5c8d85ef99aadda2fb11038b6798902e2a1fbfbb906fe7d71fdb55b91ba66e5e | Triage™

Login
Reports

Overview

overview

3

Static

static

3

SocketTool...V4.exe

windows10-2004-x64

3

SocketTool...V4.exe

windows11-ltsc_2024-x64

3

SocketTool...ead.js

windows10-2004-x64

3

SocketTool...ead.js

windows11-ltsc_2024-x64

3

SocketTool...ipt.js

windows10-2004-x64

3

SocketTool...ipt.js

windows11-ltsc_2024-x64

3

SocketTool...��.pdf

windows10-2004-x64

3

SocketTool...��.pdf

windows11-ltsc_2024-x64

3

SocketTool...��.pdf

windows10-2004-x64

3

SocketTool...��.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
5c8d85ef99aadda2fb11038b6798902e2a1fbfbb906fe7d71fdb55b91ba66e5e
Size 1.5MB
Sample260820-p4ppdsxeje
SHA256 5c8d85ef99aadda2fb11038b6798902e2a1fbfbb906fe7d71fdb55b91ba66e5e
MD5 04f0996271b7875cf8be0a1a5aaec494
SHA1 81fcab74c5ff72921db115ff5c1099878f03e764
SHA512 a1abf40ad04a94565835fec21d32d9e3eac1a4799f829a2a2dcbfe55ffd92a6528b1ae7e2a479c5d5f41913b446e3ae584fb5a29a4dc6d0fb577f6e1fece58ef
SSDEEP 24576:vMhkgwOWkK6zTgO/oUzfKtPHz1OjWDAindjYJ0xyZOI267vQXMnVbEEc:vzAWkZ/boUziPHz1OjWDAQ/xyZtQ8nah
TLSH
T1BA7533342166DEF4E84C90A7AFDAC09EE0270C95F52992C09C35A5F4824DADA7E05BF9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery execution spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

SocketTool.4.0/SocketTool V4.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

SocketTool.4.0/SocketTool V4.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

SocketTool.4.0/head.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

SocketTool.4.0/head.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

SocketTool.4.0/script.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

SocketTool.4.0/script.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

SocketTool.4.0/文档/SocketTool V4.0二次开发说明.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

SocketTool.4.0/文档/SocketTool V4.0二次开发说明.pdf

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral9

Sample

SocketTool.4.0/文档/SocketTool V4.0使用说明.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral10

Sample

SocketTool.4.0/文档/SocketTool V4.0使用说明.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Malware Config

Targets

- Target
  SocketTool.4.0/SocketTool V4.exe
- Size 1.2MB
- SHA256 0988dd7e496f919db6aa9a8931c857548af16540113c675b07cf17947b29a0fd
- MD5 43e459ff928b18ae75ab052d5240e3fc
- SHA1 a63921f8d24398becfd3e98a25813ea9844aedaf
- SHA512 edb2b9c91f628cce4afc97279d1d4c266177224d4f3d1c2b8d46d00099a9deacb41bab28f906eb040c760433d3b21b6029762dd6047f52f7cf691e8464e32446
- SSDEEP 24576:zARUgw37OfA3/0hGJL4nJ/97yD7waZ0n:mUt37OYv0QiDOHwaZ0
- TLSH
  T1CC455B22F2438836C59399348C0F97B45934FE566A156A763BF83D0D9F3AB837436293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  SocketTool.4.0/head.js
- Size 4KB
- SHA256 408062ce9db26ba10c9eab7aeb335ff71d8a5d5ab5f08fb2b16777983f6b8632
- MD5 9b295765d4c2490510a3a24595aaa484
- SHA1 0c43e9327de9282a4bf9511fd8301f43a4ba5faf
- SHA512 ac96a883c70765ddf5976a2eef8dee031e8ccede331e02632131978853aafbb87ed381ac443ac6ef1493e6e4613a20c351ed939cbc1638b333c093fcb7262a35
- SSDEEP 96:APbKhlKJ2n3fAX2gX2n2yqfdTrfb2j5VGNG22E723k28H:O83ALXK2fd7wGNG22E723k28H
- TLSH
  T10591CB88BE721454BA360A36572F7804FDA19907431192A6BD6CDED05FF32B06367F6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  SocketTool.4.0/script.js
- Size 3KB
- SHA256 2affcb8672547aaaa48e4e0a2523b5890a4e31380b67ae435e7a8cb41396535d
- MD5 f9bce4a0f2a28c5ec474a20f8185860d
- SHA1 343f47e14967355f3d1ff7fcfe87f310004809a1
- SHA512 fc7ba34f63e9de2c6d7ceb227adbe5e3c177021763efadaf3037158db10253fd70a6ea4b55f7a8d4ec337b285f950938699ecbdd4a8ef42d39ff625afbd6c837
- TLSH
  T17471DBC654726569F5B13AE90E2B684CFD918D228B51BB11FF9E8DC41FB30603235D8E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  SocketTool.4.0/文档/SocketTool V4.0二次开发说明.pdf
- Size 421KB
- SHA256 a5d39b56b9d57212845a3cd1d4ab8bf723a94f1ec15f801feb7e7cf3d39a1020
- MD5 e30de1ebb73063ce333cbb9215b9480c
- SHA1 80e972c22dd4092b1c1bceb8f3f8d656b7bfb370
- SHA512 f69d26d11939f0ea4da9519173e44181d11897ee23c013b7d6e9d492a23dc3a3b3a29e1b84873c328560068aaec6419e9769e443f9407f4e8e9f0df7e47da11d
- SSDEEP 12288:bjjxoz1jeWU/3E61RqBMpglyZeBMpgFoaNc:+zFO3TRqBEglSuEg36
- TLSH
  T1AC94AE1388148B86B82CC7E8BF4B4E5C6F19760CE59678FE00565EDB3FA17255C8E06E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  SocketTool.4.0/文档/SocketTool V4.0使用说明.pdf
- Size 1.1MB
- SHA256 29d2b143f4f0f25cc4493f4014b1dff4ca0d920560b7b62cac6c2658fdde732d
- MD5 64d216a856c6eea6ec57b64a12e2c317
- SHA1 1af4c915a4041d3508bcde316d20ab930910ab94
- SHA512 c2c4a9c73b3f341808505dfd9bb1e27724f4b30503ab316da5008f3838c4f592fcfdbcc951a53a6871a72a9a6a88b41e955d3e9e0f62b63943c0e8ac98126b01
- SSDEEP 24576:eaPm+6QiO+WfBMwEkf+pFwE/+pzuwEV1++Xv++Xg+2Q++X7Px7+K+lcJ:xk00pbWmV0ti+8Z6la
- TLSH
  T1BE356D17CD184B83B42CC7A8BE474E6C6F09270CE99669FF00265ECB3F612165D8E16E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

adwarediscoveryspyware

behavioral8

adwarediscoveryspyware

behavioral9

adwarediscoveryspyware

behavioral10

adwarediscoveryspyware

© 2018-2026

Terms | Privacy