6fba6a0565e145a1d158807d8443420df3ea68fcddd130e100d998f8735df28f | Triage™

Login
Reports

Overview

overview

6

Static

static

1

codic12-wo...x.html

windows10-2004-x64

6

codic12-wo...x.html

windows11-ltsc_2024-x64

6

codic12-wo...go.svg

windows10-2004-x64

6

codic12-wo...go.svg

windows11-ltsc_2024-x64

1

codic12-wo...ess.js

windows10-2004-x64

3

codic12-wo...ess.js

windows11-ltsc_2024-x64

3

codic12-wo...age.js

windows10-2004-x64

3

codic12-wo...age.js

windows11-ltsc_2024-x64

3

codic12-wo...ify.js

windows10-2004-x64

3

codic12-wo...ify.js

windows11-ltsc_2024-x64

3

codic12-wo...est.js

windows10-2004-x64

3

codic12-wo...est.js

windows11-ltsc_2024-x64

3

codic12-wo...ify.js

windows10-2004-x64

3

codic12-wo...ify.js

windows11-ltsc_2024-x64

3

codic12-wo...ify.js

windows10-2004-x64

3

codic12-wo...ify.js

windows11-ltsc_2024-x64

3

codic12-wo...ose.js

windows10-2004-x64

3

codic12-wo...ose.js

windows11-ltsc_2024-x64

3

codic12-wo...est.js

windows10-2004-x64

3

codic12-wo...est.js

windows11-ltsc_2024-x64

3

codic12-wo...ify.js

windows10-2004-x64

3

codic12-wo...ify.js

windows11-ltsc_2024-x64

3

codic12-wo...ify.js

windows10-2004-x64

3

codic12-wo...ify.js

windows11-ltsc_2024-x64

3

codic12-wo...ify.js

windows10-2004-x64

3

codic12-wo...ify.js

windows11-ltsc_2024-x64

3

codic12-wo...log.js

windows10-2004-x64

3

codic12-wo...log.js

windows11-ltsc_2024-x64

3

codic12-wo.../wm.js

windows10-2004-x64

3

codic12-wo.../wm.js

windows11-ltsc_2024-x64

3

codic12-wo...orm.js

windows10-2004-x64

3

codic12-wo...orm.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
v0.3.3 source code.zip
Size 44KB
Sample260910-h7srwszdqe
SHA256 6fba6a0565e145a1d158807d8443420df3ea68fcddd130e100d998f8735df28f
MD5 da3e929a7060d76c44568acb3b2d0fb1
SHA1 6c7cbb974a8751bac5c1616d6be388dd472e2792
SHA512 733350da99275fb5fdba868109fc2523f9e45a5e47f96d82cfc1ca126b6339cbc114edae24ff337503799d3a0881609db30fbc374a8f29717d509278568f3a7e
SSDEEP 768:qbY0xLg4Li8sbnUNB830oA+4GpJsoHYuf+Jp/gtWSJ2hxmI3Am1KFwXno9DaBa8D:f6DObnO+koHpJNYuWTVN4IQpFwXkPHkz
TLSH
T129139E2A4940AA5EE34244B6B9605646B73CF14392E9D8F638C40EB54B6F35FFE143EC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution persistence

Static task

static1

Behavioral task

behavioral1

Sample

codic12-worm-95837e0/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

300 seconds

Behavioral task

behavioral2

Sample

codic12-worm-95837e0/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

Behavioral task

behavioral3

Sample

codic12-worm-95837e0/logo.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

300 seconds

Behavioral task

behavioral4

Sample

codic12-worm-95837e0/logo.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

300 seconds

Behavioral task

behavioral5

Sample

codic12-worm-95837e0/src/events/buttonpress.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral6

Sample

codic12-worm-95837e0/src/events/buttonpress.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral7

Sample

codic12-worm-95837e0/src/events/clientmessage.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral8

Sample

codic12-worm-95837e0/src/events/clientmessage.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral9

Sample

codic12-worm-95837e0/src/events/configurenotify.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral10

Sample

codic12-worm-95837e0/src/events/configurenotify.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral11

Sample

codic12-worm-95837e0/src/events/configurerequest.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral12

Sample

codic12-worm-95837e0/src/events/configurerequest.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral13

Sample

codic12-worm-95837e0/src/events/destroynotify.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral14

Sample

codic12-worm-95837e0/src/events/destroynotify.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral15

Sample

codic12-worm-95837e0/src/events/enternotify.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral16

Sample

codic12-worm-95837e0/src/events/enternotify.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral17

Sample

codic12-worm-95837e0/src/events/expose.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral18

Sample

codic12-worm-95837e0/src/events/expose.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral19

Sample

codic12-worm-95837e0/src/events/maprequest.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral20

Sample

codic12-worm-95837e0/src/events/maprequest.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral21

Sample

codic12-worm-95837e0/src/events/motionnotify.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral22

Sample

codic12-worm-95837e0/src/events/motionnotify.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral23

Sample

codic12-worm-95837e0/src/events/propertynotify.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral24

Sample

codic12-worm-95837e0/src/events/propertynotify.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral25

Sample

codic12-worm-95837e0/src/events/unmapnotify.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral26

Sample

codic12-worm-95837e0/src/events/unmapnotify.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral27

Sample

codic12-worm-95837e0/src/log.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral28

Sample

codic12-worm-95837e0/src/log.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral29

Sample

codic12-worm-95837e0/src/wm.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral30

Sample

codic12-worm-95837e0/src/wm.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral31

Sample

codic12-worm-95837e0/src/worm.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral32

Sample

codic12-worm-95837e0/src/worm.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Malware Config

Targets

- Target
  codic12-worm-95837e0/index.html
- Size 2KB
- SHA256 7a96d7754d41b6ffc69b6d47984f0c63dc1213b9d4d4b8b50edcfc7779ff3609
- MD5 3b4e25b1851670bf8128d509c64ceab6
- SHA1 49a51857523ad0907d9047783015d2dfb0ae562d
- SHA512 7871894fca1654a5cdf49ecd792b7ebb73f2bc6ecc992ecdd8c42fd1b994ae96475dce7b15176f82834f4ac198150f41c94ae70860c86091ea787e7c65207a72
- TLSH
  T132518656258251192693C0F8EBE7724877A9C08BDE49C8613CEFDB50DF06692E4D37DC
- MD5 SHA1 SHA512 TLSH
Score

6^/10

persistence
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  codic12-worm-95837e0/logo.svg
- Size 15KB
- SHA256 76d5f2943c8ba21b43f371873e37e189468928c8a1bcf87be88980a7f1838dc9
- MD5 23494b2218a96b54959336df264b8653
- SHA1 c3247f9f447c174b94481c9effeb026d34a19782
- SHA512 05db9b0e4a6227733fbe6156430d286ec02b8998edbf24fcb79f807e4e5603d97174f00ea96aeea05298c0f2604d8613c4f2edcb9c5aaea4e9b9e3afcefacebc
- SSDEEP 384:SAviCP5eumCX0NubCy7V6sAANJeAdJ5vzOAxclky:SPCPiCEAksAA7eAFvzODlky
- TLSH
  T1F07243DD27610CF5DEC6C3DAEE12005C355B947B66854B28C26C8F3A348BA6DD8A1BC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

persistence
- Drops desktop.ini file(s)
behavioral3 behavioral4
- Target
  codic12-worm-95837e0/src/events/buttonpress.nim
- Size 5KB
- SHA256 6efe7240fd45033b31e953a5c5a2d8e62640666e4318f085fd7097d5364b832d
- MD5 f34466732ebcfdab4e034592e105a6e9
- SHA1 a295f2d1f291c5c48915a06d81e4cb6fe8517ceb
- SHA512 82121612e016622ae812a9fa7ccd9e762c714f12c3188b3517ed57d0832dfaac8754586198b3cda90f149c2eeca1f6a7fa75bb5da69566797a0a41f2e671e8e6
- SSDEEP 96:MM7qB2dyYBVBxOG/SWw3ykFZUkYJIjd98ju+7aGuVun:vqB2wixORdpkL0cjuqu0
- TLSH
  T104B1BC16411922724A764926E963F6433A351E73640F3670383D19FD2F6D62BC3A8FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  codic12-worm-95837e0/src/events/clientmessage.nim
- Size 32KB
- SHA256 13e10335f27f121ed14bc9bc994532928ce27e486e662ad0e83d48ecbf173271
- MD5 5ff0752678a6c901af7614450bb7a2ab
- SHA1 d18ebfceb400a5563e6a4c94778a14c8f74135f8
- SHA512 ccf83721f5ea1b620d43ce876617130afa9fde3d6bbbc6d63450b69f4b56bfc1504c35b3f9892f642e9ff5b0e4b9e6cba6f66fdff5e66082620db284dea278b7
- SSDEEP 384:+wJnd/PHiKPibxrdwpV+dHPJ93GdEKP9QTBWEemCuuA:LJn8fZvJJ4u
- TLSH
  T196E24441161722B2ACE20A0AF977F247215D7983207F7964397D71CD2F4316A9378FEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  codic12-worm-95837e0/src/events/configurenotify.nim
- Size 648B
- SHA256 3e1efd519b0e9019139b9186dd91dc16a716a10af1135f53527fffed4da1249c
- MD5 956aac174c8be8fa27deff77908817f7
- SHA1 cdcd198b5c632cec14c3bdf25d45d590200e5170
- SHA512 ba64d68e2f57de57b124462d1c853016b61b4fa436aa7fbd83063ee9fcae60ed7cb8b57d9030a0a4d2ef6858d250f35952d8e588dddfdd4966daf336aada6892
- TLSH
  T103F02127231120B390B21345DA93F28376348AB1791F3430293601EDAE6A1AA9738FA9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  codic12-worm-95837e0/src/events/configurerequest.nim
- Size 710B
- SHA256 59696a21555f3fba79b556128c10abf2ddb5b1f33662d218dab0ea7e7703b65c
- MD5 c7496bbf8053e7f42c0a9802951612c1
- SHA1 680d0ab5eaa356186f0d1e06cfa781d8f05e0cf0
- SHA512 b079ae2e5efd5256c2aedaadce15da76340cfc280a037461d6902ca5cab9240dd4b0e339752e67bc9e5ecf93962549e68d210d37e0456c038b00eb6d6564034a
- TLSH
  T1DE019762320A207645714342C173F34B332156913A0B747422BE22FC6E9926FCB7CFC2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  codic12-worm-95837e0/src/events/destroynotify.nim
- Size 716B
- SHA256 d15ea7fdbc9e9eb2cd9d40e1d87a03ad6e265c20cc6b324674cffbe1b176f792
- MD5 d8949f28cfbe9bc9124e8c870ade7791
- SHA1 c7ba0ba50524585749a49366eecf7192718a331b
- SHA512 c03cded069f902e0f76ab03f648ea59a1f28e43920bcbc5b7600be54e4bd3d0231e7c2cbd376bfa56b7fc6c1d3738bd30412bcb1bd0ba10fb7bde23d28a68a6b
- TLSH
  T158012F61221661B254B28756F103FA8733385EA0740F317035BA49FC2F2626BC76CEA9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  codic12-worm-95837e0/src/events/enternotify.nim
- Size 1KB
- SHA256 9ba86d01ffaea1eba590e7bfaab4e789f009dcd63434fed06d9fb444b3298df7
- MD5 73745e843dc6c78f5e75d46aa7488e7d
- SHA1 641664dd013360413c57c192515975c9b8a56627
- SHA512 9c7fd3552852b3dcb91933742876e1c841d1f373586d0fab8e510a8ac84799bfc84a231a1743c7a2d2a728e23190f6c4a79cb1e5d97ebf25bd2ecd2711b73e52
- TLSH
  T1E0218C15445523F396714216D242E38236392973B40B3160353C0AEC7F75677836CFBA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  codic12-worm-95837e0/src/events/expose.nim
- Size 461B
- SHA256 211e51e0be6931c8e3061bcbc9227d057cd40de33bd4eb82c09e0bacdf171286
- MD5 eb907947b28744c0ceea1f20c411baa6
- SHA1 4f035d673863dad7770f719a0d3cebc2fcb0eee4
- SHA512 4ecfecad160569c8a762c156cfd5e162e491e3047fe7a97bc0aa140b4083c4e9f42953ced6edad72e1cb74959695643d9fcea826151481864910c2cdc5548cf2
- TLSH
  T196F08C22021912BB14A24349E282F68332745AF1B96B357020B24AFC2D7A267C35CFE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  codic12-worm-95837e0/src/events/maprequest.nim
- Size 8KB
- SHA256 e5bb88285b2e3b9b239e0c16993ad50808f7fa0b826c8f2c9dda577a35513473
- MD5 4974a94ed811210510ac892d1865c7ed
- SHA1 0afee365af2a3f16143ab8e462e4bb8b63b3ec84
- SHA512 9c885952215935cff0043116110d5a1a108137a07c376fefd35ed47e9e1fe1950bc30dcad7324782c9f23ca447172ae612cb42a7103fe28fc72380cba608810c
- SSDEEP 192:yo9jZdOCS0mFOj3it+R5vWHln+9M7Ob37V:yo9ldOKmp+R5vQi3V
- TLSH
  T10B0273820A3402B756A21105E5A37643E79245B31CBF76603A3D15A82F8E26FD178FFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  codic12-worm-95837e0/src/events/motionnotify.nim
- Size 2KB
- SHA256 bfc767e833f2db7657fd7e15a7d608e1a5e515819d66cce01a0f66f78b29872f
- MD5 b7ff4ac29191c362841d8659171f1a1d
- SHA1 39e614c4f3f287a17cd59a54d116859a9bc9c5ea
- SHA512 2e54616bd317779f8b9c05212da90daad6ff439a16103bd87cb8eb7500d8bf2dfbe662dfd347a609fcf866a8f986a05517a37e8dae7308d72e6a266992eb1d2d
- TLSH
  T1655189412190213B49BA63588782F607F3775327A5F7B05D39FE04ED7F84226428BB7A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  codic12-worm-95837e0/src/events/propertynotify.nim
- Size 865B
- SHA256 699d011b7570e07c7050090deea123fd5dff27d15d6ceec7b51a4e75834321f6
- MD5 ac15739010ce09c71b4c74df8e8cb24f
- SHA1 bc52100138ac8dfcd93368db5982e97c5372da7d
- SHA512 7b25a3f6a161393f3a351b2b3625b1fdf3a3b4150d83a528390c6b3090d128ab7724ad864490bc36283888e584abccfbe8df873f2995d0da760a1541154a2454
- TLSH
  T133118850AA4101F589A55345CAA2F19772E80C6375ABB060B52842ED2FAD27AC36CEA6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  codic12-worm-95837e0/src/events/unmapnotify.nim
- Size 704B
- SHA256 cec74f4a8cb1b35fee89ac32b65a85e66852f9144222748855f18b4ccad12382
- MD5 a83efd695087dfabd326604fc543b231
- SHA1 754d54c06121dc8acb64052532a99e6b6e4b60e7
- SHA512 679010e82e8b66e21b9a5183c88c282b5a9d411484770f1e7261f1e834ca97c44d3caaa63c67bc0d0ccc3aa373338ee55685b1a1ebc4851838e539b1b02d6bbc
- TLSH
  T13D014251261561B310B28752F143F68333395EA0700F317035BA09EC2E262ABC75CFA9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  codic12-worm-95837e0/src/log.nim
- Size 371B
- SHA256 16e32061cc3b3307060d6e5568ff4bc279016a96f038df774ea44db8d21db825
- MD5 e7b22dd32ffd0db91bc33f48b74fb8d3
- SHA1 aa53f7095e66de93cbf6b32208e74a4ec9fe2b81
- SHA512 088e5106f7f0598724d7dba5ead57a4bd1f9df00d4f25a96a32817799285a404c75946b5cdaa17b648802b2a6546700a092577fee887458b1a0e148a65a1bbc3
- TLSH
  T15DE0D87926ADD6849B6C709EB084160BAC71F1849D16E0F442CFBB76035251973E2752
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  codic12-worm-95837e0/src/wm.nim
- Size 38KB
- SHA256 f83d7116e405d34a0fd209d7ab6ea3e0fc0bd5987ff8e25673d6f1fe7e00ade8
- MD5 0b32f5e6a2920849c25f8f56c4de5177
- SHA1 ada2cdaf1d2162dc3ea7424f773c18989cabbe6d
- SHA512 661c5bbd9d1b44dcd2c5be011dfb262a1352e81cc0648685e968e76b4ec64960abe51bdf100e1c728196ff8a366dabef6b5ba4fe5eafae21f84c4f48f23e5724
- SSDEEP 384:hMYWjyO37lM8nWmeD04H/c3enBfehCZKXgy22qGwG:NWjyO3hM8nWmeD0+/cVdXgvw
- TLSH
  T1CC03010712142B7356534702DD93B1927E38AA632A9FB564307C70CD6F5A32A42BDFAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  codic12-worm-95837e0/src/worm.nim
- Size 528B
- SHA256 388b2c5001fc37465c78c75109f076dc6f0dd2e1f3dc65bb59311cdfad56fc9a
- MD5 8c43ab9466e5142b224a5d43e9b22e81
- SHA1 2fd5db8ca52c44cc780c6052a9f66d3f60223bd6
- SHA512 60cc5fd6eec1fcaa42b33c9b5e0fd0be86089ecb7d860a2aa5ab3554811e86a40821947602a0abb52fd7b35423ca4c9b4c2d82bd7aae9a7c5b783f087422356d
- TLSH
  T1A7F059478E4D24A20B8E590CC98B54530E065647E61327B6352CE2647F0C61AD3F7CFE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy