2a6617290c4ab751756d6ea56c8f3de62bba5cb767ad4908ed4d35c57540310a | Triage™

Login
Reports

Overview

overview

7

Static

static

1

algodesk/a...set.js

windows10-2004-x64

3

algodesk/a...set.js

windows11-ltsc_2024-x64

3

algodesk/a...ate.js

windows10-2004-x64

3

algodesk/a...ate.js

windows11-ltsc_2024-x64

3

algodesk/a...des.js

windows10-2004-x64

3

algodesk/a...des.js

windows11-ltsc_2024-x64

3

algodesk/a...lth.js

windows10-2004-x64

3

algodesk/a...lth.js

windows11-ltsc_2024-x64

3

algodesk/a...ent.js

windows10-2004-x64

3

algodesk/a...ent.js

windows11-ltsc_2024-x64

3

algodesk/api/ltp.js

windows10-2004-x64

3

algodesk/api/ltp.js

windows11-ltsc_2024-x64

3

algodesk/api/order.js

windows10-2004-x64

3

algodesk/api/order.js

windows11-ltsc_2024-x64

3

algodesk/build.sh

ubuntu-18.04-amd64

7

algodesk/build.sh

debian-9-armhf

7

algodesk/build.sh

debian-9-mips

1

algodesk/build.sh

debian-9-mipsel

1

algodesk/d...set.js

windows10-2004-x64

3

algodesk/d...set.js

windows11-ltsc_2024-x64

3

algodesk/d...ate.js

windows10-2004-x64

3

algodesk/d...ate.js

windows11-ltsc_2024-x64

3

algodesk/d...des.js

windows10-2004-x64

3

algodesk/d...des.js

windows11-ltsc_2024-x64

3

algodesk/d...lth.js

windows10-2004-x64

3

algodesk/d...lth.js

windows11-ltsc_2024-x64

3

algodesk/d...ent.js

windows10-2004-x64

3

algodesk/d...ent.js

windows11-ltsc_2024-x64

3

algodesk/d...ltp.js

windows10-2004-x64

3

algodesk/d...ltp.js

windows11-ltsc_2024-x64

3

algodesk/d...der.js

windows10-2004-x64

3

algodesk/d...der.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
algodesk-full-project.zip
Size 259KB
Sample260814-akhpeaec32
SHA256 2a6617290c4ab751756d6ea56c8f3de62bba5cb767ad4908ed4d35c57540310a
MD5 a4e0cceb9ddbe7bb71bebb852f59d451
SHA1 32e39e80e5dd2fd6cab277d2da4e8ed7da10ce71
SHA512 6c757b1ab891f06dd83e0a8dce839f18e52ece1b220420d6ad0f2ba756d5db04ec8e1bfa0f90c5d5f571fc5dc475c4e0439f0e5419139bcf8a7f88040e1f7efe
SSDEEP 6144:WMrg0XASG+EF3yd2qUz/QiSrs3qaJlAMUtoAs58FP:WMJXASGffqUV0uqaJl3l2
TLSH
T1B04402BCCF146485CDAFB8FE50A3079E67DB8875458432EA1514752DBE0F28A27B0EC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

antivm discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

algodesk/api/db/reset.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

algodesk/api/db/reset.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

algodesk/api/db/state.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

algodesk/api/db/state.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

algodesk/api/db/trades.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

algodesk/api/db/trades.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

algodesk/api/health.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

algodesk/api/health.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

algodesk/api/lib/AngelClient.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

algodesk/api/lib/AngelClient.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

algodesk/api/ltp.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

algodesk/api/ltp.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

algodesk/api/order.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

algodesk/api/order.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

algodesk/build.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

8 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral16

Sample

algodesk/build.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

8 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral17

Sample

algodesk/build.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

algodesk/build.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

algodesk/deploy/public_html/api/db/reset.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

algodesk/deploy/public_html/api/db/reset.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

algodesk/deploy/public_html/api/db/state.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

algodesk/deploy/public_html/api/db/state.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

algodesk/deploy/public_html/api/db/trades.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

algodesk/deploy/public_html/api/db/trades.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

algodesk/deploy/public_html/api/health.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

algodesk/deploy/public_html/api/health.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

algodesk/deploy/public_html/api/lib/AngelClient.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

algodesk/deploy/public_html/api/lib/AngelClient.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

algodesk/deploy/public_html/api/ltp.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

algodesk/deploy/public_html/api/ltp.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

algodesk/deploy/public_html/api/order.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

algodesk/deploy/public_html/api/order.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  algodesk/api/db/reset.php
- Size 671B
- SHA256 175bf634c556039cc103b3e72f6b0c123a7197750c1dd060fe0fd7e92b628ac8
- MD5 f98fbe577a2fd36014afa9ec551fb423
- SHA1 fd6d7ef79c5f4fe6b4290b334f551c3affba8901
- SHA512 5d8cccf48f9a7a72523625a4e5319162e9a377b2b61c1f9ae355c8ea8afdf30df468f2892407d25951f4648e25aeddd37885ebb07b26f7a5c3732dfe311ad35c
- TLSH
  T11E01F49130FD1B21EF7DE0941BCAE004649DC81F134989107D3066921F847B0CBF5266
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  algodesk/api/db/state.php
- Size 1KB
- SHA256 739146c8e87c71fe92d13323d4dcdbca454f62c39bea05dd6270983dee6ca202
- MD5 79025f7cb2eb283661ec520e3a9a2808
- SHA1 cbcacfde4d18c9a3a7bb9ceeb7e9092afa2f20c2
- SHA512 62ccc163234028bf3e2d8af1b5513cd61a02886bffde4b60bb41226b57edb13143ee95076ce5df136d75028dcc3ac4766f50a8225c3574008aaa864e75a655f0
- TLSH
  T154211425A4F70B61D97F785D028FA124549AC41F17518560FE2E26D01FD03B9CB7C2B9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  algodesk/api/db/trades.php
- Size 1KB
- SHA256 3db99a8ac13ce614009f40d9ad614182e58cb20314d140f23725f6a9a7fce0f0
- MD5 790c83b3280a75066230f9337fcf2c16
- SHA1 aeea7a6a5bf307e1447b3b29f240b9e02a0fba0f
- SHA512 5c362bf3202d45db8c732f51abd198b10fc8be9f71dc5323f4ad30d03b0cfda44c2da39cc32ef28dcfe71fdd3be42b398358f1818976e511236c526ef6bb5f3b
- TLSH
  T18731865D60A623B481BEE4880E46C49555E6C00BE210C050FE1E2ED42FD4FACCBB4678
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  algodesk/api/health.php
- Size 1KB
- SHA256 3ce36e1dda3d420a53ca7d3c674c66bc14979a1fba6604c037ef842618673c22
- MD5 a9d83078635654abbd84adb1fef1d8b0
- SHA1 7edcfc7614e2c1fe969f513cbd0085ecfa6558f4
- SHA512 1b698c60a9d29be3b440fcb8886fd42c306e1400c190010951b902996bfb4bdedae77f905edf4457ed2e68b31ebf1c796f11062583d64d8e32016f2f3f08bd33
- TLSH
  T13721012229EB682117ABF46C5F8960101459C12B3A18F258FA2D77D04FC86A6E2B66F1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  algodesk/api/lib/AngelClient.php
- Size 5KB
- SHA256 d31c1c7b23a6b3978cc1c126690b5fa852dd0164645df16e66687134c98ff86c
- MD5 e9fcbdc69fe2590c01ad8efdfad1e590
- SHA1 e1dab57ed00b80a88d98f5204a1ba2bc7565cb07
- SHA512 258ec887ddb2225472d343e093ad2101453d75bcd847c346ec01d1d76a41c70a142b31cc3e321622c45c5786bd7b007ac1134b4301a25827f6a984693b5f9e51
- SSDEEP 96:XalGgYu9dYaAkjwm1MnIjGRFf5eRqySF/gKg2sucKIk:sGgYOd/ZV1M6WgKg/6
- TLSH
  T165B15368B09B58725123D0EA9BCFD95494FA14074809EA51FFAC63940FE433CD37ABB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  algodesk/api/ltp.php
- Size 1KB
- SHA256 b97ca4ac115fec8338b6d756a1e28c33fef19b88342d9a6cbc2ecd0755929dad
- MD5 1f3b590198b67a72026415b37d034171
- SHA1 54b781ba8b2d580cf5cf440be74597138d42fdfd
- SHA512 cd623aee1d68b4cf99b9d16a12439a7c5bf854f2edc9524a7795b3d7dc144119fdd811bef47647f41648828c06cb7b40bc0dd9ae8fd5c740ed7e8a06be2c4e88
- TLSH
  T1C421CE76B9EA2C205AB6B9B5A78890103139C0132908A150FE1D27D81FC4AFCC32EAF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  algodesk/api/order.php
- Size 1KB
- SHA256 4265d17d486ea054ff21600b15837b9695dcbf0089b1c9f0ee20853265f3ecba
- MD5 a7636e591156399d96f9532c0af8087b
- SHA1 a5b604f52cc5915594aea7414e8e687d049b4dc1
- SHA512 8b2e719f36fc242b3f155e327973ef86b7c7b83ca5ef89bd47da993d28342c6bbbb668d0846fa2b7d6d88ccc7b9bb33faeb7f9d118e18eb07d8473b326703338
- TLSH
  T10021F3B17CFA2870A77EF52927466000B46DC82B1A5740A0FE1D23651FC93B947B92B0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  algodesk/build.sh
- Size 783B
- SHA256 3da98269108aa336540158af28d1f9f550a5f410cecd6f10b1151142064afc8f
- MD5 0b4ad2c43b7e5d1c0a36a33cff85f54a
- SHA1 e865ce577dbc2f513e629113b697347ad50be419
- SHA512 956558a4a1ec447d22e5e65a1829eb9614db035aa975097f2c3993381f0121b53535b74877f091d717bb599b17c10d6af9e2c286638bdcc01929e1ed7cb5ec4c
- TLSH
  T1D20126A2332470B845632CE5ADAA024BB5DF0257015F0CEC799687694A60BCCA2EC66B
- MD5 SHA1 SHA512 TLSH
Score

7^/10

antivm discovery execution
- Executes dropped EXE
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  algodesk/deploy/public_html/api/db/reset.php
- Size 671B
- SHA256 175bf634c556039cc103b3e72f6b0c123a7197750c1dd060fe0fd7e92b628ac8
- MD5 f98fbe577a2fd36014afa9ec551fb423
- SHA1 fd6d7ef79c5f4fe6b4290b334f551c3affba8901
- SHA512 5d8cccf48f9a7a72523625a4e5319162e9a377b2b61c1f9ae355c8ea8afdf30df468f2892407d25951f4648e25aeddd37885ebb07b26f7a5c3732dfe311ad35c
- TLSH
  T11E01F49130FD1B21EF7DE0941BCAE004649DC81F134989107D3066921F847B0CBF5266
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  algodesk/deploy/public_html/api/db/state.php
- Size 1KB
- SHA256 739146c8e87c71fe92d13323d4dcdbca454f62c39bea05dd6270983dee6ca202
- MD5 79025f7cb2eb283661ec520e3a9a2808
- SHA1 cbcacfde4d18c9a3a7bb9ceeb7e9092afa2f20c2
- SHA512 62ccc163234028bf3e2d8af1b5513cd61a02886bffde4b60bb41226b57edb13143ee95076ce5df136d75028dcc3ac4766f50a8225c3574008aaa864e75a655f0
- TLSH
  T154211425A4F70B61D97F785D028FA124549AC41F17518560FE2E26D01FD03B9CB7C2B9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  algodesk/deploy/public_html/api/db/trades.php
- Size 1KB
- SHA256 3db99a8ac13ce614009f40d9ad614182e58cb20314d140f23725f6a9a7fce0f0
- MD5 790c83b3280a75066230f9337fcf2c16
- SHA1 aeea7a6a5bf307e1447b3b29f240b9e02a0fba0f
- SHA512 5c362bf3202d45db8c732f51abd198b10fc8be9f71dc5323f4ad30d03b0cfda44c2da39cc32ef28dcfe71fdd3be42b398358f1818976e511236c526ef6bb5f3b
- TLSH
  T18731865D60A623B481BEE4880E46C49555E6C00BE210C050FE1E2ED42FD4FACCBB4678
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  algodesk/deploy/public_html/api/health.php
- Size 1KB
- SHA256 3ce36e1dda3d420a53ca7d3c674c66bc14979a1fba6604c037ef842618673c22
- MD5 a9d83078635654abbd84adb1fef1d8b0
- SHA1 7edcfc7614e2c1fe969f513cbd0085ecfa6558f4
- SHA512 1b698c60a9d29be3b440fcb8886fd42c306e1400c190010951b902996bfb4bdedae77f905edf4457ed2e68b31ebf1c796f11062583d64d8e32016f2f3f08bd33
- TLSH
  T13721012229EB682117ABF46C5F8960101459C12B3A18F258FA2D77D04FC86A6E2B66F1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  algodesk/deploy/public_html/api/lib/AngelClient.php
- Size 5KB
- SHA256 d31c1c7b23a6b3978cc1c126690b5fa852dd0164645df16e66687134c98ff86c
- MD5 e9fcbdc69fe2590c01ad8efdfad1e590
- SHA1 e1dab57ed00b80a88d98f5204a1ba2bc7565cb07
- SHA512 258ec887ddb2225472d343e093ad2101453d75bcd847c346ec01d1d76a41c70a142b31cc3e321622c45c5786bd7b007ac1134b4301a25827f6a984693b5f9e51
- SSDEEP 96:XalGgYu9dYaAkjwm1MnIjGRFf5eRqySF/gKg2sucKIk:sGgYOd/ZV1M6WgKg/6
- TLSH
  T165B15368B09B58725123D0EA9BCFD95494FA14074809EA51FFAC63940FE433CD37ABB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  algodesk/deploy/public_html/api/ltp.php
- Size 1KB
- SHA256 b97ca4ac115fec8338b6d756a1e28c33fef19b88342d9a6cbc2ecd0755929dad
- MD5 1f3b590198b67a72026415b37d034171
- SHA1 54b781ba8b2d580cf5cf440be74597138d42fdfd
- SHA512 cd623aee1d68b4cf99b9d16a12439a7c5bf854f2edc9524a7795b3d7dc144119fdd811bef47647f41648828c06cb7b40bc0dd9ae8fd5c740ed7e8a06be2c4e88
- TLSH
  T1C421CE76B9EA2C205AB6B9B5A78890103139C0132908A150FE1D27D81FC4AFCC32EAF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  algodesk/deploy/public_html/api/order.php
- Size 1KB
- SHA256 4265d17d486ea054ff21600b15837b9695dcbf0089b1c9f0ee20853265f3ecba
- MD5 a7636e591156399d96f9532c0af8087b
- SHA1 a5b604f52cc5915594aea7414e8e687d049b4dc1
- SHA512 8b2e719f36fc242b3f155e327973ef86b7c7b83ca5ef89bd47da993d28342c6bbbb668d0846fa2b7d6d88ccc7b9bb33faeb7f9d118e18eb07d8473b326703338
- TLSH
  T10021F3B17CFA2870A77EF52927466000B46DC82B1A5740A0FE1D23651FC93B947B92B0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

antivmdiscoveryexecution

behavioral16

antivmdiscoveryexecution

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy