d1c8fd55f0279851daaba35338e63cf562381a57702ddc49fe411984d9d06004 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

Payments/SwapToken.js

windows10-2004-x64

3

Payments/SwapToken.js

windows11-ltsc_2024-x64

3

Payments/transfer.js

windows10-2004-x64

3

Payments/transfer.js

windows11-ltsc_2024-x64

3

admin/cards.js

windows10-2004-x64

3

admin/cards.js

windows11-ltsc_2024-x64

3

admin/index.js

windows10-2004-x64

3

admin/index.js

windows11-ltsc_2024-x64

3

admin/ira_requests.js

windows10-2004-x64

3

admin/ira_requests.js

windows11-ltsc_2024-x64

3

admin/medb...sts.js

windows10-2004-x64

3

admin/medb...sts.js

windows11-ltsc_2024-x64

3

admin/phrases.js

windows10-2004-x64

3

admin/phrases.js

windows11-ltsc_2024-x64

3

admin/swap_logs.js

windows10-2004-x64

3

admin/swap_logs.js

windows11-ltsc_2024-x64

3

admin/transactions.js

windows10-2004-x64

3

admin/transactions.js

windows11-ltsc_2024-x64

3

components...min.js

windows10-2004-x64

3

components...min.js

windows11-ltsc_2024-x64

3

components/confirm.js

windows10-2004-x64

3

components/confirm.js

windows11-ltsc_2024-x64

3

components...nge.js

windows10-2004-x64

3

components...nge.js

windows11-ltsc_2024-x64

3

components/history.js

windows10-2004-x64

3

components/history.js

windows11-ltsc_2024-x64

3

components...pto.js

windows10-2004-x64

3

components...pto.js

windows11-ltsc_2024-x64

3

components...ber.js

windows10-2004-x64

3

components...ber.js

windows11-ltsc_2024-x64

3

components...ers.js

windows10-2004-x64

3

components...ers.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Worpdliberty.zip
Size 4.1MB
Sample260907-w3bjpsaf58
SHA256 d1c8fd55f0279851daaba35338e63cf562381a57702ddc49fe411984d9d06004
MD5 fedf914071d2df7b69905594985c0f55
SHA1 b737d91041ae1b15c86063e4effa3632236d68ab
SHA512 07eb2482a5b2592b63fb01e8e7563eebdf6b4edad80a412820817bc0eacac19edd724d99fb27fe16c8d5a7da58aa775c38f69f68467e3ba9cdbda21aaf07a128
SSDEEP 98304:UJ6t0vAUgSytpN2xu84aR+1jZH5c/fepjyfgIsOvp++gWPupFkiAkv:6MGpDytpoxu84akKmp+rsYBPu4iAkv
TLSH
T1D91623B4972419CDEB4E9E381237038700DE76BA39709669196C1B54AE3B5843FF3E4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

Payments/SwapToken.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

Payments/SwapToken.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Payments/transfer.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Payments/transfer.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

admin/cards.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

admin/cards.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

admin/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

admin/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

admin/ira_requests.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

admin/ira_requests.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

admin/medbed_requests.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

admin/medbed_requests.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

admin/phrases.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

admin/phrases.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

admin/swap_logs.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

admin/swap_logs.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

admin/transactions.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

admin/transactions.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

components/axios/axios.min.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

components/axios/axios.min.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

components/confirm.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

components/confirm.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

components/exchange.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

components/exchange.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

components/history.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

components/history.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

components/input-crypto.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

components/input-crypto.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

components/input-number.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

components/input-number.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

components/lib/adapters/adapters.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

components/lib/adapters/adapters.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  Payments/SwapToken.php
- Size 4KB
- SHA256 f0a5709c6e2b669a54288b0c09cae36b3113e0c3121afd70d3a62f754e3fb6be
- MD5 23c22cc5a3380fff79d628347e62852a
- SHA1 b6f1c1b5b17ee984373f9f2eb044d279a6dda5bc
- SHA512 f4205b915d0f01165864c8cf845c6420d742fa3ce8008ada42c066843ecfadb5547660e12c8e2e0306806d3f52e6951d78952d997e94de37702e7a5ca19fb72d
- SSDEEP 48:f2RzjyJVp1I9yDX/fQa1Dwj0eCTvae5TaouK+gA/Htla3R4K7R2TXLB7T4bh+lJx:GCzpYm/f2Q3vae5T5IjajROV7T4b+x
- TLSH
  T15DA186D030D3242349B79A763F017829F6D9811B124A5242BD7E83C81F71BA995F6FBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Payments/transfer.php
- Size 3KB
- SHA256 94bffa03ad0920ac4c11e09b756fb04b01e4d0e4b303868740d07daa656e1a24
- MD5 432f7062c0e7869472b015162808340e
- SHA1 a13073008f5b36420a81db6a6ba2d925691580c4
- SHA512 3994865c1e67ebb0a58c5a0f4073554bc54903b585f9f8c7f6d4e71c9e55daaebc80599b1cc9db1e595c8b17e6fd5274393263bd975e23e4ef5247d32b5b54cf
- TLSH
  T16C7160C13096465199B6C647260868BCE5F69217C3A36782BCFEC1100F367CC6CF568E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  admin/cards.php
- Size 12KB
- SHA256 fdd9c661806cddb4a5d38b7bba97bdc45f313eb0a244a85e68b268634fdb90fb
- MD5 8e7eb811280acacb96293b2b5e480e67
- SHA1 f9e6c32a0bd4f211be352c2e8d5142c70b37e0b8
- SHA512 bbc39460b5fffb8aacd774cace75570bbc26c4c20bc27979ae55021f865567bf931c201d356c0d66ec87c478ca8b195de045c61728c5b0d35a26076af56a7e3c
- SSDEEP 96:Ze4DqOzIi1hI5/83E7DwHA4pig4X8nkJRonxnAvxNFhHTUZL7GxMUZ+xZ/WWo:tDvcH83E7jKFaRonxEjzUtNUoPo
- TLSH
  T1B842839621E0223749339673C742AE25FF594213ED839526783D93870FFACA58D87B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  admin/index.php
- Size 26KB
- SHA256 b4b15cd0b893ff48fa36dfb3dc32700bf2f94caa75975e8fdadc0c54fde65cc1
- MD5 f01b3836975f1a155ca6f04bc386427c
- SHA1 8915155a3e673e84525a5fb5a3db2fa2c207caf3
- SHA512 206b141155acf43a0843dded3ec1dfe866db28799ff3270be077455f72072fe639e769335138b54f0a464d2647189639fc81037528b02ab66e43a28a1477191e
- SSDEEP 192:Qo6wTsE44EPWK5NoGZdJbrwZAGRXpVYYUsGz6+m9qFGQxIaiYXP/aQGUc:wz5PCC6b9qF/IaiYf/aQGUc
- TLSH
  T19EC2735531F1157E0077C6A2EA666F64FF59A313EA439438B4BCA3A71F72C10DC4BA88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  admin/ira_requests.php
- Size 13KB
- SHA256 ac95d6f2bf55af8574f5f524f020e40fcb0dfbd388f0a63c2135909a643af201
- MD5 bc52fd5a004083424e5aa028f2e4d181
- SHA1 b60d4d3889544a744fecf41254ea7c701f7a08de
- SHA512 e3912289260faf16eeb20673214b9a4a91db888fc4796e91ff43609379e6977eeec2a3b3b5332639015fbe85c16de530719bbab0629fe70fd7c1f7d93585b14d
- SSDEEP 192:bFp9j2cGPMc3augo/sjinBgZaX4bHAt4mH2URLOrgUObjmHGrOvV:JycDaPnBgZC0HAGmWUUrgURX
- TLSH
  T12652739635F51277455390B78B8B6E163F69500BEC47EC38791CC2A00F89EA98CDBB8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  admin/medbed_requests.php
- Size 12KB
- SHA256 ade232db799aacfce3ed2b97650d3361311515a81370594df3f6cc5b23659d60
- MD5 bf429651a137af22a1ebd608b4991722
- SHA1 9dc42623082f5710a654de8291f8eefbae01d424
- SHA512 3d79ae9d5e4c755435c8cc4f5a7c60928c06b3ce60de26b8f81c6c9cd429ed876e5032698e0eb9defae96546510a8b24abc4df299e485496a2ae3cc0af44f8dc
- SSDEEP 192:21CwUsNlEMR3378mdoqF2LhFRYnDw114Vsk6:IJppiqF2pYnDw1GD6
- TLSH
  T1E442219620E0263E41B34673E2527F29FF598207E987A965757C92C30FB5F648C4BB8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  admin/phrases.php
- Size 10KB
- SHA256 4a85ead81997c86bd8d2214003f4e207ece6ac0982e1ad3a03630b3b36cd822e
- MD5 d784ad61f7b8f56ba57e3186cf027ab1
- SHA1 f94531bdddb8b2c11808fc2d6a5684980560dc8c
- SHA512 85ed2a10522bc551e3b61d58b01f8b88b343fb9f064ef88e169b2952e35b1540a8f7db81b858d4a3290a6b27bf5b7eb2f7d47f3827976b27417c33ce538c3402
- SSDEEP 96:3TqOqvPKiaGrWNH8ncs+12VXv9vf7q/gRonfxvE74XUNZOuXMe69XcT5uGGSUZ+x:3TvqvSG1c+jvfG/gRonfS7WU6TiUhPo
- TLSH
  T1DA32519622E4123A40735673DA62AF68FF598207D543953979BDA3C31FB6C208CC7ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  admin/swap_logs.php
- Size 7KB
- SHA256 bb16525db367ce7ea1faa30fbdcbaf0c45e42c8de4bd8b0cfe80e38d03c3a74f
- MD5 32c57f6744fd9d9e52f6b1dd8622f793
- SHA1 f72ec4ba92778e8f6b675790b6fbac6aad3eb3a3
- SHA512 d3e55933f284f8882a29d1cdf9d8392c7a03759f6368040532809de185987398e457fb0db87783f1338de66d55a36d77be069a618216f04d2cc8342b3e841155
- SSDEEP 96:vSgkO/3uia5+b8nGRon+/avF2B3dvQFUZ+CsC5k6:vSg9PuGoGRon+/W2liFU4sk6
- TLSH
  T1C5F130A635E4213B053396B7D752AE56FE5A8103D943442678BE53870FB2F248C87ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  admin/transactions.php
- Size 15KB
- SHA256 c90ab4e60ca6d621f83ca0a46ea20f442ad1c736dd046e105cc51e77a50226cb
- MD5 68bd5fccc978edae682420d054e15537
- SHA1 d5e949aeb52ecd274a4482072c323a0a4df84a4d
- SHA512 cba661242257f99967cf6dedb490cb0479379739fbfa1aff725f0ab0914d38db0608943cd8a3981989a659e91919f28e4c9c5fc610b5f2806842bb81e977f6e3
- SSDEEP 192:FB2rCbV/a3ubJRCm9qFGQxIaitXP+pAUZ3sUd:BJnnv9qF/Iaitf+pAUZ3sUd
- TLSH
  T1D462418726E521364933E276C7929E29FF4A4217D84389363C7D93831FB6D649C83F88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  components/axios/axios.min.js
- Size 31KB
- SHA256 b9ecabaabf25f2bbceb0c2eabaff77ed61f69c29ce551b1a8ac7156f87108cf4
- MD5 dc2b008d6a9118a0347bdc329ba260ee
- SHA1 91ac309b7d7d5ba99eb481f29ac01d443ea92f5e
- SHA512 6a84cd9ea65c4fc0780267821668929c395ce0d8ff28f699c81e46ec99ce9d412474da4266cd4b09a9e48988b4d6c2d3c96cbe9b63fe5b85ccf81b90dd0e3f0e
- SSDEEP 768:KCxQhyOsbrQqge5QX5/tVKuzTGIsCRZFmLG:5IqFuXVTfpm6
- TLSH
  T1BBE20AC9B6D1B072136770B5406F250BF33AA926A48D88A0F120ECE57CB950E9767F7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  components/confirm.js
- Size 4KB
- SHA256 19638a2ea6801a00247319caf5b833280e2f12b3cc9be09ef4e2ada4ad219ed4
- MD5 c4049ebd370180199611bc78ce583434
- SHA1 6f1648779ce0ee8b2cb4595794538298469144f9
- SHA512 2a125e7fee5dfea6dbdd663984cde7e32172b473887563bacdf5e82d07b33802100a343078ae3a1da91a909492b4a29c9cb912fec7d43e55526166f3d7764f61
- SSDEEP 96:A/24h11EUFusELg2nCrCWUcZ6G8XWXzuzEH8zZqFlR8KNhb1xn:V4hMUStnCr1Z6G8GDvXNhb1xn
- TLSH
  T1FE912015A78E545A101270E2656813C670AFDC33DD474CEBFCBF52A0EFCACA409AA66C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  components/exchange.js
- Size 10KB
- SHA256 724bf800ece03c3b969821317445a99063f02d9d46ecca7d12aeab583a83f2c3
- MD5 4d29c3cf9ab5408604ef48105020c2c1
- SHA1 27e8f1ace7a67a561eaf9365f19e0844decdff97
- SHA512 49e8f11a3325ded9474b55070585f4811d1c25a695b8ebe423b3ce64a80a301d969e29f6a9bbdb7907070adb5a3e8c77cead1baddba47458518e83b4a5fdb2af
- SSDEEP 192:OU+I3Z6XnRkdAcz3dpI5UopTrCZiGX1MT0C7J3jfbl1EXt:OU+YenR0A+X1G7J3rbl1EXt
- TLSH
  T1DF22C805BBDE8412316514A2AE291285B07D9833DC46CCDAFF9D81F4BF85A5A44FBE3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  components/history.js
- Size 13KB
- SHA256 a6607abebe32a4a820c0f876680ba3b39ace9380521242cd7558524c02c649f1
- MD5 b6296f55b6f8eaa38411531c6a2006f3
- SHA1 1e7b993feaf3b4959a1f06da4ad0d771b76e7871
- SHA512 0c95c0c042988c2c5dda4120f34b8679a472873ea86148c9f28d56c32a7a3f7271d543a1e65083605e5e625fd21ec74c6540863efccaf135ef1638028cde7a81
- SSDEEP 192:OFL9azVdMNAJgx9v1DHgBIcFqmpaNjmvBae4k0aMAAuzt3QHgBK/:L4NAJghgBnFqm80aJkyn3gBK/
- TLSH
  T11A521259B186501601B3B2B4DF620349FBA6A513C70781587EEC53D2BF76C24E9A3F9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  components/input-crypto.js
- Size 5KB
- SHA256 12d00fcfa4cf1d41ea6524e1ea5dd8846b6116048e1e64a78bff3d7e0f268a15
- MD5 dfaa23b6ad54aa9ebc51fbf0bcc98694
- SHA1 ac99f11089d8c545811894184c8f7e11f1aad181
- SHA512 9f6e07ff0525279bd7887ffcff79e20b77b67540b1df9663551731ab965762cbee60e3f51e95708307b5cefc9d8673caf826e8a23686579330ea3a3e442d35eb
- SSDEEP 96:AoGcuWu0AOlltpz4mU7z2023TFdbZO4KbKdF5mHxCPrHYIHgyYIHUIK7YgbCOZ3b:huWfAOlltpzxapILbI1WdFcCPrHYIAyw
- TLSH
  T12AC1DC95FF1D85CA42B851EC456D21C69E7C86B78C8588EFFC4029D49881E1EA3FDE38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  components/input-number.js
- Size 5KB
- SHA256 0258d53c6404ef3f615f7f0477439de65ee9ab7917527a39ecde2736feaf21ec
- MD5 491ae60296443bcf7a345b8e6b6700ad
- SHA1 9dcb5802a93f7128cd5f2696294fa0012041d368
- SHA512 4fb44413ad383b57ebc3b01d4ab3c5a63f067e9fd7ba2ae32bee763f65ef683a11c2e7960a9852d72184d3d8f7c175eac80e4cf647546fd256cedeae85526a9d
- SSDEEP 96:AoGcuWu0AOlltpzmZcU7zE3TFd3ZkzBb4qF5mHxCnZvZYIHKBYIHU44AYgTC/ZvJ:huWfAOlltpzva+L3M3FcCnDYIqBYIdRw
- TLSH
  T1CBB1AB95FF5D818A02B851EC866D12C69F7D86B38C8548EFFC102DE49581E1EA2BDF34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  components/lib/adapters/adapters.js
- Size 1KB
- SHA256 f90139be95f13627343c6a99328b382d43a782324f8f99d7aba929caaaa62aeb
- MD5 d5b9bca77ba2c2f725271e71298c9d8f
- SHA1 b593a954021ff92eb362acf0d122ae0cfef20cdb
- SHA512 e9f175716328bf9c8b9892b00bc4b03933cb4516fefaa80e073a44e8e8447b7d8b856a2cdc1f124beac1ab014b07224dc33625e44cc7c5f30d0d0bab2d76236c
- TLSH
  T11C21775455F70828C21B28AC079BD230F275E567719C6E63798C071EAF870BCE7A5A94
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy