba3bcbf1feefbf6d86fb24de5f68b38fe26738d6
- SHA512 b81bb0721870e720541dd8a0169abe44fc343a508b81ea38ac67acee2c5392a9ec7544283ea64e48111ec500e3f9eae4e40d6081b7f541402a702dc7cde96951
- SSDEEP 384:qntKTknwiZ7EpQxex1J+6bsjSdP2tsuh7SO6b4:qtKTkwiZ7EpQxG1J+6YjM2tsuh7SO6b4
- TLSH
  T14682837A5E548375ACB1C2619B1D11C5FA2F836A36888A05303F06C9337D2D6E2FF9E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  apache-tomcat-9.0.120/bin/catalina.sh
- Size 25KB
- SHA256 ecd602add5bc86016e163a933e54a468c025bede0b70b5b020c010f01b777fcf
- MD5 a6873cf2ab264ab4ee076b1ed835b461
- SHA1 0f720d9652c857f1e9e3bd92375aa6a406b62251
- SHA512 323b6e0151b13ede517a65ca6147a59f37ae946a8eb15b376ac04d69c289ae61b7377c040c9ae90bc9266f36557051b542dee4084c808e11736c646e1de14680
- SSDEEP 768:eChE84G6wsQ4ZAaxinIPLeKZlnJ5w7vl5eZ6G1GEB7v:eDG6FQ4cnIPLeKZNJC7l5eZzEEhv
- TLSH
  T186C2A536B95003B85479C0556F4E11A9BA0F432F21902C2671BDFA543BB82E6F1FF7A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  apache-tomcat-9.0.120/bin/ciphers.bat
- Size 2KB
- SHA256 3475cdc1f0ba70ddd2322d0f7fbbe347ccd455991475dc30ee3743b008eef3c8
- MD5 b12fe0848ca051e342b018138f70acf7
- SHA1 7a53757770780b571a8d65135fb15a3d65750728
- SHA512 34efb12123447b0bd54db97fb554e32e96ac9cd24d874403614303016c8fe8a22f804e987c3942d9b535ab14e8277794ede57ee29756228a99ad955959fc9ca6
- TLSH
  T12341457A9D4166F52DB0C1DA9F0E408BF32ED73B221E5264215B84C9523D0C693EEAF5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  apache-tomcat-9.0.120/bin/ciphers.sh
- Size 1KB
- SHA256 a090e10d2c249b20f42f0bce2777273d2441e40037ac7ffe7a0107d94d4fd1e0
- MD5 e10ebb03f0ca6349128d8641841d1f42
- SHA1 cfbd43f3a3761e1e40e5670c0de72b3ba04443b5
- SHA512 4e408aba364adb990b9568bae9888068f97afa074d5cc037242dc0e4810e90101fa850941e3644824836cf03422860fa8ae4f1a940374b4fc51df86c4a51e62d
- TLSH
  T1004195557E4A3BB10298C4E65F0E95CFE317D27C39260360748D80C47329665A3EDAD0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  commons-daemon-1.6.1-native-src/unix/configure
- Size 144KB
- SHA256 7ce07cf9bf921bffb8f0de300ea08ebf363c80a4467e70c924e6ed89425492a7
- MD5 f90b4cb7abca88476d3490572cb71207
- SHA1 371931450258cf8313c1c8607ede73627f6f8f52
- SHA512 7704691ca9f54a4537c7b6b39a2dccd4cf89df3a509001d741dd6952b820b615f0e305663a29becd2a74a243677fd0d68b2f5e382eda8f06b8170ae7b504fca2
- SSDEEP 3072:S0hKTRIfrWDmQrmr482PTxJToVMQUz7Uudx+UszNr3+54+D+hmCk7XDSTUEkiEKg:S0hKTRSrWDmQr6482PTxJToVMNzIudxD
- TLSH
  T181E31A23698B8D762721C4B1768F7451DB0A596B24627CA4FADCF33C2F1427960AF3E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  commons-daemon-1.6.1-native-src/unix/man/fetch.sh
- Size 1KB
- SHA256 d89c8d670fdd9d1073d8225638459cc8b4fb0d5db3a0ab73f7b1bae5c3005ecc
- MD5 2785a4a90d419b3017366ec01357e2c5
- SHA1 e9d63acb09ad3cf71eb3dbd0399a5fcc185b4a4e
- SHA512 078b9435ebbd4f53a8f42da7348a92bb21363e90b0b600eda4ee0ad1ad01cfc89fe3103f6b2514aa225ca5f0ff15192eaefce88b3e8fa1126aa96f1f3c90e06d
- TLSH
  T1B42123F9FA4A4EB216C485E17B1FD88FD406C22855CF1358648D40E1237921A51FBBE2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  commons-daemon-1.6.1-native-src/unix/support/apfunctions.m4
- Size 2KB
- SHA256 81bcd5c4389fc584f6382490e99e6cd480a479831e7dc7565a2957a64b2c6752
- MD5 c610151a6815d046a29a8a85d3c6c3da
- SHA1 20b7c81c6d9c8bea709e5a57f9db03600cf22ccb
- SHA512 13d4f080b1e9ecea446a63f894e9c29a0f7991b18587b2105b6d7a26677f040698e3d5c609ae76f0ed8f21a63f187be69ca04ae1d6e30be21f5240daacf06d11
- TLSH
  T1B351832774464F731FB46479BE0EA48EB115D6AA440E048C73EFC3BC2A5B73051F91A5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  commons-daemon-1.6.1-native-src/unix/support/buildconf.sh
- Size 1KB
- SHA256 69989ebdd77299b62bc0f40e65dfcb6863f7bc4971163760a5cb7391046c3126
- MD5 02032855755f51755a1747966dbf0366
- SHA1 ed4877a57b709afd4b4aee6ba4adc4222644de2f
- SHA512 6d38848ac5be7bece93f373a76d3793bedb43a80cbc09e3fa158504bafe54942aed088f4091869b50597f4b4855e03b9edf819a0cfbd42952363014467755f9f
- TLSH
  T14C2111AB3E0617730AD044C21F0FE06FE50AD26D555F536A148EC084633A22E51FF6F5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  commons-daemon-1.6.1-native-src/windows/apps/prunsrv/test/scripts/cleanstd.bat
- Size 1KB
- SHA256 89c6a096cab0d6d8ff8651bd0e38d118f238f2501570e621155cc59c45be2894
- MD5 44789d37967486d475c64e8d6662bf31
- SHA1 f3cc4439c2bc4881f55b8e96d9d5976ffdb5cbef
- SHA512 d79c643cbf56f219bd4701d99699365159428a2a508f84cb71aa1d87444fad251d5c1018ceb51a19c6d2fcf2211adbdeddbc00382f99e045830eb5e4c8ed2dfd
- TLSH
  T137212D67B98A12330EA4858A2F0BC08FD10DD1BC3A59235127AFC2C403A6D2E46EA4F1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  commons-daemon-1.6.1-native-src/windows/apps/prunsrv/test/scripts/deleteservice.bat
- Size 962B
- SHA256 06b21f4165a78884b49e7e9171fbb8f48154b5841ae67c40768946121dc7f5d7
- MD5 071c55c2a673d79f9b02dadc1ac381bb
- SHA1 0565a2a386972e0ecc29d7a0c72588396c9d99a9
- SHA512 b25311894173c1271dfcbdb393c6f40fe8c700ee182fdbc32606d2a748cdf76f0fa10773f09eb9e5eeb1b27d024e136078f3347d348469bf62081ca05df172bc
- TLSH
  T1E111ED7B398916B31FD016D6AF0F80CFE51DD62C260A63542487C1D4123E22A46FA5A1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  commons-daemon-1.6.1-native-src/windows/apps/prunsrv/test/scripts/isemptystd.bat
- Size 1KB
- SHA256 07038ebe961e1e31a443da10ae3ebd4a95ae10fdd25f15960a01e64375064262
- MD5 4d1602df16e8b53bb8f1a871f8a21044
- SHA1 aed591cbc7e1b071090733be28f3a04199384e48
- SHA512 4e5e58983de4096427038168af113f73626a3eedcc3e753541930664f94e126cc266fa0914db9639684293ca1cde626b72185291448f76688849b20ee0fb3dfb
- TLSH
  T115314556BAC9063A0EF597956F07C08FD04DC17C26141320B96FC1D4236DC6A0EEE1F6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  commons-daemon-1.6.1-native-src/windows/apps/prunsrv/test/scripts/mybanner.bat
- Size 985B
- SHA256 2969baf1877edabe5c7a56827ba96bcd8af4b5e75c9ebe23b89f41bcfcc3a024
- MD5 05216f3c6f38bb70764de0e8fef14000
- SHA1 32bd15f91982cd22837e996d924b305d64c2a06c
- SHA512 51764c7199958e6322e5426f2c90ac03fe3785e68e245a0944f68cbf6048cea50f72121ef0c5a4adaaf81f0e554da929058c2d26cc3030de7abf79e21445ae57
- TLSH
  T1DE11CCBB39451E321FD402DA2F0F80CFE10AD65C254A6350144BF0E4233E26A46F99F1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy