Overview
overview
5Static
static
1.github/sc...ity.py
ubuntu-18.04-amd64
3.github/sc...ity.py
debian-9-armhf
3.github/sc...ity.py
debian-9-mips
3.github/sc...ity.py
debian-9-mipsel
3.github/sc...ity.py
ubuntu-18.04-amd64
3.github/sc...ity.py
debian-9-armhf
3.github/sc...ity.py
debian-9-mips
3.github/sc...ity.py
debian-9-mipsel
3.github/sc...iew.sh
ubuntu-18.04-amd64
3.github/sc...iew.sh
debian-9-armhf
3.github/sc...iew.sh
debian-9-mips
3.github/sc...iew.sh
debian-9-mipsel
3.github/sc...ata.py
ubuntu-18.04-amd64
3.github/sc...ata.py
debian-9-armhf
3.github/sc...ata.py
debian-9-mips
3.github/sc...ata.py
debian-9-mipsel
3Makefile.bat
windows10-2004-x64
3Makefile.bat
windows11-ltsc_2024-x64
3plugins/ag...LL.wsf
windows10-2004-x64
5plugins/ag...LL.wsf
windows11-ltsc_2024-x64
5plugins/au...ext.js
windows10-2004-x64
3plugins/au...ext.js
windows11-ltsc_2024-x64
3plugins/bu...ILL.js
windows10-2004-x64
3plugins/bu...ILL.js
windows11-ltsc_2024-x64
3plugins/bu...RNS.js
windows10-2004-x64
3plugins/bu...RNS.js
windows11-ltsc_2024-x64
3plugins/bu...RNS.js
windows10-2004-x64
3plugins/bu...RNS.js
windows11-ltsc_2024-x64
3plugins/bu...RNS.js
windows10-2004-x64
3plugins/bu...RNS.js
windows11-ltsc_2024-x64
3plugins/bu...ILL.js
windows10-2004-x64
3plugins/bu...ILL.js
windows11-ltsc_2024-x64
3General
- Target 2c7457caaf9dc3ded6b07cdc6c10b09cc32b447bfa172ca59c679040d396496a
- Size 2.6MB
- Sample260820-fffl5szcmb
- SHA256 2c7457caaf9dc3ded6b07cdc6c10b09cc32b447bfa172ca59c679040d396496a
- MD5 0cd0a658aa0aa22fcbf7a8d1f62ecd38
- SHA1 c1bb286290f0a66f5b3a1c3c5d58f0ee96d5686c
- SHA512 64010b772e96151d1746aeb0721cf287aceaadf4a8e687b27f4ebe0b02fe41771561ce499125995040f8d8ab3981c736a901ce8b7d32c26d2a13a54bb65448c1
- SSDEEP 49152:pXTgXNPUP0ijqKuIfFWavU03bBIpDfNj60Z6bdpS4Q9+SEGq0SboVU8gy5dZak:pXTgdPEqXIfMavUoipNG08dpe4pbYUdK
- TLSH T162C5017BDD5D4C22CD33C1BE59612482A1EE9BC17020E05AFE34475DECDAAF2462727A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
.github/scripts/check_claude_loadability.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
.github/scripts/check_claude_loadability.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
.github/scripts/check_claude_loadability.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
.github/scripts/check_claude_loadability.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
.github/scripts/check_codex_loadability.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
.github/scripts/check_codex_loadability.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral7
Sample
.github/scripts/check_codex_loadability.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral8
Sample
.github/scripts/check_codex_loadability.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral9
Sample
.github/scripts/claude_review.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral10
Sample
.github/scripts/claude_review.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral11
Sample
.github/scripts/claude_review.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral12
Sample
.github/scripts/claude_review.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral13
Sample
.github/scripts/validate_plugin_metadata.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral14
Sample
.github/scripts/validate_plugin_metadata.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral15
Sample
.github/scripts/validate_plugin_metadata.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral16
Sample
.github/scripts/validate_plugin_metadata.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral17
Sample
Makefile.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Makefile.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
plugins/agentic-actions-auditor/skills/agentic-actions-auditor/SKILL.wsf
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
plugins/agentic-actions-auditor/skills/agentic-actions-auditor/SKILL.wsf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
plugins/audit-context-building/workflows/audit-context.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
plugins/audit-context-building/workflows/audit-context.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
plugins/building-secure-contracts/skills/cairo-vulnerability-scanner/SKILL.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
plugins/building-secure-contracts/skills/cairo-vulnerability-scanner/SKILL.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
plugins/building-secure-contracts/skills/cairo-vulnerability-scanner/resources/VULNERABILITY_PATTERNS.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
plugins/building-secure-contracts/skills/cairo-vulnerability-scanner/resources/VULNERABILITY_PATTERNS.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner/resources/ADVANCED_VULNERABILITY_PATTERNS.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner/resources/ADVANCED_VULNERABILITY_PATTERNS.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner/resources/COSMWASM_VULNERABILITY_PATTERNS.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner/resources/COSMWASM_VULNERABILITY_PATTERNS.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
plugins/building-secure-contracts/skills/solana-vulnerability-scanner/SKILL.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
plugins/building-secure-contracts/skills/solana-vulnerability-scanner/SKILL.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target .github/scripts/check_claude_loadability.py
- Size 7KB
- SHA256 3b0367aba68545defce36531da305a7c98b995768bea62b84d3885c74b67a0b1
- MD5 04afc9756ac32dd38517bdfeb17f399c
- SHA1 37c9f58b7e7bba59cf4e25b4afbfd732d6258b9c
- SHA512 95c46c159a08d1665ea5b9f82c1f42d4a3fcb0095941d301e9cfde0c833ac63e4df8f08654bcbb930408c152810878fa656e141541b8b8d60b1abd87e39bd06b
- SSDEEP 96:hhvnp0j6d5uEi0mAdI3OVo9oeyL3U7etfQi7GwIilteyfrnfhD5VcThY:hFxi0mPueyL3U7elVarmIyfjf54ThY
- TLSH T1AEF140190D1E612344F2845E496394A3D308E7CB0271E9533AFEAA942FFD420EDB7DB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target .github/scripts/check_codex_loadability.py
- Size 10KB
- SHA256 e54ae96a4b088b422d260fc6b953ba4493375559aa61c3be4cee8ca4b293dcb1
- MD5 e57a33a6fa3e7e1c23acce99b6fbaf9b
- SHA1 e33dc26ac8b0670c32ad47ce18b6aa7ed8d59c23
- SHA512 08a303ec8ece1b794198239693045c4ead34220e6113cb795c7006ff016ac7fba9f789c49c06c19c9b345ea63e99691f35cdc9e37e0272e28e8392b03883465d
- SSDEEP 192:hrlkTV6AfcgiOEp1/NlYa3s+rCazPpLDpOYzyHjfPB7NVbWL5ThY:pKTV6Af/er/zPXeH1iNW
- TLSH T1623270218D5FA45784F6842D6C7694A2E30CA7831720E9137CFE839C3FF9065D6B29E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target .github/scripts/claude_review.sh
- Size 9KB
- SHA256 6b3391cee8bce45c5109a0e8e78bd604d255d483db9b2d968842ce34ad7351ba
- MD5 4973c4283ddfd129f30d06fd251a6922
- SHA1 9b7585876a7edf5c563085df78bf6b532980b8a6
- SHA512 bad4e5c9bfb691a429b8b52915c54182f844d2d1d5045cdedb1f57956483072dcc37318d17e0595ee55e7410a7087f4c17f61a433bd68e888e5eb1ed89cc3ade
- SSDEEP 192:5OvhZXsuQxeD/NJOtC/ku6YExwbaJSP2W8fs3JKddZ2Zb:I5ZX6ON0C/kxxw2JSuY3r
- TLSH T15722D7677384533019B302A1BB4AA2A6F725E0BD27151370F4DED01C337A966937B6EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target .github/scripts/validate_plugin_metadata.py
- Size 68KB
- SHA256 e78aaab6b44838abaf0aa0018ec4e3a710ff7d09a4c70c2d41176c1b353c90ea
- MD5 99e876b244f3ed683da0ea3b5cb74a60
- SHA1 cb39e4cae9e94a59dad49be93fdc441b9948d50d
- SHA512 04e4305344e7107559b2ccd490653e336c250358f8e4c3fed67efb60d1931946345844b36cb9a299e27019dcbdf78d118ff8d64e78574ff0e4afbc30b150f3a1
- SSDEEP 768:UszEs7VvTUAmj8qc+oxs/e/shSk/8RZXf6XhAq+C02aTPklnuITceG/LO3JKLuum:UsYsZTjMTSfRZ0AoblnjQ5qFOu
- TLSH T1AA63A7279C4E69A305F3876C1D0580E1F31A93E74624E916F9BEC3182F7A071927FAD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Makefile
- Size 7KB
- SHA256 75aa74f5768f8e4e57df15f7eb2c57ee4e6841d7df69aa2dabc0de2cf8422c16
- MD5 3f527b3e7c45ae5cd369092a8539693f
- SHA1 a0beed6076f8b9b14df7f0a1ab8366c5b8ba85e4
- SHA512 a547d8e9d34064cbf8260f383c7db8533868b80a37fe034486f1fed06ffc19d2675618fb2cccdd238f40bac9cf2e8e6a2ecc3c7954dcbc06c1c9ebca06f225fe
- SSDEEP 192:op16QCU8O2tCRlmH08NvycQNygmZPMo2tszpYTRd:WwUNVlOzg0H9Y
- TLSH T15DE1C76BB206D3B6087132FA5578B0F6730AC3FB1F56682061EED6246D08CB4567FB64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/agentic-actions-auditor/skills/agentic-actions-auditor/SKILL.md
- Size 21KB
- SHA256 2bf244d5684f139d14e6787ece0bcbfb5ba14ed12143a10b3922c40a2e6b45ed
- MD5 f418685ade3836b75dd5f7e44ba28494
- SHA1 0844b29ef9d5a2b0dea9caf06559da88be63857c
- SHA512 90221a75f09f0e21775f9a1b1c52ee4b83c989ba4de09f25680128d3793aba0906ab36ef9b2b4bbd73f864dae92c9945c3c1d8bce6370e7e2588933b54f1a9d4
- SSDEEP 384:VMUhbLccis2OBtA0ISDfoQhI0Lwk7x1ei2/q2v5pXLxTq3w4QwztahM:VMinPis2OHhzHhI0LdfedFPXLx+3/Q8l
- TLSH T145A2F93BB51A227603B34266725B93E4D721B1B5F31611A9317E801CB5E5EE0D3AF2CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target plugins/audit-context-building/workflows/audit-context.js
- Size 12KB
- SHA256 8fc13b87c7db41927315b04bbcd3a00f00a0bc99b1295ba68305ae66c2eabc10
- MD5 46ce2ebd03a7cd32db10ad1cdd1b338d
- SHA1 72b2b4730049485f2786f77b3fc98e352d48fec7
- SHA512 3b1be97d5937486ca633498687a49ee8cddb8a18cd50a6738e22cc416faeabd8277d46c1a4cbac52563972cb702803d9a9deb516df5075d79b4f2a58f453acba
- SSDEEP 192:v3WEy7utKLNEFL3Ua8bAOSpDeQ4bE68Zep4rWy5z:hKLKFjUa88OSpDV4bE06WC
- TLSH T1FF4297C566A4923DDE73236066591361E220D32B67271C7374FE83B81F321D895BAFAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/building-secure-contracts/skills/cairo-vulnerability-scanner/SKILL.md
- Size 10KB
- SHA256 54c727b4830c9b76dca014922c7074fc625076d587894eadd9d42a3ad5f273d0
- MD5 572fcca10d322de905dc2bdb51b292ea
- SHA1 1b8bd9da4fa44efa0ad6319d844eeaf853aa8eae
- SHA512 ad81f49eea15bb12a0fe6352f3dbe19a03a28dab8d6a2fba46619c6ac21271a6fbe9de2cc304428da162dd5324fad1aed3c810c7ef86b01e3046db52541091ac
- SSDEEP 192:iMAcmyDXQMhP8qTw1Uxir75Mdc0cCK5pv9SSeadU3HCvFal9MOgzWNzM5me:ixZyDXtUqTw1UxiH50c0cMgU3CM01zWs
- TLSH T12722C76A2187E21C47B3005F96479336E725F299D32A017D787E971A4BF08E0C3D766E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/building-secure-contracts/skills/cairo-vulnerability-scanner/resources/VULNERABILITY_PATTERNS.md
- Size 21KB
- SHA256 83ade43308857c83fe5137d4b95f5bb9497477d281f3cc6093cdc3f0fb954a27
- MD5 8d4210c53582e6bc6af0d277e7972833
- SHA1 50818485812bd37d96d3037679c8785a28be0dc7
- SHA512 f657a25e8471673701106d16361a0a80572f0e656fae294e5d37a7efca20a2edefcaf2829e7886eda34e9e3b98a3f57c87d44b618f8958a45cb514d9834668c6
- SSDEEP 384:2x/7nZ52Yz37MqtyvwMraPjg55dcYTSsY4fL+g79+a5DlQqw5RNpGKln:257b2Yz3LMwMwo4kjAa5p2
- TLSH T1B4A2E8541183E2084AF2552BAB16B617E350B397928D036B70FED7274FF98A082D7DE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner/resources/ADVANCED_VULNERABILITY_PATTERNS.md
- Size 12KB
- SHA256 3b1a825f7ceb26f2eaf291261cacf61bfd940649edfa9110a70db230da920b3a
- MD5 0a452443f9231435c12ab9a0565bed27
- SHA1 b846dbcc8ccba1d10036b1168c602a8948278edd
- SHA512 b60abe00f3ef4aa77941b0dfc96a5982aa1b6d6cad114b04dd22aa55b72261f142f2f4fc49b59945d8907a2071e9ad51d0997db584a64bb43c70e18b657023bd
- SSDEEP 384:CDX9ENc0rYPuq+rNMICfTIKy/WYlb34Ovsle2xl/rc24:CDpxD+rfCf0v72O+wF
- TLSH T11B42FB92914962180EEB015BED12A374FB28D2699751305CF4EFC36CD7586D8C373ABB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner/resources/COSMWASM_VULNERABILITY_PATTERNS.md
- Size 7KB
- SHA256 95920fd555dcde3553f55bd14fd23e500d4c25b994c74457f9c816de27992abe
- MD5 701ef9271bee637c7ad0fc8ca1d1ec0c
- SHA1 e611208277e195cdf178f453aab017f9aca8230f
- SHA512 3bccdf1e9f810cebad18a4eeaae143cd9e3f7f0e4419e5e8b41470c84899922eaaf5a4902bb0e0a8559f29126684c269cc8b2322d53d7a6af7ebe332cc0b24f9
- SSDEEP 192:LbRhW1QFyosLIH4QlQB4xNBusMkIZq7NCZjRxDAB0:541QPeIYa5x4RQFS
- TLSH T1A7F10A699C53A33E0A7B8681B4654370FB36D255276D014CB02E92EC8760DDCC37FAA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/building-secure-contracts/skills/solana-vulnerability-scanner/SKILL.md
- Size 11KB
- SHA256 ebcd13e77e3a2d477f150af17b2f74b7cc106675e79e5ab701ae8f65dbe3f2a4
- MD5 59f466a03f5bd528b262cb6d4e2fcb6f
- SHA1 7aceffd0b3a0d4b26bdf113449928e8854d7142a
- SHA512 f5d0f6f15bad90cad7f35aeb0edf76d8f36325944b1f573d1a4e6cb96d1b246bee0e20a8210bb2f063ebb3d7f69b458e2bd7fca7112b2c4ae6fedc268f49eadd
- SSDEEP 192:K8s95b/R/15uvQErEvHCrV3P/KDzB8MMGwG4fjDs2v3isE52gVRBOZicNXjUh2KT:jsbbZ/15uvTrkEP/KDzB8MM7GQsy3iLV
- TLSH T1CC32B4454213E15E0CB3094FBD13477EC234EA19234A454E3EEE926F8B61FE4536BA6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10