e1a1701ccbe569b70eaca95d29416f0bb18eae6e15fa8c96d89aba5e89b46a43 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

new-tools/...int.js

windows10-2004-x64

3

new-tools/...int.js

windows11-ltsc_2024-x64

3

backdoor-p...ell.js

windows10-2004-x64

3

backdoor-p...ell.js

windows11-ltsc_2024-x64

3

new-tools/main.py

ubuntu-18.04-amd64

3

new-tools/main.py

debian-9-armhf

3

new-tools/main.py

debian-9-mips

new-tools/main.py

debian-9-mipsel

new-tools/...10.pyc

windows10-2004-x64

3

new-tools/...10.pyc

windows11-ltsc_2024-x64

3

new-tools/...10.pyc

windows10-2004-x64

3

new-tools/...10.pyc

windows11-ltsc_2024-x64

3

new-tools/...10.pyc

windows10-2004-x64

3

new-tools/...10.pyc

windows11-ltsc_2024-x64

3

new-tools/...10.pyc

windows10-2004-x64

3

new-tools/...10.pyc

windows11-ltsc_2024-x64

3

new-tools/...10.pyc

windows10-2004-x64

3

new-tools/...10.pyc

windows11-ltsc_2024-x64

3

new-tools/...10.pyc

windows10-2004-x64

3

new-tools/...10.pyc

windows11-ltsc_2024-x64

3

new-tools/...10.pyc

windows10-2004-x64

3

new-tools/...10.pyc

windows11-ltsc_2024-x64

3

new-tools/...10.pyc

windows10-2004-x64

3

new-tools/...10.pyc

windows11-ltsc_2024-x64

3

new-tools/...10.pyc

windows10-2004-x64

3

new-tools/...10.pyc

windows11-ltsc_2024-x64

3

new-tools/...10.pyc

windows10-2004-x64

3

new-tools/...10.pyc

windows11-ltsc_2024-x64

3

new-tools/...10.pyc

windows10-2004-x64

3

new-tools/...10.pyc

windows11-ltsc_2024-x64

3

new-tools/...10.pyc

windows10-2004-x64

3

new-tools/...10.pyc

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
new-tools.zip
Size 18.2MB
Sample260803-ppaxpayzhs
SHA256 e1a1701ccbe569b70eaca95d29416f0bb18eae6e15fa8c96d89aba5e89b46a43
MD5 a805c097eb77ce1db9baea60f2f80e8b
SHA1 2ded58c9c20bee8c464c78bf3594b7b762514010
SHA512 c5edd02b0d571ea26b8d22fd569b6a11884b5d3339e1b46fc1c97e34e2e2855694c1df3c060ffb8e68775890a82d392f026353929a6abad05704531bb0b43ad7
SSDEEP 393216:d6yZH2KuwVMvWOo9mb2XEh1ZzuQ/+OgNY7opOXRhJX56hDa/c:d52KuwVMuxY1T/LxhBwhe/c
TLSH
T1BA1733275F6054DDC28EA7BA71C0CD495220EAE58317B197BEAE78740745EB8338E72C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

new-tools/files/int.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

new-tools/files/int.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

backdoor-plugin/shell.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

backdoor-plugin/shell.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

new-tools/main.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral6

Sample

new-tools/main.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

new-tools/main.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

new-tools/main.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

new-tools/modules/__pycache__/acf_extended_rce.cpython-310.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

new-tools/modules/__pycache__/acf_extended_rce.cpython-310.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

new-tools/modules/__pycache__/antimalware_cve_2025_11705.cpython-310.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

new-tools/modules/__pycache__/antimalware_cve_2025_11705.cpython-310.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

new-tools/modules/__pycache__/arbitrary_plugin_install_2024.cpython-310.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

new-tools/modules/__pycache__/arbitrary_plugin_install_2024.cpython-310.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

new-tools/modules/__pycache__/career_section_upload.cpython-310.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

new-tools/modules/__pycache__/career_section_upload.cpython-310.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

new-tools/modules/__pycache__/dsgvo_fonts_cve_2026_3535.cpython-310.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

new-tools/modules/__pycache__/dsgvo_fonts_cve_2026_3535.cpython-310.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

new-tools/modules/__pycache__/everestforms_cve_2026_3300.cpython-310.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

new-tools/modules/__pycache__/everestforms_cve_2026_3300.cpython-310.pyc

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

new-tools/modules/__pycache__/feou_upload.cpython-310.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

new-tools/modules/__pycache__/feou_upload.cpython-310.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

new-tools/modules/__pycache__/gravityforms_cve_2025_7243.cpython-310.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

new-tools/modules/__pycache__/gravityforms_cve_2025_7243.cpython-310.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

new-tools/modules/__pycache__/kingaddons_cve_2025_6327.cpython-310.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

new-tools/modules/__pycache__/kingaddons_cve_2025_6327.cpython-310.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

new-tools/modules/__pycache__/ninjaforms_cve_2026_0740.cpython-310.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

new-tools/modules/__pycache__/ninjaforms_cve_2026_0740.cpython-310.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

new-tools/modules/__pycache__/sneeit_framework_cve_2025_6389.cpython-310.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

new-tools/modules/__pycache__/sneeit_framework_cve_2025_6389.cpython-310.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

new-tools/modules/__pycache__/wp_woo_scraper_cve_2026_46698.cpython-310.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

new-tools/modules/__pycache__/wp_woo_scraper_cve_2026_46698.cpython-310.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  new-tools/files/int.php
- Size 3KB
- SHA256 b926e45abad68bb7f056f5a9395a736ba9f10ab31f3b8bd9f12fdf391fe8fdcd
- MD5 fe5bd22ed7ef521aa067ff24e7e6858a
- SHA1 2a3e34f11170bb3672e9f61aa7a19765a9dd4f8a
- SHA512 8b8371bb3662ddf257090c3ca03ff64c6f2f20895a4765c032f48847326490df9ec4906f8aae4df032514bb6d41f5b0bad87f69c045e845b9028213f566fc73a
- TLSH
  T1CA81C72568E204129137D0E8639FD38C321AC24B610EDB657F1DD2DD6FC96AA82F27DD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  backdoor-plugin/shell.php
- Size 3KB
- SHA256 b926e45abad68bb7f056f5a9395a736ba9f10ab31f3b8bd9f12fdf391fe8fdcd
- MD5 fe5bd22ed7ef521aa067ff24e7e6858a
- SHA1 2a3e34f11170bb3672e9f61aa7a19765a9dd4f8a
- SHA512 8b8371bb3662ddf257090c3ca03ff64c6f2f20895a4765c032f48847326490df9ec4906f8aae4df032514bb6d41f5b0bad87f69c045e845b9028213f566fc73a
- TLSH
  T1CA81C72568E204129137D0E8639FD38C321AC24B610EDB657F1DD2DD6FC96AA82F27DD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  new-tools/main.py
- Size 10KB
- SHA256 d110b13ac351119713a8e6af2c11b150ed6c8afa9557fe1d89795ab8686f504c
- MD5 073410263872b06b431ca0941627e711
- SHA1 33601c2222b3e71c97b479f03e1dbb0e28a1990a
- SHA512 cd1ff9aeb3f5413643589b2d1d929b38d78437f649ffcc93c7b11a82b461ce8718a7b1ad839a85abac10a4852544079106cde41751955164e78a0a58a83a648e
- SSDEEP 192:VOeoy612B7zXVr1tHZtNkXH/uuJnMXA4i/ok3TRJreyvikmDgzzi:VOgJtNkzJnMFQoMzreJXn
- TLSH
  T17B324F71083437653B0EDC8C88B5E896232A79C7BE756420F9DDB2E85FDD8244970AF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  new-tools/modules/__pycache__/acf_extended_rce.cpython-310.pyc
- Size 1KB
- SHA256 ad91ef3566c055975040ff9291db9b3444886f9552912c9e1da7de6a92edcac4
- MD5 cb87c0af6a4d0e1833cbb29c3c5733ee
- SHA1 8f7cdb09e2b65be718d79c919dcaee25ef906b7d
- SHA512 29df62e7eb3608103a058d2bc9ac5fba765d91e5ae434de572fefb5e432cafff8f3c98cdf33bc920541cd03e226452a0f9c7366f79c3ca51dbf2b76d77d12d87
- TLSH
  T1E331C792DD09AEA2F952F7F0F0726B2002AD12A76B1C2DEB5CF04762AE41B501D37B54
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  new-tools/modules/__pycache__/antimalware_cve_2025_11705.cpython-310.pyc
- Size 1KB
- SHA256 ad2659eeff4da39443c4029ec2609b2959429c39996146427e250a9918347328
- MD5 cee15987fed23ad3e6eaae4fbe32db6e
- SHA1 178dda9853b02a9f9c41efc0d72e896b46dd0f0d
- SHA512 71e2fc91f91b62c8fb19ceb6ecc83523e5c005f0256f5b8b1edb96c82c7fc61cec5cab28b5b0a31bff76c41508c8360288ea04e415354550c08699a9fca2e1e2
- TLSH
  T16331959258AC3473FFF4BBB2B85549750A816BE2B32B0D226E6C00BA4E40258276307C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  new-tools/modules/__pycache__/arbitrary_plugin_install_2024.cpython-310.pyc
- Size 1KB
- SHA256 4ae29e7637bd1c463d1535430c6527b24efb8800cd487cb741d9a037de84bb69
- MD5 4e44358076ce7bd864f66d8d6c7d6016
- SHA1 fcf2f1cbc4e46c743cea5da858f462daf6d4c2c9
- SHA512 d4e529533e216754cdffdfba7a9d0e15a23757fd3671d584c0fd82fb6d38a189592c34f9908251f2b0aee1114f0908aeca76b83a1697cbf3aca677de84994fdb
- TLSH
  T19A318310919C267BFEF0B374B4A602F330D603E66B1A94096A7484285E843643EE3E8B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  new-tools/modules/__pycache__/career_section_upload.cpython-310.pyc
- Size 1KB
- SHA256 289767a469b957ab56221cf2be6317cb913802f7e781f2291ce1ce9b1f5fe598
- MD5 d59889d541238ba097024644b7f694bf
- SHA1 596e8f7564cf21317a0e9041b41a4073a57d7363
- SHA512 463433bfd39e05ae32a159e391277b1fb33a7441688b6863cf8f2142f4d4dbc69e4e072e8eb37566d4482666da62bef16d3f83787cb87f71c37ca3b4428c6ce1
- TLSH
  T18331E9D3B1063197DFF3FB759076305000A12292BB620A1ABA2409D9CDC876413A31CD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  new-tools/modules/__pycache__/dsgvo_fonts_cve_2026_3535.cpython-310.pyc
- Size 1KB
- SHA256 259d7d02bf7cbe6fb26d3c813388bec766975d6cfe4c19a98c3793562de010fe
- MD5 2721140c1e78150ef0a7ec5831dc3759
- SHA1 d96baa2cc3416af12b8e0a4e40c73eb392a4c273
- SHA512 469c6f6cf9c1da610e7f1b31956491d9fa35596cfda85b9b4374861e9e3d8ca3d60a4726e134511299f9b63b31ca6e26bc82e592e8556a3a3a64f6566448860a
- TLSH
  T1AE217562C005366BDFE5F370F1725D2102D533A27B2607ABBB0C059A8CC96A815B36DB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  new-tools/modules/__pycache__/everestforms_cve_2026_3300.cpython-310.pyc
- Size 1KB
- SHA256 4cbaecd04ae7c26f811d72e51b370b8c6aea9c372b1ae9477c9302493231b5ee
- MD5 0664578e35ea05d7ea91c5f0ce3cbc9a
- SHA1 0ebcdd282dc2f98f70ddfb4f0c758c1b0560f8c2
- SHA512 38990691e75c988d0dd97177130f084bfbd5403896a4ef3058bac1c81d4b2bbbf897c250fd1c42643476f26681e5e97720a74a1e3102de448895525b62e8c49e
- TLSH
  T108319562DD0E6826EA74F3F070B3A62100BD77A1BB0D4AE72A2497974D147500B33794
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  new-tools/modules/__pycache__/feou_upload.cpython-310.pyc
- Size 1KB
- SHA256 a38688b344bd48c0f81173344a1d24dca2e583a0f186585af4bda3a7127d738f
- MD5 62f589705f2870cb15297162b69b1bed
- SHA1 9a2962f021ebb06ecb76165c1ed70ee1c067b916
- SHA512 192ae48677f835dfbabc4e50a30b90543ad803a12333c085959c179b4b5430e63df97630997a751440d728766bc793edbcb6f6682f34ff3072489f80316fd2cb
- TLSH
  T16E21B6E2D1053257DFF6E6B0E026663100E261927717169BDB2809DECCC876C657329B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  new-tools/modules/__pycache__/gravityforms_cve_2025_7243.cpython-310.pyc
- Size 1KB
- SHA256 9071033f48fcc231a893aec3e2026172462fc62cc5d136fbb9e99d06838cd16a
- MD5 78ef41c0b7b404958a58f3f26b3ddff9
- SHA1 1972e8522a3cd0966b2b12dd51b7bbe6becffaad
- SHA512 f789bdb878339a3af9c531bb36c6ebb295a96f4fbda79500ff30b3766b3ee7ea9a6c4a1d7818e2c908dfd35a01351938b0bab3e6404fce5918dd19aea75c8267
- TLSH
  T11431C863C04AA15BDE6673B0F0E78A315195B1A37B129976BB040CDAECC837416B358E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  new-tools/modules/__pycache__/kingaddons_cve_2025_6327.cpython-310.pyc
- Size 1KB
- SHA256 49cba1af32e36b8c337c473aec963be44dc9ee696ac691a3389f24987303ba8f
- MD5 3927ffb57e838166d661d9c3047292d9
- SHA1 b8eda9caaa367645e3c0fd897e7f5f04d268f1e4
- SHA512 2111abaf6d462aa552fd552cb6711f1bd2fbbae6555492b60ad32b18d8d29584760c45b574057c58f482bcced822ad5d87132a3a63e7b6f86a3c105efbd8b951
- TLSH
  T112318563CA051173EFBAF770E099262202D961927715156BAF9044DBCDC922C45F305E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  new-tools/modules/__pycache__/ninjaforms_cve_2026_0740.cpython-310.pyc
- Size 1KB
- SHA256 4d6c19b094037379f638b25762e5baf178d408492ffcb527f63543a7a663c22d
- MD5 a63dd5a202afdf240f31966b79020577
- SHA1 9cee32319140ea201fcd0ef721de3e14330dadc8
- SHA512 4bb0c4bb8458f0d89c5d828f9a319026e6df9f54f18331b66d869c3925712894e40a6b87652c1bcceb55d4ba319ad34c49f3159a7a79bae9a440003f0f08cc85
- TLSH
  T10631C942A0053076F94EBBB0E0D69B330155632B7F216EE37E0409729E8EB6018F39AC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  new-tools/modules/__pycache__/sneeit_framework_cve_2025_6389.cpython-310.pyc
- Size 2KB
- SHA256 fb31989d7df3bf8f64ecfc7e828a3c1936bea17cb332b6d339e537f20d1fa1f1
- MD5 3c2247aac4d7563a58b14b8d5def97f6
- SHA1 6ba5291d1e11a437b0d14ef9d88282aaefa38132
- SHA512 8748b56e8a76f9e9e95fa213df78bb5e041e5f8fcbbd5c559ffeb9c32eb9a1e0c7ef71085513b3627d7b774d1562c54572d8d2abc180f07314bfa2750967ab84
- TLSH
  T13341DA826D0E9F56F371E2F060A4062000DC51A3B71E85E51A3C43E6ED44A917E3F38E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  new-tools/modules/__pycache__/wp_woo_scraper_cve_2026_46698.cpython-310.pyc
- Size 1KB
- SHA256 af376038b5e5e15ff89ecb41283c34786f7f8e498b81235278a571f691d3aee1
- MD5 236b6c3482bc5fb53e44c0043d9ae4f9
- SHA1 8a6e30faaa24050e792fedfa0a2b0556781d1d2e
- SHA512 0263ed22b6faf559886c4a7ef5df3c4be148ead8e1973a0a94186843f4343a0e4da28f1c2d4b9c388506d76691d84859d8c690feaa7ac5d7f508c478b993df42
- TLSH
  T12E21B6A2D70926ABDFF1BB70A055262200E42293772519EF771806FDDDC835C46A36DF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Python

Unix Shell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

discoveryexecution

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy