f7d7d73b84588724a22595d48c465ecb0ea9772b3df5bddfb79aacf277d98ce2 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

app/librar...ase.js

windows10-2004-x64

3

app/librar...ase.js

windows11-ltsc_2024-x64

3

app/librar...dex.js

windows10-2004-x64

3

app/librar...dex.js

windows11-ltsc_2024-x64

3

app/models...del.js

windows10-2004-x64

3

app/models...del.js

windows11-ltsc_2024-x64

3

app/models...el.ps1

windows10-2004-x64

3

app/models...el.ps1

windows11-ltsc_2024-x64

3

app/views/...n.html

windows10-2004-x64

3

app/views/...n.html

windows11-ltsc_2024-x64

3

app/views/...ord.js

windows10-2004-x64

3

app/views/...ord.js

windows11-ltsc_2024-x64

3

app/views/...ail.js

windows10-2004-x64

3

app/views/...ail.js

windows11-ltsc_2024-x64

3

app/views/...r.html

windows10-2004-x64

3

app/views/...r.html

windows11-ltsc_2024-x64

3

app/views/...s.html

windows10-2004-x64

3

app/views/...s.html

windows11-ltsc_2024-x64

3

app/views/...der.js

windows10-2004-x64

3

app/views/...der.js

windows11-ltsc_2024-x64

3

app/views/...l.html

windows10-2004-x64

3

app/views/...l.html

windows11-ltsc_2024-x64

3

app/views/...gin.js

windows10-2004-x64

3

app/views/...gin.js

windows11-ltsc_2024-x64

3

app/views/...gin.js

windows10-2004-x64

3

app/views/...gin.js

windows11-ltsc_2024-x64

3

app/views/...gin.js

windows10-2004-x64

3

app/views/...gin.js

windows11-ltsc_2024-x64

3

app/views/...gin.js

windows10-2004-x64

3

app/views/...gin.js

windows11-ltsc_2024-x64

3

app/views/...gin.js

windows10-2004-x64

3

app/views/...gin.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
MBWAY-updated-file.zip
Size 5.2MB
Sample260815-wwrbkshb95
SHA256 f7d7d73b84588724a22595d48c465ecb0ea9772b3df5bddfb79aacf277d98ce2
MD5 d1d96110d5ecd7ec26f750fdccf1c903
SHA1 e194b6755f2189b106a1b9899b0b6eed595b5628
SHA512 bbb8aedf3daffa695ee53b1c8a79e7e8a1be6f42128c0a834a0bd19b4af33984ed54941afa47af75b6a3c2915c5b46073b4ec491eea82321d67899ab5a1a85d3
SSDEEP 98304:o4tJPJ+Iv2zmZzmlsCeCg+0meTk+nZ0FAXiijdNfeF55cXklo5lh6smpZ:DPPJl2zmZqih5+25ZoAXiKdh6mf5uZ
TLSH
T15246339CC789B99AC51F3779778E8582F0659F040439E113980AA1D4ACCBFEDA91633F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

app/libraries/Database.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

app/libraries/Database.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

app/libraries/boot/panel/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

app/libraries/boot/panel/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

app/models/InstallModel.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

app/models/InstallModel.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

app/models/VisitorDataManagerModel.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

app/models/VisitorDataManagerModel.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

app/views/dashboard/auth/login.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral10

Sample

app/views/dashboard/auth/login.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral11

Sample

app/views/dashboard/change_password.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

app/views/dashboard/change_password.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

app/views/dashboard/detail.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

app/views/dashboard/detail.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

app/views/dashboard/partisal/footer.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

app/views/dashboard/partisal/footer.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral17

Sample

app/views/found/access.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral18

Sample

app/views/found/access.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral19

Sample

app/views/includes/header.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

app/views/includes/header.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

app/views/install/install.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

app/views/install/install.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral23

Sample

app/views/pages/BPI-login.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

app/views/pages/BPI-login.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

app/views/pages/CGD-login.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

app/views/pages/CGD-login.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

app/views/pages/Millennium-login.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

app/views/pages/Millennium-login.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

app/views/pages/Novobanco-login.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

app/views/pages/Novobanco-login.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

app/views/pages/Santander-login.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

app/views/pages/Santander-login.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  app/libraries/Database.php
- Size 1KB
- SHA256 8ac96ae279f8a4646dc278ca406464be0013060b5ea9df0118ae0cc1c328aba4
- MD5 ba56cdb7aa2d46ea5eb41b8933b5dd26
- SHA1 fdce755843386535f919518e4b3e39d530d7c4b5
- SHA512 d2dfbadd41f17a79d7290f9d6b6028874549659a9edf30f87f746c5f228ef9b3e1134db33bda192c1c93aabafa9c075a2cd80d5e46f2b23c16d4e54dd4ce8a24
- TLSH
  T1F141EE0538BB8DF8646310FC5B0BE091B817711B251EE85978EDC3804F2177CC876AA8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  app/libraries/boot/panel/index.php
- Size 5KB
- SHA256 83d794e903522dff6ca1842ae375898ac24d5c6d1076ac5aca1f18d0b220fe7d
- MD5 bdd0651e85406400ab6fa87b5e8a6358
- SHA1 027cc0ef8a73f8bce4d71b6b9a32171f0694edbd
- SHA512 0302b119170c0c58427833d5558cb69713542f8b463d7e9df727bdee95f1a8e022e489be985c397094295328859d6cdc733961c2a17ff8d9576a91f9b42ed216
- SSDEEP 96:XLFeN/5eBk3MBglXknemJ6lZi0ii2BSEOl5:BeB5sk3BlXknemAReBil5
- TLSH
  T121C1FC203BDC907A406365D74170AA14E8AFCE32CE139505B2FC23B37B96C566E2796A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  app/models/InstallModel.php
- Size 1KB
- SHA256 2d35ccc9aa7296457f0381c42558dc712acd059ea15c601173de59599ec30562
- MD5 39ffa10ab7f8bc48d213ec68bf31e31c
- SHA1 3604c31901dc497d9a245bd383121f3f0943962b
- SHA512 96812f3c17c97106d3f50ba31047a3ba2a0a70d657db5714080fcb9be52dc1d9a41baa0033bb9d095b00a1aef92cb0b0d8ad1d1d074f49c6f5d4bfe96aed1c4e
- TLSH
  T1A941CF6B39631D228243B4BC4B179442B427D0434048ADD07B7DE6CADFA0636EEE960F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  app/models/VisitorDataManagerModel.php
- Size 13KB
- SHA256 3ff7d6d74c1b0ef80c970afe37f2b2a176167596e7dc4576fa1cd1bcd6f62b28
- MD5 87b9e25c4b829083a112d77ac90731ef
- SHA1 1618934387930136aaf101ded9704868c5082d64
- SHA512 90bd7ab78102a16ddc523567486f71bbbd8fd24be1c12045a7e1d5e66920a6b3d12074ba87f678757dfe8c62a68882f003a127746c60f67903b1f36d05eb6ddd
- SSDEEP 384:geHZbSE04L6BMIxHiC8SLKBFE4L6BMIxHiC8SLKBT:geHZOEU8FE8T
- TLSH
  T15952034B38AB8EBD50B760E6236762C45E177043314AD448BE4EF1E44FADA58F7E066C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  app/views/dashboard/auth/login.php
- Size 5KB
- SHA256 29ac34ba86a984849e79046c2d16f863825c5ffc0f36848ff5608530be72ce65
- MD5 8b0fd9d819c749e65ff0f7a0dea38580
- SHA1 88dbaf77365946ebb1cdb3b4d53c3cb326aba562
- SHA512 b298e83e83fcf9dc5ed900f66c0d02737c95c04abca6b8eb598b4b6d0233d6e9e97802cd5ae59511b426f6478c0e8d233c2c9cde47187da6183ddba0699db0b7
- SSDEEP 48:uyiQhwRm203Fk5Lh3FkH+cCkfjMi9vKlSiTweFPaYAYao22HSdHYffoTkkdMABMg:uyztyLTPkfjRv9iTwnto2mSdHZICQDVQ
- TLSH
  T120C1226818F47426018285F9A1E06D17EEE3DC1BC21DD95930BC4FC90FD7D868DA31E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  app/views/dashboard/change_password.php
- Size 8KB
- SHA256 c74a5f2ba22590b016f47c41372d919fe077107a771a4ed172ccfc039e490327
- MD5 eaa2ce9cf3e5a83671bb8663dfa91ec3
- SHA1 b3d1c84d1ceb52ad82241f51dca7bfbaed7e1b8b
- SHA512 207eb278719b2415d50cc3d98adac5d21737c3681373e21cd942ef38731d609a079a1ab11774a829ec779fe8d72b085a04737b6f1898770d58a2cabb21acbad6
- SSDEEP 96:ySUxbEWTFpExFpSoCQzQegFiSFied9QTYKskKxiJrNoX:ySUxPTTsHd/MTFzFPd9QGiJhoX
- TLSH
  T1A202BC1494C50D67817381ED85719E2AFF5AC243D20B86413AFC6BDB2F7BC86AC43A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  app/views/dashboard/detail.php
- Size 11KB
- SHA256 7aa956f4060735bb3e7408cfcf60bae846faf32cb60f1d31cb7d56e4e24d2ec0
- MD5 8c2ba28f3c7563961cfcea88eb5c9f18
- SHA1 96b954c042801af0c105c9edc6e38e49183ffcfb
- SHA512 34cd53ca89c9a7c15050dca976cabead2cbd57e399f46ffeb4a177f6300397be491282d2833833905059460edd901b1c53cda8f9aede232b365c32290ff540d9
- SSDEEP 96:l/Exb9gWL3x9Q/ih/fag+2U6qLcSF90ZbygiTg8hI:l/ExO8B+8/fag+2U6qLcSF90peI
- TLSH
  T10C323264A8F11076808384E89661DF1AAF8AE507D30FC50936BD5BD91FC7C87EDA35AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  app/views/dashboard/partisal/footer.php
- Size 1KB
- SHA256 f84d338ccedb0c43ae3b85538d3ef85b0bb2209c7c7117111e016b6e0e6f556b
- MD5 e2a5bc6ca93917cc6d5ca314a179e93d
- SHA1 9cf7c035550e9b6912b9251ae1cf7d0a427cd3ec
- SHA512 043ef83d7502319b897a1fa8674d24832cfa28e5548cf8b5f85c4f205ee4192064cb10bb645c19e1d7334e214cd3f2cdf6105c1c5d07c52474fbbd485cf2d652
- TLSH
  T14411515EADE9E47515402CBB10A9A38C1CA8E547F21CD8AE39FD86512F127DD0D23D34
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  app/views/found/access.php
- Size 948B
- SHA256 133a155e897e112af92845f6927ab1ba5b49e3b3aab76a78a2f12bda8c6fd8b7
- MD5 171d12840636bfde513049ac5612cf9c
- SHA1 67889eadf9b64dbb1b0d16a2a50e93e7904e1dbd
- SHA512 cc21630c670efe795da65aba102dd2a5fd58a948bd008500db28a63bf969967e29ddc17654f1dea0ee3ec8f7bdd6b52e9afa2b8c1424885dc194e420b76d4896
- TLSH
  T1B411D04F90CF0E2F1273867667019614F98BC8598B4B0F01B8BAA1373B9D800C49B599
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  app/views/includes/header.php
- Size 2KB
- SHA256 8ea1023b962bf917638cbb2f77b834fbe1c776dfba8ca923ae2d171e9028771d
- MD5 73e80ce1ffa704fd05bed8653e886808
- SHA1 5f4bec5c4edb9cac85c4be85dac1c31d0688e610
- SHA512 647ce3019480ea4ceec11c857a039dc7a524e8c5f862d05b700642d265e09794652b963dfacd8fdc606804f73967bf8c546737bdf6107844367e8ad2809f093b
- TLSH
  T12551336258C0542A223286875BB6B61DFD51A147A7C89808B4DC2BEF1FF3DE0CD67265
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  app/views/install/install.php
- Size 6KB
- SHA256 d244c9fb6914cca150f4831d3d1a7dc4a59064ac607809b81ebac8f9e06762be
- MD5 000fd85ebde13ff50affec43eb498b59
- SHA1 da06ef6bd6d3c261c75db2d17439d0c97d965dd4
- SHA512 8f6ba2de26082d7ca8af337333f264608e8e37d52b61ded42a3b867fc5de0511b8c919638452f2215cf8af80a72525f03a559700f50a3706020cccdb9a898e61
- SSDEEP 96:uySfNuyQTrGkSZ8kfr3fb8kffCSskfkCSYkf4gCkfwtq9T2oV65ftC8DkF:uyS1uVT/SjD5is7aAgPl9Z2CR
- TLSH
  T117D1400424F49A23514184FDA6E4DA03EDE1E827C229D44472BCEFD86FDBD836D072AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  app/views/pages/BPI-login.php
- Size 5KB
- SHA256 f87a3e7f29598d00df2b32c1f117d3c2c862f57e05bbea597de2d80e0cad555b
- MD5 6147e4ad8911beafd6633166896993c5
- SHA1 01217d5dc51f9ec148bbf211a142b6e00b0dde05
- SHA512 896d2f0f4988d394028caffdf5725d3b292a18b33f0deec1b2444e51653a4ba17a87130a83be6379a1112f159eab94424f67bb315093d76c7bc51b7cf0aaf555
- SSDEEP 96:DnJzLEGSk2N8B/2FPaEgA78aGM9bz/OT8fuB/FpY:9ks2N8Bw5gAY5qM7U
- TLSH
  T189C18608EE8154274073CAABA9A1962DFF968103E709481872EC267F5F72D564E33DAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  app/views/pages/CGD-login.php
- Size 11KB
- SHA256 4e7282356f8721a4cf3cc8e06117e66042c8b5fcb064bdc15e24567bb0d7d7a1
- MD5 556c8e2e40ae218d811d17993d646daa
- SHA1 0cf3165570b3b02e68d0c148fae0252ceeb16cbb
- SHA512 aa3c04cfa800b0138c62ffce301676d075d88c30aeddb3cdbc5dbe2197d63171d2a0d79dd582cdacb5b3387c92e88cb3a4ade630c56da404f93f9e1a3e402add
- SSDEEP 192:QKb+5zrWzQ7opsNtcHyZfMBtcZMNLigLf3H4gLEWH5DgLifeWC:QKb+5zrW6o63cHyZf63T3HCWH5DW
- TLSH
  T1F9326350F9C0081251338A6EEBF2DB5AEF95210387058629739C3BCB9FB6C595953BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  app/views/pages/Millennium-login.php
- Size 28KB
- SHA256 7e3005eb63292131120d8c952ecb9280a58774632541f50e3fed0df9519d0962
- MD5 027c1134f11ea48dd4acbac52655af52
- SHA1 f48644b3aa8a5870996cab729c610e401ef06535
- SHA512 33358da3c1662943fcbb9665aa046dc06aa13ae2752e7c3fa74d638578625e41be49d5b7f500f638ca236a331a9ad6b5cd0b6c3c231e37d64655df2f95b56428
- SSDEEP 384:uB/9ZZaQzgn5oMJj6p/cav345GHT8nLONTGESVQyq:upbulatgGHhX9yq
- TLSH
  T1FDD25164A9C015535173CBE8ABB29B59FE845093D6068655B3EC2BC74FB3C48CD23E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  app/views/pages/Novobanco-login.php
- Size 15KB
- SHA256 ab5ef19e9df49897454ecce00a8884c81cc97a115a32ff074e75252d8e04905d
- MD5 3812895a55b8a86bc829c0652f3f0cce
- SHA1 6d6d2dab2bd6095c4877ec7ec0e57576542090ef
- SHA512 e1ffe6aaf7d2306dd63b9d4172749b6775362e62240d46672a28d395a0982956bc3362beadb7c0d9284d93fa6f5bd9e3b7179273bc631e8e8b4d995f783ec740
- SSDEEP 192:tWOgxby7wYNACdhE8N95yzcTAtg9Pjb7emQcvGI:tWpOXCsvP
- TLSH
  T176729769B9C410025133D9A16B73DBA6FF695103874202B4FBEC319A9FF1DA58927ECC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  app/views/pages/Santander-login.php
- Size 17KB
- SHA256 4c09780724d82474edc2b697895c95a9ab13dc4a7a6eb9c4acd055f537ad72aa
- MD5 5bc49f59289b091a1819d15700e5829a
- SHA1 2a5997362b60e68e04d6b9dd757fa42e4392387d
- SHA512 c3c332692ebedea1ef023819759418949cb4c1c43aa3fb7fcf833cd4ca5ec8cc30e61a9b03f5e32dd101b949dcfd07025f7598f5f038076796fe312793ad9bd4
- SSDEEP 192:pDsqVFbp5I/CV94XKjY+CWjngL5OsDuOzycvqC7rza3b9rpUSM6DASbgHGxUg1Ml:pDLQWfoH8Gg6l
- TLSH
  T172824329E98011177173C69CBBB2574AFA688043D702426DBAEC27864FF6C55C923FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy