7cc4ad608b683083c277052c50566de20fee31a59b6bbe33893d3da5cfaf352e | Triage™

Login
Reports

Overview

overview

3

Static

static

1

app.py

windows10-2004-x64

3

app.py

windows11-ltsc_2024-x64

3

mailer.py

windows10-2004-x64

3

mailer.py

windows11-ltsc_2024-x64

3

start.bat

windows10-2004-x64

3

start.bat

windows11-ltsc_2024-x64

3

static/app.js

windows10-2004-x64

3

static/app.js

windows11-ltsc_2024-x64

3

static/motion.js

windows10-2004-x64

3

static/motion.js

windows11-ltsc_2024-x64

3

static/reviews.js

windows10-2004-x64

3

static/reviews.js

windows11-ltsc_2024-x64

3

templates/index.html

windows10-2004-x64

3

templates/index.html

windows11-ltsc_2024-x64

3

whatsapp_sender.py

windows10-2004-x64

3

whatsapp_sender.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
WONADS-WhatsApp-BulkSender_FIXED.zip
Size 32KB
Sample260910-amyhmscj3t
SHA256 7cc4ad608b683083c277052c50566de20fee31a59b6bbe33893d3da5cfaf352e
MD5 8944600d9e52c38d1a317289a0972280
SHA1 52df4687a33c5219cda2df43c4acf8278158b08c
SHA512 e9d0539eee6d167cc8db3125085d65dabd732e7de09e232caa93313dc6b44b626d9c5e898d58ded6966ee3e1f96aba95e0be13644bc05ff7b4007a35e39335c5
SSDEEP 768:03om3FofaKttGDIhUGM3ulMGHsdqQVSUjHLcnTyA:d3CstGDog+yGMdqQ8Uzqj
TLSH
T103E2E0AEC0E3C356FF25763C9CC914837F17D703D984D2A9CA66102AACF31B5A359159
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

app.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

app.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

mailer.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

mailer.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

start.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

start.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

static/app.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

static/app.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

static/motion.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

static/motion.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

static/reviews.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

static/reviews.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

templates/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral14

Sample

templates/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral15

Sample

whatsapp_sender.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

whatsapp_sender.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  app.py
- Size 9KB
- SHA256 7e8dc43b073adacd629c67d0e2549f24bd0449861ee0116bb383cd6646081c5c
- MD5 156a16667db7f774d0de9a2c4fce39c8
- SHA1 7c4de76bac8b591c5cd31b3aec25d58149daf95d
- SHA512 886065aa09099cb0c190fd87b2c3b22272a350bf1540d1a657511fa7fac056294aed1ec7ade9bcbdf8cae2079029ac5dfda2cf20abe013442f598ef4e61ba5a9
- SSDEEP 192:6mnfPXAy6JKfw6hGYkQLnpuTWIw0P064fN2aLV8YT6vT+P1zphy3o88PIy:6m3CKIV2powgzeT5ttx8cr
- TLSH
  T14112D619CCA92CA2C3A3D204AC518586FB3B6C579B199874F98CD30C2F0D4356AFCB9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  mailer.py
- Size 4KB
- SHA256 d4cdda82bc478b4b59b18985781dde64a098f3f88cdac07ba404c8ea56c54dcf
- MD5 9415542f270ef710967d48a17c556c94
- SHA1 51628a9b14139bbe453b1ca27345bfe123ee5390
- SHA512 2e37064dfec7834592f173e53646a35aa76d2c600ae11fee5c6dbad17fe4657a03ee63ef5c4d12a0fc9b72665b3dbf1c6f342f03bd23a104512a6ea621c6d281
- SSDEEP 96:ZrDdUYZ2jgBQS1T1H1iU+4oiv/oj12P2f6YcqLEiCIq2eds2P2NR1ySlMbulM2ve:ZHdUlRS1JyLi4j18j7eEiCI9eds8kyS2
- TLSH
  T166A19832C6AFDDD08383535D765BD0907F2516271A1019197CECCBAC9F19CBBA5A0E78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  start.bat
- Size 598B
- SHA256 f641656e956a725760e09ae8a2304ad7f7f79122574369840d5a47e0bdedc042
- MD5 8f60b9f204db5c99f203d293d6a10113
- SHA1 c4f8e1170554fc486215db755ed99d5d1ef0cc84
- SHA512 6f35465d296666e5dd66e4aa546c4c0a0c78e589573559e81b7ed69d86cc348e20579ce524d7ef9f4ecdff801ed6d2f086ea6f32535f90a7702994459ada4756
- TLSH
  T12EF005077150B134AC2960C4C96711237FDBF05B53139F5681C311210C1EFEAB39E584
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  static/app.js
- Size 6KB
- SHA256 047ed83020e52f5ab18a3180e3ab8f547794a43f76ce2a9284ef090626a3599b
- MD5 a029995dd8be0cc8f1886cc76242e640
- SHA1 726adecb759b97435882aa18ef4f9d96279f2966
- SHA512 c5cd601dc85c1ab825cdd215d08b14a4ec84abaf607a699616d32edd3263775cf83a915e9d2d4c4d4bb205acd5bf59974f76f20f0b180bd479a7ff99bf675f3e
- SSDEEP 192:APCEy8OMVEjyJPfZR7lV/PlvxJnDDZneb:ICESTon7X1vXP9eb
- TLSH
  T1EAD17424BD7E1C3705B3C17AA79B601AEF398407A646D894B54C51CC1FD9E2480FEBE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  static/motion.js
- Size 2KB
- SHA256 97721a0218770d5b5e6172f7e12ed718e798cee39260b7c53bf33c6861f0a7ee
- MD5 78dbb282e9a1dabf5c930c0921b592c0
- SHA1 264b20778232081df71c727c4d92a6e7fbeaa511
- SHA512 593c9bae5f2a001b365cb180e6024047c902a08ad73686eb387d43866a40a03078b7f406e01d4207115fa97587015455c54c3389aaf00db675c07e562a08dfce
- TLSH
  T19951520B2DF224354073E27D5757970EFB3690233805ED5A3A8C92648FE1C7646AE6DA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  static/reviews.js
- Size 5KB
- SHA256 aab599f348acb29c4aa21c65f834db95193d071e9c0159fe0d4fa280c3c7a6a8
- MD5 1c1f93a573b8623aa00e88ede0e745e5
- SHA1 3c78c16cba881f82bd17fea78eab1145d60caf70
- SHA512 8d7819162ef3b695832b3da285de6c9ab8fcd86f0c9f56d64e940a9c417df9a63d66b16dd69ad7672fdcf34fcae3760b75e055fd420ecdc1a3313ea535ccbc25
- SSDEEP 96:FlBjHA3vbG0xVADqy9qjpESSJWMwlJlUAb3cCGyaK5ohSVyWlkNg9efFzK2pl:FlZHebfyDqkJWMSJllsCGytpVlkNg9ox
- TLSH
  T146B1A67366F425360BEA6131796F4F637A28825C6A52641AB05C802D5BAD83E9F373CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  templates/index.html
- Size 26KB
- SHA256 7cfb04c18c4018095dcb0f9114e9e62bc56af4c37f61814e43048530e552e225
- MD5 3ba4a8b92b2dcb44d9db85bb4da2847a
- SHA1 dbc47ed586b05ed2f7ce7e0956b42c8cf3477e08
- SHA512 e8c593289a489192c076f99770ef26ac023fdf8dc9362eb3426dd7cc995a56712c616fb12461cc1e7e769857a00b70ccbdd2fa791538ceee7082df4776c74958
- SSDEEP 768:MQ+v+EDvwlvZdxf8sMaRXhvjSEzYyna/wDFym93Qhb42Rh9oVtNPFDUk0fjTIUzV:MQ+v+EDvwlvZdxf8sMaRRvjSEzTnw2wn
- TLSH
  T12BC27372E0F1953B029381D2796967277E92C157DB4A2619B2FC0BD80FDAF81ED0768C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  whatsapp_sender.py
- Size 14KB
- SHA256 64faf743c5647cd8752b3da258c13fee22b8c77d03686216b672012b3dad3db0
- MD5 1c927aad9f95bd60f31fcc505643a141
- SHA1 3c733f4e402e75e606f6345b0af7c84cb6889a20
- SHA512 0db9aa0c1a6e9fc3ab80f85c370072d136bdb0fa6dca92b6ba378e0de198b1838b03c3efa1566896931bff87f7f261d592b0d2d1be4c6bf6f7804573b7d73c4d
- SSDEEP 384:n9WhYno+MHj+h0z4xAzetEZGZx+7DyIQjY5AWmjtl6:n9W+oFHj62vetEzkYkjb6
- TLSH
  T153628622DD012E7AC2A3C4673ADBF0C3E70A995B4A445576BCAC828C1F9543492FCFD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy