f5e29de26e99e299c1ac993ad1f0c383f07f65636be715b3fc29e317e90da061 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

OrionPro-1...le.zip

windows10-2004-x64

1

OrionPro-1...le.zip

windows11-ltsc_2024-x64

1

resources\...e.json

windows10-2004-x64

3

resources\...e.json

windows11-ltsc_2024-x64

3

resources\...ICENSE

windows10-2004-x64

3

resources\...ICENSE

windows11-ltsc_2024-x64

3

resources\...e.json

windows10-2004-x64

3

resources\...e.json

windows11-ltsc_2024-x64

3

resources\...ICENSE

windows10-2004-x64

3

resources\...ICENSE

windows11-ltsc_2024-x64

3

resources\...e.json

windows10-2004-x64

3

resources\...e.json

windows11-ltsc_2024-x64

3

resources\...ICENSE

windows10-2004-x64

3

resources\...ICENSE

windows11-ltsc_2024-x64

3

resources\...e.json

windows10-2004-x64

3

resources\...e.json

windows11-ltsc_2024-x64

3

resources\...js.map

windows10-2004-x64

3

resources\...js.map

windows11-ltsc_2024-x64

3

resources\...e.json

windows10-2004-x64

3

resources\...e.json

windows11-ltsc_2024-x64

3

resources\...icense

windows10-2004-x64

3

resources\...icense

windows11-ltsc_2024-x64

3

resources\...e.json

windows10-2004-x64

3

resources\...e.json

windows11-ltsc_2024-x64

3

resources\...icense

windows10-2004-x64

3

resources\...icense

windows11-ltsc_2024-x64

3

resources\...e.json

windows10-2004-x64

3

resources\...e.json

windows11-ltsc_2024-x64

3

resources\...nse.md

windows10-2004-x64

3

resources\...nse.md

windows11-ltsc_2024-x64

3

resources\...e.json

windows10-2004-x64

3

resources\...e.json

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
OrionPro-1.0.9-PATCHED-portable.zip
Size 118.3MB
Sample260905-rh9tjsdp3z
SHA256 f5e29de26e99e299c1ac993ad1f0c383f07f65636be715b3fc29e317e90da061
MD5 fbc098cb7a945eb11caa3f9d4b3c5a9e
SHA1 34ce7d820d85ad21ddbbbb95978b4d1d56543d5d
SHA512 173ea10f217e3ad7073448a06caa3c03e5f7c280ba4b19b0a5b5d27daa01b02de9dde89c8c7068acc05e7d30f29ea3882e15b9172f41d63156762442ab5f85fd
SSDEEP 3145728:22HzgaEK23bAr1VaFlhT//BmQmNgFP42Di46Urv/Qmhi30:rzgaXr1VoLBmZgV42DIy/DhD
TLSH
T18448333B80E56936DA1AF9BC9EE15020FC99544E4286C9D1139C8B6B70EF6D8337BD07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

OrionPro-1.0.9-PATCHED-portable.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

OrionPro-1.0.9-PATCHED-portable.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

resources\app_asar_out\node_modules\fs-extra\package.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

resources\app_asar_out\node_modules\fs-extra\package.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

resources\app_asar_out\node_modules\graceful-fs\LICENSE

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

resources\app_asar_out\node_modules\graceful-fs\LICENSE

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

resources\app_asar_out\node_modules\graceful-fs\package.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

resources\app_asar_out\node_modules\graceful-fs\package.json

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

resources\app_asar_out\node_modules\js-yaml\LICENSE

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

resources\app_asar_out\node_modules\js-yaml\LICENSE

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

resources\app_asar_out\node_modules\js-yaml\package.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

resources\app_asar_out\node_modules\js-yaml\package.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

resources\app_asar_out\node_modules\jsonfile\LICENSE

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

resources\app_asar_out\node_modules\jsonfile\LICENSE

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

resources\app_asar_out\node_modules\jsonfile\package.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

resources\app_asar_out\node_modules\jsonfile\package.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

resources\app_asar_out\node_modules\lazy-val\out\main.js.map

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

resources\app_asar_out\node_modules\lazy-val\out\main.js.map

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

resources\app_asar_out\node_modules\lazy-val\package.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

resources\app_asar_out\node_modules\lazy-val\package.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

resources\app_asar_out\node_modules\lodash.escaperegexp\license

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

resources\app_asar_out\node_modules\lodash.escaperegexp\license

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

resources\app_asar_out\node_modules\lodash.escaperegexp\package.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

resources\app_asar_out\node_modules\lodash.escaperegexp\package.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

resources\app_asar_out\node_modules\lodash.isequal\license

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

resources\app_asar_out\node_modules\lodash.isequal\license

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

resources\app_asar_out\node_modules\lodash.isequal\package.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

resources\app_asar_out\node_modules\lodash.isequal\package.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

resources\app_asar_out\node_modules\ms\license.md

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

resources\app_asar_out\node_modules\ms\license.md

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

resources\app_asar_out\node_modules\ms\package.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

resources\app_asar_out\node_modules\ms\package.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  OrionPro-1.0.9-PATCHED-portable.zip
- Size 118.3MB
- SHA256 f5e29de26e99e299c1ac993ad1f0c383f07f65636be715b3fc29e317e90da061
- MD5 fbc098cb7a945eb11caa3f9d4b3c5a9e
- SHA1 34ce7d820d85ad21ddbbbb95978b4d1d56543d5d
- SHA512 173ea10f217e3ad7073448a06caa3c03e5f7c280ba4b19b0a5b5d27daa01b02de9dde89c8c7068acc05e7d30f29ea3882e15b9172f41d63156762442ab5f85fd
- SSDEEP 3145728:22HzgaEK23bAr1VaFlhT//BmQmNgFP42Di46Urv/Qmhi30:rzgaXr1VoLBmZgV42DIy/DhD
- TLSH
  T18448333B80E56936DA1AF9BC9EE15020FC99544E4286C9D1139C8B6B70EF6D8337BD07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  resources\app_asar_out\node_modules\fs-extra\package.json
- Size 950B
- SHA256 8625f8d6674f3dacbdd5ed9fc553d9583234a6403ef90b1612f786b8fad17711
- MD5 099a518d3f718d2f9ffe1b15f9b87aed
- SHA1 ea5b31afc94b0fe7f48bf4098eacd10029ca9bed
- SHA512 8e457e75e7a0aa5051b743f39c3f9bf100affcc976508f8a0f2af3990d16c13452e57f342e6d745944d9d1e72bc5940755c7d0f8a101b84ea0ff0810580678c6
- TLSH
  T15511DC01CD9E9EA30ADD66D4A85E618662204F078A02FC1C7353038C4B4E0AF72FDA7C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  resources\app_asar_out\node_modules\graceful-fs\LICENSE
- Size 791B
- SHA256 f65c5d9f22a317b2a10803bd1868461ce6499c2ed7217bc80c0cc772a748789c
- MD5 163972d49c2f7a3d3b687aeb48e9e3c9
- SHA1 13e4a8932f9e1c52c3feb92c88cc523701e15d41
- SHA512 f52faf7306a150325a835d0b3642901214638e2ba349a840877a407f7532bc6a2ba47f5571a09ccb8d17ec69a959d538737a1ec565379d61e0c6adb74a84630d
- TLSH
  T19101418FB1E12BD419D09BA03D916DCDA1CEB03B7943AA153068E388C77740FA47F000
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  resources\app_asar_out\node_modules\graceful-fs\package.json
- Size 600B
- SHA256 5f558a45ee1f8ea431e950ab3864f842b9de5325e30a31ba1bd68f6f768457ed
- MD5 01a4bcd72d63086d7f2d88d3174e77d2
- SHA1 d8c1a3d2127de00a0ebe67b2a2659ecd66fe828c
- SHA512 26a49dbb28a2304b89a85937a7239a34209bf820a5403d7cd7331ba30f4908d834e9a9618b4cc9a02962b59b2d955e9f9ea81abe528e512a224c81f8291c1430
- TLSH
  T19CF0F620DCA85DE305D96AD61CA88107B665898B4A0CBC1D3392575D4B1D09B45FE73D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  resources\app_asar_out\node_modules\js-yaml\LICENSE
- Size 1KB
- SHA256 a07bc24468b9654ce76a547d47a2db282d07733b715db4c73a98bd63961f9550
- MD5 effd621a9bf5d72d6a7e6ef819bf3afb
- SHA1 cf1619aed46c3c608c54e1e4bdec5e7e38e436a7
- SHA512 3114cc7bc9e621038adceb8d4a990c2201182c3b851e18d1d9be8bc1e891636550131ca6d2d0fa3b284a6596fe1db6d83424756e51be98ec04faa5fb3d76ee51
- TLSH
  T18411861E72510B621C9A13605979A8C9F13BB15F796F1A40146DF344133A06CD5FB840
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  resources\app_asar_out\node_modules\js-yaml\package.json
- Size 1KB
- SHA256 6b1fac9926b2a11471fd451cfb2ced69b09337e6c77d4174670839183c5a5e84
- MD5 dcbf3da1984b615d22e6d4ee90c838a0
- SHA1 95b1d6d2d39f771f4d7fa3286704514ced4be2f0
- SHA512 c0f016d7effa923887c1fc716a8f825aad8de0737313b411fba4ded0e2bee63a50fa00577a31b3abf4ccee008c7da1ee977bec54af7b87467d64bc16501d50f4
- TLSH
  T18D115414CC648ED316C614EC6C2A484251348D9B1982FC5937A2074C4F9E66F31BF778
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  resources\app_asar_out\node_modules\jsonfile\LICENSE
- Size 1KB
- SHA256 a9801fb52ba22ef808682a094da8a7a480584b7ed0dfd0d888ab543616335031
- MD5 423f377ade95936f6fe009b1c137bfdb
- SHA1 8710b30864159d0ab7f1887f1a7b5edcfc7d849a
- SHA512 ebf590a7eadda54cc1bdfb7327f3d9dfc93c8eba9e28d3c137caa78e2136d88b5d9ca1e27d7ed9abc73b095a3d5e42227c8ef7321716f1db11b9ed3618074e29
- TLSH
  T14911661E7250177318561370597A6CD4B25F724F7AAF2A84646DF244233B46CE1FB880
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  resources\app_asar_out\node_modules\jsonfile\package.json
- Size 558B
- SHA256 19b7f70104b503224fc101fc465fb40765b077aa1f996f2d008463689a4fe4e6
- MD5 0519bc14dc22c6c93cc8440c7d699863
- SHA1 02523695cef93bc8998e08e2d44a05e75b624b6a
- SHA512 c791fb2cbce01a233b713977ba3b41903c380386e328ef36ad971a5daedab830364f1b899f1bee4ac60ca95d608d227a2c97677bf78bf993671cbb6dd9b287d5
- TLSH
  T198F04610C83849A306ED32D48CA6A60371224F43814AFC1C77C7424D4B5F0AB25FCA7D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  resources\app_asar_out\node_modules\lazy-val\out\main.js.map
- Size 1KB
- SHA256 aa3e70f08a0ce115832e5324c4b96aa1475a3b8b36728f50091ebd22aa0f6646
- MD5 42d5179a6b1205b3144399e1a2adef15
- SHA1 9cb6a6e3b0f212699c2adda0d2037f76b4599d31
- SHA512 6cb29bde1db4fe8d775d2ac4ac213a7628551eb4896cc0db205cd5802e1ed8bb957fa8ae663cf16802cab2c11dcfb7498751704bf98d1cde581dad3e1abcd880
- TLSH
  T106212B01257DEC3A1B3762DB2C5F66A36F5068CD1E4D874864A8C550B7C1F3AE1B2836
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  resources\app_asar_out\node_modules\lazy-val\package.json
- Size 330B
- SHA256 a6f4140d0187f32d95545835aca38684e18d0fcfbecb51709b0aaa54decd3c0b
- MD5 32c562fca66d4a42909ab7aab7da5bbd
- SHA1 1383a6e3452f3b9db7b04e37de2bbffe68936ae1
- SHA512 0a0b4f4fd728f2089af52045fa2193d0e8b4e7bc05e444d090bc74c3d103065a1ccf1853de590f551b042a9805ae62b957563d09dbc0125b06288f31fe4e73cd
- TLSH
  T14AE02678C86D19A34AE56A946D082017B3520C134128BE0A6397023809AEEF701BC31E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  resources\app_asar_out\node_modules\lodash.escaperegexp\LICENSE
- Size 1KB
- SHA256 ffd8b33b354585f4ce119f19c53728281e48a97b074491eb6bf6d5c5ff305272
- MD5 a3b2b7770df62392c164de4001b59f8f
- SHA1 fc4de79d3e95696f11dbec64b0f99d421deadd30
- SHA512 b7f602a93a363a6d01b8713f0be0bf1e70c431b6c573e230ec7759e66dfe231bfa780154607b9a59f0e03322f7cedf57d2abd7a083c0f2ef2aabc8bc215bdb32
- TLSH
  T17641947F729443320E9203D1B93998C9F626626F79AF2684245DE388323A47CD5F7948
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  resources\app_asar_out\node_modules\lodash.escaperegexp\package.json
- Size 356B
- SHA256 c71b659d3f3f5dfab55d736b6bd17d97f822b13bcf9b1edbce479f8e691e7892
- MD5 3c67a4b073f148dfb319bb685f20dc54
- SHA1 18fe9f56c61647367355507a7f66ea10532e652f
- SHA512 dacc3f9e1123574b588a5e073904df3eb1266b37c6fb113fb50298a0315b1e69336cc416568e7b49ba87091a1a81530623328d69061a210489c361570194695a
- TLSH
  T1D1E02854845090133FC74685A78052076E544DF745C8FD5D0B63010C00EDBF354FC34C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  resources\app_asar_out\node_modules\lodash.isequal\LICENSE
- Size 1KB
- SHA256 e159c6d48c989185448658f276375bfb2300362ec6d4ae5525a2d49c4bcb947d
- MD5 8f10c81975f996c3ba5b424884b4af96
- SHA1 4aa67fb8f8b16d40701f21a8089a410a7d178ede
- SHA512 424a882cd282c7e925513b0199dec3de4a5a4950a64dc5c83dd665de35d7a27c63fa27b39443614369157dc5601ca7b4add160b0c9f85db2e3e3afa4f4d4ecf3
- TLSH
  T1B741A87F739443320E5203D1B56958C9F627625F79AF1684245DE3C8323A47CC5F7948
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  resources\app_asar_out\node_modules\lodash.isequal\package.json
- Size 346B
- SHA256 6e84ac44b54c17317d096a280e9d0bd72d736e0a0245095cc7c5d72657890406
- MD5 af4451bf948e3bc48d63d463cb81d39c
- SHA1 b6dbb21075b154f4c86c8b4665b65dcc5c2207fb
- SHA512 5afe1c6656dafd5fe759a17f01b65b9e9d52ed05aaac1e95a6cac4668efe3e28e85f4afda976be729568e122df4a0940eb28ac8cfdcd72ad7e71ad2bcdc1fc6e
- TLSH
  T18EE020A5845490233FC646856B5051495A654D574584FD9D0767154D10EDBB354FC34C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  resources\app_asar_out\node_modules\ms\license.md
- Size 1KB
- SHA256 1662fae9b5314d11cf51284e2dcd1f006a354f7343f08712a730fcff9a359801
- MD5 2b8bc52ae6b7ba58e1629deabd53986f
- SHA1 ac646ea4ec65cd1feac459a194a15a52d147bdcf
- SHA512 99536ece73c2f788fa74c42bfabc044d3966812ffb9a9d30bb9183371999bb4067b26c1b36d40738444a37c341fd5b9b5e833c9d40884b99d39147e5a9e3f3de
- TLSH
  T11711821E735107722C9A13605578A8D9B23FB29F7A9F2A84246DF245233A06CC6FB840
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  resources\app_asar_out\node_modules\ms\package.json
- Size 497B
- SHA256 f983ec581f1dd5a47b7f12b58f97c0b44c4e0cce56cbecc40140031aeef99bdf
- MD5 910353974ae9d7991a607fc6e548fa12
- SHA1 91964e2676ac7a20bcfdabdbd66eac919b342ac5
- SHA512 49f7724bfa1a8dd827646eefeb9e1c58f5b15febbe0b6f96c0d6c16d7a9bb15a02da75671f7f1e8036e03ccad0768d74720d595631c945199d2fc0c2f74af6d3
- TLSH
  T117F02715C9A11CA31ACD5A327CA9568353210C1346D4BD4C374A520D4F5C1EF24FE2BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy