a2864d9048fb83cc85e3b2c3d18f5731b69cae8964bb029f5cdecbb0820eccd7 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

node-v18.2...repack

ubuntu-18.04-amd64

node-v18.2...repack

debian-9-armhf

node-v18.2...repack

debian-9-mips

node-v18.2...repack

debian-9-mipsel

node-v18.2...ck.cmd

windows10-2004-x64

3

node-v18.2...ck.cmd

windows11-ltsc_2024-x64

3

node-v18.2...ls.bat

windows10-2004-x64

3

node-v18.2...ls.bat

windows11-ltsc_2024-x64

3

node-v18.2...de.exe

windows10-2004-x64

1

node-v18.2...de.exe

windows11-ltsc_2024-x64

1

node-v18.2...ack.js

ubuntu-18.04-amd64

1

node-v18.2...ack.js

debian-9-armhf

1

node-v18.2...ack.js

debian-9-mips

node-v18.2...ack.js

debian-9-mipsel

node-v18.2...ack.js

windows10-2004-x64

3

node-v18.2...ack.js

windows11-ltsc_2024-x64

3

node-v18.2...npm.js

ubuntu-18.04-amd64

1

node-v18.2...npm.js

debian-9-armhf

1

node-v18.2...npm.js

debian-9-mips

node-v18.2...npm.js

debian-9-mipsel

node-v18.2...npx.js

ubuntu-18.04-amd64

1

node-v18.2...npx.js

debian-9-armhf

1

node-v18.2...npx.js

debian-9-mips

node-v18.2...npx.js

debian-9-mipsel

node-v18.2...npm.js

ubuntu-18.04-amd64

1

node-v18.2...npm.js

debian-9-armhf

1

node-v18.2...npm.js

debian-9-mips

node-v18.2...npm.js

debian-9-mipsel

node-v18.2...npx.js

ubuntu-18.04-amd64

1

node-v18.2...npx.js

debian-9-armhf

1

node-v18.2...npx.js

debian-9-mips

node-v18.2...npx.js

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

Target
node-v18.20.4-win-x64.zip
Size 27.4MB
Sample260805-rmqapstyfz
SHA256 a2864d9048fb83cc85e3b2c3d18f5731b69cae8964bb029f5cdecbb0820eccd7
MD5 db66aa196176909bd83c8c5cddc840ec
SHA1 9241197f3362d3314b7333a54d8296c601ac5357
SHA512 cc119f212bb052cb220b1b59d1d652f11c807884f5f9212e8ed54d79dd9574a60a01226a323e4f3d5042a85c784f57e672903758065a0fac83ca016060a561cc
SSDEEP 393216:L2rMI0mn88lR0jBUF4Y0e9ik8y3njqhT4R/+hJl4Y7AQBUVlXq7TsOMC8ZCwCG63:L2rNn8GgSt0mikZWhcoj5WlX+sa8he9
TLSH
T15257239482B90437CF6F7ABBF0C5D1AB8EFC96C55921AD36193D27CB4D620B206C690D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Static task

static1

Behavioral task

behavioral1

Sample

node-v18.20.4-win-x64/corepack

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

node-v18.20.4-win-x64/corepack

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

node-v18.20.4-win-x64/corepack

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

node-v18.20.4-win-x64/corepack

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

node-v18.20.4-win-x64/corepack.cmd

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

node-v18.20.4-win-x64/corepack.cmd

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

node-v18.20.4-win-x64/install_tools.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

node-v18.20.4-win-x64/install_tools.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

node-v18.20.4-win-x64/node.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

node-v18.20.4-win-x64/node.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/corepack.js

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/corepack.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/corepack.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/corepack.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/lib/corepack.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/lib/corepack.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/npm.js

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/npm.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/npm.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/npm.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/npx.js

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/npx.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/npx.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/npx.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/pnpm.js

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/pnpm.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/pnpm.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/pnpm.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/pnpx.js

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/pnpx.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/pnpx.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

node-v18.20.4-win-x64/node_modules/corepack/dist/pnpx.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  node-v18.20.4-win-x64/corepack
- Size 334B
- SHA256 dcef0a787c4654ac5c085fafa3a1e12d60d6f42e0d259c38378b61ef64295fa2
- MD5 1a27e3e2f449816f5ffcdd57703a3f78
- SHA1 b529a4d96ca51d2bb96f7868970ed39c7259f3cf
- SHA512 32c2bc00b1ac8755c571eee99a565e82a9e617bec608229992a66628b50f647848598064207c9c1631a68d709220f6b84601f5aeb8554a8c35edc70ef996119d
- TLSH
  T1B5E04FA451AA5F72491D7AF0AC599459449E43832051AE98EC1C3B41847439E72CB6AC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  node-v18.20.4-win-x64/corepack.cmd
- Size 218B
- SHA256 920630a1d1ec47aedea7345e3c868ecdc07e191373497bbf47fbbf5942fbad4f
- MD5 c046e14548ebb384ef71c0efea0e857a
- SHA1 504e3d339b444b1051fb0b033da0f2e661385c0d
- SHA512 efac98aadbdea59064d5752884bc9697c9fd15ad44e820f9457f679ad4e68be2e11e965af03ad70fee1f34c93c64eaf1813c60f19145ec1b693787a45c602833
- TLSH
  T12FD0127005BE4F333A5A2DF9F48213B778CDABA104150DBC7D29439202CC2C687D12D5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  node-v18.20.4-win-x64/install_tools.bat
- Size 2KB
- SHA256 c5a10d46d3112ce64bcc65bca9cecb8b0822725340e4aad595b7d6ba064a48f6
- MD5 33fc483fff397c5f330345922c51d7ba
- SHA1 2946854dd0c0f18731ef89afaf52e44367207d8e
- SHA512 68698aa5c715d2796984ac8fd6f75ed562d02b44fe94ecf8fcaefcc8afae1b69d45ad57b894f173d931ace166cbeab22407478adf15bf76a5669458f40d4cf3d
- TLSH
  T1D7519525FE58C3666ED0C699BC3A52F5F70F505792128D16B0A74034C5427FEB23E299
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  node-v18.20.4-win-x64/node.exe
- Size 66.5MB
- SHA256 4dd7333812a5df39cae6c7e69e519328ff61d0e997bdc62c307e3303c73270be
- MD5 58da6e44a66b158142f03d259f44d62f
- SHA1 6befdda114ec9688e99528c929869393bd36ae40
- SHA512 d7ccea0c27a953cc6f449a9f2ec16d8f268f6e785c04e7b1cc6e8b04e7cd299f70a2f3525ef5a74bd50ff8fd83db5e5af1417e6024c5f0f59a0f955bb0c6b7d6
- SSDEEP 786432:5/DlSJiFQo9aA86kPebec58svx3EZBxOWfZ1:5blSJiFQo9aA86kPGBHvxSnZ1
- TLSH
  T1E8E74A4267EA0485F9F79A3489F65213C673BC166F3185DF324C172A1FB36E08976B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  node-v18.20.4-win-x64/node_modules/corepack/dist/corepack.js
- Size 134B
- SHA256 179e3587e2f27b32f8e7b94bdc577c14ead0f4639a7ac7b767d980734c392bc2
- MD5 ffadd717b17fc24d91ac24e47dcd92b8
- SHA1 598941b2f5ed2b224440bc663861319f631cb82c
- SHA512 b979fb56e5916293053373ba0b1b311984240964a95a2f5504e737837e58f834db2e0dc65d68090d16c82ad33729142266dff459c16af802deac86d3aa764705
- TLSH
  T199C02B48554C0E7C22566700202D030B1CC6A2314EE0D510D443BB475ED13B02A0A81A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  node-v18.20.4-win-x64/node_modules/corepack/dist/lib/corepack.cjs
- Size 994KB
- SHA256 b10c174d4ff92515ac1693ec7bc9c130d18e75bae871566e3e9b1cd0429ad6a7
- MD5 c2d72a8c5197645c29a1599da19958fb
- SHA1 f794559ccd022bb18f820346e38a9fc3ec684b44
- SHA512 62db46f592a6baadb18aee6356a03f419d4e40e3e0f0d1a768af73645f9cd241ad9ecceb29a80fea5484bf77d62c240c69bf717f706b41a1930225130108fb7c
- SSDEEP 12288:1sOTAc9n5K+zHJ9ZBGel46s6Czl/dRc80:1sOTAc95K4HD6el46s6CM
- TLSH
  T1F625E72D57E52512C673B379DF5B8001FE7A812722058264BE6C96A12FF142487FAFF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  node-v18.20.4-win-x64/node_modules/corepack/dist/npm.js
- Size 145B
- SHA256 8845efa17a44122dae0ad45f6866679849fdc8d5fd2255e74c34083fcddc8c1a
- MD5 c1a80914bccaade38b2e2cb9107af0d8
- SHA1 f4d9ea23efe591d16f602dc01ddd536a8de4bf6c
- SHA512 6924b943a71864767ef480eec3f2fc057192286b22ebf94bef822e2b3252fee971c8e1a1c8b96e33ad4daf30816ea61613b3043fe99aff22f1633819f7c5ba1e
- TLSH
  T103C02B09564C0C7C13169F00311C030B1CC6F23B8FFA9414E883BA8B5ED13F56E0E82A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  node-v18.20.4-win-x64/node_modules/corepack/dist/npx.js
- Size 145B
- SHA256 cde64141e991db117a9d43e2c91a8da9905a959681d94992ff53b027ba52a880
- MD5 5b4f6669cbc86599c21ea0e76d85bb22
- SHA1 828b3bb14520e6baf685a5b8cd650f23713243db
- SHA512 8b9f93b48e3ff5f4983e6d3f7cf6ccaa86ddda7374022e348f6d8e8ca09222b66b6ad7506bbeb903c92cdaaa0ac61b91fb599deec9e70f2d5d94af56b74bd2b7
- TLSH
  T108C02B09564C0C7C13169F00311C030B1CC6F23A8FEAD410E483BE8B5ED13F52B0E86A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  node-v18.20.4-win-x64/node_modules/corepack/dist/pnpm.js
- Size 146B
- SHA256 a74a2fc513f784b39674f543198aec64f6f856aef066bb951903c6b3df26725a
- MD5 2a7ddcbf53854e076857e1f1e6dce8c2
- SHA1 cfecdde23f6880a2e003e324a6380135fd0931cc
- SHA512 cb4361aec61eeef4989a02aa93cb15d9e8bae6a6a30d8adaa6d2f15bb34dfd33eb9765e46d38055e2f795d2b4c8f21df1518608f2b966bd7ae9517b7b92321ba
- TLSH
  T1CCC08C0956480C7C16169A00221C03071C86F22A9BE19414A883BA8A5E952B56A0A86A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  node-v18.20.4-win-x64/node_modules/corepack/dist/pnpx.js
- Size 146B
- SHA256 def8748ad4eb42e7abf3f582fb91a9b9ae0b12865c51558e95823fedf4108886
- MD5 1eacc626219d03ec74440f7ea3dfbdee
- SHA1 f682fa2db3a248e2a6cd12b5097210e147280d39
- SHA512 a22fb1c0cf9401eb0eefba8cf336ddd8086f68ea19a06e53f21743aa5e9704475594c1eaa589373a437d88192c5a0e806e3b6f44f8b113d1bb1f2f129d20b988
- TLSH
  T194C02B09564C0C7C17169B00321C03071CC6F23A9FE1D410E483BA8B5EE53F56B0E8AA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy