b362ace6f847f6aec8a348e64d5190f637dfcbad7c5b9593d61821402aa83f93 | Triage™

Login
Reports

Overview

overview

4

Static

static

1

extension/...dex.js

windows10-2004-x64

3

extension/...dex.js

windows11-ltsc_2024-x64

3

extension/...tainer

ubuntu-18.04-amd64

3

extension/...tainer

debian-9-armhf

3

extension/...tainer

debian-9-mips

extension/...tainer

debian-9-mipsel

extension/...er.cmd

windows10-2004-x64

3

extension/...er.cmd

windows11-ltsc_2024-x64

3

extension/...cli.js

ubuntu-18.04-amd64

3

extension/...cli.js

debian-9-armhf

4

extension/...cli.js

debian-9-mips

extension/...cli.js

debian-9-mipsel

extension/...CLI.js

windows10-2004-x64

3

extension/...CLI.js

windows11-ltsc_2024-x64

3

extension/...CLI.js

windows10-2004-x64

3

extension/...CLI.js

windows11-ltsc_2024-x64

3

extension/...est.js

windows10-2004-x64

3

extension/...est.js

windows11-ltsc_2024-x64

3

extension/...est.js

windows10-2004-x64

3

extension/...est.js

windows11-ltsc_2024-x64

3

extension/...est.js

windows10-2004-x64

3

extension/...est.js

windows11-ltsc_2024-x64

3

extension/...ers.js

windows10-2004-x64

3

extension/...ers.js

windows11-ltsc_2024-x64

3

extension/...CLI.js

windows10-2004-x64

3

extension/...CLI.js

windows11-ltsc_2024-x64

3

extension/...ver.js

windows10-2004-x64

3

extension/...ver.js

windows11-ltsc_2024-x64

3

extension/...ass.js

windows10-2004-x64

3

extension/...ass.js

windows11-ltsc_2024-x64

3

extension/...ion.js

windows10-2004-x64

3

extension/...ion.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Microsoft.VisualStudio.Services.VSIXPackage
Size 2.0MB
Sample260805-als7ja1xay
SHA256 b362ace6f847f6aec8a348e64d5190f637dfcbad7c5b9593d61821402aa83f93
MD5 1a139717f2695fab2b189a7be618793e
SHA1 e08256cc6510fe77498c52f6850ffc0c57879fd9
SHA512 fc89521e9ce649285dda4e942838cbedde3f056f4c69020066797f11b343b45a7e228dd3ca1ad63cd76e3ad26ed24a8cdaab148f0aaddef6505c4aeed6dc21c6
SSDEEP 49152:HUKDiasOWrwfNUdYGyjCOWrwfNUdYGTiTi:HpDuwiYG+qwiYGTKi
TLSH
T111A52324B5D89472C97FB078E514C0579B232F49A095FA973F8CBCA8A4B8917372F2D1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

antivm discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

extension/.eslint-plugin-local/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

extension/.eslint-plugin-local/index.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

extension/dev-containers-user-cli/bin/devcontainer

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

extension/dev-containers-user-cli/bin/devcontainer

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

extension/dev-containers-user-cli/bin/devcontainer

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

extension/dev-containers-user-cli/bin/devcontainer

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

extension/dev-containers-user-cli/bin/devcontainer.cmd

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

extension/dev-containers-user-cli/bin/devcontainer.cmd

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

extension/dev-containers-user-cli/cli.js

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral10

Sample

extension/dev-containers-user-cli/cli.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral11

Sample

extension/dev-containers-user-cli/cli.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

extension/dev-containers-user-cli/cli.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

extension/dev-containers-user-cli/dist/node/devContainersUserCLI.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

extension/dev-containers-user-cli/dist/node/devContainersUserCLI.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

extension/dev-containers-user-cli/dist/spec-node/devContainersSpecCLI.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

extension/dev-containers-user-cli/dist/spec-node/devContainersSpecCLI.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

extension/dev-containers-user-cli/test/containerFeatures.offline.test.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

extension/dev-containers-user-cli/test/containerFeatures.offline.test.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

extension/dev-containers-user-cli/test/containerFeatures.online.test.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

extension/dev-containers-user-cli/test/containerFeatures.online.test.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

extension/dev-containers-user-cli/test/devContainersUserCLI.test.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

extension/dev-containers-user-cli/test/devContainersUserCLI.test.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

extension/dev-containers-user-cli/test/helpers.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

extension/dev-containers-user-cli/test/helpers.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

extension/dist/common/remoteContainersCLI.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

extension/dist/common/remoteContainersCLI.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

extension/dist/common/remoteContainersServer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

extension/dist/common/remoteContainersServer.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

extension/dist/common/sshAskpass.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

extension/dist/common/sshAskpass.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

extension/dist/extension/extension.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

extension/dist/extension/extension.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  extension/.eslint-plugin-local/index.js
- Size 373B
- SHA256 5a3fc8bd5bcef3717ec2f9a24e9840c1fdf0e69715d8d82dc41e51967125084c
- MD5 77b7b02d08d8b0e2b77eb5ae72cfc2d8
- SHA1 ffa65278c9e2c25cfb5bc83d3d617c474860d64e
- SHA512 d76b9f8e30cf60084ea8e317891635324920002c399440633e7e950090e4915f4d394d9f096376de07d13fe6bf85d7e96ce16b33cc6ccdad5c1d3385c61abeb6
- TLSH
  T139E06884D7D172221631F2C7FE8092072C06E5D871517094E2DE01E31A826FE1AC1CB5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  extension/dev-containers-user-cli/bin/devcontainer
- Size 1KB
- SHA256 7dc95ddccde19e946f7e907554bfd2ee9b65f93aca5082854682ad696e37035b
- MD5 84a3429dcd4d1db84e04ff6b1ac5c3b1
- SHA1 8d962bb4677abc5692750bda2ce698416f51cc9e
- SHA512 d5908d9c1069c742c5af2a0f23612941f9f97a7bcdc2343bdd6f7c3638c2d42f1fff67d637adf28baa743b1208480893a83304bc1be20840a55ac41943417571
- TLSH
  T1C64120892D1207B074D983280CC650270B2B40AF1A517E40F84E36863BFEAAC58BF369
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  extension/dev-containers-user-cli/bin/devcontainer.cmd
- Size 1KB
- SHA256 16f0d71e7fbe66a059b23eb2a762ad048772eaf878d0bb04a63f775ceb6f60ac
- MD5 578dcd9dd31e71d8f6519a13930ae3c7
- SHA1 79f65dc0f2a28dbd4f98187333f0a424315341ab
- SHA512 cd242d55452aacee7d432f48874882ac5080103208506691fcc5281b80163369fb3b14567a54cd4a084ed03f8b8930b9fd218907fab8e07ca7edb9c3f0e37f9c
- TLSH
  T15211AA651A8718A9B473835C5B87069A0F2BDACF57101840791178E1FD8F8BC845A6DB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  extension/dev-containers-user-cli/cli.js
- Size 66B
- SHA256 a152897f9215558d303a1344cb320f659d83ecaa06865e224f9c0397e8ed629a
- MD5 d24b9f58c23002bafa728cd18d96471b
- SHA1 630d19cc457d3151c9ecb620b769d2c7847b7c22
- SHA512 dc7074349ee98d2d7a4cf5b2104937bb8fa4247d7b664428bdac7d5f948b952a482b42da11699fed9133ed4f2988ea070fb5e719a314e7dc3a0d29c7fe3bcf1a
- TLSH
  T1E1A0025CBF8C543CA8509BEA00881354649392255554EA0566414DD6E4882D4574AE6B
- MD5 SHA1 SHA512 TLSH
Score

4^/10

antivm discovery execution
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  extension/dev-containers-user-cli/dist/node/devContainersUserCLI.js
- Size 479KB
- SHA256 939880035f4620b29cc48253daa1a019fd8faf1d798b05bb2eab6d879c10cc0f
- MD5 d6161562b5cc5ff8f1e7b22fb91c9465
- SHA1 c662a8477e6235ea0ec355c3b8a5340b0724bfb2
- SHA512 45fa73d5c4408cd647a891f8c7ef97ff8465fb11e7d8a842ad91b8173adcd5e43a9389acbfb894c6b4a931f82f8ecee951deeb43b1a42478dc3f168dbe2fbee2
- SSDEEP 6144:8eMlMnm2hxJcQ1nw+RDjEEFUE/4P3CJEAzLlVl68pmRkhWvg5dRmh0fRxd:8eMlam2WXut9l5o6L
- TLSH
  T1F9A44A9937E6B02243FA62E4906F4002F3799998180D542CF67CEDE7397894991FBF78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  extension/dev-containers-user-cli/dist/spec-node/devContainersSpecCLI.js
- Size 1.6MB
- SHA256 ff3934cb098a78e2ed59a2199c225be2f79a8c79636d45682685e85fb3d6e5ca
- MD5 d2375278f83a5cc0a415dad10a048b1a
- SHA1 6b0a137e730041346c968e4ced69fe7e3cf7195d
- SHA512 2edc555ea5f174223ebfd44a911ef2b7804a17d82ccd101d12cf70bfff9230e859f4516239bb5fb2f646e4b036ab76263c366b8f2d95a2d66031b357b5c50c45
- SSDEEP 24576:t6DZ2ZB9S+Fget7Lw3+eMXwOwfVnpI+0TbuTIXOZq9jwkiUfCmLqjWw6XOT2WAN2:t6DW9S+02vLyajyZ7LT
- TLSH
  T153857CB972E27D3683F25195902E0102EEBC565BD008556CFA4CD9F374E085A68BBFF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  extension/dev-containers-user-cli/test/containerFeatures.offline.test.ts
- Size 1KB
- SHA256 fc45e02f23b829487e63cd1dfb2152fbac94d6b5aa39609252f03aabe61696ef
- MD5 b68ca0f6388dc55a503a4c75c180ce15
- SHA1 17db8e8628729bd2beb1ee336bf324539a1ec27d
- SHA512 2b67ba05737bf3a49aa208699b323be2d0a641c1b2128a65a346378e8578cd4f9464435e8de7bd48a5d4b038041186b10a70077e0d5039f56329b13c207714ab
- TLSH
  T13F214228DD6B0623F2F6C1866C2A0808D72C970167816DE9BCDDD604C3CB31DA16DD06
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  extension/dev-containers-user-cli/test/containerFeatures.online.test.ts
- Size 3KB
- SHA256 134d6e397fa6fe699bdf4733b184f63d6a5eec9b89625825d30aa43ca7934232
- MD5 2612ae522eb766dc2781a9b4bc9bb18b
- SHA1 2ae7149bf15956d7a457bc106250c4178b71ab36
- SHA512 510fd85e5f021d76b20323fee3255c1ded6840fb00f718ea37fc1f13bf8ed23684ba0908860c1e166e35433a180bcf7025fa60728875faaebf1398300dbc7ce4
- TLSH
  T171511218D6BF0913F2F9E284286E08059A6CA715C9809FB67FDE950CC6CF36D7121B5B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  extension/dev-containers-user-cli/test/devContainersUserCLI.test.ts
- Size 4KB
- SHA256 f9faf7f07ca49a7f1d993e720677870c3b01c7d9dffd6141422c49e684ad9105
- MD5 1c015942051479cacf7cd152f60b6779
- SHA1 70f135c4c143c5554d3ae4fdfffbd2e40d4eab5f
- SHA512 a73af2040cf4c2c581ae00183206052edc6fd1a0b8fc52503d3b25c9b5fba029b7e74a596babb6869c9fdeb5a5a67a76f36e3bf8be97fd2116c5f1f526389333
- SSDEEP 96:SDdbZ1Vl6CIXC9XUuD6IQs4nG0mF5PQ6MAoMAB+fMAowCuq63RrHRXHWH8MAH5GC:ubZn9EuD6Lzj2lQAZhdX2FehT
- TLSH
  T131914414DE7F0625F6F5D16978390C0ED72CEB22AEC19EB5B89C8A5090CB3CD522D91A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  extension/dev-containers-user-cli/test/helpers.ts
- Size 2KB
- SHA256 c043a8c8974cfbfbc978fcba5c979810e52d4cce77f61f7090a51634a74db212
- MD5 61632678eb47724862c269497cfaf2b5
- SHA1 0c32ef56124b982fd58915909deae97465e4d2da
- SHA512 910e38e7ad43591196838f790d257589026e496974b6e1044a244782ac62e7ed4cbdfec996798ac477044966aa8041b681f6efcfc44f3e23abd3e1b9b7fc2e5f
- TLSH
  T125514106CFFF2B126AF0E0236D5D280BDA9C8B500C665FF6EAD95A00319606C703D9BC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  extension/dist/common/remoteContainersCLI.js
- Size 1KB
- SHA256 2165c42bba00fac2197e8ae83aac745c8166fd7e4b9cfa825fd42608907e874e
- MD5 c2cece548f28c383cc7631e7304ada4b
- SHA1 a505ca9ece4a16bce8a42aabb5289d5c00ca48dc
- SHA512 2513af6b3d982c2b205f6e722baf85dc1da3578500a8d59129c42a809a2559eb7ad6028b128c58f33755af81f68a66d06fa64e23895938744f5b7e4283396233
- TLSH
  T15741B7A1BE487E2342F8D02AD43B8413F5B646B91511DF30F745D8753EE1455248DBBB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  extension/dist/common/remoteContainersServer.js
- Size 41KB
- SHA256 3005e5308e195e70239ca90b0f3b637e508181875a1fbad8aedf28e1cb31ab19
- MD5 f0c9bd8759954141791bbaee11e78e4d
- SHA1 ac02995a376ab66ea8048c8b7327bd71d24ad5f5
- SHA512 dde405bb0679b0f9b85c6b61badf41ae4949276dbad7d4f5ef4471cfe004167e1ccffa9ebb44b9b18c03fc2e29862783822db60f284c077a0698cca9a7e42c64
- SSDEEP 768:5haGSeKntjEuHLMzTCX8hdo4fprZdZov3AINmcTTvVHngJDVkiaozwDQ8UXYP:5hJFKtjLH+e4do4fprZdZooINmGgxcEE
- TLSH
  T1DA13D799769AB16243FBA0B8406F8107F1BA9C55280D8528E264EDE93DBCC1C417FF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  extension/dist/common/sshAskpass.js
- Size 2KB
- SHA256 2f7b42afb383a0bb6e556532cb627bc520118bec423059c8c86bd9ce500f814b
- MD5 bb85efd5b48cbd4ab750179a615577e5
- SHA1 5d8abdcb022bc3838aae0044c8ecf7854805aae3
- SHA512 63e113412c98343b0719dc754b6b8fa8aa29a001fed342397cf2a2746f1393d9420c0823869757b7a1ba19c6085ebbe24489627d5e7d615803abfaa3c2f4c8db
- TLSH
  T10051A7C4EFDE6B3266D8E1A5A02D8402F6E5C96C00349838F654EC968F7496106FEF76
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  extension/dist/extension/extension.js
- Size 967KB
- SHA256 93a32fc86217fb93689d19542a0c1fccf927c431e9d73701131dd8391eb20f98
- MD5 fbd9c68404c009aeb43588b844c78677
- SHA1 300f8b4398357dc0e3f59d2262afeb15726b9bce
- SHA512 8a0e709a13d036ef3f2db2207096e9398d5f45dcb7bd29745e7b8a2e629468877439471083f1d70b2e44c69348524033536403e6a41919ea5b0227eb1b641662
- SSDEEP 6144:/UZV694sFSYeQslN0FEI0PEoxKXET7qJ9SC4x6wGr4IEFqP/9OljFMfEoF68PAis:/Uf6egRI1GrpK9I+qA4Wn3F4i
- TLSH
  T1DE255CD977BB7032A3FA61BC906F0006B3799A54180C481CF26DEDD669BC54891BBF78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

discoveryexecution

behavioral10

antivmdiscoveryexecution

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy