895a5b2985a1ae628b96418ae9923596a44cdbbd4201c2a4f09666d76d842d55 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

GaripFshBot.rar

windows10-2004-x64

1

GaripFshBot.rar

windows11-ltsc_2024-x64

1

GaripFshBo...trc.js

windows10-2004-x64

3

GaripFshBo...trc.js

windows11-ltsc_2024-x64

3

GaripFshBo...it-msg

ubuntu-18.04-amd64

3

GaripFshBo...it-msg

debian-9-armhf

3

GaripFshBo...it-msg

debian-9-mips

GaripFshBo...it-msg

debian-9-mipsel

GaripFshBo...commit

ubuntu-18.04-amd64

3

GaripFshBo...commit

debian-9-armhf

3

GaripFshBo...commit

debian-9-mips

GaripFshBo...commit

debian-9-mipsel

GaripFshBo...er.bat

windows10-2004-x64

3

GaripFshBo...er.bat

windows11-ltsc_2024-x64

3

GaripFshBo...fig.js

windows10-2004-x64

3

GaripFshBo...fig.js

windows11-ltsc_2024-x64

3

GaripFshBo...pec.js

windows10-2004-x64

3

GaripFshBo...pec.js

windows11-ltsc_2024-x64

3

GaripFshBo...pec.js

windows10-2004-x64

3

GaripFshBo...pec.js

windows11-ltsc_2024-x64

3

GaripFshBo...pec.js

windows10-2004-x64

3

GaripFshBo...pec.js

windows11-ltsc_2024-x64

3

GaripFshBo...pec.js

windows10-2004-x64

3

GaripFshBo...pec.js

windows11-ltsc_2024-x64

3

GaripFshBo...pec.js

windows10-2004-x64

3

GaripFshBo...pec.js

windows11-ltsc_2024-x64

3

GaripFshBo...mon.js

windows10-2004-x64

3

GaripFshBo...mon.js

windows11-ltsc_2024-x64

3

GaripFshBo...dex.js

windows10-2004-x64

3

GaripFshBo...dex.js

windows11-ltsc_2024-x64

3

GaripFshBo...nds.js

windows10-2004-x64

3

GaripFshBo...nds.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
GaripFshBot.rar
Size 1.4MB
Sample260811-rw21vsfr81
SHA256 895a5b2985a1ae628b96418ae9923596a44cdbbd4201c2a4f09666d76d842d55
MD5 c55cf655ac5ee34aa19c4ac3dbaba589
SHA1 61f3629a2d47f036019064dcc52d1056cb6dbf75
SHA512 62e165c242b2277d873653e9629059a482b60b788325d2cae7bc45c886148bce0215c344838e0d9ef9a953680b4fb30c460ea21d6fb85f18f908d8d0b62ed280
SSDEEP 24576:Ku0ul9pVOXCJ8WFpIGwbDa8VjY37mHXB3pn7uchCI3Roq6SVZWABqgEmVTo6:KUl9eSJxFqbGO+7yR3pCchdfVcAbPr
TLSH
T1E665010BC10D67363C31643FBC3C8B203CDAE8F1F982B99AA7685284514569A5EFF975
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

GaripFshBot.rar

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

GaripFshBot.rar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

GaripFshBot/.eslintrc.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

GaripFshBot/.eslintrc.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

GaripFshBot/.husky/commit-msg

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

GaripFshBot/.husky/commit-msg

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

GaripFshBot/.husky/commit-msg

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

GaripFshBot/.husky/commit-msg

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

GaripFshBot/.husky/pre-commit

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

GaripFshBot/.husky/pre-commit

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

GaripFshBot/.husky/pre-commit

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

GaripFshBot/.husky/pre-commit

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

GaripFshBot/Bot_Launcher.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral14

Sample

GaripFshBot/Bot_Launcher.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

Behavioral task

behavioral15

Sample

GaripFshBot/babel.config.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

GaripFshBot/babel.config.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

GaripFshBot/cypress/e2e/1-the-whole-process/visit-sub-app.spec.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

GaripFshBot/cypress/e2e/1-the-whole-process/visit-sub-app.spec.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

GaripFshBot/cypress/e2e/2-the-vm-sandbox/dom.spec.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

GaripFshBot/cypress/e2e/2-the-vm-sandbox/dom.spec.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

GaripFshBot/cypress/e2e/2-the-vm-sandbox/set-global-variable.spec.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

GaripFshBot/cypress/e2e/2-the-vm-sandbox/set-global-variable.spec.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

GaripFshBot/cypress/e2e/3-the-router/auto-refresh.spec.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

GaripFshBot/cypress/e2e/3-the-router/auto-refresh.spec.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

GaripFshBot/cypress/e2e/3-the-router/disable-auto-refresh.spec.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

GaripFshBot/cypress/e2e/3-the-router/disable-auto-refresh.spec.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

GaripFshBot/cypress/e2e/common.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

GaripFshBot/cypress/e2e/common.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

GaripFshBot/cypress/plugins/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

GaripFshBot/cypress/plugins/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

GaripFshBot/cypress/support/commands.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

GaripFshBot/cypress/support/commands.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  GaripFshBot.rar
- Size 1.4MB
- SHA256 895a5b2985a1ae628b96418ae9923596a44cdbbd4201c2a4f09666d76d842d55
- MD5 c55cf655ac5ee34aa19c4ac3dbaba589
- SHA1 61f3629a2d47f036019064dcc52d1056cb6dbf75
- SHA512 62e165c242b2277d873653e9629059a482b60b788325d2cae7bc45c886148bce0215c344838e0d9ef9a953680b4fb30c460ea21d6fb85f18f908d8d0b62ed280
- SSDEEP 24576:Ku0ul9pVOXCJ8WFpIGwbDa8VjY37mHXB3pn7uchCI3Roq6SVZWABqgEmVTo6:KUl9eSJxFqbGO+7yR3pCchdfVcAbPr
- TLSH
  T1E665010BC10D67363C31643FBC3C8B203CDAE8F1F982B99AA7685284514569A5EFF975
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  GaripFshBot/.eslintrc.js
- Size 1KB
- SHA256 fb4452a2722fc4f0ab46d3c6f2073fc3b67e3cba6ec23c7500ddbc11e53888ed
- MD5 6b956fca173a1a273d23d46131c6041b
- SHA1 951e1dcca70358280b229c821eb2bcf4aa981952
- SHA512 df32c11157fe560887865324db13a0e517e90b419b8c95ea43f9a4d2ce18db016ca54a88652d95c7ea43a684ef78da41a2a98de8fbd0f77879479122d36a0472
- TLSH
  T19C412E265C7F992329B281BFDE5CA112A500404B6C3DBD30F64C43911FDCA5D1AF62B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  GaripFshBot/.husky/commit-msg
- Size 98B
- SHA256 22d7b28544b185fb69284dc6d7abdb32456dd227448e2551eb2c6535c7d48ea2
- MD5 8af5d3d7bf08c864c3b56a8e5560c782
- SHA1 c973759cd60cbc05b0f554d0cbad67cef07c4914
- SHA512 1bd10ea9a8348da55e010a487ea110ec1431e618b41b77c04ac5d9843c1a617c51955d85f796ded47d75578d25420a2b2dd9b53e0fbfbef9ad07f86165ed2c3c
- TLSH
  T155B012031801D7134605D0040F40C5195BD6F3FB3420F004C9824F228B93BE72C63A41
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  GaripFshBot/.husky/pre-commit
- Size 73B
- SHA256 e092e8851a61e359f1ee2c9b89086135abd49216cd1f1e06409ee32d11654181
- MD5 20287da8b90eb2dbe68702dcb48676ac
- SHA1 b078f0b332e876984cd14b7918b71cc68fe0a6d6
- SHA512 76444be69ad9ba3f5eef6c3e972302a5c554f06aa01c167afa68a8cbaf5c61a6ff9e6ada2bb158afb23eddc75af0f86fad2af67e75f46197e1eb67303a1e1402
- TLSH
  T1D6A0112200028800AA0B80020A802E228AC822B320F038288083022A8A2033230EA2CA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  GaripFshBot/Bot_Launcher.bat
- Size 5KB
- SHA256 2a1fa8be8a9bce8c4fb4a06fa4dbde92984d8ba1a66647042f14f45c513a162d
- MD5 df7fd5ef43e0692db46b0c2750a1e329
- SHA1 d659e2608e9a047993d6926f2a13577f2f76adf3
- SHA512 fba571efaf8be94d4ee66f8102ba05d6f958ba31ea14c4a0ae407a9e98fae2404a70a0b47340a7200254c1eaad9b639ebd9b48ee63adb7698c8f346e0d8f9bf8
- SSDEEP 96:TTxY2ZWI9eVJKZcS2lpTeec47nOQKz59DPhpAlg0BP8:Td8VJKKxah+OQK9768
- TLSH
  T15EB1A5103F20642E50B9CDA38A514101F77A62B7238AAC9E390FC699CF55783B3FE4E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  GaripFshBot/babel.config.js
- Size 257B
- SHA256 3cb58440cd3be7f70aedf61ad5e51a785b401902a0ae07e66eeaabdfca366dc4
- MD5 77f07763fd39115c8e829cd69c2b611f
- SHA1 90d84ae173dbd49206449337fd909ec3eba7964a
- SHA512 25060cf9d6ba40bb38f4d6d17a6cba742eb726cabb2fb172d60f42c863e2d09846c64f56aa7462159aa6e46f9181de1f1e5dea31b218239725a329c353084d1f
- TLSH
  T1AFD0A77384A85663A6102350D39C169394C801D31D28FD1233FD22C41F5DD1E56B1150
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  GaripFshBot/cypress/e2e/1-the-whole-process/visit-sub-app.spec.js
- Size 5KB
- SHA256 b66d58ff021e12d66cc16fe2516bfe4081c794f6732e1dbf44a3dd0c91cf740d
- MD5 4ea3dd6c3bc023a04e486941faaa2f2e
- SHA1 7411d463c04c4cbb14bdebebe3e97cb1a789c87c
- SHA512 32b8daf115a48709afba55962b36ebc59e42d4cdbaa843e2801a727cc69553fc7f5d860c049c956f0ec108c2425946e14186d98f14a400b43cc17f34509ec12c
- SSDEEP 96:FmhWnO689aPzTg/ylKKLf4MgSTSRPkOfP:Fmh68APzTgGLf4MgSTw8wP
- TLSH
  T136B1F2AB12B7003D0977349E9BBFE41A1249E023A39ADC1C3ADF83581FCB358E5192C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  GaripFshBot/cypress/e2e/2-the-vm-sandbox/dom.spec.js
- Size 1KB
- SHA256 9786917ec90ab126e0b2206feab55a613d68fe2bc71bf7d857e44fa0d016f207
- MD5 d5d031d91975566f2aacc7e0f4d1ca70
- SHA1 e180a17ef6eefb449d093f3d4990baa51a224a34
- SHA512 b828fcf473b233eeac8f2e1da339f29eb3cd7f2e14493dbc1bf083afadba0f246128b484e36b3665d3b8a56a5cb0e3a0c5ab9555884c2c2541b30552cfafd26c
- TLSH
  T18931392B29B7A03E0977A06C85BFD90D2215510362DCDE78BADC2B055FD936DF8D06C5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  GaripFshBot/cypress/e2e/2-the-vm-sandbox/set-global-variable.spec.js
- Size 2KB
- SHA256 8baba20cd25003e62507366f4dbaf752d16ee374ff545d8f11edd2f97f4f38f4
- MD5 ed8ce32e8c245637dac22d11a19eb42a
- SHA1 37ed3f316cb3313d95393c96fa0248a897181259
- SHA512 865b8d6fa86a59df80baa5120a2df2e9e4285aac247df2a37466dbfda5264d9a7c2f01855ebc23b5280c5df72367993f9d0c90333d2f878d78af1ba3ae9ab5ad
- TLSH
  T1AD519A6F12F750394973648C9EBBD449620A805362CEDD383EDCA7092FCA76DA2E07C5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  GaripFshBot/cypress/e2e/3-the-router/auto-refresh.spec.js
- Size 2KB
- SHA256 66ed9e67b8b9a084b7b4b0da4872760e6cce6b9625a07529f734501a1ff76906
- MD5 df63871366928228e57e6d7bf609bfb2
- SHA1 457410ca04b0d79a5ae623fd4487e6e6cf045b94
- SHA512 626ee3b4073e827f3b4af17ff8a897a01ac8f2cf55787d1f0b1e7f159c1c359a2e0d7c9b28418f6be05d458b02bd1cd81f86f4ae48732bdda885a9657933d829
- TLSH
  T1BD41EDAF03BB013C0967349C9ABFC41E265AE117664BDC2C3AEF93901FD622CE519684
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  GaripFshBot/cypress/e2e/3-the-router/disable-auto-refresh.spec.js
- Size 2KB
- SHA256 ca3d81a2de3a301f77ee20b5606463e6f4c9d9b7b99da4aecd73c675c54c2235
- MD5 ced8a28bb5fcc8282d32176b2d7742c8
- SHA1 4aec9c9d10b7ab005f0cbd636bd469d86599da01
- SHA512 ec077dbc9eafed976e8f80e5a95f60c12553a3debd9b4127c52247cc25724fdecc714acaa54bc98c63ab3cf782ebfd51b272f7294715067589b10d337c2723bd
- TLSH
  T10C41206F12B6003D0DA734CCEA7FD81E124AA027364BC8583AEF53A02FDA22CD61D5C0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  GaripFshBot/cypress/e2e/common.js
- Size 796B
- SHA256 1c417867b366dabb2c5fb11ab6893c13fd4ca406d7e0a8b9df5f59a5fe65b2ac
- MD5 033129683a15e372e024ceb921bc5b79
- SHA1 12df5a6f505dfb58663f139b18d38b7a7bc844a4
- SHA512 4caca157227a1474b4c32a29541dc3d8eb7644bab164c1190d5c1924940f48ff16efe410aeda33bff7f0f114ec50029fa871497a4705bd9c55ddc384d7489df9
- TLSH
  T15101F1ED92CC2844489314E6777F9B807A27FF713D01C968708C0A987FE5831F866A48
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  GaripFshBot/cypress/plugins/index.js
- Size 473B
- SHA256 39050b2bbf119cc58277bf73d69a9a9ad490243a27684af138b1dbf935a1e264
- MD5 86a261fac0c2742fd573c8e63864c504
- SHA1 4b1cebfa9916537dc03fa0063760c98c3771bb16
- SHA512 5c0583dddd782c405b51a5f0c2aff27d2470cb6cf47fcc204008063e91330bc608cdf63b3ea07a7a859cb92c11b03af851ec29bd25cabbdd3f84c23339ff1f6c
- TLSH
  T1C6F0D4F094AC2D430DD3709515CC9C33BB6A87A301D44D51755F93385F8598DC2ADE8D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  GaripFshBot/cypress/support/commands.js
- Size 838B
- SHA256 8d9eb8e1a5fb51def6358908d3a9c5b783bb49f86174d646eb4e44ef82d63083
- MD5 c68e8372db854f2b1c82f06a77e7f0b1
- SHA1 cbbb040083e15402fe3a2abf52439d5d8909608f
- SHA512 4537af70f6897fc0018578e33f896c31a19287fccf6f8b0677463bd17707e7b6101f937f72e966d3f05841e5960f4831b9717e7191732cc8d93468a909fa98d4
- TLSH
  T123016DBA02FCAE51025904F8371526FD9657CF0142A50AC3B53CBF40F21D0A4A4BE54F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy