4a63b9850cdecaf6062fb164b347444a8dd4b5823673caf928486d3e57ec52a3 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

SimpleXLSXGen.ps1

windows10-2004-x64

3

SimpleXLSXGen.ps1

windows11-ltsc_2024-x64

3

admin_auditlog.js

windows10-2004-x64

3

admin_auditlog.js

windows11-ltsc_2024-x64

3

admin_dashboard.js

windows10-2004-x64

3

admin_dashboard.js

windows11-ltsc_2024-x64

3

admin_forg...ord.js

windows10-2004-x64

3

admin_forg...ord.js

windows11-ltsc_2024-x64

3

admin_login.js

windows10-2004-x64

3

admin_login.js

windows11-ltsc_2024-x64

3

admin_panchayats.js

windows10-2004-x64

3

admin_panchayats.js

windows11-ltsc_2024-x64

3

admin_paym...der.js

windows10-2004-x64

3

admin_paym...der.js

windows11-ltsc_2024-x64

3

admin_payments.js

windows10-2004-x64

3

admin_payments.js

windows11-ltsc_2024-x64

3

admin_profile.js

windows10-2004-x64

3

admin_profile.js

windows11-ltsc_2024-x64

3

admin_reports.js

windows10-2004-x64

3

admin_reports.js

windows11-ltsc_2024-x64

3

admin_rndusers.js

windows10-2004-x64

3

admin_rndusers.js

windows11-ltsc_2024-x64

3

admin_settings.js

windows10-2004-x64

3

admin_settings.js

windows11-ltsc_2024-x64

3

admin_tick...ers.js

windows10-2004-x64

3

admin_tick...ers.js

windows11-ltsc_2024-x64

3

admin_users.js

windows10-2004-x64

3

admin_users.js

windows11-ltsc_2024-x64

3

admin_villagers.js

windows10-2004-x64

3

admin_villagers.js

windows11-ltsc_2024-x64

3

admin_villagerview.js

windows10-2004-x64

3

admin_villagerview.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
divar.zip
Size 1.2MB
Sample260910-apq7casgpa
SHA256 4a63b9850cdecaf6062fb164b347444a8dd4b5823673caf928486d3e57ec52a3
MD5 1671b6fd37e526f801d0e798e87eb80a
SHA1 c27160b877d5fdc9319a20f4eeb664bc2a1804f2
SHA512 8968c0687a9367c4821809cd58dbb6a03c977d0ba9e9d9a1a429404cefccd3d400857133f5dd302b96a685010f75a75786a03d1d29cc56b528a2c10e3791ca4b
SSDEEP 24576:5b6F2L0BW6XMK9RwO9Sj0oK3WYJhjMVcWkDNnhmWiYuedLDyyDZxH9:1S2LA/9Sj81DjMCtD7mpV+nd
TLSH
T13C45235EC61F8A07E6697CB18DEF2262B947999033F1B0BF0A18A1511CC7576BBE3341
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

SimpleXLSXGen.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

SimpleXLSXGen.ps1

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

admin_auditlog.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

admin_auditlog.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

admin_dashboard.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

admin_dashboard.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

admin_forgotpassword.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

admin_forgotpassword.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

admin_login.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

admin_login.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

admin_panchayats.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

admin_panchayats.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

admin_paymentcreateorder.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

admin_paymentcreateorder.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

admin_payments.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

admin_payments.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

admin_profile.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

admin_profile.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

admin_reports.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

admin_reports.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

admin_rndusers.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

admin_rndusers.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

admin_settings.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

admin_settings.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

admin_ticketcheckers.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

admin_ticketcheckers.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

admin_users.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

admin_users.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

admin_villagers.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

admin_villagers.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

admin_villagerview.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

admin_villagerview.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  SimpleXLSXGen.php
- Size 65KB
- SHA256 520e7f767320dcbf05260406b4860cda6d7ad33045ebca71f53358b2af1d5a85
- MD5 692011a64dc3b0ae4bcfb9747866acf9
- SHA1 12aa2d6fff3507ce5fc60a03066f3137015c122a
- SHA512 389c7999a2fa4a3045e04fe26e207b4350b3e61d202b3bd52bc23247360eadd2cd4e4f8f44ba732ae830556ecd27d4b50269b1fe53f5e631488740419be27517
- SSDEEP 1536:U7rJjojxBO2b4ypAdP32nyXTTB/OpKDz1AywURW3wFaxlB2qoT8xrW:UG8KymGz
- TLSH
  T1AD63C659B0A72CF15B1370751BCBE025656E042350ACCD453E9C83C9EFC0A6CDAAD7EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  admin_auditlog.php
- Size 1KB
- SHA256 50f13377d85e02497c3c62c29113f37c9a5f2f261de04e59504080082443968b
- MD5 570361c771c053088a8973fcbb75e305
- SHA1 fa6e697364233cfce360ae2b535f75efbcea3719
- SHA512 1101dd95955ebbb83569464af84d2077df94357264425682e46f30e5a71a4632ff43cee3e57bd363539ad8f52a91f747d795ffbd53edc081cf0eee2ba320f7e0
- TLSH
  T12621D9C339FCA223200608D5D051BE8798C0D01293711DB23E9ED67E8FD6C7A8627854
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  admin_dashboard.php
- Size 2KB
- SHA256 b56fe989fb63d6de56dbdd1a05ce3c774ff2b3049db10a2bca826109c7f9360f
- MD5 645a9f754b40cc44e5b0bc614c19363d
- SHA1 8a74bd6280a50ac87b00a11d80506375ecd82382
- SHA512 fb8cd0f7aa974f851c248c90c34800174bb716b23fb649a40a72056c478329dfb659a07e8e4a0c0b505e03e468815c6f05241eaed41d9172e9c4df36076d36e5
- TLSH
  T1644154BCD6682127996F0CCAA77E475EA6E1F023680BC44567DCCA601FCAC4CFC8B904
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  admin_forgotpassword.php
- Size 2KB
- SHA256 7e2862bd78aed68930d64dd35a2d5c162e6c4cdcb961d850e562a0e4b795df4f
- MD5 4ff3c6107d60b47f921af2d3d89753ea
- SHA1 772eca5744954533e8f01c255da2eb5d4cf4b3e1
- SHA512 5fa6e88dd911f208829e81268bb7662c5eeed994a1678bc2e3b3a90ff36fc505612584d9a3e48172a940ad0884636f0280699ac10dab49a4322108a23dba229d
- TLSH
  T1D8514456B0B11E62822390D094AB5D453690C5034A47CE00BEFCA6E5AFE3F665D73DEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  admin_login.php
- Size 2KB
- SHA256 b664581467c064a8ebfbb7d03e6c853f097398a84dc361d45e02e781a4ce8d0c
- MD5 d3f137b91a96e2a439f693a5c8b59f3a
- SHA1 e692d93325041a6d88f809c7d2c92080fa54cedd
- SHA512 556bd987aeb1dd3759a7659ab6899b5a44d379cb4f4f70b668a65a80ba6465b88e71edebc8492c8f2642f25df1ab82815f34f596575013ded8677d681f9fdb63
- TLSH
  T1C851A55961F21A21592360F468AB68083473C1038616CE14B9FCD7B2BFE1F595E33BEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  admin_panchayats.php
- Size 7KB
- SHA256 1ae24fcaa4a86b272b0bd97889d28d760ebf6a546f336ab2b79232ae4ee6de4b
- MD5 047dae1e0da09be3b2c0b4febff0dd95
- SHA1 2eb9600d75a9c71097a505010a61cf66528a506f
- SHA512 1c06becf4148cd03ddf014da0976af6570f1b51242e0fc3b4dcd356bba559e58627eda6b06c46841924a69ad89842c79dee355e29c1fb681ed88ede056f9d783
- SSDEEP 192:j/SJmE8SSqJj3r/c1nNmmFyyfvJ5qj0fP3Pqf77AxPv:j2mEVjzcPmk7RQCv
- TLSH
  T1EFF14280B1F8F932015308D752ABEA2538E4C5138ED4DD6079DC8AE59FD2C296EDFC5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  admin_paymentcreateorder.php
- Size 2KB
- SHA256 dd44989ec7f140fb97eb405047badd664c9f0458751ff813da4971458a5a4593
- MD5 2de8f444ee385bfa8c91bf87033cf851
- SHA1 d14cc26cc3e952f66ad1fd52279bdb487d1f4ed6
- SHA512 2f6ab12c96aff84a5babdf49430b5133e95a2755d45610a03a3f39c48b45a29e6d8396d18d1eb5a1fbf6420fa10c674a27ba69ec905f59fc5e6110c4192b2c16
- TLSH
  T13551324BF6F7362A442FB4D4B1AFAD84B744C40706055B10FCDC41DC9F809796A96D5E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  admin_payments.php
- Size 2KB
- SHA256 ee2eadfa3861027ec3616f2f6be3ba42710b6abba6c3a994df033aef1c08b504
- MD5 69eb9cc515026bee58fd083d2ce7635d
- SHA1 8a0be2ccb1b543ef53429ec446bb725850c68119
- SHA512 2719cb9af18e38573705210cbd98567b95f4b979d4226d91970b76f5678aefe34207689ca0e1d3374bd03bd778ffe05186a1da2fc0cd35003b33aff46cc978bd
- TLSH
  T1A141EBC174F8A533201B2CE3D1925D46D9E4C11391201DF33E8CC2FE8FA5CB98AA7881
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  admin_profile.php
- Size 2KB
- SHA256 9ef493269d0ac01fdf761bd4f191e946a25df518348b54d15867872c2ffa466c
- MD5 13cac201ead3db10e738df14d4463ca7
- SHA1 69761b361b2f9e5e37a094883b96339bdd0b6197
- SHA512 32a8fee519ac69116b0f4cf3e57f361f7c4362f2331fa0d822460b647ac5d1cfd9bb7812fd45c3ae51aed962382b790c1e4df25da848c712037b5f9b1463d0d2
- TLSH
  T16841457350F06D665259B8C4659248203849C603560A4940B6FCDBED7FE3C830E7BAFB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  admin_reports.php
- Size 4KB
- SHA256 d08197159c6fe4395ae2ccfc8427628187746bb533b78c632d4a5b26cc259c4a
- MD5 35df6cfcf553aa820d443ce5d49f91df
- SHA1 82bc5713b7deb3f0d3d6e201cda2b115b3c664c1
- SHA512 7faaa7a0cae1203d8c1df65d3f2be1fb3b9f76eb10b988ccbb339f2111abb10291e560204b49241a0ea07f37cdb790339034e2230de381aa452a82433d8f90a9
- SSDEEP 96:jTTAAYVQPgS3hGg2xpeq279oHqE/ahPloqcq8agYixtoAIE/aTLbgQTxDqyaDPv:jTTAAYVQPgS3hGbxps79oHqE/ahdozqG
- TLSH
  T1C691B4DFDAE1A52BD44360D6827B43407A34E4037A1A4910B9AC13B05FD9DADA9F3BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  admin_rndusers.php
- Size 3KB
- SHA256 8a0b44b7faaa892463eec8a4a3b6a0a355c87411722c6541e9feb065f6958777
- MD5 4ad8475e0ba17d03183e124f966ef528
- SHA1 20d0d8662ed877c2a6bd86dfc05d7d0b97d11a05
- SHA512 822231b316d4a911f73961efbd81d4a77b80cbdb00efee3c1fa9a7d203918b7aab7c6338d09ff3afcc24cc9ab12b001c5d798bccb762f9ec0da1e5519070c65d
- TLSH
  T1A07185C1F1FC3D12811690E350ABAE4638C4C8038A651D21B5FC9AE5AFD6C7A9A53C6F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  admin_settings.php
- Size 1KB
- SHA256 1831fe0ba854004e3b580cc464fcf637da9729d5cf3ee481819994e7fc8438be
- MD5 e41ca460fee2ad9c2798702849826a48
- SHA1 944733fc37a4fc4a4f66a88fd356363a5b736607
- SHA512 e44d4b4e08954ab80b187ef81ef736719d36d25106159f70028083aeb55dae02f20071c6fedd1d977c9915559df57e8fe6e5305c3b93866278065d2d902d5d3a
- TLSH
  T1134152A284F0AA55503928C1A9A689503CAED317C304A514F7EC97FA1FD2CD84FB3DF5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  admin_ticketcheckers.php
- Size 4KB
- SHA256 146585c209fa1befef70d27593163773cf5b60c6411658b0bfeb6c3ebd8ecf01
- MD5 55a601f879e2d9049baf6838c10d4fe1
- SHA1 d23eafd75294a1cd77683e8ad47c0bf51a088155
- SHA512 e8ac0cabd023ab0720358b427545da6b7f14623117dab249748a18e706f2df53891ec0fdadbc51c9b3dddf56ba97641daf8d4e161bca2e89ac31c9e2de6372bd
- SSDEEP 96:p18SSqJR9La6YVGrEx9WVx9SkkI3vjWeZgxSaQNtqbK8t9e38Pv:p18SSqJGREw92c6/jvl3PqW6vPv
- TLSH
  T1F1A1A695B1F93D12513350E751ABEE423884C403CBA44C11B9ECD6D6EFE1C2E5AA7C67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  admin_users.php
- Size 3KB
- SHA256 cdc8582a51b2e6ce3d39134ed8f8ba2b1a4a635ccaa2cab9d023525c243b520d
- MD5 da1f3afd4335b7c55b3c32876e702fed
- SHA1 ffe2a133973b2cf58a4f451634ea1b948d83f9c0
- SHA512 22c44c879ffb09b6a2f761acce42bf8a5f2ae3f732e484eaa0a97c6201512a7ca453a97f2c8e409db7ebb46cc8a7931a39863742d5edef732ed3e6510b90257c
- TLSH
  T1C6816285F5F83E12401650E690AB9B4A38D0C803B7250D61F5FCD7E5AFD2C3DAE578A6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  admin_villagers.php
- Size 2KB
- SHA256 b97bc9d9112b93406457e599f17c68b069424ff1d38195a0d637d2cb3a83f8ad
- MD5 7241d6b24b82eed2b643630d5bc01a73
- SHA1 8fa765d37ba8d886712cd78d69ba9481f3cfc148
- SHA512 293ea0ccbe4e30f954e1aae2cdbf3684623cf89ba299691b59591b4b7d639df58afed83146b3f89cc5e1e794ecaf048113f1a21db9bd26cdc6338eb4ae79d3d7
- TLSH
  T1A351ECC479F9A533101B58D2E11B4919A9E4C29391210DB2BE4CC3FE5F61C7CE7B7899
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  admin_villagerview.php
- Size 5KB
- SHA256 b13126e16e268286ab1d0340ea50d47b312e838c4aab71674b0300e9ebe23a56
- MD5 1fdc39c5682eb1dda58ba25e3b8f5d1b
- SHA1 8ccb1606781493e37a775cb8c08f84cc15020f3f
- SHA512 2367d1893f2be22167dc146b1a0110bf7cbc1d6ed9b677af0c7960e003c0864c7295286d7a1491109cd1daecbf73c0ae58e4fd37d7e9941963f41e338dbda84b
- SSDEEP 96:6dR4EpRi+3+Nc15dTAWbyJU6W37Q4TvWYKjs1MlV7HiJ3mxOuR9KEYPnuR92VwVc:wR4EpRBCc1bTdbUQ37Q471Kjs1e4MrB8
- TLSH
  T11EC16162F0F2B6A1019598D3526048BA3FC3D54B422A09453C4D94EE2FC5DFE4DBFACA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy