3fe1865c1efbb0a60c7eb90ca21422be32d234bae9f2d268f9783207e24ef31d | Triage™

Login
Reports

Overview

overview

4

Static

static

4

academic.js

windows10-2004-x64

3

academic.js

windows11-ltsc_2024-x64

3

academic_t...ery.js

windows10-2004-x64

3

academic_t...ery.js

windows11-ltsc_2024-x64

3

access_let...oad.js

windows10-2004-x64

3

access_let...oad.js

windows11-ltsc_2024-x64

3

admin/footer.html

windows10-2004-x64

3

admin/footer.html

windows11-ltsc_2024-x64

3

admin/header.js

windows10-2004-x64

3

admin/header.js

windows11-ltsc_2024-x64

3

admission_form.js

windows10-2004-x64

3

admission_form.js

windows11-ltsc_2024-x64

3

admission_form_bk.js

windows10-2004-x64

3

admission_form_bk.js

windows11-ltsc_2024-x64

3

candidate_create.js

windows10-2004-x64

3

candidate_create.js

windows11-ltsc_2024-x64

3

candidate_..._bk.js

windows10-2004-x64

3

candidate_..._bk.js

windows11-ltsc_2024-x64

3

candidate_search.js

windows10-2004-x64

3

candidate_search.js

windows11-ltsc_2024-x64

3

candidate_store.js

windows10-2004-x64

3

candidate_store.js

windows11-ltsc_2024-x64

3

candidate_store_bk.js

windows10-2004-x64

3

candidate_store_bk.js

windows11-ltsc_2024-x64

3

candidate_update.js

windows10-2004-x64

3

candidate_update.js

windows11-ltsc_2024-x64

3

candidate_..._bk.js

windows10-2004-x64

3

candidate_..._bk.js

windows11-ltsc_2024-x64

3

canidate_c...ial.js

windows10-2004-x64

3

canidate_c...ial.js

windows11-ltsc_2024-x64

3

course_form.js

windows10-2004-x64

3

course_form.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
justedu.zip
Size 29.1MB
Sample260910-evw21aztax
SHA256 3fe1865c1efbb0a60c7eb90ca21422be32d234bae9f2d268f9783207e24ef31d
MD5 14e597c352b6f11e762274cda795780d
SHA1 cdab1e6042d5279527d22e62a49d82ccf31b9b27
SHA512 3c9eeb2aa3f97f736847e56ab5676a4c704db617a7d821b44ebe2a61a9f0c7b16b99f63ee3bb73ff2d37eff1948546a24ae064731cf112516e196f02e4e43abc
SSDEEP 786432:bAR9U9F0Bo1BX7JyjyaDaSaOaKa0aMaYaiaOawavqa9auaHaKaVRaYazaf:UiWBEBLJbTp
TLSH
T1376733BCCC329C90D19D497DF5089612EA1B4B5993D3105B3B3A5E2DE63B5A09A30FB3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery execution link pdf qr

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

academic.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

academic.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

academic_transcript_summery.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

academic_transcript_summery.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

access_letter_download.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

access_letter_download.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

admin/footer.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral8

Sample

admin/footer.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

admin/header.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

admin/header.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

admission_form.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

admission_form.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

admission_form_bk.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

admission_form_bk.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

candidate_create.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

candidate_create.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

candidate_create_bk.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

candidate_create_bk.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

candidate_search.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

candidate_search.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

candidate_store.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

candidate_store.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

candidate_store_bk.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

candidate_store_bk.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

candidate_update.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

candidate_update.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

candidate_update_bk.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

candidate_update_bk.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

canidate_credential.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

canidate_credential.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

course_form.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

course_form.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  academic.php
- Size 30KB
- SHA256 22002761803399c83cbef4d88a51db06a4266719d9649bdde84f713e261ddc6e
- MD5 01caeafa0b9b56426d3845d003620c6e
- SHA1 ac46353347806d001dc5aa1c75eca75028e5a7aa
- SHA512 268b685f54d12803cf27c495a4c13e0abce2ddd3eff52d2c48cdd66850eacc009e2075fb33e9ddc6cc2b96a9dbe8f586d3d6bc342102d1a9017c2c056fc525b5
- SSDEEP 384:pjLy0q0lJcGKFFSLWawg2D9g2GbgelJwcVb9fxRjQVuE9gL71uVt7nuswR:pjLy0q6JcGhWs10ilIVuvL7YSsE
- TLSH
  T1B0E2C512EDF041A02857E0D5018A4E8AFB5CD817600ED9687FEC509ECFC5EDAB97EB58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  academic_transcript_summery.php
- Size 20KB
- SHA256 3e64aefa00dd54a7b94ae4187d438e6ca4652f142a8178d9bec9c61c2f6dd978
- MD5 bf1fe9b4e03b7b9d46e12d92dce0fcef
- SHA1 f43859fc3820f7d16e119d9b0009d44b282e20c0
- SHA512 24863664c5e9f7d4668784b3023e28937c44a6051588158f4d15ab251fa057d610d9e1441f022627700158b0c1952e2cfdb695114cbea84b593bcb050ee89d33
- SSDEEP 384:buJCzgH17ReJJJKttJ13ZKgpsaCO/zefNNw8:bSyJ2iad4NNz
- TLSH
  T1B89281675CB311156853D4693FD7068AE960C017991BD908BEDCA2CCCFC2DDADE2EB88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  access_letter_download.php
- Size 20KB
- SHA256 5251e9e3f8a6e80b129d83294d18ddfd5bcaf7debb5c871c399f8f7c27ffeede
- MD5 87210f51b68c323e5b752b48dd9c2fc1
- SHA1 3cdde6422cf458f436ae9c8c109979d627f27ced
- SHA512 b8929c5136587194ef7a87e7729b62bf9dee390e6d652f8972274c6dfdf10eb5227c0bf41e6399b2abd474919d7e76a68f4995aee86db2f610cdea357c78b7b4
- SSDEEP 384:buJCzgH17ReJJNKDtJ134Vgc/zCO/iewNNwp:bSyJ06zdeNNO
- TLSH
  T1F49281674CB321156853D4657F97068AF920D017991BD904BEECA38CCF82DDADE2EB88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  admin/footer.php
- Size 137B
- SHA256 f3c0aac321c58475659ecbf29538598921e8b7884fd6880c7568283236f6cd41
- MD5 ed29ac79b49b649cf482893fd489eb87
- SHA1 236125ebbfbd538f6312472cbe86a72ca7d6f609
- SHA512 7495fecbe861d42f621fac1b71d15c6dcc77774602ed2efdee893f6321545cfde432e021b3d76bcede4fbad991bcd39541504d9a56e278a1b092167d03b9f6e2
- TLSH
  T158C02B593C00A42500332A3026F3C16CF335D04601C00127B0CCC20B0F301684C43CFC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  admin/header.php
- Size 12KB
- SHA256 21297d1e74e96456569add356f061997e12623d8deadf1b54215eaa0ea10c641
- MD5 7b63f3ad2d0e3deba903e19456a91310
- SHA1 0c6da2d5a52efb3d5518d4a896ebe262e1eb86f2
- SHA512 78c13991f3390efcf46bfd9a6a4434490abc44eee031902e5c3353bfdfe8ca369d9645ec007b3db32c189e3fea356040bc661bd9a35821a5eeef6eda4bc7e7e6
- SSDEEP 192:uMrFYht+W8sOIfV8gJS9ul/9LDtaB4MHXV1Svwuy8Mi3AMisIayQPSmlRSGin8/K:E6W8sOIftG1ooMY9USSRSVn8/K
- TLSH
  T12242961225C1362A5072E6E26D72935AFF78800BE14051BC79FD138BEF3DE84546FE99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  admission_form.php
- Size 81KB
- SHA256 3793994472ff6546922ffe9fb3ca58a3e16f8eb823ee7e1f4adcd87eb19b3737
- MD5 70f88326044ca285868d6bef291ea65c
- SHA1 e6c37050e43bf849b178f27d65a0e2414d98756e
- SHA512 3ab3574aaae25f3405d5354d07d0279e58d8aa831ff30dc927b81b6c2d6b9ec852921c57035fa90f0f417520e2b957bf00a09d8beaf6e59b099c7992de5bea97
- SSDEEP 768:hMtFJB22wkRoJpDu1Y1bk3Frgq2QdnjzBnG+n5oPtfgelDZf8YsEzFjslZ:CFJFR1Y1bkN2Qdnjgl46DZf4EzGZ
- TLSH
  T1CB83E820B0F3856010E7B47E1F9B99547EA4C5132A088A02BCDC87C58F96E99DF7A7D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  admission_form_bk.php
- Size 76KB
- SHA256 974b2f3f9a992f51aaf6ecadca736197e64efbf921160f786ab8dd205e0e44bc
- MD5 42ea057229c76bea17ff516866bd3b76
- SHA1 ef019beb5d9eb68bf03389ad2b8f7b3969649be3
- SHA512 d26c689f35b9b61f3b248e2a16cab27ee2af03402568d70cdb09e9e3803bfcc9559992acbd1bba9f649bf1e041a363e895d1fe038c89403d9dd2e95587dd940f
- SSDEEP 768:jMAec2mpJwRrqrev7ydzrSwQbnhB8FqlBL9Iz7nn5oPtfTNrDlQ8ysE/YsMZ:IA7pJw6drehB8FqlNlbZDlQ2E/2Z
- TLSH
  T1C773F720B0F384A014E770795FEB98446EA4C513264C9A12BCDC8BC54F97FB8DBB6B59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  candidate_create.php
- Size 34KB
- SHA256 c860b9002540bfd2c86f4357f8c5e596e59529cb044dc5f8a198536b8c2963af
- MD5 f2d934b0bf6ee60698e0c05748b9da5e
- SHA1 5d5323306593c06bab86e662edbedeb35c7c8fc6
- SHA512 5851bc592ed307ef888c5febdbee7609b0c8702693f4b1870b910204362361be8c646846cf95ab3d01a66bf1c5ee0f5b5dbfc46c31936946af880098a66146bc
- SSDEEP 384:CR9Z5Ug/r2A65a3dWxgOyF3QKfSfvaf1vrP/bV2SQT6Y0FcJA+gqQ2:85Ugz05a3dbOyFVfS6f112DTUFcJAqn
- TLSH
  T1ECF2A95060F54871649368FA1FE204016EAAD5136606E1C4F9EC87C44FA7FA2DF37B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  candidate_create_bk.php
- Size 30KB
- SHA256 a51206c8675d59e2fedb5a14dea363b31814a3f6ff570dda1b1452172eb3e423
- MD5 9a01f25fda00027008264870f2e253bb
- SHA1 363d67fb468516dc1b0a2f322755b12a1301d3f9
- SHA512 1d9220b28db215d06078792ff801d6127c8da626b2b2422802e8ab3db00feb054c620ce77723a1e8926dd3dbf2d9134410b1e16209af703d51b67ca5ed769b05
- SSDEEP 384:CR9P5a82AwQuRQdz71uwpwnLaKo5hHia1Zrf/wV2PN+34T6Y6FcJhQYByI:u5a8OQuRQdzhunLvo58a102fTaFcJD
- TLSH
  T19CD27620A4F448717453A4FA1FF105115E69D5236A06A0C4F9EC8BC44FE7FB2DB3BA6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  candidate_search.php
- Size 13KB
- SHA256 c7a6ab4042beb9bc1bc8e4770a49430ce11b33a44605818e7ea24c54823a4743
- MD5 964bc63be009596b4aa1d1422568905a
- SHA1 7f44c6b29fbc58eefbdf9a417be3a2ef12117a9c
- SHA512 18bc45db06c296e508d7ee36af41e8bd5926e55e3582e9a1d42e418ccfeda0471a9729fa41e633c6e214a2e6adc2cd2d801812b9ac904a1086cdff4eaa10da93
- SSDEEP 192:KJqc37KyTuA6Wj5R8QYpblOygprRhZeIMToQ/U7WV8S8ZuNIE7edZ47mSpWjKWaQ:0qs7JDUMyk8mi5eOC7v4BAP
- TLSH
  T1B35297A170F31652383394A92F9A4A9A3584D423C40ADF15BFDC72ACCF80BE6CD9174C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  candidate_store.php
- Size 42KB
- SHA256 82b13f642d83bd14caba7523af0df322e8613e0e18649c75a5afed6c38535e5b
- MD5 9ae12159d089e8c76a5f4b270669d8e0
- SHA1 20c6dde19595d866c90d0f2dd195d76ef6ac5f73
- SHA512 e9d3ce5131e5b90ddce32f6eb0b054bf5dc9272f4e255485d42c8f5c433679faaa1d5671b278180f59a8b4e03aa4e716c1d2394fe59bd2dd3ef03af186560cd0
- SSDEEP 384:jwJ/ukI2lXTkkI7KkcKK5myxRbVQGHpD54WAes6aWn2ondnNJVQmq8FIFy:ANJfip5o33/DuK2QdnjK8+k
- TLSH
  T149137460B4B3C74010E7B43E0E96D554AA69C4132A8C9903BCDD8BC59F69F9CEABC7C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  candidate_store_bk.php
- Size 48KB
- SHA256 877e5f1f5885910d935f16db3527e7603f02e7f31de314fb46b706af33a59744
- MD5 b32755128ebd27fcc9fba89c41c41a8b
- SHA1 8debc168584e99416de8a1439883a47b581a517b
- SHA512 ef3064cc7d05e0d812a201794a49199a854be18b3ba94be76a12cfdd11e69e75388856eb8833cd0ec38fb982033da696a1f9e470afdbe70fbb1cb96f01e2b9ac
- SSDEEP 768:1MCqDi1lq9Y04QKPC3h1Fa75L0T22ERlqJxq/:1MCxxjq3h1Fa7EERK8
- TLSH
  T146239610B4B3859004D770385FDEAC505EA9C9033B8CBA127CDD8AC68F96F68E6F4B95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  candidate_update.php
- Size 66KB
- SHA256 636eb4489e31553c63ce571253a7d115b84d3ca37346c123f0fd2d386e8ee452
- MD5 e7129ae713838976d9174d822edf79e0
- SHA1 e8549fecade7e361720bbb54d9184e1736475f85
- SHA512 ef0995ca70e06ee07136fca3592049305a5c6f16b889a1284100601f9666c453ad57d522f4112af697cc8acee4f3b1d9b246dabdfd3ba16588457bbe7315002d
- SSDEEP 768:81JrlG+gJpVoP5ArTo2QdnjIMXZFmjMjM02Y5Z0snN7/PpnCsG:81JzPz2QdnjH0sN7npnCsG
- TLSH
  T11363E720B0F3C62024E7747F0EC694547E94C5133A089A42BCDD8BC98F66F99EE79796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  candidate_update_bk.php
- Size 37KB
- SHA256 9f12de4e4cdb7622ff56e5bfab54663ed34268e52958ad41d9f8d4cdb8877551
- MD5 db7a41364a152ac7b5d38703ad578792
- SHA1 a4828330a459ff9ba3318c666b92cc762ce37cd4
- SHA512 b57bc5c5376595cbd261e0a4e7610e283aec267a9c247a35e8f8afc431b376ab07b13a033c833a1dbda6f176d42d0fea1a1935736426925b36f18a1901e8523e
- SSDEEP 384:Y7wOQ34ARR5vJzUlnGFQtX5aI6RPzJD7ceB9/H9CjmQ1Nvw2Pz52W/Rr:n3fHzUgSX5+rhmmPC5jr
- TLSH
  T1F603C710A0B2869038D3F0795FC666016E45D9032648A286FCDD8EC68FA6F52DF7F79D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  canidate_credential.php
- Size 2KB
- SHA256 462f578ee6713c87fa849b0b5aff8ff2c6039df32d8d0d9106ce82146a9389d2
- MD5 82cdfdaf7e81727e7962b7f0373d0521
- SHA1 b1eb76a83027bd516db3e4531cd81188f50da3d4
- SHA512 434b26bac153f32ebe9954ac649f1e5525d8e1290d21bda4a675c0564961e2baeffaca4b74f57e9de00fc9aa7ed4df686fa6e3116bfcd8eb95eca4d8de28573a
- TLSH
  T1CE51346235F5250730029CA69D89BE858ED6C0273E019C58FDDE939B8F45EF52C1FE48
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  course_form.php
- Size 11KB
- SHA256 21f677ba8e8a3bf4980191d882f5792a7aeb97e08831ac38d8417ec359fd46bd
- MD5 dcd6954544ec30b72e19d3191935c12a
- SHA1 88d62134c70584031ee782867c6eff5e07d3885e
- SHA512 6242a744f14bfc8dc5406623efdd3c164db878858c032fc8439063baf17699996e979cc5c4395f8a0a5ee15dfde6961a346b4cdf130758bc7e8567303451c53c
- SSDEEP 192:VaQZ4PGsM3Vit1xraJOrWnBC70FXoz1/02:VaQzl+1JaJOrWBC7oXy/02
- TLSH
  T14932655174C0962014F3A8B61A0A1BA5FD8C852367054ADCB8FC96EB3F72D04FD67F66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy