db21243f7a30cb52b207f6fac763e4c6f6d0fb13395641ef65a60cf6908a8c71 | Triage™

Login
Reports

Overview

overview

4

Static

static

4

vendor/bin/carbon

ubuntu-18.04-amd64

1

vendor/bin/carbon

debian-9-armhf

1

vendor/bin/carbon

debian-9-mips

1

vendor/bin/carbon

debian-9-mipsel

1

vendor/bin/carbon.bat

windows10-2004-x64

3

vendor/bin/carbon.bat

windows11-ltsc_2024-x64

3

vendor/bin...ations

ubuntu-18.04-amd64

1

vendor/bin...ations

debian-9-armhf

1

vendor/bin...ations

debian-9-mips

1

vendor/bin...ations

debian-9-mipsel

1

vendor/bin...ns.bat

windows10-2004-x64

3

vendor/bin...ns.bat

windows11-ltsc_2024-x64

3

vendor/bin/php-parse

ubuntu-18.04-amd64

1

vendor/bin/php-parse

debian-9-armhf

1

vendor/bin/php-parse

debian-9-mips

1

vendor/bin/php-parse

debian-9-mipsel

1

vendor/bin...se.bat

windows10-2004-x64

3

vendor/bin...se.bat

windows11-ltsc_2024-x64

3

vendor/bin/phpunit

ubuntu-18.04-amd64

1

vendor/bin/phpunit

debian-9-armhf

1

vendor/bin/phpunit

debian-9-mips

1

vendor/bin/phpunit

debian-9-mipsel

1

vendor/bin...it.bat

windows10-2004-x64

3

vendor/bin...it.bat

windows11-ltsc_2024-x64

3

vendor/bin/pint

ubuntu-18.04-amd64

1

vendor/bin/pint

debian-9-armhf

1

vendor/bin/pint

debian-9-mips

1

vendor/bin/pint

debian-9-mipsel

1

vendor/bin/pint.bat

windows10-2004-x64

3

vendor/bin/pint.bat

windows11-ltsc_2024-x64

3

vendor/bin/psysh

ubuntu-18.04-amd64

1

vendor/bin/psysh

debian-9-armhf

1

Sharing

Copy URL Twitter E-mail

General

Target
vendor.zip
Size 35.0MB
Sample260905-ah2phashnc
SHA256 db21243f7a30cb52b207f6fac763e4c6f6d0fb13395641ef65a60cf6908a8c71
MD5 ede0c8718e2bf2d583852d08445ccba7
SHA1 ffe77d8ae5d05bce87e75245bbb77f301daf59e5
SHA512 49dd13b877d033874d39d4c2b10990e182d1d9f15b80b4401fa6edc609dd62b4c0d3e9b1108a04dbe9ad1eeba59b788f56a38ec724bf8f3f9a12e2cc8585dd6d
SSDEEP 786432:KJi7jwF0hFp7tPvuA0qSPO1j1AYqVUSxvnGr8g8:ci7jRh7tXJS8emrI
TLSH
T1A48723AAD36ED085ED473FB4AB8A4301EDB08186B174E05319C412509CD7D998EDFBAF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

execution javascript linux svg

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

vendor/bin/carbon

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

vendor/bin/carbon

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

vendor/bin/carbon

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

vendor/bin/carbon

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

vendor/bin/carbon.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

vendor/bin/carbon.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

vendor/bin/patch-type-declarations

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

vendor/bin/patch-type-declarations

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

vendor/bin/patch-type-declarations

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

vendor/bin/patch-type-declarations

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

vendor/bin/patch-type-declarations.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

vendor/bin/patch-type-declarations.bat

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

vendor/bin/php-parse

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

vendor/bin/php-parse

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

vendor/bin/php-parse

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

vendor/bin/php-parse

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

vendor/bin/php-parse.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

vendor/bin/php-parse.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

vendor/bin/phpunit

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

vendor/bin/phpunit

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

vendor/bin/phpunit

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

vendor/bin/phpunit

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

vendor/bin/phpunit.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

vendor/bin/phpunit.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

vendor/bin/pint

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

vendor/bin/pint

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

vendor/bin/pint

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

vendor/bin/pint

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

vendor/bin/pint.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

vendor/bin/pint.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

vendor/bin/psysh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

vendor/bin/psysh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Malware Config

Targets

- Target
  vendor/bin/carbon
- Size 3KB
- SHA256 1f6d12658499234c166aefb8c4e6d368bd7df735c69e920d925bd582726feece
- MD5 5ec5e29b02337588277356863a5c6bb6
- SHA1 6be14e08bbf4c988cca3efcb96cf73aee409d861
- SHA512 9834d3cd9521e4338ccc1549db2fb45a30b331f0dfd210ecc68f9e2275d62a103ea6832f9e1953ad22877aabdce7e3781507d5c1072cffa5be5a8328a27d2ab6
- TLSH
  T14261EF58A4BA2C605123A3B95B4FE54611775163110E4C40FE9D83E0AFA232DFE76FAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  vendor/bin/carbon.bat
- Size 133B
- SHA256 b37993b07d6d69d00748228c6d40a48f1dcc10df50e11c33dbd37227dbdcc8d7
- MD5 9ebe30a6053c9d657187d48e41387a2d
- SHA1 9772786b33df53153e3d9a386fa1944dab23e56a
- SHA512 e8d0e493dc5728036b4a8234c80633a613347e8e152ff37318d1bb0f7f35fc76516cb2be55f590f42ca0101dde50749f0aa11e682f1759832e9ac54af18fd774
- TLSH
  T115C02B9879D772407924442CDC4B414A73D1E8F91F6A82877022C1101D18ADC2F8F01D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  vendor/bin/patch-type-declarations
- Size 3KB
- SHA256 90f034642933ab74b699963c98427664e3ad459fed1dca2aaa833d44c78f3349
- MD5 263741b81e390816aa548d7a57afdb05
- SHA1 663bfee511797994aadae1e543abcec3b98e5b00
- SHA512 4be07c1e51c55d52962ecdb4e201433a9a9cbe155cbf04ebcf2d0d468f85fb2498a28cfaa782217d28fb74618683f440cb63ed4c3709bc9a52a334daaf5793a2
- TLSH
  T15A61D058A4EA3CA15123A3BA974FD54610765123210E8841FE9D43B0AF9233DEE76FED
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  vendor/bin/patch-type-declarations.bat
- Size 150B
- SHA256 65bebe04937f7249f074652f9098157e6cff1ba5a8b37418b1a29dac42cb0d9a
- MD5 0499f98aac1bae3826f3d46978e4a3bd
- SHA1 95acef87b815b4b0b5edbda23da1b3ba708d03aa
- SHA512 f1c06b6d0a0cd623bd1c13d914f39a7d4cb02bf20b5d4f184c4257d0e1635e6ee7340c65837870ccbe7c12823c60e67b09663eed821d45bc35e849ee68653380
- TLSH
  T113C08CE879D77250B925042AE84B854AB2A2E9B91E5A81476022C1282A0D9EE6B4F85C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  vendor/bin/php-parse
- Size 3KB
- SHA256 15952ffcb27ebf657ceaba01ffdaf352698fbec39a009d041661d279d6633ba6
- MD5 bfe67d8a7b6bd3f471526898742cd8dd
- SHA1 3f5ecd41a30f60ba9a4ddeca88e592f5639c26f0
- SHA512 b0df5b39fa1dd3c49b0197a2aa19f0a30b6ebb29d6bc4c0a735f5b903b222b6f4a55b3af2e620ee4d1c85e5d9e521821fdc32c07a09719710fa262b9f6b5305c
- TLSH
  T1D961CE58A4AA2CA15123A3F95B4FD54610761123110E8841FE9D83E0FF9233DEF76FAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  vendor/bin/php-parse.bat
- Size 136B
- SHA256 02ae1d682c88dc8aa657c039ca9896c7e268fa76f1eb5eae9c13011adb15f01a
- MD5 024eca83274cbd8dd0ba9782472da9ab
- SHA1 ff49383de87999f10c28c9bd1016ff817fbd1aee
- SHA512 a33af866f66691311b46473b582b537b4ba7655a4f79b2a94d4c061b1a4dfe4d490250329e36498e82f29fc151ff2b9938904092cb7c1071f41891d5fe44bbce
- TLSH
  T13CC02BA879D771917935082CDC4BC14B72E1E8B51F5B80577022C1502D08DDC3F8F01C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  vendor/bin/phpunit
- Size 3KB
- SHA256 32dadd94a11d0c76e28b6c23c8d786421b623dc53dea644723629d625a552152
- MD5 9f2de3ac542b006a0fc7c7368d77b1a1
- SHA1 61b2d5ed8492875f7dc91d2557bef0bd5a5932b1
- SHA512 8b6b0ee9df8be49e7a309c90ebcd575cb59ff4b034ba8218a29de097aef8b6e412f3dc831da1ee23beb3bc1b8686829ba889c7b3ef0733b365e22adf8865bf12
- TLSH
  T1BE71B16874B52CE15123B3B5475FD50610722133260A4C41FE5D43A0EF9622DEEB6FAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  vendor/bin/phpunit.bat
- Size 134B
- SHA256 218270d9b92607eec88d3c74b64df799c143e067c7086d4e383e212db7d65a0f
- MD5 533c3783283405d3424b2a3b593a1cda
- SHA1 8e605253b7a49c7254b5f468d4dcc7c78ae42457
- SHA512 54f7699a60ac1c6f8256e82cf031762fcbe26057836f5cf80da1618e9427039c48b1bc3bf1df7b0df881dda14ae5c59447654cff763b80ec8f97eb906d56162c
- TLSH
  T17EC02BA87AE771817D34092CDC4B414A72D0E8B91F5A80477122C110190CDDC3F8F418
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  vendor/bin/pint
- Size 3KB
- SHA256 82fff1d6db749e7fa58d5a10b75cf5831f8709b7a7d9dcdf1f275acdb3f1e056
- MD5 24922b7ec722fc6b85799a6095b1ce9d
- SHA1 5f30289308979417ab3119f2758a5a5fbe5dd936
- SHA512 06e81dba92293c387e591ed81c5d3f7dcb08d9833813059b449f5374bf5c472994875876a8ad65fda34e3e9d2a7536a2019784385a194a807caaf141d58b2c3f
- TLSH
  T16B61F05868BA2CA05263A3F9475FD50610765023214E4C41FE9D83E0EF9222DEE36FAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  vendor/bin/pint.bat
- Size 131B
- SHA256 5db23c0218ef4d96215e53d621d88f839d9813f7b7e16258db926c7d6268f014
- MD5 f8a836693a5ea5f127bd63a7995daad2
- SHA1 33e499d1649a5bb479eb6d4360230570782256bc
- SHA512 9fd82ae887c6d498396f214390d79300177aaaf97633da68db373602b3f930d7e45b119cdd172fc6b559a44202b6d2ac42ada2d3a4382ad99d9c82732a7802ca
- TLSH
  T187C02B987AD7714179A4042CEC4B414AB2D0E8B51F9A80877122C5502908DDC2F4F018
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  vendor/bin/psysh
- Size 3KB
- SHA256 3266d6e0c6c405dd7efa13f808e030de4fa4ad738bf7e990ade1e702a842ad18
- MD5 a5995127719148e9f369b85e149b169f
- SHA1 d98584230678e6d3b263c27f12fe1640be1aaa3c
- SHA512 37b011dd3b3733ca05a9cbecf86a3b8068ccf69fcf2cf443c394a0171c9c3749d183702c0dae8323a153eaf4001882b9a0f3022ef9cc5451fce651d82cd0004c
- TLSH
  T12161AE58A4AA2C615223B3B9975FD50510765123110E4C41FE9D83B0AFD232DEE76FAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy