e0eacd963edd67701aad2bc65234e8384d38c8f01d3b395d05f7a20e697eeed1 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

PayloadsAl...n.html

windows10-2004-x64

3

PayloadsAl...n.html

windows11-ltsc_2024-x64

3

PayloadsAl...oDB.js

windows10-2004-x64

3

PayloadsAl...oDB.js

windows11-ltsc_2024-x64

3

PayloadsAl...SQL.js

windows10-2004-x64

3

PayloadsAl...SQL.js

windows11-ltsc_2024-x64

3

PayloadsAl...ion.js

windows10-2004-x64

3

PayloadsAl...ion.js

windows11-ltsc_2024-x64

3

PayloadsAl...ame.sh

ubuntu-18.04-amd64

1

PayloadsAl...ame.sh

debian-9-armhf

1

PayloadsAl...ame.sh

debian-9-mips

1

PayloadsAl...ame.sh

debian-9-mipsel

1

PayloadsAl...ify.rb

ubuntu-18.04-amd64

1

PayloadsAl...ify.rb

debian-9-armhf

1

PayloadsAl...ify.rb

debian-9-mips

1

PayloadsAl...ify.rb

debian-9-mipsel

1

PayloadsAl...ize.js

windows10-2004-x64

3

PayloadsAl...ize.js

windows11-ltsc_2024-x64

3

PayloadsAl...ode.js

windows10-2004-x64

3

PayloadsAl...ode.js

windows11-ltsc_2024-x64

3

PayloadsAl...PHP.js

windows10-2004-x64

3

PayloadsAl...PHP.js

windows11-ltsc_2024-x64

3

PayloadsAl...DME.js

windows10-2004-x64

3

PayloadsAl...DME.js

windows11-ltsc_2024-x64

3

PayloadsAl...xec.js

windows10-2004-x64

3

PayloadsAl...xec.js

windows11-ltsc_2024-x64

3

PayloadsAl...76_.py

ubuntu-18.04-amd64

1

PayloadsAl...76_.py

debian-9-armhf

1

PayloadsAl...76_.py

debian-9-mips

1

PayloadsAl...76_.py

debian-9-mipsel

1

PayloadsAl...805.py

ubuntu-18.04-amd64

3

PayloadsAl...805.py

debian-9-armhf

1

Sharing

Copy URL Twitter E-mail

General

Target
e0eacd963edd67701aad2bc65234e8384d38c8f01d3b395d05f7a20e697eeed1
Size 7.5MB
Sample260813-ccvecaxzgx
SHA256 e0eacd963edd67701aad2bc65234e8384d38c8f01d3b395d05f7a20e697eeed1
MD5 005446958cc27aa1c48b50872ccb3292
SHA1 7d0c9e4ad63f504a1287e78c77309977632f9640
SHA512 6f2f72c86f88b3d81ff59288a5fa67f8980b207e4d4b4eaf1f0d9692042828ed4f67d491d85dbe1146381ab8a45399439167336bfef3a125299cdfc6e2d28080
SSDEEP 196608:pf0R7G7pkewDjAoKi5MjZWB941rt3GL/EBOKHzq:pfm6qevoKyIGAOG2
TLSH
T14586336E5364C858CC7326BF181B0502F3A57C1AFFDC0A956ECF5A1E9A0BB0D6E4426D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution linux

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

PayloadsAllTheThings-ZH-master/.github/overrides/main.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

PayloadsAllTheThings-ZH-master/.github/overrides/main.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral3

Sample

PayloadsAllTheThings-ZH-master/NoSQL 注入/Intruder/MongoDB.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

PayloadsAllTheThings-ZH-master/NoSQL 注入/Intruder/MongoDB.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

PayloadsAllTheThings-ZH-master/NoSQL 注入/Intruder/NoSQL.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

PayloadsAllTheThings-ZH-master/NoSQL 注入/Intruder/NoSQL.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

PayloadsAllTheThings-ZH-master/SQL 注入/OracleSQL Injection.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

PayloadsAllTheThings-ZH-master/SQL 注入/OracleSQL Injection.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

PayloadsAllTheThings-ZH-master/rename.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

PayloadsAllTheThings-ZH-master/rename.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

PayloadsAllTheThings-ZH-master/rename.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

PayloadsAllTheThings-ZH-master/rename.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

PayloadsAllTheThings-ZH-master/不安全的反序列化/Files/Ruby_universal_gadget_generate_verify.rb

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

PayloadsAllTheThings-ZH-master/不安全的反序列化/Files/Ruby_universal_gadget_generate_verify.rb

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

PayloadsAllTheThings-ZH-master/不安全的反序列化/Files/Ruby_universal_gadget_generate_verify.rb

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

PayloadsAllTheThings-ZH-master/不安全的反序列化/Files/Ruby_universal_gadget_generate_verify.rb

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

PayloadsAllTheThings-ZH-master/不安全的反序列化/Files/node-serialize.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

PayloadsAllTheThings-ZH-master/不安全的反序列化/Files/node-serialize.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

PayloadsAllTheThings-ZH-master/不安全的反序列化/Node.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

PayloadsAllTheThings-ZH-master/不安全的反序列化/Node.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

PayloadsAllTheThings-ZH-master/不安全的反序列化/PHP.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

PayloadsAllTheThings-ZH-master/不安全的反序列化/PHP.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

PayloadsAllTheThings-ZH-master/原型污染/README.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

PayloadsAllTheThings-ZH-master/原型污染/README.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

PayloadsAllTheThings-ZH-master/命令注入/Intruder/command_exec.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

PayloadsAllTheThings-ZH-master/命令注入/Intruder/command_exec.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

PayloadsAllTheThings-ZH-master/常见漏洞与暴露/Apache Struts 2 CVE-2013-2251 CVE-2017-5638 CVE-2018-11776_.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

PayloadsAllTheThings-ZH-master/常见漏洞与暴露/Apache Struts 2 CVE-2013-2251 CVE-2017-5638 CVE-2018-11776_.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

PayloadsAllTheThings-ZH-master/常见漏洞与暴露/Apache Struts 2 CVE-2013-2251 CVE-2017-5638 CVE-2018-11776_.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

PayloadsAllTheThings-ZH-master/常见漏洞与暴露/Apache Struts 2 CVE-2013-2251 CVE-2017-5638 CVE-2018-11776_.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

PayloadsAllTheThings-ZH-master/常见漏洞与暴露/Apache Struts 2 CVE-2017-9805.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral32

Sample

PayloadsAllTheThings-ZH-master/常见漏洞与暴露/Apache Struts 2 CVE-2017-9805.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Malware Config

Targets

- Target
  PayloadsAllTheThings-ZH-master/.github/overrides/main.html
- Size 814B
- SHA256 a0c2ad9c2b488969cd7f2e90770f192bba70937a987516ccb91279a1932143bc
- MD5 23385c714cc9074f8d7c5e70b2a9f49c
- SHA1 e3babe6958c533ac94062584b12cc0a31157a8d6
- SHA512 fb98243399513bdd9a81634dfe04e31506bf79a73fcf3eb807c5b7ad526637059e7ad320dc0dca521a2536c33c79ddf797d1c78825c3bfb25b85f263e3ee011b
- TLSH
  T100014E63CFF681D2375170C183A5772CBD91E54BEA86A483B5F941B09BC5E841507241
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  PayloadsAllTheThings-ZH-master/NoSQL 注入/Intruder/MongoDB.txt
- Size 560B
- SHA256 4ed637e85b7509b54a93ea3a41181032383aba6b4ff4900cb11359cbc52601b4
- MD5 5841dcfed1153b8aad6203db71c28e4a
- SHA1 4192fca16045f8b498b33a69de9907191af87405
- SHA512 bf6ae67fc9500092d378f31702307c8bf19ad41c899605988be6ece0bae9b9d2381b53e418df39b87af97f0dfc2dcf9ea98aaa472ef647b057f0203f622a88ef
- TLSH
  T134F0FCC7B6D599328FE08160E489C0F278541C63688A006CFE7CBDE8BD1AD65955FB0E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  PayloadsAllTheThings-ZH-master/NoSQL 注入/Intruder/NoSQL.txt
- Size 677B
- SHA256 856ea2432e33b939e9bb553bea34a98e00ad34ced1601f0a6c3446acce3db24f
- MD5 dd28c298f1b258022a00fb47fd1fd1c5
- SHA1 ceca5fba07cc8b11eb5caa6c03dad197198c5ba2
- SHA512 d9c2247ca5ca79a4f39c7859e8da062a47399d961800f5598e0df88473aed0da4e42fd6e308e408eac3f9593eb4e220b104f2cc1db4146b7f068e479cb8437f0
- TLSH
  T10A017BDAA6C499368FF18211E45980F17D146C23788D016CEA7CBDE8FD29C61D49EB0B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  PayloadsAllTheThings-ZH-master/SQL 注入/OracleSQL Injection.md
- Size 12KB
- SHA256 59c88fec9d3b4865165fd39ed984e4553ba8771594d8d3c5671a423c970f173b
- MD5 116c82d8c26ba7fd13ab47428d9c6797
- SHA1 8fb174214efa409929af898f8e585dcb53a81fb0
- SHA512 c6ef302dc2dacf793ca8fd93c0c49301bc837c24240f20416e30d9e4b2b3fe08acaf617a2f0b43d6cb92ced46eca8dabf4cfef76e7deb5a4659cdb70f78517de
- SSDEEP 192:VTnJ5Hu5TGSW+zsbzeipQ+KzKzeuH78H3Wvd+CgFcfVS:VTnyRjkr8XpCkyS
- TLSH
  T14842D9CE3DC9FD2036B5D4A389512CCEE9024C1FC5495530BD9CE488DF88649AAAEB87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  PayloadsAllTheThings-ZH-master/rename.sh
- Size 3KB
- SHA256 110fc8f0e31e30846aea06623276057474cbe1aee619579769548eb792f3f3cf
- MD5 263ea32c09c5865811911c5b4cf6e65f
- SHA1 1a2a1dc60251c35f2d2dadf88eb022f5ff60e2cf
- SHA512 9fb47d46524d4e8f329bdb3e0ac76dc29ac3666d5a246006cd57576204afbe96cb9ff0ea3e392cc4079fd207878b16d734b658ec6f73ff3fcb7f2837fdde385a
- TLSH
  T13F6164B97A04D2F019DFD7781BC753916C724DA4B0A0212C4C9386BD665E73053C67EB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  PayloadsAllTheThings-ZH-master/不安全的反序列化/Files/Ruby_universal_gadget_generate_verify.rb
- Size 1KB
- SHA256 6dae21ec884f60525fdba999afa8f66a44bf6dfe08051a38fd637a4056a91f2e
- MD5 f7f7c423d792310fd6b309e6093b8b15
- SHA1 7d6fd2e69c985ffc7a48709b3a6773b7db83a684
- SHA512 b6e3295b966dc74517c4116683c4b422d75b4594c4dee01d5011162e966959af3f13491ed492981021981732cba90639a6014813c8eb7217c645a7a7bf72b789
- TLSH
  T1BA2147BECBD9A884F9CBE475CED8E9F05492F61E0C8B2B04D2940609405F503FC9316E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  PayloadsAllTheThings-ZH-master/不安全的反序列化/Files/node-serialize.js
- Size 228B
- SHA256 c8e6799867ca98dab29e25129e419763a5ce8a9d37d9df8df43e44696f859fc8
- MD5 b5539372fe327d54d1d0e562ecadb51f
- SHA1 26667787366f0ff14865b9ed06ecbaef83564785
- SHA512 b6c456f631dd015589f54e7228e5b074c51396ab73b1fd10433c6b509daed869441e64b3f9ee56c69d06fa911c4db7bc1f9ce8d5a074418eab8d9b97ac47dc2c
- TLSH
  T1F8D0A70D5F985F3271227011F87B598631734A13001674D029C640B34FE05CD8F42EFD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  PayloadsAllTheThings-ZH-master/不安全的反序列化/Node.md
- Size 2KB
- SHA256 2d5c60bd6ef528fb09a329a6c0dd26dfdc9bdfcbdc7c2f8a3074e5052df28f86
- MD5 e0eb04331cca140c18c5270f89243aaf
- SHA1 e74996e85d3b7a76ef2f257d6a274fb2a378115d
- SHA512 80820004f1d812098a14056296186aa37f14e5bc7aed82f1142ec7df346feef982636011f5696016e7d963ebecc0dd9640f2a5ab7d03788e33aaa745f7ff8f66
- TLSH
  T13441520D9A781B1A234B30936D7F6685783774674244E4A0B2CF80F61FE469CCB16EEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  PayloadsAllTheThings-ZH-master/不安全的反序列化/PHP.md
- Size 13KB
- SHA256 bf83c0d59f4fae86a78e2ef5a69348436f02caf671e146882ae85489ec9d5794
- MD5 c90c2c133516b5679a0fbbbe2809ffca
- SHA1 48e032ca9435161767060850d6e46fd3357f62a0
- SHA512 eb9f6dd6a2a00e43f17eb5b050b68f569efddd372d19d49454bfbe1300133c9f0434dc684ec0804034a75a3dd3acadac630ec238972d4ffce9b14fc675f66a96
- SSDEEP 192:m+wWTU9la7yinJiTirA6fKsHN9AJudfiRMhAtHXMmJbTuWh7K7oB4ZBJ7ss0XG15:mDESst9AJudfiRa63DsWh7go610esgt
- TLSH
  T1E952D96A31918EA00B0065EB2767A144E432710FE056E5C4B1DCD7B4FFD2A6CF762A5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  PayloadsAllTheThings-ZH-master/原型污染/README.md
- Size 8KB
- SHA256 40ed261334709bfcb51b5e81d38a16238fbe5843c9e84867309718c2b4871a46
- MD5 f0d644175db0b998db82f947eca01fd1
- SHA1 2028055757708b621cbe70028569e69f1a9dada4
- SHA512 302b75004b05e3206e79b0d627b67381bd9deb833bc84b120abc273eb79d01c1a42fc0b160f2e462164342998de2c05483551c62b6088745f07efdae98136521
- SSDEEP 96:GPT2OS6W9OeatenaN2StkpzPSE5bqs0r6UrCG8+UTI1gLUTHZ9iE6onEOr80/7iV:GVWgVeAYbqs6Kd++BL+HZ9iE3ntdi2I
- TLSH
  T16A02C897EC008AD92BDE05D11A69606CF72EA47ED9B180CC718DE0716FC7376E38706A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  PayloadsAllTheThings-ZH-master/命令注入/Intruder/command_exec.txt
- Size 19KB
- SHA256 e67a624f363af20b3c35b0016445454a7a36cfe85f9e4ce996b91755e602cf33
- MD5 34fc6208cff6707ffc226e5315db8b65
- SHA1 b890ed959b52caac5cd0d6bb9a3f421bab52e569
- SHA512 e50aae42c5def46ffe7cd04f172a1115cd6b95e8284ab2859cfe63e8d73a85618f9c55281f8311e3f4bba7204abc1c20466cfafe8c7c3e1154f2d0979802cd83
- SSDEEP 192:lo2A2f2r2k2a23yxBNwu89ZZZAZAZUZiZjJAMF6/6EyOmuEnywj6UpdRY3TSZ+Po:FyxBNwuAIyOh4TT1ggR
- TLSH
  T1D6929793900E4CBD2B6D8E94F712963D49B3E50F1B85EB79C2B422F684194F42E3BD52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  PayloadsAllTheThings-ZH-master/常见漏洞与暴露/Apache Struts 2 CVE-2013-2251 CVE-2017-5638 CVE-2018-11776_.py
- Size 10KB
- SHA256 d067594331cdce24e46dcfe780d523a807ea5536e27071796a20e0260485d215
- MD5 88265a817da34d231f01749cad9fd933
- SHA1 5ed6adf29b7c1ffce61893fcdfd9157880e4cf41
- SHA512 e3c913559c6fa11c852eb66e4627e577c67a016a40b7a57e33c4d0ac582426b64593272e53cc74a0e354cd6c88e11022f12bef0c60a87c483331d69d3928df03
- SSDEEP 192:XNumaKqlaxRzBt8LYPycHToZ5F45+pq8LctqtAfAuM:XpzwLYfUnLctqC4uM
- TLSH
  T1F13296468D0AB9229B5AE06DCD96C526EA173E2321546634BB1CE4E04FF467CD23CFF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28 behavioral29 behavioral30
- Target
  PayloadsAllTheThings-ZH-master/常见漏洞与暴露/Apache Struts 2 CVE-2017-9805.py
- Size 13KB
- SHA256 c7e490999082e80b3086c52379657fbcc8f8498cd682a8c56ec7062a1b13c77a
- MD5 de0f300fcd856365a3f64a64092ded3f
- SHA1 f0b1f8d4ccd5f506e6ea50a1f334d03152e6f361
- SHA512 9b53b75da81bab89ef373d3c00e4f0caaa822ad72adbfde5bb456ac7b2b58dc7a508f58466d8503ac1399fb8c80d778cad3c00b5acc963ee309cf56c4d5dcb06
- SSDEEP 384:HjN+yey+B2oOHFvBmysRmrQhDgOokN6ou2mfJFT6V:HjroAFvBzmZN6oXmXeV
- TLSH
  T15952F93A1DFABE390393408D867057C09F4628634955A0B4F9EC3799BF8EC19D637279
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Unix Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

discoveryexecution

behavioral32

© 2018-2026

Terms | Privacy