Overview
overview
6Static
static
6hospital_e...up.ps1
windows10-2004-x64
6hospital_e...up.ps1
windows11-ltsc_2024-x64
6hospital_e...r.phar
ubuntu-18.04-amd64
1hospital_e...r.phar
debian-9-armhf
1hospital_e...r.phar
debian-9-mips
1hospital_e...r.phar
debian-9-mipsel
1hospital_e...ase.js
windows10-2004-x64
3hospital_e...ase.js
windows11-ltsc_2024-x64
3hospital_e...ler.js
windows10-2004-x64
3hospital_e...ler.js
windows11-ltsc_2024-x64
3hospital_e...ler.js
windows10-2004-x64
3hospital_e...ler.js
windows11-ltsc_2024-x64
3hospital_e...ler.js
windows10-2004-x64
3hospital_e...ler.js
windows11-ltsc_2024-x64
3hospital_e...ler.js
windows10-2004-x64
3hospital_e...ler.js
windows11-ltsc_2024-x64
3hospital_e...ler.js
windows10-2004-x64
3hospital_e...ler.js
windows11-ltsc_2024-x64
3hospital_e...ler.js
windows10-2004-x64
3hospital_e...ler.js
windows11-ltsc_2024-x64
3hospital_e...ler.js
windows10-2004-x64
3hospital_e...ler.js
windows11-ltsc_2024-x64
3hospital_e...ler.js
windows10-2004-x64
3hospital_e...ler.js
windows11-ltsc_2024-x64
3hospital_e...ler.js
windows10-2004-x64
3hospital_e...ler.js
windows11-ltsc_2024-x64
3hospital_e...ler.js
windows10-2004-x64
3hospital_e...ler.js
windows11-ltsc_2024-x64
3hospital_e...ler.js
windows10-2004-x64
3hospital_e...ler.js
windows11-ltsc_2024-x64
3hospital_e...ler.js
windows10-2004-x64
3hospital_e...ler.js
windows11-ltsc_2024-x64
3Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
05/09/2026, 00:13
Behavioral task
behavioral1
Sample
hospital_erp/composer-setup.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
hospital_erp/composer-setup.ps1
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
hospital_erp/composer.phar
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral4
Sample
hospital_erp/composer.phar
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral5
Sample
hospital_erp/composer.phar
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral6
Sample
hospital_erp/composer.phar
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral7
Sample
hospital_erp/config/database.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
hospital_erp/config/database.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
hospital_erp/controllers/AIController.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
hospital_erp/controllers/AIController.js
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
hospital_erp/controllers/AdminController.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
hospital_erp/controllers/AdminController.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
hospital_erp/controllers/AdmissionController.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
hospital_erp/controllers/AdmissionController.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
hospital_erp/controllers/ApiController.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
hospital_erp/controllers/ApiController.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
hospital_erp/controllers/AppointmentController.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
hospital_erp/controllers/AppointmentController.js
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
hospital_erp/controllers/AuthController.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
hospital_erp/controllers/AuthController.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
hospital_erp/controllers/BackupController.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
hospital_erp/controllers/BackupController.js
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
hospital_erp/controllers/BillingController.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
hospital_erp/controllers/BillingController.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
hospital_erp/controllers/ClinicalController.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
hospital_erp/controllers/ClinicalController.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
hospital_erp/controllers/DashboardController.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
hospital_erp/controllers/DashboardController.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
hospital_erp/controllers/DepartmentController.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
hospital_erp/controllers/DepartmentController.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
hospital_erp/controllers/HmisCatalogController.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
hospital_erp/controllers/HmisCatalogController.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target hospital_erp/composer.phar
- Size 3.5MB
- Sample260905-ah2phashna
- SHA256 5ee7125f8a30a34d246cefdc0bc85b8a783b28f2aec968994118512350d28027
- MD5 4069bd906c342a32799bafb80af283f5
- SHA1 6776d145e3043f266d4f8ad4e732728147884490
- SHA512 81e4d681fed786c036aa210ec694e89f132aa8a24129f08be895b16d29318e25b466d40565d6b84713d206aa4721a46cde85fa26144d12832eb233779b4b2104
- SSDEEP 49152:oWEWrN3U9SbVK75XpfHAytRvXAIpSAvkl3OoBr:au
- TLSH T16EF54B46E4C95E62D86361F9D387C109CDAEB025D1F900A3FBEC6208ABD517C4673ABD
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/tmp/hospital_erp/composer.phar/tmp/hospital_erp/composer.phar1⤵PID:743
-
/usr/local/sbin/phpphp /tmp/hospital_erp/composer.phar1⤵PID:743
-
/usr/local/bin/phpphp /tmp/hospital_erp/composer.phar1⤵PID:743
-
/usr/sbin/phpphp /tmp/hospital_erp/composer.phar1⤵PID:743
-
/usr/bin/phpphp /tmp/hospital_erp/composer.phar1⤵PID:743
-
/sbin/phpphp /tmp/hospital_erp/composer.phar1⤵PID:743
-
/bin/phpphp /tmp/hospital_erp/composer.phar1⤵PID:743