0d42c1d96552ddfeb80599ec7962ff669995d3b5a2b740f4044f9c20771ebca0 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

vendor/api...se.ps1

windows10-2004-x64

3

vendor/api...se.ps1

windows11-ltsc_2024-x64

3

vendor/api...der.js

windows10-2004-x64

3

vendor/api...der.js

windows11-ltsc_2024-x64

3

vendor/asm...ce.ps1

windows10-2004-x64

3

vendor/asm...ce.ps1

windows11-ltsc_2024-x64

3

vendor/bin/carbon

ubuntu-18.04-amd64

1

vendor/bin/carbon

debian-9-armhf

1

vendor/bin/carbon

debian-9-mips

1

vendor/bin/carbon

debian-9-mipsel

1

vendor/bin/carbon.bat

windows10-2004-x64

3

vendor/bin/carbon.bat

windows11-ltsc_2024-x64

3

vendor/bin/commonmark

ubuntu-18.04-amd64

1

vendor/bin/commonmark

debian-9-armhf

1

vendor/bin/commonmark

debian-9-mips

1

vendor/bin/commonmark

debian-9-mipsel

1

vendor/bin...rk.bat

windows10-2004-x64

3

vendor/bin...rk.bat

windows11-ltsc_2024-x64

3

vendor/bin/php-parse

ubuntu-18.04-amd64

1

vendor/bin/php-parse

debian-9-armhf

1

vendor/bin/php-parse

debian-9-mips

1

vendor/bin/php-parse

debian-9-mipsel

1

vendor/bin...se.bat

windows10-2004-x64

3

vendor/bin...se.bat

windows11-ltsc_2024-x64

3

vendor/bin/phpunit

ubuntu-18.04-amd64

1

vendor/bin/phpunit

debian-9-armhf

1

vendor/bin/phpunit

debian-9-mips

1

vendor/bin/phpunit

debian-9-mipsel

1

vendor/bin...it.bat

windows10-2004-x64

3

vendor/bin...it.bat

windows11-ltsc_2024-x64

3

vendor/bin/psysh

ubuntu-18.04-amd64

1

vendor/bin/psysh

debian-9-armhf

1

Sharing

Copy URL Twitter E-mail

General

Target
vendor.zip
Size 11.3MB
Sample260819-ph86xaar3w
SHA256 0d42c1d96552ddfeb80599ec7962ff669995d3b5a2b740f4044f9c20771ebca0
MD5 8f6d7e8772dd5e09bc0432a80780823a
SHA1 b0e8f9ce538faacf8cf4d83c281aceb15217319f
SHA512 6abe3a157b5bf9674da6f9cc3a68735ae8644fa1d38252020321d03f868d73f9148b3beab07f5b01b8b9f007b5871f67b1b0e7f0d40807e6d2ff1996c5aa4730
SSDEEP 196608:+HzBH7ciGJKFFyKSZIjYQR7sP3inBHcupIwwh2g0mOFLmhVMgs/hPr9h0+gXL:Ozp7cREiKSZIMM7sf4HcUdBjmOhW6RPY
TLSH
T193C6F133976F6056FD03BFB0DB108B42DA68818221A4A1D724981B91D9A74CD4FEF76F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

vendor/apility/laravel-fcm/src/Response/DownstreamResponse.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

vendor/apility/laravel-fcm/src/Response/DownstreamResponse.ps1

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

vendor/apility/laravel-fcm/src/Sender/FCMSender.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

vendor/apility/laravel-fcm/src/Sender/FCMSender.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

vendor/asm89/stack-cors/src/CorsService.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

vendor/asm89/stack-cors/src/CorsService.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

vendor/bin/carbon

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

vendor/bin/carbon

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

vendor/bin/carbon

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

vendor/bin/carbon

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

vendor/bin/carbon.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

vendor/bin/carbon.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

vendor/bin/commonmark

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

vendor/bin/commonmark

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

vendor/bin/commonmark

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

vendor/bin/commonmark

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

vendor/bin/commonmark.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

vendor/bin/commonmark.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

vendor/bin/php-parse

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

vendor/bin/php-parse

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

vendor/bin/php-parse

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

vendor/bin/php-parse

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

vendor/bin/php-parse.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

vendor/bin/php-parse.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

vendor/bin/phpunit

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

vendor/bin/phpunit

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

vendor/bin/phpunit

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

vendor/bin/phpunit

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

vendor/bin/phpunit.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

vendor/bin/phpunit.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

vendor/bin/psysh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

vendor/bin/psysh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Malware Config

Targets

- Target
  vendor/apility/laravel-fcm/src/Response/DownstreamResponse.php
- Size 9KB
- SHA256 e1e52f0743a336c74331fe7abf70fe1c98dd759f87c77169db26a5b5d96f8641
- MD5 47a342d771546a4fed90790875b34759
- SHA1 0dcd26628a225443bf6f529175a368c43a2fba9b
- SHA512 b1056d43a8d74ed7bd27cd5ad3215446e6788bd3f08c1c3d23f9a250bb80a4c2fe46397eaed4cdc9e17d25286d8c4dd434a61ee9e841d50f5dc74f68ee17803f
- SSDEEP 192:LqWFI6l6c6L7cBj/cF3en/eiuvEIeMfSCyuzCKuLq32Lxr3UXEKuIlyRCAJdFS8n:LqZeuJMcmPcuY1QL
- TLSH
  T10112F1552CE6C967231318F8AF4B9441F6227137124D88913DAE87F01FD2B28FE9A799
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  vendor/apility/laravel-fcm/src/Sender/FCMSender.php
- Size 3KB
- SHA256 4ace9c7a557e76761ed75a176a6aa097c626987881bf26c3a38abf2bc8ecc6d3
- MD5 51db65bf87704392bae3981c57de3f5a
- SHA1 caad621338b741eaefd395f63c3bdcbd2edeb3bc
- SHA512 609d222cd38e8e34015bc964844e7e371cc1cd4d52e4068f083f059912559c389fe1c77e319020fc2edb6e7c45cf649a99af910c41474d1b4183798e4e9d721e
- TLSH
  T10071BD877CE255909BD390E57647CF84B433A90F3B9586623E5FA9E18F80324FEC2261
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  vendor/asm89/stack-cors/src/CorsService.php
- Size 7KB
- SHA256 7ab67c8ebfa16acac4e79d2c886846f9f8d86d78b1dd07260144dc7494179a59
- MD5 939a399cc41326e0fbbd25c0982fa5be
- SHA1 426ba647a6d0950e4b9e966e8826898ca6b4afde
- SHA512 f0a70f0c144722c14d3faf83d4450bd611d682c6eac5879a59b3f183abe6a40f1c8451f6eff973d45b2d97f5273be8b29f5921973dd1f174a863bc1d15b5133c
- SSDEEP 96:51dy9eVFirls6oeqHMM9kMediyJy1T7mhWf1+gSp/2sBI:rdy9eVFirr4H/k761f6wGx2s+
- TLSH
  T18FE1694E2CA22960D76351F8EF8B8E242520A11BA15ECAB77D7C12DB1FC223DDD1295D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  vendor/bin/carbon
- Size 633B
- SHA256 8f1217cf32ee8d8e789c2df2eeb1abc1f4c08418f42793847bb0ced6593f0691
- MD5 b95cde15dfca28b3206310aa550695c8
- SHA1 bc87dec441a577faabc7e475b63f627de234dc3c
- SHA512 677d8f494a84f31365bfc6ac2c1c7773e0da4dee7e2f3a10758b1a52aad7fcb9ce68a1c97c9d7f22d613a17b41682e81e5b5f7d4da9aa1341a28ad7357f57ff4
- TLSH
  T18BF0DD3898772770436587100B0EE87305B5853AA24449873D0D031DAFD8BC4A8F6EBC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  vendor/bin/carbon.bat
- Size 118B
- SHA256 8e806cde83a61f277692cefa70ad5cb8d8fec9527015f12ba3a1d2034a23ce40
- MD5 7137a321a173632389d254d07b34cf84
- SHA1 93bba14835e1dbb5d00529460d176a97e400fbc0
- SHA512 b62af10c6c6e0ea894b76ccd3fe518815cca81f5a60c33c786ee9206b142ce096c40354be31175b801e8ba65244bfa25cf91f701782330ddaf7f3f710b408fed
- TLSH
  T10AB02B58A273B210BC10083C8C4F0047A373D0B10F894A875010C54000043845D0F01C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  vendor/bin/commonmark
- Size 649B
- SHA256 8ed503b996ef050caa48019f21f7463e4f20594e1835aaac7d65cdf1ec41bcab
- MD5 afbef5339b99814ef58f125b933611aa
- SHA1 8eb5d77691f389530d572de4121829c965ae47f0
- SHA512 b7193b40d01430deeb39bc8da5234a6386c9ec9f6b4b0245b12fd3371941d4895b048c9b2643afb55901bc6035063d668258671434e95b1d1f2eb24392a17b97
- TLSH
  T13DF04934A8A717B043759390075EEC6740E08B2AA64449477D5D222DAFD8FE464F6FB4
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  vendor/bin/commonmark.bat
- Size 126B
- SHA256 0fe35138b5ed3a7b8ca34f7c7cb878c19a17360ea58cab37f5fb8e49d2eb8f0a
- MD5 146364e76e8fccdddb14ab2102150247
- SHA1 6cf7ffcf9133a2f00f5e1bc473b2b2b1baa6c744
- SHA512 ad4a966cfd4cd1fb11ba50d1867ab74fec7a60b4777a0d04daa7cb4d530c7c8f461446f866e662ed5da8a748aaf6e5eda893244eb93f3d6f4c9eeda2789cbf3e
- TLSH
  T1FFB02B44F2F3B1407D60147C8C5F5C0BE3B19F110F89CC079020E0102444BE01B0B020
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  vendor/bin/php-parse
- Size 645B
- SHA256 ff62ef8c2c79bb9f0811a4e166a275eea1ec50c485564f0fc27b64a248e87a9a
- MD5 93d6cf36db5e18d619e19146c7a01ab9
- SHA1 d2f0fc6ba5965d20994929721c4f788ebb8b34f8
- SHA512 3e88cdafd4707891d6bb198d5df89e1ac72d9e8bfa82d2e78c561f8eff47df9fc7a56dbe8ad5bbe39634676f6eff9ffde578ab7d18fdbec70c1454ebdc5699c7
- TLSH
  T183F07D34A87B27B1436696500B0EE86300F0853AA20565673D1D535DFFD8ED46DE7EF8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  vendor/bin/php-parse.bat
- Size 124B
- SHA256 44b3a8526adca5750560c1544e57400bc3dacae9a1cf6d5e0b609d0c95cb8e9d
- MD5 306f7cd20b47f7209cd9cb35ee6987e7
- SHA1 bb2124278e1d12aff29adf16a83738550463894e
- SHA512 42b7087aefe0fb8c345ee8ac0abcbbec29fef92107a3ab2bd95f5235eea78f189725e6600ba6049634066fbfec4ad88dc5ad0cd96f46c8bd09c07454211e9fb5
- TLSH
  T1B3B02B78B1B7F2F16C110C3C8C0FC04763B190310F4B91276020C1802C04F811F0B014
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  vendor/bin/phpunit
- Size 631B
- SHA256 e672b2af78b9cf1c0b5a6df39f1d4aae31bd5e022e1f99acdab6fe3e812de7f9
- MD5 7d5d0e2b043ee8a047959377f8abe062
- SHA1 8c8d8f4ce56238ccffce744237d02b9d249c0513
- SHA512 d9e3891000fd77a521c3bb891d221201906daca77fcd5ee4bd1a7de9fd8faad159680497eca2c8906f30b931d13cbf4589e9a53ae10529c11b0fc1cf757cee3e
- TLSH
  T13CF07D34B87717F203659B40070ADC6300A0863FA70455673F1D121DEFCCAD568E6EB8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  vendor/bin/phpunit.bat
- Size 117B
- SHA256 beaa33ece9b501ff0052b2501b7a9145f62912f036b255bee3c9b98509b41be6
- MD5 04616de4cc31dbd8be8b5b752cdf219c
- SHA1 a9ac8886049c68e452bfc65ddd5613093a4fc9d0
- SHA512 f6231229de0ddd042d768903e8916ed735d7b74ee7e5df29a51f3afd8a7949be9eb00a266339b0c2aba285749dbea4449f92aae30c4cc2145550dd1102bf3dc1
- TLSH
  T1C0B092F8B277B6E76D601E2CCC4B444BA3A1A53F1F9A842BA224D554940C6862E8BC24
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  vendor/bin/psysh
- Size 623B
- SHA256 7a503cbc4abbf7cee8550d01311dd7e094cb071c130ec1175a6c54e5397542c4
- MD5 7afbd8b3e9c771319f1c239cd45c19b0
- SHA1 4e6ca233e493c685a3626ab76aac0f3877c09fb8
- SHA512 b3fcb0f1fec66c2a2ee5b150b23f9db79943950ff8fcacd126c099d44312740c453685b5a50af284764e37e1af12d3f7f3917f18c284a7f6a9673776155edb6e
- TLSH
  T153F0A23498BB17710376A740474EDD6300E4852AA20454473D5D432DAFC8FD868FAFF4
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy