99e2e454bf6e22b314d8e59056ddde2c294faf086cd2bc58cdf3bd5aaa1d30a7 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

cirtus/adm...ngs.js

windows10-2004-x64

3

cirtus/adm...ngs.js

windows11-ltsc_2024-x64

3

cirtus/ass...app.js

windows10-2004-x64

3

cirtus/ass...app.js

windows11-ltsc_2024-x64

3

cirtus/inc/bank.js

windows10-2004-x64

3

cirtus/inc/bank.js

windows11-ltsc_2024-x64

3

cirtus/inc/db.js

windows10-2004-x64

3

cirtus/inc/db.js

windows11-ltsc_2024-x64

3

cirtus/inc/helpers.js

windows10-2004-x64

3

cirtus/inc/helpers.js

windows11-ltsc_2024-x64

3

cirtus/inc/mailer.js

windows10-2004-x64

3

cirtus/inc/mailer.js

windows11-ltsc_2024-x64

3

cirtus/install.js

windows10-2004-x64

3

cirtus/install.js

windows11-ltsc_2024-x64

3

cirtus/use...ons.js

windows10-2004-x64

3

cirtus/use...ons.js

windows11-ltsc_2024-x64

3

cirtus/use...fer.js

windows10-2004-x64

3

cirtus/use...fer.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
cirtus-banking.zip
Size 119KB
Sample260805-ald3lsgl8z
SHA256 99e2e454bf6e22b314d8e59056ddde2c294faf086cd2bc58cdf3bd5aaa1d30a7
MD5 97561ff9e314a9dc1ccc78f8646f2c41
SHA1 a2f4b97a914ff0d79b451b8cfe5f216ce998965a
SHA512 1d8648cbb098fe99ea1651636f7e41927b34698013a18971ef9597ce809c78085990f553866d2f8a88d71c3ca999312a55cfed254a3d6be5f50fe9e4af60fcc7
SSDEEP 1536:ha5S7bYtZMLU+9HqAhfafQSANMrZuF038qpZ1jr+6FdlWqFY1IwZL/edsK2ofZC9:hSb5MqAhiQneZuFkRjrJsBWdsK2ofZC9
TLSH
T156C3E13CF7059561C69FA876568FA38BE1CA0A43D1056D1F3EA07249774E98C3F706B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

cirtus/admin/settings.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

cirtus/admin/settings.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

cirtus/assets/js/app.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

cirtus/assets/js/app.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

cirtus/inc/bank.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

cirtus/inc/bank.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

cirtus/inc/db.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

cirtus/inc/db.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

cirtus/inc/helpers.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

cirtus/inc/helpers.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

cirtus/inc/mailer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

cirtus/inc/mailer.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

cirtus/install.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

cirtus/install.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

cirtus/user/transactions.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

cirtus/user/transactions.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

cirtus/user/transfer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

cirtus/user/transfer.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  cirtus/admin/settings.php
- Size 12KB
- SHA256 e9c4dfbf6022b92001cf77a95eb7de26f8db6d4e06adf37c87a50aa80fcb0152
- MD5 f51af79dc3211ec2277351af0cda1f45
- SHA1 36d6112b0104457eaebfdb0b8f2926e51fd5ea34
- SHA512 edbe17278c5fb26c6cd5c7d9b1ba58b12ef0234009aa71ebe3ff048a1afebb51f03d4e95444378b1c6ce100761468a5c273183b0c74116c3217d88ed7b7c4d6b
- SSDEEP 192:oGxyGivAzBGRu714o+W60y8kmjWNoJRtoI:IAzBqXo+W60y8k48oJRD
- TLSH
  T1E3421F21B4E1DC22802698E26D510B4E3DD9C20FDE160419F6ED6AED5FF5CC0DE6F9A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  cirtus/assets/js/app.js
- Size 3KB
- SHA256 b63b5c5d350942ce009218da25e093c1aaa521865200099f005f8b3703251f71
- MD5 f3ef1b2dc57131b3810171c0935f64ad
- SHA1 476128cfe3f14052450da338bbffc8a283c3fdba
- SHA512 d21d67fc99e96a52c19936aa3f70944eea7b6a8b81755a54876794881b4f60ae01467b2c4b3ad0556cdd10f1d92af61aee5016bf5e915fd130ce2ee927bc8ce7
- TLSH
  T10B71321EF9EB21F0697BB47A83BFB681397160431085D9203D8CAA540FD1D1919BEBE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  cirtus/inc/bank.php
- Size 17KB
- SHA256 c9efbdcd7c79ea3f0acd39bbacc3a017ba9ecb34b1ff14a96b36d5cd1de2050b
- MD5 f010a4f768220ff857e99b50d4d8ce7a
- SHA1 6195027f6e8b7f914c111ad751abcadf5a0a2bf9
- SHA512 9e92ded70f69311092475247ad35d9fdae187e5351ffc6f36c66d9e450b6719e9ce9849509620b1bfbaf9b730e6bb2549de3d4ea462202f5b9d0f79d481cff6d
- SSDEEP 384:QTkQT1Vg1BqsgajlgMYgFIk3HwTHwrk+rHqsg4nkdkjr8YTGsLOi:QTzBBVxugyjr8kGsLOi
- TLSH
  T1B2827516B8E7E67402A7E03A5BC3D015ABAADA134945C250BF5FD0D13FB126CCA7DA80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  cirtus/inc/db.php
- Size 7KB
- SHA256 fa6d5f06e00b955baab2063b7ab8f8e9cf2770e209e43afaf683fd7cfaa53d72
- MD5 237f506fb97981aff9aa34909d6ea221
- SHA1 df001f604bee5f907ff4a8fde153298401285fc2
- SHA512 5b26dfcfc6b0ac78f79e1bf85bcfc4cbc4e53a1d9b462d6ee43f4aca8643c556f788feed9385e13b3a984ff1c23a72e3697edb0d0e0696255a3d5b53deca359c
- SSDEEP 192:T6y2Q+JKgBEOTUt5jrBCyP7brBLGxk0UZZV76wIvUBL:T6yY5mZFwxk9WUt
- TLSH
  T1DFF1A81A3E110620189BE3015DF758979939612B6EA27F943C6F70D14FBC46EE0FC9E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  cirtus/inc/helpers.php
- Size 10KB
- SHA256 aedd292dfcae955ce8588cace4383e3c416839d0926da11cc87433f5f758a3f1
- MD5 175778ef9f68bfd25ae4423587e44b15
- SHA1 1601d29d1b3eb06a36314a46e4de2f3db07ae888
- SHA512 2860167d69c6e2402daad856f76f05bb091d561d74e1c11d0d8dc41298fdfdad7ee99985f9f292691edd0370aaf951679c16129009e776c03ffacf0476291a4d
- SSDEEP 192:B3iQ9WX6rdNxJtBtiDdsttcn7A1YxLP/KcwTlFQOJyeTiQUHmWpVtf4q3Q3gHQBR:FrHTNtU1gl/yeCM4YE8R
- TLSH
  T176223F647CE3B8750AB7C93E1AAFD81AD39A08034908E523B91C66D51FD463CC7BD7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  cirtus/inc/mailer.php
- Size 7KB
- SHA256 ca73428dbe22b723d31c3f82a2d1aab2a49d41ac24c153972527424a88bf0e1f
- MD5 db37536e29792ce59ff1b557bc224752
- SHA1 91a83f1c22b6a4a3a7b70b36bdb7c6bc8c2d5cbe
- SHA512 0d6fc34ba08262b20a56b0b92f832427ba62451b72536968417c82f25af183f57afb1124b4d6a53f9c8d5e3c990037bd533191b62c943f3f024a28b991d3a430
- SSDEEP 192:SndTKk+kmsVJgnX3ZWY9UsPUO2+FCDpqwZYjRADQi:SndTK8msVOnHZXUESgi3
- TLSH
  T1D4F1A408A4A76D9521B3D0F5E3D7D754895818230118CA16BEEC53E2AFD831CE974AEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  cirtus/install.php
- Size 15KB
- SHA256 65e89f8ebd477852171a6359e0dd884008e1911098a55b8b6152bf6f406a4cd7
- MD5 8cb1c591e44d5ca2b63ce2ce5731c7b3
- SHA1 75abc65ef04ae247c0f75c3bc1eba7343d702f77
- SHA512 fd14896d1adee7b271301c14019024d5015b49a002075a2fd3853a1a34f2089d3b911ce6b87d1ba68ba2a640d04546baac5df04b32e23c76bc3bbd0304846c09
- SSDEEP 384:6OIoj6EDA/W69DxWnmVYAzMsTErlEk3gwmwMoy:6OIozDAB9DimlvTq38Boy
- TLSH
  T14A72072174D265356563E8407FDB16163B9AC90BD402D980FFDEA2CE4FE4E88DEB58D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  cirtus/user/transactions.php
- Size 5KB
- SHA256 2fd8dfda750555aa412191956ba67ba4a4db4ed1eac20e00ad975ef79ccfdfe2
- MD5 75fa3f99d7e785c5dff43581e2e60772
- SHA1 d7eb4a4e4f546f7ab692d575ce372167fea8895b
- SHA512 d542c0c6f28a01933754ae122cbd3a4baa609c29b0e6d2b6d12c25c2d0f4768f500555221d9d47c603e003e0c2ea51e89ea24a98b046ed10e04a6e90d7fb7195
- SSDEEP 96:cci8qecWMvvqpCTEpgUAFFFgQ4hD9aXs5Xq7JGQ88:QOCYaUeFuxhaXsXqF/88
- TLSH
  T105C19711B0F1F63144A784D2AA8297393EEED40BD56508047E7FA2EA5FE1D99CD2F481
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  cirtus/user/transfer.php
- Size 15KB
- SHA256 ed63ad5d7a310b043e0d90926d56812d6f9971e18ce5d800cad5b6dcf9ecf803
- MD5 6b10a8f2c96bebdcf7e9ccc8b3f28058
- SHA1 3dcfb1f696724a5ee4ef6dd15b59826a87b7763d
- SHA512 4122b469350d059d7da98e4a70e1fad55fdb199223c98d7da2de67a6de6b4ba6819e4f3e25c2699718ed74090977c66f3e81b7381f2e24aeaaf3a6c00c809b79
- SSDEEP 384:FuhqWsuE8Q/na3L9hZejnDDCTWYzFUbhqVQSftDblGBBp:FqbV/m
- TLSH
  T13A72189474F214228063D0A7EBC2431FAF99D60B8106C418BD5E67DA2FD1D91EABFD92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

© 2018-2026

Terms | Privacy