c95028e50c5010f7d986dde7bbfd4b5a3616b82511c9386e9565d7bb88eaa922 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

HellBot v3...ead.js

windows10-2004-x64

3

HellBot v3...ead.js

windows11-ltsc_2024-x64

3

HellBot v3...ect.js

windows10-2004-x64

3

HellBot v3...ect.js

windows11-ltsc_2024-x64

3

HellBot v3...tic.js

windows10-2004-x64

3

HellBot v3...tic.js

windows11-ltsc_2024-x64

3

HellBot v3...Bot.js

windows10-2004-x64

3

HellBot v3...Bot.js

windows11-ltsc_2024-x64

3

HellBot v3...t.html

windows10-2004-x64

3

HellBot v3...t.html

windows11-ltsc_2024-x64

3

HellBot v3...les.sh

ubuntu-18.04-amd64

3

HellBot v3...les.sh

debian-9-armhf

3

HellBot v3...les.sh

debian-9-mips

3

HellBot v3...les.sh

debian-9-mipsel

3

Sharing

Copy URL Twitter E-mail

General

Target
HellBotv3.0_10June2005.zip
Size 100KB
Sample260826-2cv4bavwbt
SHA256 c95028e50c5010f7d986dde7bbfd4b5a3616b82511c9386e9565d7bb88eaa922
MD5 a5c2e2ec91892d18207b9c856b8d4f09
SHA1 b863d74577445f8649f2cb1eddfbbc0f6af9a0fd
SHA512 273ff87f247c3d91a3f0a27c4ac708f6aef65747a9bd8f794d8278c4df3cb59f4cf10064abcda99e6c42d3dfb46040b4b1e9ac08720fa7a0635d34f6df2190d1
SSDEEP 1536:njfe8IWqX4KdGmDqSOzaGE+fqHMFIYjxCABIGL6o70wntT/:DfrFmDPOXE+f6MFjU8IGn7bp
TLSH
T1D5A3CF3E9E90C444D2EFE4F1D68CA5C8CE4E851BC409FB0B6F1F52248B096596B73AE5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

HellBot v3.0 - 10 June 2005/CThread.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

HellBot v3.0 - 10 June 2005/CThread.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

HellBot v3.0 - 10 June 2005/Connect.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

HellBot v3.0 - 10 June 2005/Connect.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

HellBot v3.0 - 10 June 2005/Crc32Static.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

HellBot v3.0 - 10 June 2005/Crc32Static.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

HellBot v3.0 - 10 June 2005/HellBot.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

HellBot v3.0 - 10 June 2005/HellBot.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

HellBot v3.0 - 10 June 2005/HellBot.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral10

Sample

HellBot v3.0 - 10 June 2005/HellBot.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral11

Sample

HellBot v3.0 - 10 June 2005/PackFiles.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

HellBot v3.0 - 10 June 2005/PackFiles.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

HellBot v3.0 - 10 June 2005/PackFiles.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

HellBot v3.0 - 10 June 2005/PackFiles.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

3 signatures

150 seconds

Malware Config

Targets

- Target
  HellBot v3.0 - 10 June 2005/CThread.cpp
- Size 6KB
- SHA256 3aa727d65ce12a7197f6f1e28e42b420d48fd4e749f4af3b3ff3d3cf5b1cc024
- MD5 f3af3664b961a05d660b2eee328f1748
- SHA1 391caa3ed6a1ac4deb1d29bfabe2169b8b1091e2
- SHA512 15b8a1e5d505963531642c0c6873a35737e1f10ca3abc495f8e64a3aae7cab4d841dbbd5aa3f5c5f6abfbc37d009010609159920aafea9446788318911881d09
- SSDEEP 96:0X1RBZd4VNn49Wptpa67pvpz2vxWDNUpN3nVtqT+EN7LV6x3Lzb+YNUCef/Hau/Z:0l8e5WxGrGwhdbqrge
- TLSH
  T124D131F1B24EA5FE76916FF9A0744452CE6FF030C75EE49CB3C2C4A1728E4288495976
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  HellBot v3.0 - 10 June 2005/Connect.cpp
- Size 3KB
- SHA256 7fbf54ebc1123f11d8b50fa9181663c65cc469aa90870c9747158d7a0f877858
- MD5 dc783b32879b9e581ffe90fcb2bf845c
- SHA1 d09bda09a62275866e12a96fb25d4c55b52a2db6
- SHA512 74e6bfed8c5951bab8bfe5daa1379341b41cd83f6f3816cb78a141b8e001c695dfedebeec0fd8486871407b567d7b265a230bdbf4f852365215bef3df9932bc6
- TLSH
  T1F8716379B95E947E37E3528205B0094FF93DE821DF2519B4B88E0828F8B17C8D6B01E7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  HellBot v3.0 - 10 June 2005/Crc32Static.cpp
- Size 10KB
- SHA256 26ba6df00cf7b7c174463dee2cf6c0feeb810aee2fc19dc500371df3c2d93fc3
- MD5 6ddacb1e12172fdf9f03b0852ca867cb
- SHA1 b67e29031695e80af465f56847e63764d876a9e2
- SHA512 ebd28c46f0782e0c13c2aeea70b4f75e8507a55b4f72a0eef3f6cc8b3278cec017508df789aee9cad5bf940cd6854c61610f749e0c1d5d43b6bda4152eac0074
- SSDEEP 192:RsoFz7eecACrsqyJ5drYog1GP+OI4hraGJ+oyBleCmY:Rs2z7eDrslJ5QCbhra7R
- TLSH
  T1E222A591B70E1CAC9F077156743184D6FA4CD034397182E8BA9AB97AE01CD15C9E7EE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  HellBot v3.0 - 10 June 2005/HellBot.opt
- Size 51KB
- SHA256 d1eb6fa5a59a9c8ee0187cc4d8128cea2451e4ca59aa5945962422f6f1152a72
- MD5 3c7d337d4777712d1888590770ee555f
- SHA1 4ad6c9f0d0911885e3c406ae44afb79fa14c8b25
- SHA512 fb4c4ae8f856f9e5328dc17995dbaa43bcca76e3429d004851f48be20bdc71ae0ba0d337a742454b718179bc0ff9aa3d5dc66593778b64c78772610edc82cab2
- SSDEEP 768:eI/jI/RI/C/gsZhroh/FkZhroh/+Zhroh//hroh/BjqoKIJ1L:CdKI3
- TLSH
  T1143301216ACB99E1F92712319C1E46513076CCB79654A0EE62FCBDDE5C3224692F03DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  HellBot v3.0 - 10 June 2005/HellBot.plg
- Size 1KB
- SHA256 9b191226a787b7d08592359d9bffa5390e138346e9d24c802d9c3011d70d49ac
- MD5 2daad1806b0f514292d1ff131b241e01
- SHA1 49ceb454136adfccdea6b751551922e93327d3ec
- SHA512 5f99bf5d86a149f5fafea1c646083d3a2162493d0ca82f7087bb5c5a2fa3fe9bfc98ef9a66c5d23faf696a3711fe42967b4b41fe9589626229d0abadbcb71de1
- TLSH
  T1C1318A367D4A5F8A7257EA27F98F8610D015CD580B22103C64A8A2EBFC330169DDE9C5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  HellBot v3.0 - 10 June 2005/PackFiles.sh
- Size 709B
- SHA256 32163f1c7c12dda97a670202a0114d5a0560413f2a6979bf8b5abb05bd430bd4
- MD5 69aae1aee6c97fa3f40d559e7b77e0ac
- SHA1 8f0499289469413471e93c9bfbe6a537928ea560
- SHA512 307562256ccb2710975ecfa38659a1d5764b729a7a8ca06fa7bf57fc9da9d3b742ed579d74585a45b6edde1a3b33ecc6b9d197ea59f0eb6099491c87cf6da700
- TLSH
  T1A0012427B81C02109AE6D68127AC5C38D265DB2F27C0B465721FC2BA07AC1DC16EE592
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12 behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

© 2018-2026

Terms | Privacy