69970deb68213eea47dc8cdee9f91a48ae7b0318f24b21eebc69973045ddb0e7 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

madrasa/add_fee.js

windows10-2004-x64

3

madrasa/add_fee.js

windows11-ltsc_2024-x64

3

madrasa/ad...ect.js

windows10-2004-x64

3

madrasa/ad...ect.js

windows11-ltsc_2024-x64

3

madrasa/ad...se.ps1

windows10-2004-x64

3

madrasa/ad...se.ps1

windows11-ltsc_2024-x64

3

madrasa/ad...em.ps1

windows10-2004-x64

6

madrasa/ad...em.ps1

windows11-ltsc_2024-x64

6

madrasa/attendance.js

windows10-2004-x64

3

madrasa/attendance.js

windows11-ltsc_2024-x64

3

madrasa/fee_setup.js

windows10-2004-x64

3

madrasa/fee_setup.js

windows11-ltsc_2024-x64

3

madrasa/gu...ent.js

windows10-2004-x64

3

madrasa/gu...ent.js

windows11-ltsc_2024-x64

3

madrasa/sidebar.js

windows10-2004-x64

3

madrasa/sidebar.js

windows11-ltsc_2024-x64

3

madrasa/ta...ry.ps1

windows10-2004-x64

3

madrasa/ta...ry.ps1

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
madrasa.zip
Size 1.7MB
Sample260815-nc45bsvdjc
SHA256 69970deb68213eea47dc8cdee9f91a48ae7b0318f24b21eebc69973045ddb0e7
MD5 af7d3435b2f88bd035bfa9f636cb2c2f
SHA1 6f397ea7ca58f83dad61f0794025ccf859fa766b
SHA512 d299f9639e8a02c3769ea5ba588d9b0b734731e1c6c534cf5e19454c03a7da91c5b1c262173c7f394282b8007ffb05157795ef3e6e29304f1a32eb41cde821e7
SSDEEP 49152:RS5GxUiDh4iyYNAQEotBh4iyY4fHD5Kbc57D5Kbc50h:RSYxUiDh4qh43LecBecm
TLSH
T1348523739B40C418DD815EB059043463F61EF9FEB1BF29976E9242E6F2A14BA8F7C118
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

madrasa/add_fee.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

madrasa/add_fee.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

madrasa/add_subject.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

madrasa/add_subject.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

madrasa/admin/backup_database.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

madrasa/admin/backup_database.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

madrasa/admin/reset_system.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

madrasa/admin/reset_system.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

madrasa/attendance.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

madrasa/attendance.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

madrasa/fee_setup.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

madrasa/fee_setup.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

madrasa/guardian/online_payment.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

madrasa/guardian/online_payment.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

madrasa/sidebar.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

madrasa/sidebar.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

madrasa/tabulation_entry.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

madrasa/tabulation_entry.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  madrasa/add_fee.php
- Size 8KB
- SHA256 d67644ad27843bd767f9cd1a670d6a25e4d2ba9cfa81af000715130fb487f047
- MD5 f60d71c63120b7ed73ac281ac9908971
- SHA1 e6b4683bf2077dcdb5bd79cdef902fa870aa186d
- SHA512 a05e3e5b13629609f66cf90727f04dab9ca266f79c7bbfa9f778ccfff30845c0cabb8f633983cea116e404922571ca63459e2b9adf008ff75dc92dd289a867e8
- SSDEEP 96:IW22XDnO1P3JJiIWsLxslio50o1j7q7kFSqjXT2W7iLJuVuVQxe4gLfhhGVKwlDM:3zDOBJJiuLS/7qySqA4gtIje
- TLSH
  T1540242C27C554C2045F7D8EB7EA2861EFA11AA070A80D345FCDD51E10FB48758BABEB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  madrasa/add_subject.php
- Size 4KB
- SHA256 d96a60c7ed4deb5fb21ab6a45065c4ce93015accd5ce947d893f57314da715ef
- MD5 9be4200253e1b51cf1f5a73f042c24a7
- SHA1 ad582fb3204b8dbcce595613f5a2d17cdc11ced1
- SHA512 cb23bbccecb7bec84f4ace52c6e1956462689e7bbd8277e3ab37637981f36c4720093e3d99042f622600dd18f23e5524a98b1a29467637ca87a349c0948e9018
- SSDEEP 48:RjSMlId8fWUrVnGkHtf2uuoM5BlR+pR7FWPyWMwdLG2hIqH8HryyG:RGaIdvUrrHkuK5nGRseo9PBd
- TLSH
  T1978175823881EC34D4B7F0B682725980EE9642075B016765BAFFF2D76F71419C2A39DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  madrasa/admin/backup_database.php
- Size 1KB
- SHA256 bb8bc496df891c5c8baeb526c87d13c82f225bfc3a0a606b830f7abe05522b5f
- MD5 d40d5ecd2951b6f5c34370a2f7048b08
- SHA1 85670db0234f2c2bba25f4a98292939d1caaa4a8
- SHA512 1766087f0f6d198bb8ccb6f3e239f4a97dd4b9ac76259a0fadc00bb77d50c81a4ec3dd0640833f16886426d7ade71d6d1c4523520715dfad880dc5a151609adb
- TLSH
  T10E3142C87B0264208EB3F41007071489DDE2810369098721FD9E82DE9F7259CF9D9D9C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  madrasa/admin/reset_system.php
- Size 1KB
- SHA256 2a07e44f6db436f25974a1054a2035861db0fadeba97ce802784673cbdfb7280
- MD5 b7b5aa8933de44f31e55050363a5e4f1
- SHA1 0219f35795592e7846795753485b8b507eabbd12
- SHA512 ce253604935f16e90483adc84c62d01764410d19159fcf59db17885b968d6068d6ca09cdaae67c57eed0381e5d2c5bdafa166c5b3d7e2d1ea4845f5621dc7353
- TLSH
  T1DD21CE93F805193049B2C49C06A22092F992CB4F3A10D217BCFA904D4F251BDA7D68AC
- MD5 SHA1 SHA512 TLSH
Score

6^/10

execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral7 behavioral8
- Target
  madrasa/attendance.php
- Size 8KB
- SHA256 c68d770188b8bd49526e3bf0379a31610502d40f9a05e1eeebe29a0cc3bdca66
- MD5 9aa82c8aaeee14c9ab9d30173ad4ec6a
- SHA1 595509da60d00a014a335761ac6c37220c68ee81
- SHA512 8b1e766b4831ab03699448d483f0d3e6ad85290a28028b93eddca92fe67ed60e3d55d54f872c43f7fb829e21f999ecaacf724e2453fa8943ab3d7dc7fb0b06a7
- SSDEEP 192:uXlZEnpBLI+/RJrzTorrjucfv16/UmDvJI5jY9RdfcxG/OKrQHbx:u/wH/Srjucfv16/b+5jY9RdkI/bQHbx
- TLSH
  T1E60220D1A8178C321573C8904BA6475DFB818C03870687297DEE729F7FB0B75869B2AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  madrasa/fee_setup.php
- Size 8KB
- SHA256 0dc4a1eb5530e93b61b0fd093d467427446026f1b3809dfcf07c870647064179
- MD5 8a8ae7c236a39fc27465e0f5a01ccf60
- SHA1 929586b6e4f8a902488ef3d4e4051ef8e3f50864
- SHA512 2150d8f00aa49c7e748c6adf96369aa42a3b7e82e87d90475ba92da46a85bd585d6001055bc616d72164269545371a3b33b3432511791b3fad07214bfcc8fefa
- SSDEEP 96:I6s0xLUtJj7NiWNCk4HeB5kQ59uaUFf2aQx+W+Tt+sKcPUfHX3kc2gFQW2w/tt:qtImCbHpsuak23EW+Y203ktgj2Qtt
- TLSH
  T1A80254866C078C319173C8C249B6445DF695B62B5B00DBAA7CFF12D63F304B8C697AAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  madrasa/guardian/online_payment.php
- Size 4KB
- SHA256 46dfe80b26c998e50ff335f99ef7637ff7e2da7e8d363302459305bbbcd3c9a5
- MD5 fefb57a50e44c8818078b83c8b46c20e
- SHA1 e3f99f2839598615e671b46019602ba928c6c50d
- SHA512 2dcd4e06b201b643ee468c4c9cc6db9157135227fcb6287218c03157cbad30baa324c7d19ab627c06d0e3568d5d0e910ac048fb944b6ce5df70be1e8cc520850
- SSDEEP 96:NvF70O3Uw4CJxUE/JO7YzN4rbD22j03jpydvZ:PJUwFJxanvZ
- TLSH
  T125913FA078034C2DA0B7CAD092690646B241C903D6029B79FCE633E77F67D7AE2D758C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  madrasa/sidebar.php
- Size 6KB
- SHA256 376f06ed2f15e597b171387efcecbe6eca0369f7aa6d9b6c26ab12a77c1295dc
- MD5 b05fe1eef6abd411e0b8fef7213e0b50
- SHA1 e12071c83307118c48df7159ae22513f74119481
- SHA512 1a571b511393ca1811b6372f54db7560a0c975bbb91df4919da3ad45f8ee21738ad39c587cbc89a7a9714f82c63c06e34a58d82439bdf8d9485f6c5be78450c5
- SSDEEP 192:f2cMSW2IXLuk1Al23rpoHNHs7z020K0i4a40iRiXIU:OAZNmz507vt0iRiYU
- TLSH
  T19DD186A0C193080F137A89641BB1A36EF56045039605872C7BAFA747BF78EFCC69678D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  madrasa/tabulation_entry.php
- Size 5KB
- SHA256 841d5f525ed9d72e6664719f5ce321ad7fc68ceff76f77006ac3fef7fcecbce6
- MD5 5cd3d6f4f5e801666b7a0bfece73fecb
- SHA1 d0cb184ec0f047b9fdc38292e0519094c5d7ad00
- SHA512 006aed868140c248db5909b593f846fc7b6b0c18b9e9cb2976cb4a773fac75a52b6aaebae5398c59beb29fdf1cf8172800b69b581d90a73b092117ef2afd3caf
- SSDEEP 96:qi74b4odUZG4o/5JqDWj8dHN9AFMu4t5NBsVVubNe0HZj:F4b44QG4T3t5g7ubI0HZj
- TLSH
  T16BC1FAC26817CC22107BD9A1099AA854E7964B0747002B367DFFE2DF3F31C608A935EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

© 2018-2026

Terms | Privacy