664f02f4fe9b60b71c099c8448150a21d08c4e7a6f03751aaef996d76abf9ca6 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

site-helpe...e.json

windows10-2004-x64

6

site-helpe...e.json

windows11-ltsc_2024-x64

6

site-helpe...ner.js

windows10-2004-x64

3

site-helpe...ner.js

windows11-ltsc_2024-x64

3

site-helpe...umd.js

windows10-2004-x64

3

site-helpe...umd.js

windows11-ltsc_2024-x64

3

site-helpe...re.zip

windows10-2004-x64

1

site-helpe...re.zip

windows11-ltsc_2024-x64

1

site-helpe...ner.js

windows10-2004-x64

3

site-helpe...ner.js

windows11-ltsc_2024-x64

3

site-helpe...umd.js

windows10-2004-x64

3

site-helpe...umd.js

windows11-ltsc_2024-x64

3

site-helpe...78.php

windows10-2004-x64

3

site-helpe...78.php

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
MALWARE site-helper-a5deb0979c78.zip
Size 322KB
Sample260828-qd3c8sda54
SHA256 664f02f4fe9b60b71c099c8448150a21d08c4e7a6f03751aaef996d76abf9ca6
MD5 b2c3b3a7d88ca3f86a546b46b18ede87
SHA1 aca495bee30ab4101153fd86e1897ad94e9d4e89
SHA512 a23e6af0ae40bc609451d99d9eacfc97bacb6e8ab353a370a01ab97840a819323a86617c5f94de754d02d1819556ded36b1c98b8a528bb5601f1df27aa015f79
SSDEEP 6144:cUc8NLp7jcF+WJBr0N5j8No8wVKsj1BsU1YgokTPNIj5rSKG:f1T7jcFPJBr0N5QhQ/sgJoeqj4KG
TLSH
T1B86423D7C3781831DD4E6C30BA593E5807CB6CCBB32A40DD8A356E1AEB6A1159EF7184
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution persistence

Static task

static1

Behavioral task

behavioral1

Sample

site-helper-a5deb0979c78/.state.json

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

execution persistence

Behavioral task

behavioral2

Sample

site-helper-a5deb0979c78/.state.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

execution persistence

Behavioral task

behavioral3

Sample

site-helper-a5deb0979c78/assets/diag-runner.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

site-helper-a5deb0979c78/assets/diag-runner.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

site-helper-a5deb0979c78/assets/lib.umd.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

site-helper-a5deb0979c78/assets/lib.umd.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

site-helper-a5deb0979c78/backup/restore.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

site-helper-a5deb0979c78/backup/restore.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

site-helper-a5deb0979c78/assets/diag-runner.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

site-helper-a5deb0979c78/assets/diag-runner.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

site-helper-a5deb0979c78/assets/lib.umd.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

site-helper-a5deb0979c78/assets/lib.umd.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

site-helper-a5deb0979c78/site-helper-a5deb0979c78.php

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

site-helper-a5deb0979c78/site-helper-a5deb0979c78.php

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

execution persistence

Malware Config

Targets

- Target
  site-helper-a5deb0979c78/.state.json
- Size 159B
- SHA256 d077955727f61417828dcc282565ecb5354e1aa201fae7270531e3fc1aef7a51
- MD5 7a3ff6cf77bf2f8f3b3fdcdbf9c752c7
- SHA1 42ec9c6993720f318a25ccfbcac05d67d60f0298
- SHA512 3825c7b4ccd0c5b38002039519f27d3439943ac885cb3476c17ab48044c643a0b2ad1c58b54ed2d3e20643b86384025098cc95e6c2ad3420ef9ae25e5b570494
- TLSH
  T153C08C0203E69334790671C1E443BD82033A60248B61998A2818CB982C4EC6E1D54C4E
- MD5 SHA1 SHA512 TLSH
Score

6^/10

execution persistence
- Drops desktop.ini file(s)
behavioral1 behavioral2
- Target
  site-helper-a5deb0979c78/assets/diag-runner.js
- Size 4KB
- SHA256 92e541695657a9c6d7ed56030c093bd29cc1e12909d0574a85d508d03af10b12
- MD5 3c3676ee13c524d29b8df77b4d492348
- SHA1 5a409fcb467816a1274b4239d3de4e2dcd7c767f
- SHA512 8c3676005db360c94005b40cbbade9cb7c90732e4f468e9f90cc93b8d2e264c59f384f70595f5e6cd190069d2569cac6264eb64c79ddbe3c99d50214f11e07b4
- SSDEEP 96:RXMn5BcJGHqTqdjQXtH/odjB4EWlPBqqTdefeekwB11a0m+wFgAJ:RWsGKRdHrlPBrdebkwBPXwFgAJ
- TLSH
  T144A1C865F1FA72B481CA284D281FB72C64F9E220D6908463E255DE4454E8FCB59F3DD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  site-helper-a5deb0979c78/assets/lib.umd.js
- Size 509KB
- SHA256 9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95
- MD5 556e49c10fd81a990b6281dcdc87bcd9
- SHA1 4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b
- SHA512 7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6
- SSDEEP 12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO
- TLSH
  T1DBB44CD132E3647287C618E52C650902F238F952705D44ECF66CDDE26EABD8994BBF38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  site-helper-a5deb0979c78/backup/restore.zip
- Size 160KB
- SHA256 8c4ea2d39ddba681843ded28baf84b24ff8d4c987ed5cc2f85d7a1797bd2d9af
- MD5 0fe6189e16a191b3d7757f5912a082be
- SHA1 1c495f9d8ba107214d5e47fd44328717dc242b3b
- SHA512 4409a596427ddea30a5d5207a841e4c27391adfc938cf1edf7211e02b354f38b4af66a561faa2d75d3ba81f6a1f0b73cdc775b672ac83838f847ddd6f1484be7
- SSDEEP 3072:WZbfWYIvKJ9z4Kx13ogolGfbRZr0sIj5r7u+HeTvubNHfv:yj1BsU1YgokTPNIj5rSKn
- TLSH
  T13FF312E683BC1BF66E4D28307D2D751C0B8F7583F25F90D98530BA15A26A21969FB18C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  site-helper-a5deb0979c78/assets/diag-runner.js
- Size 4KB
- SHA256 92e541695657a9c6d7ed56030c093bd29cc1e12909d0574a85d508d03af10b12
- MD5 3c3676ee13c524d29b8df77b4d492348
- SHA1 5a409fcb467816a1274b4239d3de4e2dcd7c767f
- SHA512 8c3676005db360c94005b40cbbade9cb7c90732e4f468e9f90cc93b8d2e264c59f384f70595f5e6cd190069d2569cac6264eb64c79ddbe3c99d50214f11e07b4
- SSDEEP 96:RXMn5BcJGHqTqdjQXtH/odjB4EWlPBqqTdefeekwB11a0m+wFgAJ:RWsGKRdHrlPBrdebkwBPXwFgAJ
- TLSH
  T144A1C865F1FA72B481CA284D281FB72C64F9E220D6908463E255DE4454E8FCB59F3DD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  site-helper-a5deb0979c78/assets/lib.umd.js
- Size 509KB
- SHA256 9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95
- MD5 556e49c10fd81a990b6281dcdc87bcd9
- SHA1 4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b
- SHA512 7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6
- SSDEEP 12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO
- TLSH
  T1DBB44CD132E3647287C618E52C650902F238F952705D44ECF66CDDE26EABD8994BBF38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  site-helper-a5deb0979c78/site-helper-a5deb0979c78.php
- Size 4KB
- SHA256 e0e7b8c4e7f043e66170192d8d19dd3e749cb624f2022ddcd7b2ac8fbff98427
- MD5 1c9e686f87d8433881742326dabac9b0
- SHA1 e14c50c498dc31907c649f48450cc774d0522441
- SHA512 012cbd2058ee29e28641e93ba0bdb7e9062999ce8d1ee317e1065ed74b12e4bc7caecc21f3fda344de93b2eb0429ae756c0f92d3a6597ad18ce7a6ddd2ebdb3d
- SSDEEP 96:9N5ZRAUZmWSxQ6Q1IDyQAXjDyRmQX8DGJniy6WZpGVYyKy73yggQEyVosoPis0oG:91RAUZmWSxQ6Q1IDyQAXjDyRmQX8a97E
- TLSH
  T1B7A1F30E78EB696519A3AD3E0BCEE029706C5C4701148902BE7D46949FB9134DEFDE46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution persistence
- Drops desktop.ini file(s)
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistence

behavioral2

executionpersistence

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

executionpersistence

© 2018-2026

Terms | Privacy