58567158c0a30983ae0b8e56b762cc1bf6ce3a59ec30c2a8298d5310c202da92 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

ServBayIns....0.dmg

macos-10.15-amd64

1

ServBay In...helper

macos-10.15-amd64

1

ServBay In...der.sh

ubuntu-18.04-amd64

1

ServBay In...der.sh

debian-9-armhf

1

ServBay In...der.sh

debian-9-mips

1

ServBay In...der.sh

debian-9-mipsel

1

ServBay In...Helper

macos-10.15-amd64

1

ServBay In...ay-mcp

macos-10.15-amd64

1

ServBay In...ervBay

macos-10.15-amd64

1

ServBay In...idgets

macos-10.15-amd64

1

ServBay In...ift.js

windows10-2004-x64

3

ServBay In...ift.js

windows11-ltsc_2024-x64

3

ServBay In...ift.js

windows10-2004-x64

3

ServBay In...ift.js

windows11-ltsc_2024-x64

3

ServBay In...min.js

windows10-2004-x64

3

ServBay In...min.js

windows11-ltsc_2024-x64

3

ServBay In...ift.js

windows10-2004-x64

3

ServBay In...ift.js

windows11-ltsc_2024-x64

3

ServBay In...ift.js

windows10-2004-x64

3

ServBay In...ift.js

windows11-ltsc_2024-x64

3

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 16:15

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

ServBayInstaller-v1.31.0.dmg

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Library/LaunchServices/Dev.ServBay.macOS.ServBay.helper

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Library/LaunchServices/helper_upgrader.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Library/LaunchServices/helper_upgrader.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Library/LaunchServices/helper_upgrader.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Library/LaunchServices/helper_upgrader.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Library/LoginItems/Login Helper.app/Contents/MacOS/Login Helper

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Library/servbay-mcp

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/MacOS/ServBay

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/PlugIns/ServBay Widgets.appex/Contents/MacOS/ServBay Widgets

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Resources/ConfigEditorControlButton.swift.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Resources/ConfigEditorControlButton.swift.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Resources/ConfigOpenDBToolsButton.swift.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Resources/ConfigOpenDBToolsButton.swift.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Resources/Highlighter_Highlighter.bundle/Contents/Resources/highlight.min.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Resources/Highlighter_Highlighter.bundle/Contents/Resources/highlight.min.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Resources/OpenWithEditorButton.swift.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Resources/OpenWithEditorButton.swift.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Resources/UnlockVIPButton.swift.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

ServBay Installer v1.31.0/ServBay.app/Contents/Resources/UnlockVIPButton.swift.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target
ServBay Installer v1.31.0/ServBay.app/Contents/Resources/UnlockVIPButton.swift.js
Size 1KB
Sample260814-tqbb3axyhz
SHA256 58567158c0a30983ae0b8e56b762cc1bf6ce3a59ec30c2a8298d5310c202da92
MD5 098b57f62b2d436bc51dc4643c0fac65
SHA1 c05c6c3ad017aadd5dbde43f21e71d09aa8d44b3
SHA512 922b63a8b7367af26bc6130221525a8ba2b173fbf2c73efde042c4822bd3279946d6e37d609084f029b6d5b0e0610f8a0e8bca4e4c3d4332494c2bfd72d88f92
TLSH
T17A3192AC47A0089C8F17643CC01F02117F5AA873F126ED2075AED2E01F9836C059B7E6
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\ServBay Installer v1.31.0\ServBay.app\Contents\Resources\UnlockVIPButton.swift.js"
1⤵
PID:4200

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy