f5e29de26e99e299c1ac993ad1f0c383f07f65636be715b3fc29e317e90da061 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

resources\...api.js

windows10-2004-x64

3

resources\...api.js

windows11-ltsc_2024-x64

3

resources\...mat.js

ubuntu-18.04-amd64

resources\...mat.js

debian-9-armhf

resources\...mat.js

debian-9-mips

resources\...mat.js

debian-9-mipsel

resources\...ion.js

windows10-2004-x64

3

resources\...ion.js

windows11-ltsc_2024-x64

3

resources\...mat.js

ubuntu-18.04-amd64

resources\...mat.js

debian-9-armhf

resources\...mat.js

debian-9-mips

resources\...mat.js

debian-9-mipsel

resources\...sax.js

windows10-2004-x64

3

resources\...sax.js

windows11-ltsc_2024-x64

3

resources\...ver.js

ubuntu-18.04-amd64

resources\...ver.js

debian-9-armhf

resources\...ver.js

debian-9-mips

resources\...ver.js

debian-9-mipsel

resources\...tor.js

windows10-2004-x64

3

resources\...tor.js

windows11-ltsc_2024-x64

3

resources\...dex.js

windows10-2004-x64

3

resources\...dex.js

windows11-ltsc_2024-x64

3

resources\...nge.js

windows10-2004-x64

3

resources\...nge.js

windows11-ltsc_2024-x64

3

resources\...ver.js

windows10-2004-x64

3

resources\...ver.js

windows11-ltsc_2024-x64

3

resources\...ean.js

windows10-2004-x64

3

resources\...ean.js

windows11-ltsc_2024-x64

3

resources\...cmp.js

windows10-2004-x64

3

resources\...cmp.js

windows11-ltsc_2024-x64

3

resources\...rce.js

windows10-2004-x64

3

resources\...rce.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
OrionPro-1.0.9-PATCHED-portable.zip
Size 118.3MB
Sample260823-rh3egaae32
SHA256 f5e29de26e99e299c1ac993ad1f0c383f07f65636be715b3fc29e317e90da061
MD5 fbc098cb7a945eb11caa3f9d4b3c5a9e
SHA1 34ce7d820d85ad21ddbbbb95978b4d1d56543d5d
SHA512 173ea10f217e3ad7073448a06caa3c03e5f7c280ba4b19b0a5b5d27daa01b02de9dde89c8c7068acc05e7d30f29ea3882e15b9172f41d63156762442ab5f85fd
SSDEEP 3145728:22HzgaEK23bAr1VaFlhT//BmQmNgFP42Di46Urv/Qmhi30:rzgaXr1VoLBmZgV42DIy/DhD
TLSH
T18448333B80E56936DA1AF9BC9EE15020FC99544E4286C9D1139C8B6B70EF6D8337BD07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

resources\app_asar_out\node_modules\node-addon-api\tools\check-napi.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

resources\app_asar_out\node_modules\node-addon-api\tools\check-napi.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

resources\app_asar_out\node_modules\node-addon-api\tools\clang-format.js

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

resources\app_asar_out\node_modules\node-addon-api\tools\clang-format.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

resources\app_asar_out\node_modules\node-addon-api\tools\clang-format.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

resources\app_asar_out\node_modules\node-addon-api\tools\clang-format.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

resources\app_asar_out\node_modules\node-addon-api\tools\conversion.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

resources\app_asar_out\node_modules\node-addon-api\tools\conversion.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

resources\app_asar_out\node_modules\node-addon-api\tools\eslint-format.js

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

resources\app_asar_out\node_modules\node-addon-api\tools\eslint-format.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

resources\app_asar_out\node_modules\node-addon-api\tools\eslint-format.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

resources\app_asar_out\node_modules\node-addon-api\tools\eslint-format.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

resources\app_asar_out\node_modules\sax\lib\sax.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

resources\app_asar_out\node_modules\sax\lib\sax.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

resources\app_asar_out\node_modules\semver\bin\semver.js

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

resources\app_asar_out\node_modules\semver\bin\semver.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

resources\app_asar_out\node_modules\semver\bin\semver.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

resources\app_asar_out\node_modules\semver\bin\semver.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

resources\app_asar_out\node_modules\semver\classes\comparator.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

resources\app_asar_out\node_modules\semver\classes\comparator.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

resources\app_asar_out\node_modules\semver\classes\index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

resources\app_asar_out\node_modules\semver\classes\index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

resources\app_asar_out\node_modules\semver\classes\range.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

resources\app_asar_out\node_modules\semver\classes\range.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

resources\app_asar_out\node_modules\semver\classes\semver.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

resources\app_asar_out\node_modules\semver\classes\semver.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

resources\app_asar_out\node_modules\semver\functions\clean.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

resources\app_asar_out\node_modules\semver\functions\clean.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

resources\app_asar_out\node_modules\semver\functions\cmp.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

resources\app_asar_out\node_modules\semver\functions\cmp.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

resources\app_asar_out\node_modules\semver\functions\coerce.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

resources\app_asar_out\node_modules\semver\functions\coerce.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  resources\app_asar_out\node_modules\node-addon-api\tools\check-napi.js
- Size 3KB
- SHA256 9e1207808023cd998fe9e377aefbe77d6c59fa129f94e6acbf24907149d8c11e
- MD5 30dfff807dd17db0a258056b727bcc78
- SHA1 faa0140ef82603f8bcfa99923f88d7787c3f51c0
- SHA512 6c825b5b28224007efd005cbf65ffdb52f20400c9c80a2fe45bed375ce8862a656a30367e531315bebc7d687c7fa35433e65975eb90dd404b42dc9c3b1152ae4
- TLSH
  T1D1612E9912FD12A340B7363A5B4E9039B22581A7432DDE20BEDC07193FD057287F2BE6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  resources\app_asar_out\node_modules\node-addon-api\tools\clang-format.js
- Size 1KB
- SHA256 3e0b5e6d6f1a0c5ed106115871d0fd48f37bac5554effdacaf8d2439f4ed0c65
- MD5 e549f9e10d94d3d9c2ef12ec461b2f79
- SHA1 599bf11eb9272e54371b35255c68f7999fe52985
- SHA512 fbefe82dfc7ea9e1e13a534348145f26a5395ee0e79b1fac445d8db8f9c137cc80b6de2973d22fe33906b6e166fb65e564a12235ad8de0e4773193256e5a66d2
- TLSH
  T191415186A9F7102501A152951BDF34293F5DD833320AFC43776D8ED1AF82E31D8967AD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  resources\app_asar_out\node_modules\node-addon-api\tools\conversion.js
- Size 14KB
- SHA256 e089cbad94331ad07dfb103b5d5aafaaf99fba89e9674d64f4f35e9dfc432357
- MD5 d021b061d75659901614e8c6f87aa6c0
- SHA1 9b916186796d7e77c067da569fdb4f58deafbfd5
- SHA512 b0e361924e70c86fafd657d4d36f9006187b9f88dc9b1d09acdec1d88da6d4e3006892dd2409e500bc538864685df5acea6509da05ac8a020659cbbf4ba60266
- SSDEEP 192:N5NyA2jQTzIxgpscPG/1Zpw2YiXPi+i7y1blqxuCerleZ:DcA2jQTEG+cubpw2vXPi+Iy1bAtP
- TLSH
  T1F9629718B777236205C256655F3B4F400B18B19E0E9CB43175AC13D2AF884EE12FE7AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  resources\app_asar_out\node_modules\node-addon-api\tools\eslint-format.js
- Size 2KB
- SHA256 befbda4868248093b1f5e4307d28f412d12fa16929cd0c07f5e2575e2635646d
- MD5 25b89785c5acdbb07279914a4e320f96
- SHA1 c98e334ce1333889e348bbe75864c1713026f3cf
- SHA512 9d8d0847fac664ed450175f0f792256f3ffea701db5b737453b3d96b963c8e3a54f68dff54c91e73094a6488772561a4a343d2bda92b5625c1f43cef2dee9457
- TLSH
  T13441879A9DF30011537050AB3ACF742D389DB037B699ED10F28D53406F921288DD62AE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  resources\app_asar_out\node_modules\sax\lib\sax.js
- Size 48KB
- SHA256 a3a6780b66c90f3e74810b5968b07e274ae3bbe2a9a1e2333f0d0576c0bbf3c4
- MD5 687910ddc6e50df784cb2aa435172a08
- SHA1 8f2043a510e63d68085446d1cafdbb3f52d39a31
- SHA512 a3a962c8058967ed340429820f26253cdf5adb92ef577fa7690294f0de5d5b19e9c653198c8b22b5dbfb5e0f4f99dc3a8fea1dfeb2903abd76b34a154c33b32e
- SSDEEP 768:Km2a75MocuZxLmTg03+6Vr31t8hu5HSijGZzeXYn:eaFMYEg4F3EhuMivXYn
- TLSH
  T1E9332E585DE011A21B47767C0CAF6008717590172D89ED693CACE2907F8853DFABBFEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  resources\app_asar_out\node_modules\semver\bin\semver.js
- Size 4KB
- SHA256 82c28f9bc9e598d255edd507d1e9b157f37b8dac0f2da25a813b5e7121600be8
- MD5 391df654d5681de93399a94456a10f90
- SHA1 734db4263b34c18bf343eed728416e04093979e1
- SHA512 7f9d7dbf64e2839515e68a783506c792d4769b36a90917aac0097aca43e6ac856823fdba9b87138a77838106de32eeedf82fdfdc4375495d0435d7b1b1e2c268
- SSDEEP 96:iwoLIwe3EkZMZMcKFeEIe+0XOxnpV5bDzmGnXeWYHznKxRfSft:m8we3Xd+V1dbDbXeWY7KxRfM
- TLSH
  T16CA17227A8F4923F4B03023E489E80467B7AAA2375145CF6788DC60A5F5167D63DBBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  resources\app_asar_out\node_modules\semver\classes\comparator.js
- Size 3KB
- SHA256 054202956430d63d5ff4599fae09760ce465b489e4f0b5ef5ce7cc7ac21157ac
- MD5 ebfd8a2375c12110abfac96900ac366d
- SHA1 3c870ec8af8f75eba32fbffb23aaf51ebb0813b2
- SHA512 8671204fc75ba65c859050c03506488782d86ab9e3342a1c54f57d65679463c48eb00162db7bfe802e77cbc5e5eaaa1e9f9e29f6214f823567f4f1c9b15a4a43
- TLSH
  T1A5717C4C76E95126079333B85A5A8048A735C663B50E0D5EBD6D07A1FF40478C7FBEB0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  resources\app_asar_out\node_modules\semver\classes\index.js
- Size 143B
- SHA256 3bb69280c2a788d0eb16f915bb9df4dbe812075182024c753dca2283bcea1b17
- MD5 99c1971b90f2bd3901e444be2b658b63
- SHA1 224ad4dd347a31c1a67434998127e66d3c121505
- SHA512 d80c6ab0d7b97da4541917ee01fb62276dca2c77fb97921145ef617c127e0072d43407823ad542993e6037e09714d53fabbbb910f08d5257d55152c598fa5923
- TLSH
  T1CDC04C8B1EE4E94E214A6AC4D2C551457192C695D50D2562469C2887604C95407E5DFB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  resources\app_asar_out\node_modules\semver\classes\range.js
- Size 14KB
- SHA256 cf8f8eb6934663ae2a9d04838d4d71555427a2abd3c8748ee5219507969a6b46
- MD5 b4a6e90f89adec100c33058308d72eac
- SHA1 38400d558ac798569fb4bfe6cb644fe2c08c6343
- SHA512 d71c0e3f2a6231e8fdfcaf8e24a0b2532d280545c7de9fb73837572e26ba381732bdf4c2999468bf1cf00867b6102b13bc97ce15c60afdb8f7f7dcc1897565c4
- SSDEEP 384:UFGb4dtrgnX+55O/Qhk4l8bGWpRTIVFVkaZHy1xPeil:1egnL/QmRkVFi
- TLSH
  T11662435522F517754B83B0F85B8E9096A339C187B24D4A177E4D63E8BF42074C2FAEE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  resources\app_asar_out\node_modules\semver\classes\semver.js
- Size 9KB
- SHA256 d5ba57e5c93f031b1d234fca4bb746746fcd1fe51be7e5ee895601e2c12e2083
- MD5 0ef63105f6d9d511e75c05fb90d9d759
- SHA1 d62b104681a25708d46ea3845ced9286b3a8d1fd
- SHA512 22e39ab039402ed0196469378b9248c17676ba46c36786a34e64f3c359c6c555b1f18f955deb03448df0d36369b0b31cc4fdb3c52f130aa077a8241e9d8d64f2
- SSDEEP 192:K3rcQgOy9ZQwI1xdeFwjo38QrOS8CGCvkaAv+SF9VpHp2qVXgyGqOduyr0v9qQ8n:XSp9lPvJ10va9GX
- TLSH
  T1C912DDAA27F942AA860330755E999004B338C86F57099E3E7D5E47817F8307487F6FE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  resources\app_asar_out\node_modules\semver\functions\clean.js
- Size 205B
- SHA256 4eadb0892844cf3ae295121a86163a66c73f89acd1b7f0b114ec115b4539512f
- MD5 8d1247a9a13412588017b0409ab3cdbe
- SHA1 b14ca8d95ebbb3141db47d520a294e926d206c14
- SHA512 8020293316ff856bd03b9f22b72c62fe7cfcaf4b96026819e32ed4c4c1fb8da8575e6b6689c4db9ea9276138a1c094c93dbe3784ce1c9ff5727958d1f58ea09c
- TLSH
  T117D0220848B9B07F078BA3E08C18A43CD37AC1143A0C42F28A2E90A5274240C93E3CE0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  resources\app_asar_out\node_modules\semver\functions\cmp.js
- Size 961B
- SHA256 a63d74e87b73788e78e9ce0a4892b5333d6b809c0de88b31e4ed76cbf17f94b3
- MD5 1a1044f33a288a80c724a3e0c5f02a9d
- SHA1 21166423b991b3b2ac7ecc153fd7f766723431cc
- SHA512 05c8ce12fb8eb116902374923084ea6f59ffb09451ab1372f1cbdf795947391130d86e55b603ff248177d37fb4a4751d49c4a93fdf9d6a58dc7e354102c5fa6f
- TLSH
  T1B211C4B014E69076564F93FC00FED452BAD5A867201D4EBABC9CC078EF904550BB3BE5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  resources\app_asar_out\node_modules\semver\functions\coerce.js
- Size 1KB
- SHA256 28a251c5ab210ddf9e97551b9f37a53329fcce91f0c3943dcbc02de1a1de915a
- MD5 8bcc9940eb9fb1766d6f69d6469b4a61
- SHA1 9a3cfd453765cc3071aeba527eb26e57d8aad68b
- SHA512 b7f37feaa0cf8d2be2182f820c9c220cd55448a7d11afa4a1b13ac5f09edf18ad2d4665bc239d52e83ee0730c2b794d9358faf836c91857cccae9d7463dbd5f8
- TLSH
  T11241EEBB14B99229194241B1824CA084BA37C0337359CBD6F99D17D87B874BCA1F7DE1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy