c9bbd3c8a2c347a891844e3255cd440da1e995f161b1c0951b786f4514d04a30 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

helpers/functions.ps1

windows10-2004-x64

3

helpers/functions.ps1

windows11-ltsc_2024-x64

3

templates/...h.html

windows10-2004-x64

3

templates/...h.html

windows11-ltsc_2024-x64

3

vendor/buc...pec.js

windows10-2004-x64

3

vendor/buc...pec.js

windows11-ltsc_2024-x64

3

vendor/buc...pec.js

windows10-2004-x64

3

vendor/buc...pec.js

windows11-ltsc_2024-x64

3

vendor/buc...pec.js

windows10-2004-x64

3

vendor/buc...pec.js

windows11-ltsc_2024-x64

3

vendor/buc...pec.js

windows10-2004-x64

3

vendor/buc...pec.js

windows11-ltsc_2024-x64

3

vendor/com...er.ps1

windows10-2004-x64

3

vendor/com...er.ps1

windows11-ltsc_2024-x64

3

vendor/j0k...ity.js

windows10-2004-x64

3

vendor/j0k...ity.js

windows11-ltsc_2024-x64

3

vendor/lea...f.html

windows10-2004-x64

6

vendor/lea...f.html

windows11-ltsc_2024-x64

6

vendor/lea...t.html

windows10-2004-x64

3

vendor/lea...t.html

windows11-ltsc_2024-x64

3

vendor/lea...e.html

windows10-2004-x64

3

vendor/lea...e.html

windows11-ltsc_2024-x64

3

vendor/lea...e.html

windows10-2004-x64

3

vendor/lea...e.html

windows11-ltsc_2024-x64

3

vendor/lea...e.html

windows10-2004-x64

3

vendor/lea...e.html

windows11-ltsc_2024-x64

3

vendor/lea...l.html

windows10-2004-x64

3

vendor/lea...l.html

windows11-ltsc_2024-x64

3

vendor/lea...t.html

windows10-2004-x64

3

vendor/lea...t.html

windows11-ltsc_2024-x64

3

vendor/lea...ne.ps1

windows10-2004-x64

3

vendor/lea...ne.ps1

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
arsae-5.3.1.zip
Size 230KB
Sample260821-wvm8jaan2v
SHA256 c9bbd3c8a2c347a891844e3255cd440da1e995f161b1c0951b786f4514d04a30
MD5 15fa50af31e227962de858ebbe9101d5
SHA1 a6a7a7b53b293676697d050349165307f52dc785
SHA512 2692444e2b15e0c65bb230d9e84933aa752f178e108602cdac1aa1a46925b83da73b0c62571814efadb7300cea24593697309124c6774c807cb74720a13afad3
SSDEEP 3072:EqqukhwLg3nhZU6Byc7CdudCza1mx0lLaQwKCP0YL7LsH8swQylSW9reyou29Tde:Eqaz3yc7/CGfljwKCHLsSQylSzhu2y97
TLSH
T1A434BE34C36D2152FE6F6A30CA46834AC4F6490B5292AEB73EDC1344AE1B1D61B7E70D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

helpers/functions.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

helpers/functions.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

templates/meta_refresh.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral4

Sample

templates/meta_refresh.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral5

Sample

vendor/buchin/searchterm/spec/src/SearchTerm.spec.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

vendor/buchin/searchterm/spec/src/SearchTerm.spec.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

vendor/buchin/termapi-client/spec/functions/insert_term.spec.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

vendor/buchin/termapi-client/spec/functions/insert_term.spec.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

vendor/buchin/termapi-client/spec/functions/popular_terms.spec.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

vendor/buchin/termapi-client/spec/functions/popular_terms.spec.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

vendor/buchin/termapi-client/spec/functions/recent_terms.spec.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

vendor/buchin/termapi-client/spec/functions/recent_terms.spec.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

vendor/composer/ClassLoader.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

vendor/composer/ClassLoader.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

vendor/j0k3r/php-readability/src/Readability.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

vendor/j0k3r/php-readability/src/Readability.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

vendor/league/plates/doc/layouts/_default/baseof.html

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral18

Sample

vendor/league/plates/doc/layouts/_default/baseof.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

Behavioral task

behavioral19

Sample

vendor/league/plates/doc/layouts/_default/list.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral20

Sample

vendor/league/plates/doc/layouts/_default/list.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral21

Sample

vendor/league/plates/doc/layouts/_default/single.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

vendor/league/plates/doc/layouts/_default/single.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral23

Sample

vendor/league/plates/doc/layouts/partials/title.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral24

Sample

vendor/league/plates/doc/layouts/partials/title.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral25

Sample

vendor/league/plates/doc/layouts/shortcodes/code-filename.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

vendor/league/plates/doc/layouts/shortcodes/code-filename.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral27

Sample

vendor/league/plates/doc/layouts/shortcodes/html.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

vendor/league/plates/doc/layouts/shortcodes/html.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

vendor/league/plates/example/templates/layout.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral30

Sample

vendor/league/plates/example/templates/layout.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral31

Sample

vendor/league/plates/src/Engine.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

vendor/league/plates/src/Engine.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  helpers/functions.php
- Size 17KB
- SHA256 44f421066106946cc19b64bcb6aecbdcf5a32746787925e7debf99be318886a4
- MD5 20e93b10e372aa098d54d3ae51642490
- SHA1 b4d4a650086cfdd2d1023f5b3cd8bbc36cdc0fe7
- SHA512 40e9897a60a15f22a77ef3fa528475c0aab9e245fda128a8bfa4b567fcccfaad651f2dc8e9d830762ec9f39b5c0ad24ae5a455a086039c5d6dc4a8d8c3fe09dd
- SSDEEP 384:2i18Rbezee9BUzsuOXLQLUIjYo+NFUqDCTWJVBn/PRtboZsgSU:2usPOXLbIH6UqDCTul5t0x
- TLSH
  T18F82215A78E758674163A83C4FEFE019A665C44B140C9E00BD0C63D8AFD463CEBF5BA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  templates/meta_refresh.php
- Size 290B
- SHA256 2eb488bed1913af3c649f079f2b3e52bd0d4309ae8b858217e2798d8b8f22cfd
- MD5 96499d99f6b81f087edba8542a4bdcbe
- SHA1 9b5ff6e20621c548979db9bdb356eabd5481fc50
- SHA512 ba8ed4f3580c2be1b4428f399d18fd1272e79a51bda79ee69d685e98fdc5d51057d7ffdee38834d55e1be7c50233fde6a9f6a574cd489e1c84dd9d814e890e9d
- TLSH
  T109D0C25290858E2F4066763A8C5930980E638D0CB34A58A05486A0DFADE9B098EA75AC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  vendor/buchin/searchterm/spec/src/SearchTerm.spec.php
- Size 1KB
- SHA256 bea8a6f6717e07900a014645d1b1ee1cf73c615e52dd1eb3910574326ca18675
- MD5 92135c681743e23032d855c7fc5dcd86
- SHA1 69d5877fa97639eb4d9f585315932635413e7f48
- SHA512 6ebcbf8ccd7c6c5bd1e953152ff7751f9b534d3e5c44003c6d5f36a5a4001319dc171ef29bfe13d72d00095b5173ad6efa67de82c0f12f3e0a3df464d5b884b6
- TLSH
  T1CE315CEAFD1E659F527B70AAC87F54C8543A1412AC194632EDC4616034DBE0DFE15CB8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  vendor/buchin/termapi-client/spec/functions/insert_term.spec.php
- Size 227B
- SHA256 0a9d336337bd529be5d59e1a335f454ae5bb816b007e2c2bae8bf3d699c3a84e
- MD5 e16c589ae3f826ee2383afecc2682140
- SHA1 f1413ad013585b0239d02656e8a4e12a9435b410
- SHA512 8517916a32c2c18d1a5ad2083f6bd7b22653b8b188f63686726b405d4027c2610c33e9a7ae5fce65c03a3e8d39e88429887bedf0304abbab1813189c885ce3f9
- TLSH
  T122D0A74DA0185E45DE75A8B8CC5FE0047617A2A45C53030725DC6381EE862BC2D5F91A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  vendor/buchin/termapi-client/spec/functions/popular_terms.spec.php
- Size 205B
- SHA256 69953b72b3a065d4346f48e128a3079e964ef9087bde0a0b39167b699d8ab437
- MD5 5088f3165df58a56c6388c134cbefc94
- SHA1 036ca447722feaf3d377c8610256ec464ffa6439
- SHA512 8c09aa149c2292ef55c042e749a988c6ee9ba08365d83df6f74a1b1a7c4dce8eda507c40d4cf241f9ac0ab821f68f45ee8edd4ca8264a95006aa49cb1c725b52
- TLSH
  T1AFD0231DE3943305B43636DCEC7FD009160304102C564109156C23D17C473EC3C5DC0D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  vendor/buchin/termapi-client/spec/functions/recent_terms.spec.php
- Size 202B
- SHA256 88828280889cc3a1517b855fb4536bbc5629ad0aef9a57f86dd1a7ec5a7859de
- MD5 3a233f53111bec99fb7211a1f9daa976
- SHA1 aa654e9c02b354839f7b3a6d087c4ac736670c26
- SHA512 c815a581313a8b2fd79578096cede502060a2af4a45b77f01b4405e88229259687462fe1524f7088474883766071b99be8dccd616d75d951ba59ad67f01fe599
- TLSH
  T1F3D0221CF0083205F4BC3DE8CC5F60092A4384200C82020B2A9C2381BC9B36CBD85C4A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  vendor/composer/ClassLoader.php
- Size 15KB
- SHA256 d4b2313e562edf942838ec316d983c1a3459ca67da3e5658e861200b0b3693c2
- MD5 c02be6d96671f88d28aad3ffa134c8ae
- SHA1 7f146de662b0599355b3b049a161e23cbdbbdaeb
- SHA512 f73af132ef1159370f4da75d1477541c8fd55e82d64e1a29b199e8963597b3558853edd48f703118bb139680e80bbae5cd601580c9f62355f3e749214b40e162
- SSDEEP 384:bRMAJd+yMxhA6b9JmKj7YyiznGgewQbuUNN7dJUu8:bjxMHAS91Ex
- TLSH
  T18D721F6929EB042A085361BD978F9051E05FF13B622D4D65FDEE06F06F0072CC5B6BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  vendor/j0k3r/php-readability/src/Readability.php
- Size 58KB
- SHA256 a78f7ebe1d52183fc83516190fdd3ca97f421cc205e25ff1704a7bc54cb36ea5
- MD5 9b6990abb1acfc1da0eebd0a285c4479
- SHA1 0ed646b6116bab4d6b941ed29a54f6b6114017be
- SHA512 b7ee5efc0def0351af49b145392c3e7618cfb9bb4ed9c45dbddfd6637c9eb8f997562f8456b56d191c77f037ac0efc090b7044a10d0612014619599b97f9c87e
- SSDEEP 1536:+A2Jm9Exz9RA5EVZ/LbMNtaIy6X0pB2R6JpP4csNYI5Hifxie6oymxWQXcZlCBw5:+1KEPIHA6ucvCdBia3A
- TLSH
  T1FE43957F35E70FB2251314752BCBE054AA2590339268D921BCDC83AD5F80B7CCDB5AA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  vendor/league/plates/doc/layouts/_default/baseof.html
- Size 4KB
- SHA256 fe3726d5dbc2745d3e629e24cd67b0bef5c33ae9d5341bd25e5b6618ab688005
- MD5 030c1b1c0db9c1e163a5026909e5e043
- SHA1 806a965de6eb14760cddad1c5b82b79697b6fd91
- SHA512 cd7951e7e412ccec9a262ffc1c3e08d1c501f340cfd22331a0b09d1299c8f8aaff82366fd0b171459023d9c8749ced40495976dc7d120ac346a77b3d5cba6241
- SSDEEP 48:vr0dNblsiW8t3hL43ffbMKMCgDX363ZpoI5PCQwL4wYLqkW:GNbrv323ffQKxe63ZpoI5PZwDYLqD
- TLSH
  T14EA197DB15F564595281D1A1B7A2311CE8BA916FD5C484A0B78C871B2F74F8241F31DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral17 behavioral18
- Target
  vendor/league/plates/doc/layouts/_default/list.html
- Size 70B
- SHA256 1976ab6225e7538253ebafcf60b30313b4ce19cebd6edd0ca12f68adbce0d57c
- MD5 745a6dae5852fc9e5725e170372b5187
- SHA1 670b1add382b9c1d76c818497ba888ad4a3b6385
- SHA512 41c3ff9950117b710f3ff5fcc9fc754de38b59a5049dfcafbab73252f447f07c356b149415435c7c3649be5b329f98e566f92289ccc02e3c17de89ebe859d0fe
- TLSH
  T1F4A0243D07F134140113D0F4100711407547C05F444D4C04400051C5C5DC00070F01C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  vendor/league/plates/doc/layouts/_default/single.html
- Size 70B
- SHA256 1976ab6225e7538253ebafcf60b30313b4ce19cebd6edd0ca12f68adbce0d57c
- MD5 745a6dae5852fc9e5725e170372b5187
- SHA1 670b1add382b9c1d76c818497ba888ad4a3b6385
- SHA512 41c3ff9950117b710f3ff5fcc9fc754de38b59a5049dfcafbab73252f447f07c356b149415435c7c3649be5b329f98e566f92289ccc02e3c17de89ebe859d0fe
- TLSH
  T1F4A0243D07F134140113D0F4100711407547C05F444D4C04400051C5C5DC00070F01C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  vendor/league/plates/doc/layouts/partials/title.html
- Size 268B
- SHA256 6fd948e5b909581a6ef84b5cf5ccf2d298a68b2cc0322f1d1bf3dc6719ad32d0
- MD5 8cbfe6d176a3a023622ffcac454dc419
- SHA1 771207cd22c9417bc8169b89407a056f5985f900
- SHA512 ec9d08b4e07c8a185850b90eb0a47f6bf5a7d90a4926400df47fab783dc634cb539119d87b1f676335df73a66126b5f82c4111a92306718e2561109f3d3a1ca5
- TLSH
  T142D017EA1208254C8E9230B404D72AE0531CC98EE3CC8CBE88315343DB23802F0F8DE0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  vendor/league/plates/doc/layouts/shortcodes/code-filename.html
- Size 49B
- SHA256 dc25535f5cfb078c443ac5b9008a137d0f76c841d3249959a08271a3d90afc5e
- MD5 136ef18b40f639d39f202248f43919c2
- SHA1 a90586242e8f668f8e4938e516fa636563287e13
- SHA512 62604106bea5e3db1eb1c65e7afc05890ebe66bbde2f645c9f56c418c5594872113290c950bfea4d34c7e86d9e26e675ce5131513854dd127fb6b11362f73232
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  vendor/league/plates/doc/layouts/shortcodes/html.html
- Size 93B
- SHA256 ae022e07d0c5c3a76aabb3291d2390e276353fbb99c60e8b730ecf4b4942ec2e
- MD5 aadd603d5e41837d4492ea146c66e1eb
- SHA1 0aa02852135729e7f59b49331ed78b9a3bb37e4f
- SHA512 094a16f465ac15cb784ce7ee92d38a2ec51f94fd9899ae74c9e59963ab79a7d1d52dd5fd1f0c65abf7c742c815b5d5f4150cc04d9068f25ab550494cb7b2c891
- TLSH
  T1B3B012DE0919642D424C81C920B65454D8574A0168965526FA08D058E859334103014F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  vendor/league/plates/example/templates/layout.php
- Size 176B
- SHA256 596e7d2cd1ae14e58af9b5895da9531c511471ad1b90884418429adba7dd0cda
- MD5 509250729cd45b0a5a79575bbe9f2073
- SHA1 11a2cefe55c0cbbe8080b78def1da5d75a416496
- SHA512 619811e628e8cc35aa3a6a9fb06d853fc8333338098f338843366891200e8900068e6d87ff8b8cc3ea9851235475565223bb60dd6dec9821c40175297544d623
- TLSH
  T145C012DB14171BA4341120F22BC3B7A0D47B322850A0465328E182098A7534EC45B07D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  vendor/league/plates/src/Engine.php
- Size 6KB
- SHA256 d10b01021a2ff446a9d4884493625de3464363723c950827177a67f78708eb93
- MD5 7441e5d5fb5aff4dc428f5692e3ca7d9
- SHA1 835b060254edf5bdcfd0bde9cb0caacf287af414
- SHA512 9c81d0508f4fbac6c775b893bf2e9a23424d6eccbbaedb58cf75fcda2310962e7fadcab4db5c745c5e5465aa4cb0df4f0c99fdba498ed19c62571b4263df6009
- SSDEEP 192:IsafBIZs14i3TgDQCHEfB68lZyfovHr4M+p8DFD4pEV4bw6NxTq/pi0FxZ4xX:YOwHT+PJ
- TLSH
  T13EE16A9839FBA7614237B53CD7478140D13AA51B3BAD64A078ED2BB03F3071897E8B58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy