223a4c20c7f4d37015e561bab2ed113082b13a40717b9e4b1038a5fad432c080 | Triage™

Login
Reports

Overview

overview

6

Static

static

6

leave_one/...ble.js

windows10-2004-x64

3

leave_one/...ble.js

windows11-ltsc_2024-x64

3

leave_one/...iew.js

windows10-2004-x64

3

leave_one/...iew.js

windows11-ltsc_2024-x64

3

leave_one/...ave.js

windows10-2004-x64

3

leave_one/...ave.js

windows11-ltsc_2024-x64

3

leave_one/...ves.js

windows10-2004-x64

3

leave_one/...ves.js

windows11-ltsc_2024-x64

3

leave_one/...pdf.js

windows10-2004-x64

3

leave_one/...pdf.js

windows11-ltsc_2024-x64

3

leave_one/...ist.js

windows10-2004-x64

3

leave_one/...ist.js

windows11-ltsc_2024-x64

3

leave_one/...AQ.htm

windows10-2004-x64

3

leave_one/...AQ.htm

windows11-ltsc_2024-x64

3

leave_one/...og.htm

windows10-2004-x64

3

leave_one/...og.htm

windows11-ltsc_2024-x64

3

leave_one/...ct.htm

windows10-2004-x64

3

leave_one/...ct.htm

windows11-ltsc_2024-x64

3

leave_one/...ak.htm

windows10-2004-x64

3

leave_one/...ak.htm

windows11-ltsc_2024-x64

3

leave_one/...nt.htm

windows10-2004-x64

3

leave_one/...nt.htm

windows11-ltsc_2024-x64

3

leave_one/...nk.htm

windows10-2004-x64

3

leave_one/...nk.htm

windows11-ltsc_2024-x64

3

leave_one/...ge.htm

windows10-2004-x64

3

leave_one/...ge.htm

windows11-ltsc_2024-x64

3

leave_one/...es.htm

windows10-2004-x64

3

leave_one/...es.htm

windows11-ltsc_2024-x64

3

leave_one/...ll.htm

windows10-2004-x64

3

leave_one/...ll.htm

windows11-ltsc_2024-x64

3

leave_one/...se.htm

windows10-2004-x64

3

leave_one/...se.htm

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
leave_one.zip
Size 29.5MB
Sample260825-wwpsratxhs
SHA256 223a4c20c7f4d37015e561bab2ed113082b13a40717b9e4b1038a5fad432c080
MD5 93662e4a779325cb9aeb68ecffff030c
SHA1 6c060ac165bc1d4f8f5471e459df29d73e53daa4
SHA512 4127c6bf486a58f7f353aa0068e9753c5faa839efca5aa6640e90f242cb1830db49c79962cc0ff5b008213cf0fa1164d4c35ae0e0907eeb3c2a63b08a77d3b51
SSDEEP 786432:RhtVhAVWhR4WL8nJ8dOIVAhH1hGmtxkPK0/5KILWEL8dokjYPzUvX:vtvAYX43mdu1tqP3hKIIdcg
TLSH
T18E67337BBA9C9006D9B6D2D1BFAF7658DBC73002DC97391810EEB429E1218F15E27136
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery evasion execution pdf

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

leave_one/all_leaves_table.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

leave_one/all_leaves_table.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

leave_one/all_leaves_user_view.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

leave_one/all_leaves_user_view.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

leave_one/apply_leave.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

leave_one/apply_leave.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

leave_one/approve_leaves.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

leave_one/approve_leaves.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

leave_one/download_leave_grid_pdf.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

leave_one/download_leave_grid_pdf.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

leave_one/employee_leaves_list.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

leave_one/employee_leaves_list.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

leave_one/fpdf/FAQ.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral14

Sample

leave_one/fpdf/FAQ.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral15

Sample

leave_one/fpdf/changelog.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

leave_one/fpdf/changelog.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral17

Sample

leave_one/fpdf/doc/__construct.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral18

Sample

leave_one/fpdf/doc/__construct.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral19

Sample

leave_one/fpdf/doc/acceptpagebreak.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral20

Sample

leave_one/fpdf/doc/acceptpagebreak.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral21

Sample

leave_one/fpdf/doc/addfont.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

leave_one/fpdf/doc/addfont.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral23

Sample

leave_one/fpdf/doc/addlink.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral24

Sample

leave_one/fpdf/doc/addlink.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral25

Sample

leave_one/fpdf/doc/addpage.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

leave_one/fpdf/doc/addpage.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral27

Sample

leave_one/fpdf/doc/aliasnbpages.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

leave_one/fpdf/doc/aliasnbpages.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

leave_one/fpdf/doc/cell.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral30

Sample

leave_one/fpdf/doc/cell.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral31

Sample

leave_one/fpdf/doc/close.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral32

Sample

leave_one/fpdf/doc/close.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  leave_one/all_leaves_table.php
- Size 12KB
- SHA256 82aabaf79b8d50e07bd3d894c4333e470da76266315b77d3836fe8ca5e861725
- MD5 0f285283db79c8073dae29206df82e6a
- SHA1 c0b1a482cc4e8fc10c53891707accab34a9d6fab
- SHA512 290da5b2edf6957c7af0b4917770dcf26995b1b7ad34ae6eeda61d6523ac08b4429be8d474c2a2508523f9820a798fd428a8c16b99cd871b18420013591baaf8
- SSDEEP 192:snJph7sY5t7F9EWrJxPj9oDk9XTjKq8O7HeREzCEZe:epyEtp9EGOwXT+qHe8A
- TLSH
  T12242D71274F9A172025358DE5B5EBB163ED0C00BCC06590275AF33E91F86C9EC96FE99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  leave_one/all_leaves_user_view.php
- Size 6KB
- SHA256 e5296d8f19401820742eaea692ecf190317effb55cd0b0e38947cf10906dcab2
- MD5 55111946a4310602cc9a5756b449007a
- SHA1 48499c323bfc79aaca45c09da03eb4b90ca836c9
- SHA512 2aaf4a17c6f48d66c3c0b24584f5ecec6d9960280dc2a8f011440a7a2dbb08018ce19383a10f33f16d72b95748b2e8fd9f4a6672c9c8ddb10713a1b03ad1bc72
- SSDEEP 96:Z97O9lVQwtk0Ju8vFjZECbFcvztZMOGs+ASXUFmWDB:n7O9l5k0LrFcvzYYDB
- TLSH
  T1CDD140AAAAD0753B0133D4D8A93A9756FDD2C107DB82152276FE77C71F72C18A417E04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  leave_one/apply_leave.php
- Size 18KB
- SHA256 7161b267bb8499fc8dd65834e27d2ff23e80c0f32140481529feb57a2f0106e2
- MD5 968ad41fc3f275f09b56a0dd9a23519f
- SHA1 50134099fe6473d0f5159c06a47ee6da1ea3da22
- SHA512 3f95cbb595781721a60335e7eb25672e87d46f93b9a2b4553e8e169d13c613d6e2110c69294a0a73f54f1e2702ec53a1d8e2394a90b2b12f38d764c5f223fb15
- SSDEEP 192:sgfgtKS3AqTSgsKyYOe0u7F9xbeJkoxk39PWEXy16yt9vZTI/Ai:s1t5QqAdup9Se9PDXynt7q
- TLSH
  T1BE82A5D274F58132406368DA5BFD6B023EA1C41BDA058906F9AF7BD41FC6C4AD52FA18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  leave_one/approve_leaves.php
- Size 15KB
- SHA256 a61bd6e59e3688e3a342b52fd4536ef8e5a05ccdcdd8a8a3c47a6e9364b8b752
- MD5 f6586508ac0e989bffdadc0431286710
- SHA1 a309cc7e0b08e424c68ab1f7e8edcfff801b2342
- SHA512 48118453692c6282b10c3c40c7b4e64f9965ed58992046a63e0d980b45328f9a5fc2eaa5b92172fb824f90025341a7bf8da26c9706203f68824ef16645e5ae2b
- SSDEEP 192:LEyECRlc9nER9aRM7O9ly6GjCkHStrtthAc8fzKU3AiT3DbkFpIxk:I/K2ZEVy9lcWntrXhAc8fz/DbzG
- TLSH
  T16672A596B8C9F16201B36AEE9B17A206FE92C0579E010A4334FE73D32F75C1895B7E45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  leave_one/download_leave_grid_pdf.php
- Size 10KB
- SHA256 04d4e11b2dd95ca6d8ca0273fb88d4dafe3e021a183358564eebac8d7fb2aab8
- MD5 30dfed54fd12178c3146a96f28d6206e
- SHA1 7e9096e15407670adb152c046991eafd4a8f46cf
- SHA512 2f63d69e508d60f257490076453484ba27f7213e32403ba767e3f7ebf7faace83d52e95567e5d354f9f6d4e82e92c2637cdecadca3e6f958e070a5e296ab7016
- SSDEEP 192:eT/Xjq6jNe4LtGCl12KTwzwCrKcnBXFo4vAd1Lo8YdLiFrnFAcDYA9lID4KEK3:e6CP2K0zzrKcBfAdJo8YdLiFrFAcDYA+
- TLSH
  T11A222173365A02518973A7599B810F29DFA58D3B38710221FDDE50CD1FEC878CA64EBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  leave_one/employee_leaves_list.php
- Size 5KB
- SHA256 564948d7760da5839f3a392887c9ef1c3563ad69155f24da718392c077a0fb79
- MD5 b7df0ca3cf6bbc7378add87e3ae8522f
- SHA1 b3a82db3ada823360f84960e08a3c4f5cc686b82
- SHA512 eeb4b4f8a89e28015cbaf36e7eab2a8c03d429719b67a698f41b193dfebe8b2634aba15219127c37dbb4a888b4fcca38917c0b55ea27ea778a225c39aa849325
- SSDEEP 48:GJHAJgwKUY3V6h0Pywk0y7dXhoVIFoA9ouQFGH1EXqK/zWkHuy+yfF+kAXHVLxf9:eFy571pFNiAH6aeHJ+Y+kAX5xf4/M
- TLSH
  T1D8B155F634C1B12258B366B9C6851F64DE83C4371D000A61B99F278B2F71C69DA1FEC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  leave_one/fpdf/FAQ.htm
- Size 10KB
- SHA256 292eb87f381c15a9ba9156eba326d69ecb270f09a7610c611f41b1b95a501418
- MD5 1fcce1d66184d9eef62eb2baad227d67
- SHA1 99dacab0a364bdf76b4db173d87823620fe7f38f
- SHA512 3fd21cfc8d23e78148e992df47be48a150e0bae32ac92178a444d0f965ed9caa35122c2c43b964a79f0f857c7ae1dccb6ffebf43e69c3156a5ea6e77916bd290
- SSDEEP 192:6H6X4cG2jNxwgGuTCDhJhFIVPk4Nljrwxd:QBcGoNxwgGg0hFwPXdrwj
- TLSH
  T1FF32953247529D7704E38ABC6711B3E1FA36D098F303B2A174AA42C7B6543116E6B9DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  leave_one/fpdf/changelog.htm
- Size 9KB
- SHA256 d3837bce7259ef15c153ad335c64aecbfe38ae45476007cd3272ea10c52720f2
- MD5 e17a1f633a2269bc3a9dedc9cbff102a
- SHA1 00fcde5278e7c44de1f3dbe7634d5a64adcfbe2e
- SHA512 1cfeedcac48effcc28a9f905333b5e2f0b054d544e4ac5a1c2cea724fc9f01ece1b82cb833dabcc876756efbadc366c886c860df4f1391a0abd23fd839bf070a
- SSDEEP 192:gVb/nkEnvSIoz6vDHxan+Pp5bbclWTO7Q9p56sWMsGcZZeM+I:8wELDRan6qWTtEHZee
- TLSH
  T18722A7E73605AF68147742ABF2CE922FD32980FF731253B814BE850B2B4A554437779A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  leave_one/fpdf/doc/__construct.htm
- Size 1KB
- SHA256 f31d82327166d4c83ee458cf573e94664b8abf9fa335aa51dfa7a0452328beb8
- MD5 77b5f4272f2730501666ee84695a3abc
- SHA1 e79b00927a51a5a8a6973b0fbbd2d66f317bfd64
- SHA512 5c057053e6a235ebf68571b68b07fdb7269dba462c5bfe6c24d470676e6352eb7fc61858507ba25490a72c73c69ae1edd341c7772e0a7ede657fc9da72ad990f
- TLSH
  T152412197262C9F61A03140FCA38771B4FF2F9054F7526AD51CAF53175342A114EA3B8E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  leave_one/fpdf/doc/acceptpagebreak.htm
- Size 1KB
- SHA256 f09ff50cc6bc7be7dd1aa10f5fc765b56bcb7dbc3caa49876adb9bb7929595bf
- MD5 306dc00fc9d90763ed5777aea57e4e69
- SHA1 73b08fbc2220b182871bd2e99d153129643cb1b6
- SHA512 75a72adb9d8ea38cb3453f6be2e3b95f9df5dae535b5070dccae6bf3e4114dd9d7e4fcaed61cb5fcc84606ea0d70b627355cf4976362739942017555d43daf2a
- TLSH
  T1B731101634891FB6B03762BCB7C7F2B0E62540A3AB1624C4B89E96874F74325C551EBB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  leave_one/fpdf/doc/addfont.htm
- Size 2KB
- SHA256 9d11a227f41923e4daa3175044e00739afcd02f779cedce577fb33280cae0821
- MD5 323cd722bc608b5970b635da744cc6d9
- SHA1 f0325942a698afa7cfd1b1db4fb9fdbf8b4bd7fc
- SHA512 c84124f9b0b2e1e4a726b898f228e39d674e43ee67be498c4e779629ce486de1deef91a03d0d459bb65fa9f1eae7ecf3639ddd01a253f857e8f11399eb80a26d
- TLSH
  T14941F42A6B4C6F21807241BCF68971E2E70AD0E4B76633D05CAE47476B861194AD3BCF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  leave_one/fpdf/doc/addlink.htm
- Size 892B
- SHA256 5752b90c36523493a963db091e434ffb4fc784681c4aaa50c30f054c62f25398
- MD5 54baa2db8dfdd4756098af625abd720d
- SHA1 9bfdd23f19a3adbf5ebfda2600f223ae5770b928
- SHA512 e702a92cd4a039e3143dcb884a461cf2e94c6eea17954eb411f2ec6109c4e225850ffb024ba13e8884f2803789d84590543f1e036247f884d30880255a1dcc6b
- TLSH
  T1BC11637128C11E4442331278B084F3BDD96707B19B1A4A0084788D7BAD8B3A8DEF53CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  leave_one/fpdf/doc/addpage.htm
- Size 2KB
- SHA256 98a0818f8791f017609973c15c3c1011f43ba4275bf24273a5a42b5280743e20
- MD5 2b62804ad6301330a720c60ad62435b5
- SHA1 09eecfd3077ec13ca542b6aacea734f506a7c75b
- SHA512 4c5f6d0e0f518c88ddaf4dfdc3a141473956d4f85193a5f71b2921813b71f2bbd24cf1f7d758b0e780eb20373b0b23b64d11ff7b413ddb70a94818c26285d08e
- TLSH
  T146411122251C1F71A03252FC568A71B4EB2B4094E7116ED46CAA835B27856308FBB7CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  leave_one/fpdf/doc/aliasnbpages.htm
- Size 1KB
- SHA256 7b93a00f2743d1dc5a5c068481226a6ab45305e82b11871b9a7cf2697d5fb8fe
- MD5 ca41010a7940569507b85550b50365ae
- SHA1 fee7b7b419ba967f65f78b7e2a9a5bf6d2a6ffd7
- SHA512 8d4adcfaa6e794b7222dcfeaf3f84d451d4ceb48f12fcf27bf0335a2ed217aa18a3ca4b51a414fdba2299b2f0f7772aa873f19d332d689bfd4d834353c21b5c4
- TLSH
  T101210C38A40A0D72D23226FDF2C6F1B0C5668192AB03269478BE538F4F9139CCD5279F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  leave_one/fpdf/doc/cell.htm
- Size 3KB
- SHA256 4eb6d36395377cd4e7e1507735d8f098b516fee23ecbe9c06e60a4f7bced0600
- MD5 82ca1daf245d82029839f9df2b34dd66
- SHA1 2ff8cfe70a4960f63a5e4d82475a115e8c7f27f9
- SHA512 b84419020b7dbc6e80a6bd8e75959deebced1010516684cef5d2151ae44f65c4acd56a4d7c4c4b5f97b4836cbb754fcf9fa8b54942802848e8a1b5042784dc4f
- TLSH
  T1B4615127364C1F19A131A2FE60867174FA1F8094FB11A2E09C6B874727977A10DE3BCE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  leave_one/fpdf/doc/close.htm
- Size 706B
- SHA256 f0fa42ca8788b472f9a80c2c3185090af486175b43c6bc8cccd98b5d076d2f31
- MD5 6ced98f6bf23ba8c53264f8d635b5008
- SHA1 bf3d39eefe4f0042d6e32d51ee47a99d0ebb00a3
- SHA512 049731fea365e9aa2bed016ae76676ceac40982ba6cc063c506738a22d04edb81d021ac43e50e6072359d00e9592814d937ecd84759f5a7a9e8f255951c16be8
- TLSH
  T1A001237504022F100273227CB984F2F4EB7246D057066E0078BC1C6B56C53A8F6B77CB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy