dab46e7d1d6b1a98638c47dd4ee01d18a112ca8890b5f294140cd057ee9d56e4 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

p1.rar

windows10-2004-x64

1

p1.rar

windows11-ltsc_2024-x64

1

p1/README.md

windows10-2004-x64

3

p1/README.md

windows11-ltsc_2024-x64

3

p1/app.js

windows10-2004-x64

3

p1/app.js

windows11-ltsc_2024-x64

3

p1/asterisk/call.js

windows10-2004-x64

3

p1/asterisk/call.js

windows11-ltsc_2024-x64

3

p1/asteris...nce.js

windows10-2004-x64

3

p1/asteris...nce.js

windows11-ltsc_2024-x64

3

p1/config/index.js

windows10-2004-x64

3

p1/config/index.js

windows11-ltsc_2024-x64

3

p1/models/allowed.js

windows10-2004-x64

3

p1/models/allowed.js

windows11-ltsc_2024-x64

3

p1/models/call.js

windows10-2004-x64

3

p1/models/call.js

windows11-ltsc_2024-x64

3

p1/package-lock.json

windows10-2004-x64

3

p1/package-lock.json

windows11-ltsc_2024-x64

3

p1/package.json

windows10-2004-x64

3

p1/package.json

windows11-ltsc_2024-x64

3

p1/routes/index.js

windows10-2004-x64

3

p1/routes/index.js

windows11-ltsc_2024-x64

3

p1/sounds ...ro.wav

windows10-2004-x64

6

p1/sounds ...ro.wav

windows11-ltsc_2024-x64

1

p1/sounds ...ro.wav

windows10-2004-x64

6

p1/sounds ...ro.wav

windows11-ltsc_2024-x64

1

p1/sounds ...ro.wav

windows10-2004-x64

6

p1/sounds ...ro.wav

windows11-ltsc_2024-x64

1

p1/sounds ...ro.wav

windows10-2004-x64

6

p1/sounds ...ro.wav

windows11-ltsc_2024-x64

1

p1/telegra...nce.js

windows10-2004-x64

3

p1/telegra...nce.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
p1.rar
Size 700KB
Sample260804-yakb9acr2t
SHA256 dab46e7d1d6b1a98638c47dd4ee01d18a112ca8890b5f294140cd057ee9d56e4
MD5 379ae4cd42ce76e49433fecec023186e
SHA1 3bc7b9529743ae11601cc32fad0b8ba6c41be348
SHA512 166195ab59fba78c5d7cdfaea18744cca0d0b3add0ef672b6bb11dda495c646b5699d5092f125b38867a583980b2a2d028718b2dd03df48cb572b03c23d80256
SSDEEP 12288:lUDTFlQmfuhzODAu2BMVywZwE1ZPFvOaZObe2mtOvWkejKu497LTyqoVvPFvOaZM:KDBUhzODAAB9vObBmtOuwLvSv9vObKe
TLSH
T1A5E4232118B829ABF47C5B32D924C7CAE605B0B29BB4318CC65A18855F0F55BCFBCE5D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

p1.rar

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

p1.rar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

p1/README.md

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

p1/README.md

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

p1/app.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

p1/app.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

p1/asterisk/call.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

p1/asterisk/call.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

p1/asterisk/instance.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

p1/asterisk/instance.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

p1/config/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

p1/config/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

p1/models/allowed.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

p1/models/allowed.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

p1/models/call.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

p1/models/call.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

p1/package-lock.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

p1/package-lock.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

p1/package.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

p1/package.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

p1/routes/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

p1/routes/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

p1/sounds (put in asterisk)/coinbaseintro.wav

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral24

Sample

p1/sounds (put in asterisk)/coinbaseintro.wav

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral25

Sample

p1/sounds (put in asterisk)/coinbaseoutro.wav

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral26

Sample

p1/sounds (put in asterisk)/coinbaseoutro.wav

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral27

Sample

p1/sounds (put in asterisk)/googleintro.wav

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral28

Sample

p1/sounds (put in asterisk)/googleintro.wav

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral29

Sample

p1/sounds (put in asterisk)/googleoutro.wav

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral30

Sample

p1/sounds (put in asterisk)/googleoutro.wav

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral31

Sample

p1/telegram_bot/botInstance.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

p1/telegram_bot/botInstance.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  p1.rar
- Size 700KB
- SHA256 dab46e7d1d6b1a98638c47dd4ee01d18a112ca8890b5f294140cd057ee9d56e4
- MD5 379ae4cd42ce76e49433fecec023186e
- SHA1 3bc7b9529743ae11601cc32fad0b8ba6c41be348
- SHA512 166195ab59fba78c5d7cdfaea18744cca0d0b3add0ef672b6bb11dda495c646b5699d5092f125b38867a583980b2a2d028718b2dd03df48cb572b03c23d80256
- SSDEEP 12288:lUDTFlQmfuhzODAu2BMVywZwE1ZPFvOaZObe2mtOvWkejKu497LTyqoVvPFvOaZM:KDBUhzODAAB9vObBmtOuwLvSv9vObKe
- TLSH
  T1A5E4232118B829ABF47C5B32D924C7CAE605B0B29BB4318CC65A18855F0F55BCFBCE5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  p1/README.md
- Size 3KB
- SHA256 2c60ba0afa6ecb6a15db7e6ab2c936e60f88f569ed0f7247235307ca6c9cc745
- MD5 65cf52af6fc75e7b26cb52983320af8f
- SHA1 337e58b449d2e99e7b5894619229cd0df236ce28
- SHA512 30c02563bde28bf5ce351fe47e23aea46537ec6465edfce6630115e18dec71f7cae2a77d22ffbe08e47a024e385ee89e401dab241c493c28e640854df5801ecd
- TLSH
  T10171732706D52B2D0553D2A16B4766A3E728DAC812F3201937EF5B1C277272C5A7FC8B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  p1/app.js
- Size 1KB
- SHA256 0dcc34e3d2086b69b661cb8bd5d38c0e334929bfd411022b5010ad4a9131267e
- MD5 7757cfb6ff6c684eddbb9c9577d5fae2
- SHA1 801ced21ec1bdfa94b07e2270696634df11c4369
- SHA512 bb329d9d7187eb696a98672b2d290bd7503a67344408cce7aefd893c60391a9b0e0304158cc110d32163cdb42e5b0350b4123d291501b05002a913da405dc9a9
- TLSH
  T13731032222D5223D26794CDE68538447ACD3EA313325F640C1AEC2FD8FD0CD57A2B1E4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  p1/asterisk/call.js
- Size 1KB
- SHA256 3c6950e6536de8354a9f2b6653ee90f1f68b22127ff4d2624ff9669d02dbc06a
- MD5 47eb23efeb356d78ef6abfc493141e9b
- SHA1 4357e6f02bc9f5cb829811575fa30d96d6a380fd
- SHA512 d54844865504c2dc813b2538a35d298f5f7b6708316a96ffb0ce4af355e8cee6ad2733c8a712638cd4c71f0276d2ed3002261c95f9ecb34d5392ef35e42dd828
- TLSH
  T18A31E09CA6E1653869B117719A234126F622C733A050E0B7397C52925FB3490A2F7FFC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  p1/asterisk/instance.js
- Size 1KB
- SHA256 a74c8b1e74be65112d72bcfeb18dd468a3a8a441b4314a8a5ac61b406a47ef2e
- MD5 59579ee16aef848ad5c194e684a1c792
- SHA1 301ff56e7a25b41a4f576ead20da49f387c81f9d
- SHA512 56edddfdf03b6175e2c2565eceb4db80e45a58dba12650372a9089539bff8a9335f9e1c830692e43a1e4ef727e4a4fdaf1c2d879c4720e5e563b0dfd2e61eab0
- TLSH
  T199313390A654161E3BF227A8DD030825F825A7B33714428836DC4199DFA7B88B623EEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  p1/config/index.js
- Size 255B
- SHA256 af9e3d7aa64aed4d107e369a7f684941ff6c4ec24e1dc0f32062ccd9b61d4c5d
- MD5 ee6e4c05109080fe668790f5a060c3a7
- SHA1 29f90f0afab09d808c6c54c2d380b4f91d9124f1
- SHA512 2929f0204e23fb2044b6b60f09b28a45ad696c2408388c84a8d6cf801618948844218049c0f40696fc49eb4ecf496e257f3371ec11fdd12163523a9c2004207d
- TLSH
  T11AD05E17556CA50B1AF89696A0299A52F840D38F24952C0372BCCA859B13E1465D5C2A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  p1/models/allowed.js
- Size 211B
- SHA256 e792ba28436948886e7ca7c7ed2a1cb68b4ce5ba022db21ee441fe2c0f9623cc
- MD5 5dcf9ffc5f79f495f48f769fc605d382
- SHA1 f51d88580731961faa3f81d774f66062e9630b7f
- SHA512 fa5f36880a6db4bad10470b68cff2e30b9ff713d25c5030ddc6ca146483bf1b9b8a78eb368a470d9526249786335c0f2038541c55d448424d216a03940e19827
- TLSH
  T190D0228A02BB388A62294DF0D40A20023860C0303808B3BAF808306E0022D502173668
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  p1/models/call.js
- Size 276B
- SHA256 e10763d4b1adab7160ad4abc9b9eaa59ad92fbdfe3b73c355b170ba2cea914a3
- MD5 6c65e058d598693274d00229d97055a8
- SHA1 8a45b47fdb57b74aed357bb1d818828dd12a933d
- SHA512 bebb6ba640f5a354b6856b5c927c1b3b2b5c1343e1615a7972c9701973e6900bb333ea46e050a670ffdead588dfef92ed9a257a49ce9e0b23350dd17d80d4e1c
- TLSH
  T162D05B4120F7B29EA91415F4E00557963C51C52C7B1479F7F128B5696129CD46163B9C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  p1/package-lock.json
- Size 91KB
- SHA256 5df7339b1298897e0f46f21e1584bf7715f405ab2dd6b97c4ea85ca34d05a91e
- MD5 579408c56c2af754ba553ae105824315
- SHA1 3d584d253c9678259fb5fbb8387d52d8b3daabc3
- SHA512 fb7227151ac3a4d6c9d04f4a1963005ad46a6969658e57801c79545f0749ce78e588f97523a5800053fe67be3e5a2652ff857c2c8ffe90ecfdfc467b9b5a2342
- SSDEEP 768:XYgzNh+BmpY3je9esmxAuc37QWfi071BYofnk76KqtBrMbTNhlTW1JSSzzdFTtJ:IgzNz6jVcLhL7bYofg6UTDlT8BRP
- TLSH
  T12B93EA56CD70ADB3079E7AE9E8696002B220405B0C48AE1D7BCC579C8F5E1BF31B979D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  p1/package.json
- Size 607B
- SHA256 24701702d40222ddaac5ebad66da51dcfcd4de8c9b31680dff29d6a6fa371c6a
- MD5 6e44d7e5bcb05048f881fc1f98a2a889
- SHA1 94fe22e57266af50c0d523ef9c3f37d8cd944a09
- SHA512 fc36ea8ef42a1711e54df68c2885e458ca06ca4a03a4248a5fe8bf70db9c5e94fd70ae7514290a3ecd226c3d40ce24356ab7cd99daaeb52c0c5cc56551647710
- TLSH
  T105F0F07ACE08CDAB09D661BB38299653A120A0076E04F80C33065BDC4F8C07F3679F9E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  p1/routes/index.js
- Size 525B
- SHA256 92425632cc9f47cbe5fe68044164540b008cc19f4c6e1b8606a63f9c860fa699
- MD5 0f03e263f4f7d00a491f516745034c1f
- SHA1 c9029f44ff97e7567aee5852033ca5785067f757
- SHA512 d1b77abe8d1350a39f94150966607d4d21e50386e7cf1b55590bd7cbabeb343396fb11224dab40faf3754c5c33b13f50b8eacbed191ab976bfdcb7215959d1b5
- TLSH
  T192F0506FABE650900777728EB84354821586D4E6B405E502F79C42F45BCEDAA0443BD8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  p1/sounds (put in asterisk)/coinbaseintro.wav
- Size 244KB
- SHA256 959eee7795c887baec77ef859873b9faba076042ab0598b80507d942ed6df6f0
- MD5 188be23f7957307711266f8ac459d6a8
- SHA1 ef511ed54ad1c5a0a6437bd2f6a380289feff013
- SHA512 498f0770a70b9bd4f5ec9078b798d649d7e1b2bb78edcb78b8803dc0380e5eb0e0b57e8dc9a306fe13d8c126f2cb9c54932f93ffb0eef448f8a4b9156e6898c7
- SSDEEP 6144:Lr1QowyauFqtA7KM+HaARYOyPWu1gpMwhTWyna:LrRVauFqtA7KM+6ARYOyzqhTzna
- TLSH
  T16D346D91B382FD01C416B97A4D4AC6E45737BF845F05922730A2B7BF2FA99814DDE2C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  p1/sounds (put in asterisk)/coinbaseoutro.wav
- Size 239KB
- SHA256 26a13b29adcac0dc845c83f5c16e80210179a191b4b4d31fe8158a6e3230a6d3
- MD5 bb3c56e28f1893879a93cde64979783b
- SHA1 e8fac2a8a0593d56e02e295ca1bf38a8bb03c16f
- SHA512 e5e2214fd866af4138de14667180b2c31f55f825928cad49fca5462c5ee33038f1f5317b4ad52c11e98e2f68b93a207aa0d4e6bce45a500ae27c2fe7dec68125
- SSDEEP 3072:VXGajdhvQeHiRpbtDyGoWgr30nsh1LvKQ6Iz5glbBzdK0ih1fID4mERb:hG73DN5K9vVu1xPQIw
- TLSH
  T15F347E91B382FC01C416B97A4D4AD6E55737BF885F05A22330A2B7BF2FA99404DDD2C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25 behavioral26
- Target
  p1/sounds (put in asterisk)/googleintro.wav
- Size 240KB
- SHA256 b8b41d87dad6864497299c375cf3bee48e1e636a854bf63204cbc2dab9041773
- MD5 ba8884a7be154a2838d0108ea1332877
- SHA1 da28e7d960f41c36f2793f19833326181f93986e
- SHA512 98b9fc2903a2498a7f0b0c6bcf932776b9d31445da8122db19a8cc3b9909042cb7bc96fefbcbfa360a626faa4202c98f89ca75844af0e1d3c07eefe551c01a43
- SSDEEP 3072:wrLSeKkJ7VITUvrZYrom6JU6e6ELx+ebmrhN98alQ5hgNdAL/DK:0+fkETeY06vLx+DrhS5ONdAL/DK
- TLSH
  T10D347F81B382FD01C416B97E4D4AD6E55733BF885F05922330A2B7BF2EA99414DDE6C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  p1/sounds (put in asterisk)/googleoutro.wav
- Size 239KB
- SHA256 26a13b29adcac0dc845c83f5c16e80210179a191b4b4d31fe8158a6e3230a6d3
- MD5 bb3c56e28f1893879a93cde64979783b
- SHA1 e8fac2a8a0593d56e02e295ca1bf38a8bb03c16f
- SHA512 e5e2214fd866af4138de14667180b2c31f55f825928cad49fca5462c5ee33038f1f5317b4ad52c11e98e2f68b93a207aa0d4e6bce45a500ae27c2fe7dec68125
- SSDEEP 3072:VXGajdhvQeHiRpbtDyGoWgr30nsh1LvKQ6Iz5glbBzdK0ih1fID4mERb:hG73DN5K9vVu1xPQIw
- TLSH
  T15F347E91B382FC01C416B97A4D4AD6E55737BF885F05A22330A2B7BF2FA99404DDD2C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  p1/telegram_bot/botInstance.js
- Size 327B
- SHA256 a384a2ca2b1511059c845c62a50016bd9f722df57915634c06deec9405ba6141
- MD5 fb0b9a13a53ca9c1d644ccc0ed9d9267
- SHA1 3a0807b0326eaf3a90f21ed3d25ac6383412f59c
- SHA512 d1dfa4304a2dfc18724d92d243033ecc55b0d82ed5d8c1ccc0b66396dbae16dff5fce695fc117feca459f5bc7b43f0b97b0bde459b117619099dd07a988d0bb4
- TLSH
  T194E0809B57BE625BAEE10EB7E11771177761E9913114D110B40D54DE230361126B385C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy