4c5e05be8ad2ae55b05bf0a5fd5c2132958da45e23dedee12feae3c44b3d144d | Triage™

Login
Reports

Overview

overview

4

Static

static

3

dist/app.js

windows10-2004-x64

3

dist/app.js

windows11-ltsc_2024-x64

3

dist/cli.d.ts

ubuntu-18.04-amd64

3

dist/cli.d.ts

debian-9-armhf

4

dist/cli.d.ts

debian-9-mips

1

dist/cli.d.ts

debian-9-mipsel

1

dist/cli.js

ubuntu-18.04-amd64

3

dist/cli.js

debian-9-armhf

4

dist/cli.js

debian-9-mips

3

dist/cli.js

debian-9-mipsel

3

dist/core/...der.js

windows10-2004-x64

3

dist/core/...der.js

windows11-ltsc_2024-x64

3

dist/core/...rds.js

windows10-2004-x64

3

dist/core/...rds.js

windows11-ltsc_2024-x64

3

dist/core/...ord.js

windows10-2004-x64

3

dist/core/...ord.js

windows11-ltsc_2024-x64

3

dist/core/config.js

windows10-2004-x64

3

dist/core/config.js

windows11-ltsc_2024-x64

3

dist/core/...ope.js

windows10-2004-x64

3

dist/core/...ope.js

windows11-ltsc_2024-x64

3

dist/core/...ent.js

windows10-2004-x64

3

dist/core/...ent.js

windows11-ltsc_2024-x64

3

dist/core/...ext.js

windows10-2004-x64

3

dist/core/...ext.js

windows11-ltsc_2024-x64

3

dist/core/...ema.js

windows10-2004-x64

3

dist/core/...ema.js

windows11-ltsc_2024-x64

3

dist/core/env.js

windows10-2004-x64

3

dist/core/env.js

windows11-ltsc_2024-x64

3

dist/core/errors.js

windows10-2004-x64

3

dist/core/errors.js

windows11-ltsc_2024-x64

3

dist/core/...des.js

windows10-2004-x64

3

dist/core/...des.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
private-server-windows-x64.zip
Size 35.2MB
Sample260815-hys2asssew
SHA256 4c5e05be8ad2ae55b05bf0a5fd5c2132958da45e23dedee12feae3c44b3d144d
MD5 329084eb98b98d802d5240257b754d9d
SHA1 5189e551057d03c670c76b26950a54fb0219682c
SHA512 646c255e95de698527c0f5b53847fcbed2ad4cd411b304bdf0d28186e40d04bdaad66f2c8e587eff7e30100bb3366909afbf9c88f48db8569ec4ad668a79b240
SSDEEP 786432:hXpsBfh/LrksNSFsTiYaJL3ImVPzhGNq0Hpror6m11kBCFUCS/kb:Qpxrkf4gL3zzGBvmoBsUi
TLSH
T12D8723E4DEBF4007DF0AB676B1C9D4839DACCBC59486DC0B290E42D99C4AAFA07D550E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

antivm discovery execution linux

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

dist/app.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

dist/app.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

dist/cli.d.ts

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

dist/cli.d.ts

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

antivm discovery

Behavioral task

behavioral5

Sample

dist/cli.d.ts

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

dist/cli.d.ts

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

dist/cli.js

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral8

Sample

dist/cli.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral9

Sample

dist/cli.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

dist/cli.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

dist/core/auth/family-provider.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

dist/core/auth/family-provider.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

dist/core/auth/passwords.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

dist/core/auth/passwords.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

dist/core/cli/reset-admin-password.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

dist/core/cli/reset-admin-password.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

dist/core/config.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

dist/core/config.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

dist/core/crypto/envelope.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

dist/core/crypto/envelope.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

dist/core/db/client.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

dist/core/db/client.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

dist/core/db/context.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

dist/core/db/context.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

dist/core/db/schema.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

dist/core/db/schema.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

dist/core/env.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

dist/core/env.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

dist/core/errors.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

dist/core/errors.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

dist/core/lib/codes.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

dist/core/lib/codes.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  dist/app.js
- Size 2KB
- SHA256 1d13aac39fd2f626163563d8f4f89336c9e00697570b35db2ae862775678548f
- MD5 e95a2bd1ce785e1950fa79ad15dbd16b
- SHA1 a7e8d86132f349bea5908a1634c30bc0d1c0b895
- SHA512 3e8e4ba5febd67b19f8b6b1a86b2eef25255489da91d0d8aa0ffb5b37ceca7a7f3267d8c5c8ef4d91708e98114073898d3f03eac0547eb448de6f9ad8563f787
- TLSH
  T18251EF3AC252C8038CB776FEBD1EE523A63389C72597D854738D8762CF8215CF1648A8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  dist/cli.d.ts
- Size 31B
- SHA256 43e818adf60173644896298637f47b01d5819b17eda46eaa32d0c7d64724d012
- MD5 8886940857c05e62f8d65d5264a0e111
- SHA1 380f3a3b87e1c1d1acbf5527bb3f5830f362956a
- SHA512 7dbb6fdecfd06ce4f461e553ef0a5d20f1bcc5f063daeb3d5928c4f28908cda03e0533a7e98179460e243e08ddc8299aa70ccae1ac7364eb9402ab1054b8d2ac
- MD5 SHA1 SHA512
Score

4^/10

discovery antivm
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  dist/cli.js
- Size 2KB
- SHA256 dca2cf2eade416ef447f697abfb65645807f88cc8ce107b0c193153675c4b44e
- MD5 71077217c8785b8fc80b714f43ad6f03
- SHA1 96d97080e2084b7b1c44c7a6f005eb79b1128243
- SHA512 f156a88da6d5f7815523385163743c41f3d89b6307eaf242ce98035fde3575388fd3be93222175ae6d772fb21f90a5e16a85d18f9d40477be24695b1d8b6395e
- TLSH
  T180414216CCF70C22227344BA755FB4037A559A033284E85836ADC634FF57E328D81698
- MD5 SHA1 SHA512 TLSH
Score

4^/10

execution discovery antivm
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  dist/core/auth/family-provider.js
- Size 54B
- SHA256 c0055a523d4aeba6a1365ac6f3a676b3c003c3f4b3fa9463434d5e61532accd4
- MD5 db08c27dd6a7dbfca7127c72e680c18c
- SHA1 9f162f510256af0715d2fe05ff5bc8884503a20c
- SHA512 031cf59f6b540ec002a85bddb3474dfda1e993e1e00218a7afd52e61750b0058cf1f5a185dc046f133d109cc3daf7c4017327874f74b5a773080d779289fc280
- TLSH
  T19390027AE8B4296568110D3F2595C843522C6D92E44104047001D9789021C0558108F0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  dist/core/auth/passwords.js
- Size 1KB
- SHA256 ae7dfe321df502465f0cf76668b74305ad01ae6de90b71bd779bc4debeec8635
- MD5 b76d9ba299283eacd141c4ca762f8caa
- SHA1 338d3f8946b0ea3cbad407915110b65b2341390b
- SHA512 f51498b1d4c2fbf1130161ea28fbf57e5947ea9d0843cc806c26123fd62a3837bac2ef2ab580ad6b836785c4c9b9cc127340c7057502ef609c4abf165c6180f1
- TLSH
  T12721A0450DF21664436294A80E1BF85572A9B6033007C36CBE6CC3556F6B911F576DDD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  dist/core/cli/reset-admin-password.js
- Size 3KB
- SHA256 9ce3e016178412404f396b6711f7827eab146cd51104d4ed02c4be6305bc7296
- MD5 81ec0d64b8cb8cf0f277cbfa8f616414
- SHA1 bb4e17a12912e01625835bcac3d251f6508e96f7
- SHA512 3326e71fc18e12dce70331e4327addad477ef7d28ae6b6888ad36fdee7abb251f445fee2ce0a193e19b67a0083444e3f61975aaa7d2547841d6c558a3d7b9515
- TLSH
  T12B61321A00F359210533A5B57F5F64112570C2073D8D9A24BA3CC319BF96CFAAEA4ADE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  dist/core/config.js
- Size 2KB
- SHA256 bbdd4a596e09bb4c9112b1f5d3bce55412eaa8a6973a4dfd59cb254e40bda344
- MD5 4228767c48f8652ab36914ac8c195b85
- SHA1 3dba942e133ddf5fd1c1912ef0af45f40e066b0d
- SHA512 a1261ba9ac8f1b7434dfbb1b91beeffedef2e46ccd3227e34ed7714a689558a37fb5a8acd41af0cbdeed7f836acf344b45164a1525f4928953cdb7cadac521c2
- TLSH
  T1E15133873AE6AF6286A3671BF68F95017A2CAF833E18D510708EA3148F1819CCD611CD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  dist/core/crypto/envelope.js
- Size 4KB
- SHA256 4065658c322c3693d36c2f662e483197869a937d6810337ba8621791a78ff09f
- MD5 b4c6189e5b91b829d1b90f095c29b032
- SHA1 170fabbed95838f8330b87bf8dc618693045b03b
- SHA512 56e78b6102b3ad4c23e64b0412766b1a64dee2d9bd58b1e6790e775c6ce584a5f403d02839a716da4e95ca0c89d0815fc149076a0a9ae6ca55202a8da4358c78
- SSDEEP 96:F4+ZHLhevJYeVW8+l5Q9bsBdNlgMsJW8SBdhbuMDcCnlFFc6BWpAzCvG:XZyzJ+vQpsPtswDhuzCnlzc6yFvG
- TLSH
  T1A2A144493EF218A092A3F0E7626BF147F265251F3414CBD8762E9289CF54D70CE9DAC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  dist/core/db/client.js
- Size 1KB
- SHA256 8a459757e476245b17eb7cd8270cadee77579e20abbe4bd748669ef58669b8df
- MD5 59a712f0165bea127607bbb25bd251c9
- SHA1 441feb3bc825fc859e1767f5e36da31ecddb1f12
- SHA512 cb2f7773fd26d0a0a03671e6a6409f297f5bbafb1277fe624d036b7f3f463c5ee30aa0f229d9589cc867aa1f8865bb2b01341975ba26d331d0109446fd4cc8c4
- TLSH
  T1AC3185F2CA939B1D04F1AAC7F248F1D422BE968DBF2427405A0F8B3E5D0D9E07304954
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  dist/core/db/context.js
- Size 816B
- SHA256 7b1f834f78077e01ff1d625bc55060757ba8130f09cc8a68ee652f9df44d1701
- MD5 0159d6a40c0b5e3a5d647dbe4538dcce
- SHA1 4bf2cf2ed7bfe71eec1bf5942d9eec0d07048ece
- SHA512 ae50868927c7d7efd7c687d0774b0688f87e14902ceffcd1ccbe1d372139d413b3e880eb09e31550db38b3e7eb7db503f8054cdd2ce64b8147a2d1751d17f543
- TLSH
  T1F80141C979F66991E2AB7561B21F81893278C5417854C734B85FC2541FA0464C39FEDC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  dist/core/db/schema.js
- Size 3KB
- SHA256 0d8a9b6a783be98aa44b93f3c567d59adf4fed270802bbf8f34d1c1597b87e66
- MD5 a6cc1dd57b89e2aaf2df1aebfbd5ed4f
- SHA1 2c46419c5263784e33e77c2a2ac52d07b5c81ad9
- SHA512 993cfae4fc5b119cb53cb87a957b0dc5e757d42240711ae7a6235bc8402ecfdf42e4a0b195c741302cf256223da26ccd95cccd22a1109819202be7fe1cd636d2
- TLSH
  T1555101232E22590058ABE5B25E37D547C5650367AFC9EC82307C83A41F6CE6C81BE37D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  dist/core/env.js
- Size 1KB
- SHA256 f05df21547f7e59f321a930822e29dbd76f8a269c200b52eaceb4e2b213bfc20
- MD5 5ffba29e4c24c740e35d523d5a59d190
- SHA1 cb1efe38c5e197b52ccaaf902cb63564de224a7a
- SHA512 8216624de6159b133a29961396771155cf9c0d9253fb710101424c1d39d63e03d038fd082a47ab39c298d7201c4273aaa8819725abfa5b838aea2e064b5e5f24
- TLSH
  T1AC21862B31E1490FCAA7727131673C9535681B4B29F2B190FADE43440F6C56915339BB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  dist/core/errors.js
- Size 824B
- SHA256 ffed699c9b192bdf6118f24e2e4698bd3abf8284425eed4e02997c442330ce42
- MD5 28c9e7e4e995de20bdd30ec9dcb8bc18
- SHA1 4bf6230a8ad292bbfa5a512c460d0ad82d9cce73
- SHA512 1423b60ca80090577117601c7bee099e2e1d7f399c491a9f51f50b54042d95b803d5f669c8f8e2e769e37419525e2e5e91528bde882b636b1a4d9beca38216c4
- TLSH
  T1F0016B6D6BF3BC8D96B3B0567616A021982C6583B5141E35B80CC35AAF39068C581B1C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  dist/core/lib/codes.js
- Size 780B
- SHA256 d34572712491cf6254baa9f7ec557c70f1749e6852618d460e83ed14cb11402e
- MD5 9063b0ed4eccaad0d172a40a5b5eb064
- SHA1 607b3820a5d735525cc3af7798cc84bb8f9a3aef
- SHA512 a691b83f6913112a548546fa637ea230d3ef40c02f0d6dbb3c2dd78e2169d36b429e107fade387b757f58065f9a8824c46403e2f0d9099bd685f9a7d651303cd
- TLSH
  T12501BDDCAEFA194504922866519AD0206929A492718043A6B90E83819F70DB5C2F7FE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

antivmdiscovery

behavioral5

behavioral6

behavioral7

discoveryexecution

behavioral8

antivmdiscoveryexecution

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy