33dc18eefe933b802e2192039699f3060f94492f82862edab4de402d26e1bc90 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

client/CadIO.dll

windows10-2004-x64

3

client/CadIO.dll

windows11-ltsc_2024-x64

3

client/Lab...mm.ps1

windows10-2004-x64

3

client/Lab...mm.ps1

windows11-ltsc_2024-x64

3

client/cms.exe

windows10-2004-x64

3

client/cms.exe

windows11-ltsc_2024-x64

3

client/cximage.dll

windows10-2004-x64

3

client/cximage.dll

windows11-ltsc_2024-x64

3

client/html/js/all.js

windows10-2004-x64

3

client/html/js/all.js

windows11-ltsc_2024-x64

3

client/htm...min.js

windows10-2004-x64

3

client/htm...min.js

windows11-ltsc_2024-x64

3

client/htm...ml5.js

windows10-2004-x64

3

client/htm...ml5.js

windows11-ltsc_2024-x64

3

client/htm...8.2.js

windows10-2004-x64

3

client/htm...8.2.js

windows11-ltsc_2024-x64

3

client/htm...min.js

windows10-2004-x64

3

client/htm...min.js

windows11-ltsc_2024-x64

3

client/htm...ce.htm

windows10-2004-x64

3

client/htm...ce.htm

windows11-ltsc_2024-x64

3

client/htm...t.html

windows10-2004-x64

3

client/htm...t.html

windows11-ltsc_2024-x64

3

client/htm...s.html

windows10-2004-x64

3

client/htm...s.html

windows11-ltsc_2024-x64

3

client/htm...3.html

windows10-2004-x64

3

client/htm...3.html

windows11-ltsc_2024-x64

3

client/htm...�.html

windows10-2004-x64

3

client/htm...�.html

windows11-ltsc_2024-x64

3

client/htm...�.html

windows10-2004-x64

3

client/htm...�.html

windows11-ltsc_2024-x64

3

client/htm...�.html

windows10-2004-x64

3

client/htm...�.html

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
33dc18eefe933b802e2192039699f3060f94492f82862edab4de402d26e1bc90
Size 9.8MB
Sample260907-sp7hfazarc
SHA256 33dc18eefe933b802e2192039699f3060f94492f82862edab4de402d26e1bc90
MD5 4dd6a4fcd50bd5ebc399aaf4fde4889c
SHA1 f0046c2142b6c1265a6cf123ad3f8345f5cb8c31
SHA512 2f0a2a85517056290cde4777cc85a15f9d7b27275a83ea94e2f7fc1924043d111fc7abcaf6fe080e7f5206472f481b9b7c7e150fa2932c25e460f2503c33d1f3
SSDEEP 196608:y/mdfkvsfymB7ZpvIOPWKaEKbadOdF6pljiAAGK8XOezS:yXv/E7vpWxudY6EABKLezS
TLSH
T13EA6334258E0973ED03B4BB3AA62D8D42E5E171AF871731DEB9C12BF36C5A1C8452EC5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution link qr

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

client/CadIO.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

client/CadIO.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

client/Label/资产标签-80x50mm.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

client/Label/资产标签-80x50mm.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

client/cms.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

client/cms.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

client/cximage.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

client/cximage.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

client/html/js/all.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

client/html/js/all.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

client/html/js/echarts.min.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

client/html/js/echarts.min.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

client/html/js/html5.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

client/html/js/html5.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

client/html/js/jQuery1.8.2.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

client/html/js/jQuery1.8.2.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

client/html/js/prefixfree.min.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

client/html/js/prefixfree.min.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

client/html/notice/po_notice.htm

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral20

Sample

client/html/notice/po_notice.htm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral21

Sample

client/html/site/t_ent.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

client/html/site/t_ent.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral23

Sample

client/html/site/t_ent_goods.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral24

Sample

client/html/site/t_ent_goods.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral25

Sample

client/html/site/t_ent_top3.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

client/html/site/t_ent_top3.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral27

Sample

client/html/templ/BOM二维码标签.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

client/html/templ/BOM二维码标签.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

client/html/templ/客户标签.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral30

Sample

client/html/templ/客户标签.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral31

Sample

client/html/templ/普通条码标签.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral32

Sample

client/html/templ/普通条码标签.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  client/CadIO.dll
- Size 448KB
- SHA256 481ad8daed135956c92075ea523e8f61d7f67c2c6050037ba779c37c2b456cb5
- MD5 d19cb2782e25bc2aecbaf6da4606b2aa
- SHA1 fdf3e1a5d193079676ba7e6eeb843d8f49a67481
- SHA512 ac967d3a096e57223f236d7d0bbe8276015d55b627db9d63714fa739948c417a5fc84ec31c56ed51c290b577bda73cf31af2f4afead2a4a632328cca0a282e24
- SSDEEP 6144:XDhls9PUaumu7PNX7iMXh5mwijctCtkO2:XD/slVumGPNX7jXGNjcE92
- TLSH
  T1A0A46D12FA10D03AE4D940FD97F6477F6A2C9630538814C7A3E4B5AAFB19AE1763190F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  client/Label/资产标签-80x50mm.btw
- Size 30KB
- SHA256 f1d954f2788dbc6dfea29f7a118e187d8414d8b8767fa6dd888302c8523745e3
- MD5 0a05bca94ef273deabd4fb46e36956e3
- SHA1 083835c3ebe21034c6dbde139983ef4670384d74
- SHA512 abf43597a0ee40b14203a4035b9017df317a16fcbe57084151cedef84eedc3adbeb0bccac7f8827dee653249c9741ac9017ceb5d040b0ce09d5c54097ace943e
- SSDEEP 768:Dd/Gx1ppiPuOBVctSYTjDYU7T8anTNAArPbhGN1ZrxkpAd4cs:6XpiWOBVaSYbOanT6cg19aOQ
- TLSH
  T195E27DCA1F372DB0A4A2D4FA8655308BFF81455634C327312EAE885E13F25AF91EE754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  client/cms.exe
- Size 8.0MB
- SHA256 88024b571105bf03fc252035a297154303072cc31b6cc39c88cf2d8f44b8dc9c
- MD5 336630cf56d89bf40d6a7afb57e00f9f
- SHA1 47ecf17bcd77cf2265d8aeda740d806a2032166e
- SHA512 7b99a7e32405fa60f05a2bba4004d8ed02cc28afa275618080f575cbd8af10efd3ccf2cb65c222c59f7f74622ff96aa7a8f2940708d4400ccc169228274539e2
- SSDEEP 98304:Vvkg1YDoAKpjnCT1TmPylSMMt01Hor1d9VzDUmFlGeEfAsl4zKERRlO:hkgYotVaaqb1Ir1Vl+uR
- TLSH
  T103866B01BA13C491CED91430046A677B47F8BDA74730AFAB9B68FC395937282BCB651D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  client/cximage.dll
- Size 1.2MB
- SHA256 684bdd8a0840836c4d2a3984cbc82c288f107858a6d06e11a6c06d70ab4be762
- MD5 3f4dd7f86b951d48658bff8747e5170e
- SHA1 b34b91f027e14bd23c7fc9cd6f3c5fb263122249
- SHA512 8e1c0a5c5f0a2a7a4af7829de517cf04595bd7e54cfc955edd3a65f8c72071b07ce35ddd99e6ebb80df0553bc04197c92c4a27447ec79d89ffae8adbaf2a9266
- SSDEEP 24576:iveSPPiraq4xRtUdGRl5rChnfJqbgPzshSBupe/cT4ayw:iGSTRyEEzfGTZ
- TLSH
  T1B4456B41DAC284F2E875523060EBE337BA36560B7B16CB43E798FD327912351B5162EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  client/html/js/all.js
- Size 3KB
- SHA256 623f0f7a83fc85201e227cf62c7a341dee2b1b6c9ae8225f04775c38960c886e
- MD5 314e50cd72c7a2dcc84e6765d83cbf9a
- SHA1 727be6b0a53f50d735ede83f9f9b951cbffb5abe
- SHA512 fde7ccef8e77af2624f8cbd1e781c7201e50b9715f36be3047d647aac09ea356cba7804c7b0a174ac534e0dd0e817ab245d6b2de30db9874d78376cd22a0c048
- TLSH
  T1B7713F88B15A543C44D2337B5C3F8080FD3F8816E807A6B6B66D48A83CA47772376A6D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  client/html/js/echarts.min.js
- Size 759KB
- SHA256 78aaf1e8bcba6f446c731fcf4a6e76ac9b2f2bbe91272bf5f13a2cc2af8e2d2b
- MD5 ac0a6635af3e1dfc631a76ba57521cf3
- SHA1 49edd78f26111011a8033a3d84dd19ed71343d54
- SHA512 1065b23799364e5e642f02965af3ae426aa5e224a5812c69d8bec617bc376450961873f653c717601f0bda516bf4988ab2ed78fafeb1f16b40296fe54e6a75e7
- SSDEEP 12288:RyJBko53nZY9HiNuOCBSZtYFaBUGPGASEtTrw4VGMK:IJB/3nOVi9CUZtYF3Gu5EZrw+c
- TLSH
  T1CAF409AD7244742642E33175147F150B92372849B50B8998FA7AD8DAACBC58F323BF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  client/html/js/html5.js
- Size 2KB
- SHA256 78192a27a876458e69dafe5af3a2942cdfe83d08ff976cab3a3c416b2c665513
- MD5 5f04cf933b277ead2877d4009f9e98c8
- SHA1 c646260fd6c614b30616fc40a2f09a73c81e913f
- SHA512 b2bdf37e1d514887d9335ff2007a93f2823693dda2bb5f6fff43676b4ce871a1f68fc2bdad8a4510db2c71960dda2d8cdc7d9263cd5500791211f204ff191b10
- TLSH
  T17051B5D5B052A1454767209F9ABFA30BF1B81262A50C5060E49EC97CAE74C78D3BBF4A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  client/html/js/jQuery1.8.2.js
- Size 91KB
- SHA256 66d90e5e13ae94c17031290690e477df30e56e72eff21a0c8e102bebc80aaea2
- MD5 61551013be89774882ceee7d71cd8bdb
- SHA1 d3663481db6e4ab073c63c446c97c92ee7d775ba
- SHA512 bfdc38e66dcc5fd19c24926353a95d91264d77a0bac64b91f0546e79addb6f1567251ac9630fc480f681bce54645f6eb9465919f318ec1f4d81da9944fbaf603
- SSDEEP 1536:4YUfBybwh3K7I83RExoulFXo7CkSsz/G0bSVze/3260eMSTC5bqYKKhwFvxizJSM:sIi38IP9kSsgo/ZvxYrtPTKCNtHyUtCg
- TLSH
  T1FB93E7E972D6716387B730A850AF510BB13698E6B80C8C60F058D9E47E74E4960BBF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  client/html/js/prefixfree.min.js
- Size 5KB
- SHA256 02ba4fa1671c11e664f30bc31b6152c1645710cf13c61ff79d1c265f1f10fef7
- MD5 da907d601e71d6ae4fe52d33972e448f
- SHA1 e2b128b4d5e8e67ac604449ec6b09c170cb1a1e3
- SHA512 0462eab0905a98f7a3bd60830ab950795ee4d769bf03e203a76a02b0f906fb438f6be85845174d8953389ee60d4fbe4c88afaca6ee31bfeee49af33c76b1a9ea
- SSDEEP 96:Ys1chmB9raP7cgr/9jG9zMbfaQa05SiEuoM+P2pWodxZ/7spWkanK3D:h1chIyP69zMbyQPM5pMU4vnAJD
- TLSH
  T1F8C1A639B11DB923479220B5559F350BF16B98127B2A8934F229DC397C7C78900ABF6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  client/html/notice/po_notice.htm
- Size 2KB
- SHA256 abd392ecfef39e995339eead5d8835bdf2866d75eb64fb35187e7fa34a927e3b
- MD5 e819006af6cece84913ded399110b283
- SHA1 72dc429ad7ede7ca3c69c7171cdf21023a85ff33
- SHA512 4c9a882d3df20279305e256010dd9b6094bf2a7e5f1b176e3b13ee47e8073ccf679dbade30bf0f6ea7f085e9b204b9ec983f845c8f5d39af9273a49c92a70ffe
- TLSH
  T17A41D11AB384BA0D34B73127EB359A90DADFF85393440979BD5F56330F65089622374C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  client/html/site/t_ent.html
- Size 3KB
- SHA256 eaa4193e205905c4946437c4ad6d14d94485f02920b59f40cdc2cd9f2d3d08a8
- MD5 feadcc689f02662ea09424fae7c4c4d2
- SHA1 1c0a521533890a165c9620c8bcd4854b61779f6e
- SHA512 c34e2d8648ea7259463799b39da4469c4c119e57ad0f038616e0bb377fef2d303f7a0e9f90566a7e2d27510a63d7421063c48208a349e6773118116647b88434
- TLSH
  T1E771DFA4E8AEAC378133D2D5D4D0DF5968DF4EA0D73144A9E6FF8A3503CBD88780A456
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  client/html/site/t_ent_goods.html
- Size 4KB
- SHA256 ccded20328af1537afa3d21c2ea801eae46008346a293052b795a68933b9e556
- MD5 d7bcd6dd2549566f5b055946d2b065a2
- SHA1 d4c8c3aa46cf1296f0ff4e2e00b0f2beff98d622
- SHA512 2f5011543601956eaa6dc74f07c019ae087a27f8e6b66c805792563f717aefabac53b826b3778dc4dc2c1d8cd4f0e9c164e897ad33c65d095797995ebb73a4f4
- SSDEEP 96:bBsn4r+91ZqTyADJp1FprelVqJ6ZooJ6Z4SbJ6ZOW:bB7UcNer46SO6KW6AW
- TLSH
  T1CBA17774759EB93A8133A2E7C4B09B59E8DFDC60E3210869B5BA173727C7E487807426
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  client/html/site/t_ent_top3.html
- Size 4KB
- SHA256 7eedfd3f7f7e1acadd50f5b6b7c37f597bced9a5d9707004e07bbd6142c63e49
- MD5 f0f920ab2e1ed8b152ee612230ba589e
- SHA1 11b9b58b7866f5f4073eda22461108dab0e3b2a4
- SHA512 61a25cf69f0ddf02814daa5a43253bdaedf5753931b4ce2ab5a368c806fcf04a08cd3420996a70171d608dccef38ace32ef90e0bbfca73562e019ec5adb32776
- SSDEEP 96:bBskx1RqT/A2JpThFpresnqJ6ZooJ6Z4SbJ6ZOW:bBHTMeU46SO6KW6AW
- TLSH
  T1F891467475AEA9368133A2D7C4F0DB59E8DFDDA0E3210469B5BA173713CBE887807416
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  client/html/templ/BOM二维码标签.html
- Size 947B
- SHA256 41fb406e8893100ee47528ef9313327c7b2c83ec849bdb3fb4a47750f6fc3af9
- MD5 0254da68887b01998763861a43facc6d
- SHA1 43ead2fc01b1590ae9eb2d5146d7fb60511fd671
- SHA512 2196d77c6d062e3acd43ab8762ae44e721787eda51745b389ac62593fddff45c67133ad8b8320038fb697925e28231f2b8e8c108b0f785d2e350ba8c2bbfd149
- TLSH
  T1581154BB2B8D1D2E9363BB307873B848CA5F0892E21908446080B41B2CC811ECAD30F8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  client/html/templ/客户标签.html
- Size 1KB
- SHA256 ef19c5b8fbf6c38b7a1b7fd1de0afef174f50a83e54d3269e691a9edfffdbd55
- MD5 be55e8bc7a965100e3293088f68b5d82
- SHA1 f4d440dc9f8364fbc0bc009870b6148bff2185f9
- SHA512 d7f63677fe470a99fcf85bead60d6c33b3d5fbb6d9593276b249dd362da830364f13dce047056c8aac33489f5adaa14b29b8836e1113c2955daed61d88afcb38
- TLSH
  T15821127F168C6D2FB6A3B62479736C04DADB1851F3650A2C3E43A83F28C5505A3D32B4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  client/html/templ/普通条码标签.html
- Size 1KB
- SHA256 2ebfbb952f68f274a7eb877360cc39533bf610532439b449bef59906360093e2
- MD5 a51a20e3de08f883313e9d48ba950c67
- SHA1 5726796a7d1862539772512169dd7d2d08e07eda
- SHA512 1b7421a1d44c6828179dc7508a5330d6a8b5c2d854a191330755ac600e9f1ee1e3a4487e3719bc4c9bbdfacade4d706f94202ff32123b121393eb2b344fc6843
- TLSH
  T16721117B2B8C6E2FA6A3BA3079736C00DBDB0852E26505183D43B47F2CC5519A7D32B5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy