8fce21cecb9a972b88ff3f42dad081922781ed7632442b1e9b1bd15466114c16 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

add_customer.js

windows10-2004-x64

3

add_customer.js

windows11-ltsc_2024-x64

3

add_staff.js

windows10-2004-x64

3

add_staff.js

windows11-ltsc_2024-x64

3

all.js

windows10-2004-x64

3

all.js

windows11-ltsc_2024-x64

3

expiry_checker.js

windows10-2004-x64

3

expiry_checker.js

windows11-ltsc_2024-x64

3

add_customer.js

windows10-2004-x64

3

add_customer.js

windows11-ltsc_2024-x64

3

add_staff.js

windows10-2004-x64

3

add_staff.js

windows11-ltsc_2024-x64

3

all.js

windows10-2004-x64

3

all.js

windows11-ltsc_2024-x64

3

expiry_checker.js

windows10-2004-x64

3

expiry_checker.js

windows11-ltsc_2024-x64

3

get_speed.ps1

windows10-2004-x64

3

get_speed.ps1

windows11-ltsc_2024-x64

3

id.js

windows10-2004-x64

3

id.js

windows11-ltsc_2024-x64

3

live_clients.js

windows10-2004-x64

3

live_clients.js

windows11-ltsc_2024-x64

3

reseller.js

windows10-2004-x64

3

reseller.js

windows11-ltsc_2024-x64

3

routeros_api.class.js

windows10-2004-x64

3

routeros_api.class.js

windows11-ltsc_2024-x64

3

get_speed.ps1

windows10-2004-x64

3

get_speed.ps1

windows11-ltsc_2024-x64

3

id.js

windows10-2004-x64

3

id.js

windows11-ltsc_2024-x64

3

live_clients.js

windows10-2004-x64

3

live_clients.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
lhgphp.zip
Size 629KB
Sample260813-aj85zawsfs
SHA256 8fce21cecb9a972b88ff3f42dad081922781ed7632442b1e9b1bd15466114c16
MD5 0af1e61fa1dfab34b2d7e28cf4401215
SHA1 032d16c0dd6e460d1f22ff72a68d3b8919ca3df3
SHA512 20b0bf1acec6b1dece785f9012e567b1d5348e940fbf91cf556c2a3d8622a7be3b65fbb4296e2533c6366e95bcb81eceb584a59df89bc5ac72de2895ea970599
SSDEEP 12288:B44jDdqzYZTXvYsC9V2JwuBZmekAENkE9CMEwuBZmekAENkE9T44jDdqzYZTXvYO:BjYbV2lzbBmeTzbBmzjYn3lgTD
TLSH
T1F7D422BD911899CFD19FCF33FDE86179A1CAAB0FC580E4E97EB0568D29205D12DB005A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

add_customer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

add_customer.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

add_staff.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

add_staff.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

all.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

all.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

expiry_checker.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

expiry_checker.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

add_customer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

add_customer.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

add_staff.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

add_staff.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

all.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

all.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

expiry_checker.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

expiry_checker.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

get_speed.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

get_speed.ps1

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

id.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

id.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

live_clients.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

live_clients.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

reseller.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

reseller.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

routeros_api.class.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

routeros_api.class.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

get_speed.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

get_speed.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

id.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

id.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

live_clients.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

live_clients.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  add_customer.php
- Size 13KB
- SHA256 a2a2a6a23e76a207cb2cf6530d328efa21dae1fa877a116b54451f0b48cec8b5
- MD5 72c659de73ccf8997b7a9e394eb07ea2
- SHA1 fa4d3e0f1bc7fdf9e7769a01919b33bc7d9b8bd0
- SHA512 cb08ab5b1bd09d937e131176593f22f599480940822f013d36799b578eb16894e5fb98d8239d8d88d5f7abfeb45515ab0d4bb8016a7589516d5d9a2fc38b1d71
- SSDEEP 192:n6ayd4Z4tNR1zhboM9sLFiZhNjf8CuvCrUj2IkhJnA:nQ3PRhEM92F8jjfHUP0VA
- TLSH
  T1B052B5113848046964B3E9E05A95470AFD16CE079305E260BC9EA2C64FBEC7DCCEBED6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  add_staff.php
- Size 23KB
- SHA256 ac11066f1fe2adf33fe11c84112929746933e758d20ccb007a4ac7529e1713e6
- MD5 fac00b9735e6efd53753b1c33161b9f2
- SHA1 0424e3dc1b9ae5ac4d47d3e5f11df73dd341a248
- SHA512 41da4668967aa53403a43b4cc53a54d5d9abf5195ad8235c27b043ef2dd32cb477ef48584b24437aaa1da27cae6f51adb839db328a449c6aa0ea503495d72fa0
- SSDEEP 192:4ZXSpeufIoSkve6kvdMCuobfTk5F9xrWLpxJ5NWdVMQ5GvHf6qYgUK9m38poSHuM:4You896Oi9qI/9TzdLEd9Fb2/OO+NoON
- TLSH
  T1A1B2D71220ED20716087DDE12B96536638B1CD4BD306D718BCAE53D8EF8DDB98CA76E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  all.php
- Size 25KB
- SHA256 6f12c44059a8397cd4fb4f759a9e08905438265a1d61eace67005ff207eef41e
- MD5 1aab285807b78397e35145229b760c39
- SHA1 1a541da245b63000cc3ddeb4cbfa00b01b1bc28f
- SHA512 ea2f95e912414a59bb55ffa55787bc4287b2ab7a3d7e74bbaddd9c6bf9686b3b7cee8167f16b5878b0078a6c081c2a6afc9ad23f658370c92fdc9328b2a5a70a
- SSDEEP 384:Skn9/4po89U9y/WlrXlgwst0hDDKUwDVtv:Pipo8e9y/WlJ+tADKUQV1
- TLSH
  T1A7C2B61230BC20716483D8E15B9A9B573952CD8F9600D754BC6E81D89F8DCF8CAFBAD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  expiry_checker.php
- Size 11KB
- SHA256 0e2d6865b0d53514dd6056aa6df1ec80ed8009f1527a86c6438dba74587a1434
- MD5 74649c05eaf9b5da2baae56fa462355f
- SHA1 9347a758f07c86547ac0ab07c536141646438a8b
- SHA512 c94df61e12bbde70f1d399a32a5549afd46a649a672801dad8e3795dd3b43e21b31b8666c004b72c69ed69f359d62e934011933dfc438e1ed566d26aaba4f1dc
- SSDEEP 192:Mwy34/ej3zcH9VS6mywB3dGaSuwf4PY/w5lkwlrLzJuhBl:MAejc+fyJelkqLluhBl
- TLSH
  T15932B522649C5071B4B2CEE0E31A6B11FA528D078611E324FC5F41956F7DC398C6FEE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  add_customer.php
- Size 12KB
- SHA256 5da3f37ae8445b896709605acba7317bf3023593ebb04791e9313e2eb5414d04
- MD5 3b764d31f3be89a6d426404f86682ae7
- SHA1 2b72439d11b47f005a1c60b1734b051bee9b9124
- SHA512 15ae71bdbcc3ab72f8f72ea61c1a76dbe1928e06c43092964cf12600a8a4fde36cbd5f1a645b1b7e6ef8185ae6c6fe05f7775481db217c11ddeca739a184dd61
- SSDEEP 192:sBG7Fi4PJC1huZLUM94Ti9hLpzbw2O59c192YPldqXqH2yJSrUp6/zo2Xe:swcFPuZAMyTk78PbU8zO
- TLSH
  T1B642C51038F914657087E4E06ADA570A3966CF079304D660BC9D92C48F9EEBCCDFB6E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  add_staff.php
- Size 23KB
- SHA256 ac11066f1fe2adf33fe11c84112929746933e758d20ccb007a4ac7529e1713e6
- MD5 fac00b9735e6efd53753b1c33161b9f2
- SHA1 0424e3dc1b9ae5ac4d47d3e5f11df73dd341a248
- SHA512 41da4668967aa53403a43b4cc53a54d5d9abf5195ad8235c27b043ef2dd32cb477ef48584b24437aaa1da27cae6f51adb839db328a449c6aa0ea503495d72fa0
- SSDEEP 192:4ZXSpeufIoSkve6kvdMCuobfTk5F9xrWLpxJ5NWdVMQ5GvHf6qYgUK9m38poSHuM:4You896Oi9qI/9TzdLEd9Fb2/OO+NoON
- TLSH
  T1A1B2D71220ED20716087DDE12B96536638B1CD4BD306D718BCAE53D8EF8DDB98CA76E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  all.php
- Size 25KB
- SHA256 41bb8b389789f391ce22dcad8e0bc371e65f42368b03264abe242af6829c6613
- MD5 1c71d4a39a015ee5a390ffdb544baf1d
- SHA1 3aaae3732a1179939a661027103116590c46d9ce
- SHA512 59243745ce88d47a08a7d6111eca701f94977f996d639d91a05aa34db98177e8c6e6fb7ba7d7f8c05ffb04b251478858f984b47cffd4848816e3702ea4be2b26
- SSDEEP 384:Skn9/4po89U9y/WlrXlgwst0hDfKUwDVtv:Pipo8e9y/WlJ+tAfKUQV1
- TLSH
  T177B2B61230BC20716483D8E15B9A9B573952CD8F9600D754BC6E81D89F8DCF8CAFBAD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  expiry_checker.php
- Size 9KB
- SHA256 3531b3abaf5e0e9e91a46fab4ffc2ff327922d6e84d26c84bbe9c2f4848a8471
- MD5 7e2b14cae9a31549a5ebb913451de57f
- SHA1 670f99d7bee3c5120b2458853dbf2a5a52427df6
- SHA512 00d3674e59cbaa90f8968e878ac13bf50a27aa703556c8e8cafe00d8e746b84ca1689ef359fd6c2a224a7867f717cc264067ebbdcadbe08465e1feb6be12164a
- SSDEEP 192:cVH0iGlXvc473L9nyalgIymmM7uJwB9TIIydURJ6fOpUrjFrbilDLzxuhk:cz835Jc3FOLtuhk
- TLSH
  T1C312C62228EC10707446DED067691B527A528D0BC600EB74FC5F41A4EF8EDBD4DAFAE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  get_speed.php
- Size 3KB
- SHA256 685c4694fdd577e84315be310a54515946cfbecb7c3ea9b75050bcba70af9c81
- MD5 7f1c8585acf3cc06e4670180b449805a
- SHA1 2ab14e2ef7ea8471ef40a54762fa4aa4271e9c34
- SHA512 889c249bf9294914f9672279319fcef0852a38c6e8516ddd4ba5521f9c5b5e01309ad2042b6ed07ae9817d9e2048fa4119a2a2a28edbcf9e6248462e179264a4
- TLSH
  T13561AC04646F64B4B482A8F80B9D292064424E035795CE09FD6E61897FDDEFCCCACFE5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  id.php
- Size 9KB
- SHA256 1a9ec094405e334df941ccf6f4a8e7bca97ebbc82a6ce9d88ec358619a3dc0d4
- MD5 d752c3fb8f1f077b749f8e52000e28b2
- SHA1 886217d51fbb66c76af4f87fb151a2d7def3811d
- SHA512 53015e0029742f1b11ac4b4388189c2f8eef008fe35065f69b55fbbdd9e6756c93b5c73fd12eb12e5edad89be1703625b879d786987737002339f1d8d0b850eb
- SSDEEP 192:VJK8HV6S7X5uliYPknh+DB6GKdExMqIYw0GX0mcdqJRcemuXqoVmmfh6:VJK2t54YANPGcemuXRVmmfA
- TLSH
  T18612431674FE6072B443A8D76B1AA75126528C4B4202DE14FD4F52D4AF8CDBCC8BBAD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  live_clients.php
- Size 16KB
- SHA256 54f7f46577fc731bb9d7696c2576e8f515430251892d67c7c18f04531c9cdc9c
- MD5 ee1d431714d7faa476862e95a63dcc25
- SHA1 ee99d9acf1d51e56f33a206eda1c285463af1791
- SHA512 397830e7b757ee9e7d13ff8abc1462589b2bf4aa94bf3c447c17197f6f2deb0a9d13c2b7ceece46313185522e0d05f74d3864c02a23de263278d9d9f2b78c3cf
- SSDEEP 384:bkClHMWycA/nGfgtzcewPLYqV6OO46eTmfM4iAiTJs7isi4:JFycA/nGfgtzcewzYqdO46eTyMVdFseG
- TLSH
  T11E72A506A5FD107025D398D52B5A9B063962CC075641CA38BD7E81D8DFCDCB88CBBBE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  reseller.php
- Size 9KB
- SHA256 a14ce07e118d0ae0b23d92ebea3b764face09c28ab5e447e61d23f23a9d3e604
- MD5 a8c80b7130b77f2d59d89e1136c82e65
- SHA1 f08831980bfdd6cb04ee679a05b566c286d207a7
- SHA512 2d2ce1e3df9553fa5444ed0d111bd86eb96b768e3b597c14faa9025c9693bcdb3b546ee18958a40c8d4d704740930d76ae0357f57b6e5372e591ee2d5f601c5e
- SSDEEP 192:J4/YwZcGWFiIO9Hck6+DVWT1GV6ocHVbBUHqEBgjuwjvvR52Gp9TGNSJ5zwOe:J4/dcP0Io5JF8ni
- TLSH
  T16212D63231A814217193DCD57B4A6B565626AE03D207C77ABCDF4180CF4E8789DFEB4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  routeros_api.class.php
- Size 15KB
- SHA256 b81716733b3554f684cdc22fa3fe0a407ae31787af8c86d57e9eb0f7616cfbf1
- MD5 173392776adf015e22f9cdc8c6bbd3d3
- SHA1 7a7ef008d0dea0f1c1427b67527c2acda189df52
- SHA512 e3892e3531f6f8f09788095c3dc883caa32290e717c9b92f793773c4d5e76490ca7d8f40e0991ebc1361794420c0f070905c124a08dbdbcb10fdfbe2084c260f
- SSDEEP 192:q91IDE/EbAJ+O3taya9TeSCyiS1E3H+WbUQf7fxSDt0z7fxSCJEY4oekiKCG7R99:kGDE/aPTevgVlGDj
- TLSH
  T1D362334836E70D7962337078174FD041B225941B2209CA567CAEBBE0BF95B38C6F0EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  get_speed.php
- Size 3KB
- SHA256 685c4694fdd577e84315be310a54515946cfbecb7c3ea9b75050bcba70af9c81
- MD5 7f1c8585acf3cc06e4670180b449805a
- SHA1 2ab14e2ef7ea8471ef40a54762fa4aa4271e9c34
- SHA512 889c249bf9294914f9672279319fcef0852a38c6e8516ddd4ba5521f9c5b5e01309ad2042b6ed07ae9817d9e2048fa4119a2a2a28edbcf9e6248462e179264a4
- TLSH
  T13561AC04646F64B4B482A8F80B9D292064424E035795CE09FD6E61897FDDEFCCCACFE5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  id.php
- Size 9KB
- SHA256 1a9ec094405e334df941ccf6f4a8e7bca97ebbc82a6ce9d88ec358619a3dc0d4
- MD5 d752c3fb8f1f077b749f8e52000e28b2
- SHA1 886217d51fbb66c76af4f87fb151a2d7def3811d
- SHA512 53015e0029742f1b11ac4b4388189c2f8eef008fe35065f69b55fbbdd9e6756c93b5c73fd12eb12e5edad89be1703625b879d786987737002339f1d8d0b850eb
- SSDEEP 192:VJK8HV6S7X5uliYPknh+DB6GKdExMqIYw0GX0mcdqJRcemuXqoVmmfh6:VJK2t54YANPGcemuXRVmmfA
- TLSH
  T18612431674FE6072B443A8D76B1AA75126528C4B4202DE14FD4F52D4AF8CDBCC8BBAD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  live_clients.php
- Size 16KB
- SHA256 54f7f46577fc731bb9d7696c2576e8f515430251892d67c7c18f04531c9cdc9c
- MD5 ee1d431714d7faa476862e95a63dcc25
- SHA1 ee99d9acf1d51e56f33a206eda1c285463af1791
- SHA512 397830e7b757ee9e7d13ff8abc1462589b2bf4aa94bf3c447c17197f6f2deb0a9d13c2b7ceece46313185522e0d05f74d3864c02a23de263278d9d9f2b78c3cf
- SSDEEP 384:bkClHMWycA/nGfgtzcewPLYqV6OO46eTmfM4iAiTJs7isi4:JFycA/nGfgtzcewzYqdO46eTyMVdFseG
- TLSH
  T11E72A506A5FD107025D398D52B5A9B063962CC075641CA38BD7E81D8DFCDCB88CBBBE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy