6748a1393ab97a91d7e590e50b5d1ff1147dc9ede6688e5e491df01c508a4e37 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

admin/assets/admin.js

windows10-2004-x64

3

admin/assets/admin.js

windows11-ltsc_2024-x64

3

admin/clou...ns.ps1

windows10-2004-x64

3

admin/clou...ns.ps1

windows11-ltsc_2024-x64

3

admin/config.js

windows10-2004-x64

3

admin/config.js

windows11-ltsc_2024-x64

3

admin/dyna...nt.ps1

windows10-2004-x64

3

admin/dyna...nt.ps1

windows11-ltsc_2024-x64

3

admin/dyna...rap.js

windows10-2004-x64

3

admin/dyna...rap.js

windows11-ltsc_2024-x64

3

admin/dyna...cts.js

windows10-2004-x64

3

admin/dyna...cts.js

windows11-ltsc_2024-x64

3

admin/dyna...ins.js

windows10-2004-x64

3

admin/dyna...ins.js

windows11-ltsc_2024-x64

3

admin/dyna...dex.js

windows10-2004-x64

3

admin/dyna...dex.js

windows11-ltsc_2024-x64

3

admin/dyna...rch.js

windows10-2004-x64

3

admin/dyna...rch.js

windows11-ltsc_2024-x64

3

admin/dyna...ngs.js

windows10-2004-x64

3

admin/dyna...ngs.js

windows11-ltsc_2024-x64

3

admin/transactions.js

windows10-2004-x64

3

admin/transactions.js

windows11-ltsc_2024-x64

3

admin/whm/...rap.js

windows10-2004-x64

3

admin/whm/...rap.js

windows11-ltsc_2024-x64

3

admin/word...rap.js

windows10-2004-x64

3

admin/word...rap.js

windows11-ltsc_2024-x64

3

admin/word...les.js

windows10-2004-x64

3

admin/word...les.js

windows11-ltsc_2024-x64

3

admin/word...dex.js

windows10-2004-x64

3

admin/word...dex.js

windows11-ltsc_2024-x64

3

admin/word...gin.js

windows10-2004-x64

3

admin/word...gin.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
sc_site_20260808193500.zip
Size 6.2MB
Sample260831-aewdbadh98
SHA256 6748a1393ab97a91d7e590e50b5d1ff1147dc9ede6688e5e491df01c508a4e37
MD5 e6fb878e9555e43533c9a18ba1603cd3
SHA1 c1894a32695f02010e56175b5059f560ba7c4978
SHA512 b3da6616f2a96a00fd6f9c4857a04d9bd368744ca7b0cd172f754763ef72ed35dfb966d3e2ea249c70e056c1be0a15ba9f8bedaf3bef429ef29222b8526d88e2
SSDEEP 196608:gbf/b+g5OMnlEkZTIaPhK6ba2JVlQ0mZIi:gGgUMlEK7hK6b5JVlRmZIi
TLSH
T1366633B79B3D543EE11BCE751082979292FAC3061354B97C9D30A46324FBEECD85AA34
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution link qr

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

admin/assets/admin.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

admin/assets/admin.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

admin/cloudflare/domains.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

admin/cloudflare/domains.ps1

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

admin/config.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

admin/config.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

admin/dynadot/DynadotClient.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

admin/dynadot/DynadotClient.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

admin/dynadot/_bootstrap.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

admin/dynadot/_bootstrap.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

admin/dynadot/contacts.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

admin/dynadot/contacts.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

admin/dynadot/domains.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

admin/dynadot/domains.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

admin/dynadot/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

admin/dynadot/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

admin/dynadot/search.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

admin/dynadot/search.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

admin/dynadot/settings.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

admin/dynadot/settings.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

admin/transactions.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

admin/transactions.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

admin/whm/_bootstrap.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

admin/whm/_bootstrap.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

admin/wordpress/_bootstrap.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

admin/wordpress/_bootstrap.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

admin/wordpress/files.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

admin/wordpress/files.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

admin/wordpress/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

admin/wordpress/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

admin/wordpress/login.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

admin/wordpress/login.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  admin/assets/admin.js
- Size 1KB
- SHA256 95f4713335bb3afb0b299adaea01b2aaaeb28d2a061f791f2cd299889408c4ba
- MD5 4687f286ee38a9f5ec72b3a1168735dd
- SHA1 b725969fabb6630c4985314c5698ea7efca117a5
- SHA512 8ec1868b6ab917bc4505df5a299488ad73ecfb5865c0307588cbb9b1351259fd5e759bd08e3a919f1d09db57470dd2b6def19655dd6437628069b625055c0dd1
- TLSH
  T151318D6AE609267384FF67B356DF9B78F7781483C0048B2A3E6CD0811F749A54261DC8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  admin/cloudflare/domains.php
- Size 11KB
- SHA256 de57c8ff8292567861a8a120aebd3fce6a76c745f6215738b4b15019d2b4453d
- MD5 9e8638c7fbc6d8ddecb1e737aa3fa514
- SHA1 e5b6f4cc542384c0f2ba08386a9a335ed09c96cc
- SHA512 9276748e05b0aa07cc10583e02dd3dc0d68d8b0f2ff694723c5a615aaa5fbf0bf2278cc798210613cc9a0a0aca0b363d58775fda86a2673a4e3b5193881a42e6
- SSDEEP 192:823BLo4D0W/ro0tW4z3HrQvBJCo/5RoihGDqiJQJ:80DD0etLjLGBJlo2GDqEQJ
- TLSH
  T1B942756024C0772205F3AFAEB3529F45FED2D12394121295BAEE96D71FB0D16C63788A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  admin/config.php
- Size 3KB
- SHA256 9837188d7e4788d111b48afa022fb24768682715fc702e32ccce59a18a272432
- MD5 ffece0c5a069f31904443da4e26a7998
- SHA1 61b32a7270eadea82cbebd7480c1a2b1ae58945c
- SHA512 54978acc59dec82f621c3e9619ef57e3f9ceff78c2b4ae8ccebc280e00ad36be9fb76555e2f86c01428c7d65774dad1e9dfdd696663fe052bf609dd7240a43b0
- TLSH
  T148712488388356218BB3E7FC4BB6A060F56E982325145790F9DD41DD2F70579CEB4DCA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  admin/dynadot/DynadotClient.php
- Size 16KB
- SHA256 6c6b091f6e81fc7471aea5a56cd886f56bec5bac675e9744a272a0e73a81e5b7
- MD5 21e7dcdfaf8eb634934f3fe34ade85b9
- SHA1 7d3e545fb4b94e524c5d82348c752686e65dcbc2
- SHA512 477704e9430efb1e59a325e7fcda56f79a09a5fb4689f592a04a2de8a16e03216c71ff2b054472811fe0b5cc86c1b0b5b228e8143de04cfd5c74b7ac28003b47
- SSDEEP 384:vHNkgITgoqkE3ddgzF45KG4slb6OxQ20ZR9eJB2:P+gITgoqkE3dwFAV4slbL0ZR9eJU
- TLSH
  T1E87244583807546755B3A33CEF93A408FF5A9523D1A91142FEED46642FF012CE2B0EAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  admin/dynadot/_bootstrap.php
- Size 4KB
- SHA256 3d0567df86862c0d929654e6d4c995476b37eb33e3d91f4020297d6583abfcd2
- MD5 39f5232659f3d35b685e405cdb996706
- SHA1 e765cf7cb5a5c82996e10fc6842be6ca199242f5
- SHA512 e5a3d6a737253ebd126063e774ded17b85c80304cc6dd97bd43069d1b50988f5a24403497eacc1ee87018e4fad4b8ced5b98c29780fdd89ae6a66613e868cd58
- SSDEEP 96:Fwz2laIEHStF9A9hxvZL9n5xwSw3k4ZjsIgmDf:lPtZgwf
- TLSH
  T19F91006E3F71BB2605B16764D6F04692E51EE61F2F708247B1BD03C04FB08B289A9D97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  admin/dynadot/contacts.php
- Size 7KB
- SHA256 5e7b6a5a08ecf2340932e1d088000eff0758b16c5040fb90411e5ddd5f6de8b9
- MD5 897c14b640ad4a5ddb39bae64d4e90b7
- SHA1 53a7bd0f390835e2beac23083b0801aeb3ed4821
- SHA512 bed87166fb161d83cc3f4987b046d4badfe9b4984ff745e5232e556fa248a5565a24ca2b9deb3b1716d86e67cd801f6c8679ab8574533ab9df5ef056f289ca49
- SSDEEP 96:WAF+LI9uO0hVK1fbmBDwkJL5HljpNaUdEGBfUppCCFtKwpTNpzmBxf5P:5+LI9uO0hVWiBEKFFjpjEkzBxJ
- TLSH
  T15FF1944030D16521287356A977A1AD40FE92C127D5962912FFAE239F0FF0CE6DE37AD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  admin/dynadot/domains.php
- Size 9KB
- SHA256 a9e6abb9ca616fab1b6667b62364a7e6419b28f9ab58672259800149e9612f97
- MD5 c567d02c7349164f14d1594147225948
- SHA1 9dad91357b496373ae6351948c3547290d78a0ea
- SHA512 fa0fd1513abbb2e1272935b0fec1fd47bc105d4156242162e163987665d7f2a5615d80980d82a7a1a424f9f80f5b2f89ebb9ad486bb0c3a857937493bf8ca8ec
- SSDEEP 96:J7mAbvu+S9fh6wEf2nk3kBl1jCnfqIv2+gkWgYZhn7aa2dQi2hVr33v3yjb8wiK1:ZvZGh6w7Qkup+tgK72dQiW3avriRNJcJ
- TLSH
  T1DF12626060D0B62315F395AEB755AF44FE92D12391922111BFEE62C30FF1C62DA37989
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  admin/dynadot/index.php
- Size 4KB
- SHA256 db8523e4411fc5458cd9d5443a09660f673b1b2b09a41a8ea0e5e73933bfede8
- MD5 4713e82d2e48ec1f52aded75152ea294
- SHA1 aeabd1b997ae4847fc3c6527ab7841fbdd0226f3
- SHA512 2a184efd25d9c9001702871b70ac63dbe997b330fcacc841e3c97c42e33aaf3879794a3271041e9650408571289bbebe7379885451cbbfcc9a20e5446e0166a1
- SSDEEP 96:7ZJWLyt9bhMQkZd6LILv3DCGFPRzumW2xdcf5P:TaQd8nCGFZzh0J
- TLSH
  T15CB13F2251E5A82B0972D8C75234DFAAFDC29413F6035191B6EF83D72FF5C52AE2344A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  admin/dynadot/search.php
- Size 15KB
- SHA256 3f132b8136258de62b57b193ad854702c0cb585d418c5a59c4e7cd517cdb24be
- MD5 668743b6151b9049e5386469e956d5f1
- SHA1 7546e113eb9dae6b2f20af8236a4d2f05b4c602b
- SHA512 8945efc4ccfe45faf6c50ff9283672b3860ce9eb702e275cfe5814caad35b8a36e25ea6af38c8af7f270569b9455d9552ceab88aaed80e8b5b0678d88a315dad
- SSDEEP 192:U12ZbiITzHK/OfpxsgOhjPBxspskgacYPPkiS33ajLmz73jsJ:UkZmITGypFGP6Pkx3mLMLjsJ
- TLSH
  T11072E66120E0A9230173C99D7B906F49FE9AD117E2512116BAED53CB0FF0C61DA33DAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  admin/dynadot/settings.php
- Size 11KB
- SHA256 a04eeb857a051bc7e9382b1d0c64b0f169fc3f3abbfbabcec7801078a1a5cdbb
- MD5 cc2f474791fedbb6ed3d4008cb0ed960
- SHA1 5ac17371fe935a441011b885830f8dcbdd424955
- SHA512 f906ddd330f0e104e8d239b4c4c0b5db561b5bc03170e21cce0caffbb2fabfda32bad05d394394136cabe97c175f0928e8df5579d44e3f8221ad4c2a723ee86d
- SSDEEP 192:dQOcq+KAFiFNJctgJ4lwnz+LyfdWlreWRFRoRJ:dQOcqeONZGlwz+LIbRJ
- TLSH
  T14B32C77060D99C2B4932D8525FB10B89FEC6CA03E796204AF6EC63875FF0C81D93359A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  admin/transactions.php
- Size 9KB
- SHA256 1981ad090a9d05ccb89ec8b168abfe5ba707bbefd7c99e085272ed8282fe9f2f
- MD5 3b7b23bb2d38cceef7adef2d3ced0fc6
- SHA1 6da935252e5c5515a7a73b99597c1f759f77e0e7
- SHA512 e4c3a8e0281db7673e222509e004fe6363a40e856c0b3cf9008ca18c8b001cfd99c15e632326aaa02cb5ef703c4aa968a41f2c6bcc359a11e35a27777171a14f
- SSDEEP 96:KLAxT6exfGS8Xw6uw0uWo7vGdtWsHT2yzKN4eQOnJlJJ2ci3IRdiyzC0P:tTZNFw0lKvggNNZQ6T2ci3dF4
- TLSH
  T1A812B55060D5FA224C7B5A9BD781DA91FE97C833A5231280BCCD21FB1FF1C62D627606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  admin/whm/_bootstrap.php
- Size 9KB
- SHA256 77698d6020aa863746fab477c37050eeb0c7d8a8a1d4def638855fbc21b5d308
- MD5 ee5d061f3070d8071c21a1d457dc1f91
- SHA1 348e0a7d21917448d8de23218443ccc402391bc1
- SHA512 640381bf4fcdcf04bcab5c550feecba79a605b459479b7396b07cc1fff1d1a5b60b91c8e24635899c63bd81979b6a3b1ff5e620341b6f68c1da5063965e78f40
- SSDEEP 192:2tghk+3e+rkipwvE+WVdKXs8xVw7Dpzcl6e3EHb5Kff1Nk+LJpVdEf:Lk0eRipwNEofEFzcl6GE7Mff1NLi
- TLSH
  T17512835E3852756109B2FB3CEB92C405EA2FC03B050195D6FEBE81D02FB0025CA78E5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  admin/wordpress/_bootstrap.php
- Size 3KB
- SHA256 f4cebb1cfe4422b7ec3a0d5582609f1e33b40d5ec5e2c87bcb866c10835f2d91
- MD5 c8e70c459532e751aa706e562fa03223
- SHA1 58c008dfdd78c6f6cd3f01ed3629fb8fc8236ec8
- SHA512 6fe9030dd4b2bc04e06d8d04d599d4ce02db94d8ce45bdaaeb7eea1468c56b8e17f30e212b0b7c8a952a9f2f8d4d316fbf7780156c152a78f8e91c38a4e05743
- TLSH
  T11C7150AF3D51B99188B6B72CCB94C052ED2F823F891462F1F8BE89C15F70511892CC95
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  admin/wordpress/files.php
- Size 7KB
- SHA256 6822dd1fdccc512ae215e72a9c5e2b81c50718815b84f1808c34c5a9bf4ed766
- MD5 7900949720ee5c0da52e6c57fdff4b80
- SHA1 132c3a944e6a7222834807640476deec811dd985
- SHA512 818a46627055dea551f46195937ae53ca4f2c297be78ca74fbef0964bbc1d49851ab9fca8f745f6e64dac300b12ca413a941a6c35db7c93eeb037bf4981046ac
- SSDEEP 192:rU27arlvBRGT0O6Dxyui+6jG9/hfSIBduKJ:Q27uAVOxKUkIzJ
- TLSH
  T1CBE1546260C167330AB369E66211CF89FDD78223E1172A10FD9E21DB1FB0C27DAB7595
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  admin/wordpress/index.php
- Size 11KB
- SHA256 e781af97e9b88490121653c3b16ac0a53b4c82c151d493ce7276f5eef8c50057
- MD5 a452197a32c086d445a33ffd8fd188f4
- SHA1 abae298bbef876b1721721acbb04b8eab1dc14cd
- SHA512 15f53c8e7a347abb4b486dcc5b1dfa45224b9edbf340dae5d1388dcb710f5af6e5ace4b8c1bf0d077ad6d732c0f7de9a6dc383e226d5a3e4b7e996ffd2a7d17d
- SSDEEP 192:Oa8vplqnFd8R/y7v+OooLIK+EpMd0lZg0aGJ:Oa8vplqnrv7WN6pO0lZg05J
- TLSH
  T14A32A5A130D62E615573D8AA9791CF86FE838037D31B3648F9BE66E70FB0C11CA23651
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  admin/wordpress/login.php
- Size 1KB
- SHA256 6a0f1e6edf62ef5277d9cb989e2fcbb53629266c43c4407ef3acf6746f2fa467
- MD5 aee5d76f734b7aaa57602f8a61110476
- SHA1 67eda22074282ca8ebd8f93a88b35e81385c84ce
- SHA512 94464ce63ba37e7a3e9025fd6cde8dab0e40878b0227c87771ab8a4e2eeca85022007affb4399e4036d6974d8f4ce148a283e3ea4ec6de5e0d4812c72931a1a6
- TLSH
  T146418771A1827E1C3C31D96225C0EA4CA85B81175A0C1EE4BCFAF7123FA29314973F89
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy