89e78165dacd8ac774eb07d39051bea195e6be7bf8c3f5412b37031377c5996f | Triage™

Login
Reports

Overview

overview

8

Static

static

8

VisionC2-main/bot/bot

ubuntu-18.04-amd64

1

VisionC2-m...fig.js

windows10-2004-x64

3

VisionC2-m...fig.js

windows11-ltsc_2024-x64

3

VisionC2-m...ain.js

windows10-2004-x64

3

VisionC2-m...ain.js

windows11-ltsc_2024-x64

3

VisionC2-m.../ui.js

windows10-2004-x64

3

VisionC2-m.../ui.js

windows11-ltsc_2024-x64

3

VisionC2-m...web.js

windows10-2004-x64

3

VisionC2-m...web.js

windows11-ltsc_2024-x64

3

VisionC2-m...app.js

windows10-2004-x64

3

VisionC2-m...app.js

windows11-ltsc_2024-x64

3

VisionC2-m...d.html

windows10-2004-x64

3

VisionC2-m...d.html

windows11-ltsc_2024-x64

3

VisionC2-m...n.html

windows10-2004-x64

3

VisionC2-m...n.html

windows11-ltsc_2024-x64

3

VisionC2-m...tup.py

ubuntu-18.04-amd64

3

VisionC2-m...tup.py

debian-9-armhf

3

VisionC2-m...tup.py

debian-9-mips

3

VisionC2-m...tup.py

debian-9-mipsel

3

VisionC2-m...ild.sh

ubuntu-18.04-amd64

3

VisionC2-m...ild.sh

debian-9-armhf

3

VisionC2-m...ild.sh

debian-9-mips

3

VisionC2-m...ild.sh

debian-9-mipsel

3

VisionC2-m...nup.sh

ubuntu-18.04-amd64

6

VisionC2-m...nup.sh

debian-9-armhf

6

VisionC2-m...nup.sh

debian-9-mips

6

VisionC2-m...nup.sh

debian-9-mipsel

6

VisionC2-m...pto.js

windows10-2004-x64

3

VisionC2-m...pto.js

windows11-ltsc_2024-x64

3

VisionC2-m...ill.sh

ubuntu-18.04-amd64

7

VisionC2-m...ill.sh

debian-9-armhf

4

VisionC2-m...ill.sh

debian-9-mips

4

Sharing

Copy URL Twitter E-mail

General

Target
89e78165dacd8ac774eb07d39051bea195e6be7bf8c3f5412b37031377c5996f.bin
Size 7.1MB
Sample260816-vtv2bafj4w
SHA256 89e78165dacd8ac774eb07d39051bea195e6be7bf8c3f5412b37031377c5996f
MD5 107b3628f4dcf48d1f1860ccffc24d12
SHA1 177e11e32bcb775c431408299e8c22b1b55d21c6
SHA512 d88a24d38550d38413e0e3f33f04eddb9878bc070436f172f87bb7baa9dd31135135322161ebd5593c4bb1a04e1ea5c938098be0fb81fa7a0bc56899a7a12549
SSDEEP 196608:8bgwyRUfTfV8zjsXrRtb/xfGdFF+KzNyvlxD0by75//m7VpBAWhz:88RUfTicXl1pgF8KzMvlHmpEWp
TLSH
T16C76333888494D7FF1C185F12BA37591BEDDB20618FD774A39F28E63006696ECC2617A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution linux rootkit upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

VisionC2-main/bot/bot

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

VisionC2-main/bot/config.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

VisionC2-main/bot/config.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

VisionC2-main/cnc/main.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

VisionC2-main/cnc/main.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

VisionC2-main/cnc/ui.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

VisionC2-main/cnc/ui.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

VisionC2-main/cnc/web.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

VisionC2-main/cnc/web.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

VisionC2-main/cnc/web/app.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

VisionC2-main/cnc/web/app.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

VisionC2-main/cnc/web/dashboard.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral13

Sample

VisionC2-main/cnc/web/dashboard.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral14

Sample

VisionC2-main/cnc/web/login.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral15

Sample

VisionC2-main/cnc/web/login.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral16

Sample

VisionC2-main/setup.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

VisionC2-main/setup.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

VisionC2-main/setup.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

VisionC2-main/setup.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

VisionC2-main/tools/build.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

VisionC2-main/tools/build.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

VisionC2-main/tools/build.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

VisionC2-main/tools/build.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

VisionC2-main/tools/cleanup.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

VisionC2-main/tools/cleanup.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

VisionC2-main/tools/cleanup.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

5 signatures

150 seconds

Behavioral task

behavioral27

Sample

VisionC2-main/tools/cleanup.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

5 signatures

150 seconds

Behavioral task

behavioral28

Sample

VisionC2-main/tools/crypto.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

VisionC2-main/tools/crypto.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

VisionC2-main/tools/fix_botkill.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

5 signatures

150 seconds

discovery rootkit

Behavioral task

behavioral31

Sample

VisionC2-main/tools/fix_botkill.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

VisionC2-main/tools/fix_botkill.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

3 signatures

150 seconds

Malware Config

Targets

- Target
  VisionC2-main/bot/bot
- Size 8.9MB
- SHA256 1e62f0f5b81f34dd61ea66841a38d8deff000ac0c0fa08929f3c65ac75dd99c9
- MD5 2d9339eef403dd7f37cea0d926d3ffbe
- SHA1 35238d3966a69179fc6a1ef76f67ed6dc5f448c3
- SHA512 75d30543abf32032f5c3b489c731e1499cbac12f617f7110efd4db3a784a53de5bb191cca8719c5d3c3c39d2f5b3c3daf99ecd123cccf0fca1a4c7d692c84ad2
- SSDEEP 98304:SSwkKdGdr8VNs1+DeEpW7AdsKDEgx/oKCX6Kd3A+V+2th80fBxyYOK9:SLGd4VNMkeEMgx/oKCXLW+Hh80jEG
- TLSH
  T14D969C03EC9519E9C1E9A2318A729252BB71BC495B3123D33F90F3786F76BC46A78744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  VisionC2-main/bot/config.go
- Size 16KB
- SHA256 bee715c9f0d24734c01182b1878bf58c53b03f03e7e921263cc818c3c30cb1e4
- MD5 330b4b1d55240e87ed99c6eb27418566
- SHA1 253ff3188606ed9a637db2b8cdd7faaecd21f4ac
- SHA512 7549c9155f8da5c1747a972856f0001198fdec4a2c04684a3102b4f05e7fca8adf33191b3b448593d59a5b372181d825d4b83b592ca64908f0f4574f49f11e43
- SSDEEP 384:TJsM0dGryn4t2bFOo8rsOd/+hWywkrpt+:TJsM0cynpbFOsOdk/dpg
- TLSH
  T182726360FA9786560D980151F8F44501EFAAB326D6337BECECEFC9800276769C13299B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2 behavioral3
- Target
  VisionC2-main/cnc/main.go
- Size 8KB
- SHA256 d31939021dc56c4be0c30c4aaf53ad2c044bc8a09defa3ba6bca06e3bbfdeab8
- MD5 c0c1a15d4645689f0da4f7f94fbceef0
- SHA1 4bbac4dbbeb373665dd927d383637dd445bf7d1c
- SHA512 15b105c259fbe2ac3e7775c15d05562a7a689d546e01055b333ee321b8a0a25500d0122243989cb993b92c3370373e0d470171658a470793b3c7b651a847ac47
- SSDEEP 192:sm7cEPXfFNy0WiHAM1e2kYHptS4gDa5+c40k1sm:sNEPdNy9iHPdpo4gcfk7
- TLSH
  T11512C900D71D42294B895626CF9494C26B7CD85B5A34A4F5B4DEE2B823183EF53386EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4 behavioral5
- Target
  VisionC2-main/cnc/ui.go
- Size 119KB
- SHA256 855a66ab76e9bcbe1ee62da2d8820e35e8cd6099d3d4f98166a96ace6859e551
- MD5 e8c4d099e8b5f94dee4f52c69127c448
- SHA1 0f413e693d9e0404f104a514a30f2eed8b33988f
- SHA512 0e83928ea5b43b234069c113841db78d97d7fed3b6b9165efe3a2115bb7310e6f0996306f3f045734ca941bbd08a8f03137288e03d23a0d563d261830fbb264e
- SSDEEP 1536:1Z7V6jottvDffUPJGMbLT0xT0aT0dI9nUujAHgF3tyEyHk:1ZB6sttrffUPpT0xT0aT0dihAHgMHk
- TLSH
  T186C32E21B61E3926FA59F41DC95C08C0122DA57D7A1849A3FAEE70F6276F21DC2E3371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6 behavioral7
- Target
  VisionC2-main/cnc/web.go
- Size 49KB
- SHA256 51b1f32a0bd679467d70f4818d3c61dcee70cc51b58d8e2376bf081191410b58
- MD5 b4963688d7d0a016960b6a3bfee21fa7
- SHA1 8de0b875123ef251cb04ca4ec3eb396f3ee61aa2
- SHA512 9c704eb87841d9d96ccf26d15cf9575165eea11417d57a0aa90fd01cb30dfc7dc16e35f4d81258d22fd046c6187750589de82f81c6fabf596804ec55f8db6991
- SSDEEP 768:eLc6ylNdE6Zc2ctcdkkAoeLrBni8FlggBGvmc7woOU3Kh64:6c6x6rqn1F6sUOUp4
- TLSH
  T1233319C0E7AC10355A9190988CB898C67EECD8279857E8FAFC9C53AD53487FBC13A564
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8 behavioral9
- Target
  VisionC2-main/cnc/web/app.js
- Size 174KB
- SHA256 74407d58467462463d95b829d84e71ceb5b721b3b3688b55c621bfecfc3e1982
- MD5 71026d29ef8e44bef9abbdf2eddb2bec
- SHA1 9147fd6219f37be8ad90b18a7efca862248b224e
- SHA512 6d0344042c3b979a7311dcec6e2f37cb0216895462b1b4c5dcb6fbb2e1e42e1aedb262a478a2aace30a3fee279cc8c987f467c709ab4c235f294bd190acab698
- SSDEEP 1536:qJlqphyC1xwmgEsep0JBSaiWvmO6v77IX/gNt8yL7PyYOvHmuAJRMPOMuhd:e+yC1xwmgEfp0JBYxv7Nh6YYVgR
- TLSH
  T11B04D5EABDF7293629BBE0BA614F9219F87104074902E910786CC5541FE4F90627FEF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral11
- Target
  VisionC2-main/cnc/web/dashboard.html
- Size 41KB
- SHA256 8458a209b46b7782d70c09db808fc19c2f839dc0f17db58bacfdc5900d804a97
- MD5 4bd10db6c48d5b3cf68a65afd13fd0a7
- SHA1 e638009a98fc736ccb8ca78bfdf77723f5a385e0
- SHA512 0044fe99dabdda6d33b74e3bb9ad499cb9751e7a39110d5ae5e57025366dea1925744ca6b8241ae5074f6dc3c43e6e7bda3c97aa0f909c4a0030da3036ec54f0
- SSDEEP 768:tcBqqoEmqfDtBYxIAI8puwec+ZzwTyBDUr0Dh:/EHfBBYxIAI8puwec+ZzwTyBv
- TLSH
  T11D13016060F9257750A780C66AE64B273EE1F94BDB4B0214B7BC4BE01FC7C92ED2715A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12 behavioral13
- Target
  VisionC2-main/cnc/web/login.html
- Size 4KB
- SHA256 bfafdb95ce6167c2b44cbaa50fd46cbe0417684dcd7c43ff831f69dcc2857141
- MD5 114d72a9dbd87095c5e80b816426d0bb
- SHA1 4edd8cce5149e4526defa4b0da7439a107f90156
- SHA512 800cd656a7875274134df49be1260b54a811b4f96dec99e0502d7f59edb0b3410ca23a8e602e29c910098f40fe356007b8d3beb726de6152fbbdabcb547e511c
- SSDEEP 96:Ly5uck15fFj+ByWGme3nRFRTctcPrTF1dYC:Hc65NyAT3nrNr
- TLSH
  T1A091B67B7E5A14222667917A21FFA584303641439E45CA00ADF4F1A1EFA9F974D335C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14 behavioral15
- Target
  VisionC2-main/setup.py
- Size 63KB
- SHA256 2b2ec1c79b9eb1bfd84eecda491126290ec71a17f5d309b0504de64a0a134575
- MD5 a589272d0a769d56a6e2fde99643b399
- SHA1 4b9b1630b88bd65c65b75cba1dc5cf424fe84b1f
- SHA512 eed91a81900a1720ae77d985029594f46700b0c4782705d65e12f2f2679f88bbac59ff866e273b2afdbadba894ea551bab6be59f837e56f39f94dd2233eed6cd
- SSDEEP 1536:Zkv3AbvsRG4fvrRazNfq/KnfEbH+z0ghf7ZKdaxorpMTVxBQ5gcBkUP8+Ad1z8eU:ZFg
- TLSH
  T15653706288282D6A5BC7CE3D8DF799116A363AD386143439FD8C81C40F6547DCEB65BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16 behavioral17 behavioral18 behavioral19
- Target
  VisionC2-main/tools/build.sh
- Size 7KB
- SHA256 276aa0d14d22b27f3ffecab1115653cf79dd2be491ff913f3b9436242eddde5b
- MD5 404dbfdc1c688866477d0d920021744f
- SHA1 316756abebb0e38a1242a50d3f23c11c438fa413
- SHA512 eb115a2bd149fee03f30c2667bcc3fa243e62fb9f230e4d91dd9eeb62f76070510c4cbf36f391916fe88fe0c90077c11e115be0bd0b3f55e5ad23abd74383fb4
- SSDEEP 192:mN24iIraHXJMIZxpvKTwfxnDlEV6LPnkvK2ItVSYSQJ1Y:SPiIwuIPxxnDxbPY
- TLSH
  T10EF1A4B0BF4085B5516E82798CA5534CFA1462AF12CD180EB5CFA95C0FBEF5D12BC9E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20 behavioral21 behavioral22 behavioral23
- Target
  VisionC2-main/tools/cleanup.sh
- Size 7KB
- SHA256 4ab0ab0d90ac73d9ead13a7fb775aec68ae7c87e65b9a4f05474e0cbba81e8b6
- MD5 5ef4f0586d25ae16fbea52f41b5eec67
- SHA1 58a22c151d80757f617388891317b84f0d034791
- SHA512 50c77ee339dd3b2304f87f0f93dc1685b882103d55be1ebc3380cb9fa03a0255a0ef98cf7b4bbf70565a114ecdae1abb38efac111ecfa894b821ea2add160f2e
- SSDEEP 96:T1fkWiqMaFAnNk47W7q2kRX1Zl4WvZ4Nv8v4LPyXPfhTqKhUA9zigS:hxMbZ4WR4Ns4L+PpthUA9ziN
- TLSH
  T100E111E1A459A9312EC68DB91AF75D14591B141BCA044C2470AE20E91FB8B38FFBD73D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates running processes
  Discovers information about currently running processes on the system
behavioral24 behavioral25 behavioral26 behavioral27
- Target
  VisionC2-main/tools/crypto.go
- Size 12KB
- SHA256 24cd2061bc6fbb6790a0331936d46851d5042e016ea95ce05cd6b27c7c98016f
- MD5 724175a4ebc4df768944d02562109c1a
- SHA1 ba1b7d2c1253fd3c49c66b57bd35ad32671bdb8c
- SHA512 a70dbf61d6067708a70393379b20116ed94a8605244aae4672697d8d259f10a75d9872dc0c01c9e3f3d7b9af7f23844ff152de0ac0afdcb304299cf7241216da
- SSDEEP 384:NYRINsXuH6bru7pXO7HWXZR4fhtL1yTz3Nzb:V
- TLSH
  T1014296D19DEA55024F880066487A88126EF2A93B6C78E2E5F88DF1FDE3CC37681755F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28 behavioral29
- Target
  VisionC2-main/tools/fix_botkill.sh
- Size 1KB
- SHA256 f97f25c848db517e3053033cddfcb67b622cef2162d4e22816f93435a43e2c65
- MD5 384987b57164efc19ba27a593f39225a
- SHA1 e764921e12bf91af26a87d2e1a39fac1cb300551
- SHA512 f6840ac09cf361c5a7e4336217376a00e32e7dd1ea9557312540aba341f5b3d069632e9044caf40e843ed48bf30186c06d5fd694eae2ac0c8c892d522567b1c1
- TLSH
  T1EE3132F2F6183C39605DD95FE62B80C0BE832B3F49686AC47487D45B1E1D9143745BB8
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery rootkit
- Loads a kernel module
  Loads a Linux kernel module, potentially to achieve persistence
  rootkit
behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Python

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

discoveryrootkit

behavioral31

behavioral32

© 2018-2026

Terms | Privacy