5e3dc92927ae3d2ae2f081017f0b2446e388d3dc1bc43b15361910e463d451a9 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

background-bundle.js

windows10-2004-x64

3

background-bundle.js

windows11-ltsc_2024-x64

3

background-crc.js

windows10-2004-x64

3

background-crc.js

windows11-ltsc_2024-x64

3

background...ive.js

windows10-2004-x64

3

background...ive.js

windows11-ltsc_2024-x64

3

background.js

windows10-2004-x64

3

background.js

windows11-ltsc_2024-x64

3

centro-popup.html

windows10-2004-x64

3

centro-popup.html

windows11-ltsc_2024-x64

3

content.js

windows10-2004-x64

3

content.js

windows11-ltsc_2024-x64

3

data.js

windows10-2004-x64

3

data.js

windows11-ltsc_2024-x64

3

email-capture.js

windows10-2004-x64

3

email-capture.js

windows11-ltsc_2024-x64

3

email-modal.html

windows10-2004-x64

3

email-modal.html

windows11-ltsc_2024-x64

3

email-modal.js

windows10-2004-x64

3

email-modal.js

windows11-ltsc_2024-x64

3

hide-popup.html

windows10-2004-x64

3

hide-popup.html

windows11-ltsc_2024-x64

3

injected-functions.js

windows10-2004-x64

3

injected-functions.js

windows11-ltsc_2024-x64

3

nm.js

windows10-2004-x64

3

nm.js

windows11-ltsc_2024-x64

3

popup-loader.html

windows10-2004-x64

3

popup-loader.html

windows11-ltsc_2024-x64

3

popup-loader.js

windows10-2004-x64

3

popup-loader.js

windows11-ltsc_2024-x64

3

socket.io.min.js

windows10-2004-x64

3

socket.io.min.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
kl.zip
Size 201KB
Sample260910-nchw4abm5t
SHA256 5e3dc92927ae3d2ae2f081017f0b2446e388d3dc1bc43b15361910e463d451a9
MD5 d24077232832382b10d0be8cf841923f
SHA1 c071bd213b35142865afd7349cb64a9720be290b
SHA512 c7271bb04948cf0a1b85dfd855b551d89fe650ae7f160527990290de94b268dba218f6b97f5d7cd4af7530d2f9b118321528aca15ab608c9ce786e42f6e2f8f5
SSDEEP 6144:3iep+EaLLm5yjZP1P/BR/sXjM0u6+Sbs+LaD7R0msRuP+A:3iI+1L0yjp15R/sX8674bRNsRFA
TLSH
T19414127C342A1C76E0AA427CB03F471BD3A6D0BC7BB49CA98E5545D67C63EC2D34584A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

background-bundle.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

background-bundle.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

background-crc.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

background-crc.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

background-sensitive.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

background-sensitive.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

background.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

background.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

centro-popup.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral10

Sample

centro-popup.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral11

Sample

content.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

content.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

data.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

data.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

email-capture.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

email-capture.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

email-modal.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral18

Sample

email-modal.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral19

Sample

email-modal.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

email-modal.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

hide-popup.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

hide-popup.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral23

Sample

injected-functions.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

injected-functions.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

nm.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

nm.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

popup-loader.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

popup-loader.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

Behavioral task

behavioral29

Sample

popup-loader.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

popup-loader.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

socket.io.min.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

socket.io.min.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  background-bundle.js
- Size 199KB
- SHA256 33e65eeb98690c6b25f75550ec992c39bea97d95ec7c731c0cd05f2c0223ac4e
- MD5 3bb488f7eb706d0df1d759208c29891f
- SHA1 5370e8ddaad5fd2c33f936e56e3f2ba186fffb7b
- SHA512 6b77ed2c6e55c5d972da8a07682440ac6b38f371dd83f0961ae1916f1d91adcf71fc83358315494104bc7bddfcf76922e617023435a20c98d3f146267e58ae12
- SSDEEP 1536:eQl0lEXKOPV3HBGUQ3Io1upQ3pfk3CgZRbrdevvXh7yPchsxYTHbPDTMduEYgui+:G4FNXBGU+IYgCgk5SxYTbP5EYdHm0x
- TLSH
  T1FA14964426C0A44D53AF1B3B362FA8E1F5172CFE24848927D105FDB1E4A663BF9E2635
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  background-crc.js
- Size 21KB
- SHA256 6f097813566cf5ee25ddc4df452f5ca4d5ad133e54cc657dc605c0f4b3014a41
- MD5 364115c4bd897030515b9be08c6216b9
- SHA1 6d4e2c78dd3b195fa845fb935ea151f35627e2fa
- SHA512 5adf1b359e57340ae499185884da1de89ebf66cdb543153afbdd0db8e50ce018a096b78136cd5db4e76a2093be2efd80940f94efec9d0d68d7ef66349a51e6bf
- SSDEEP 384:ah2kQuUcGTeJq5H/wb4o/oUZm184rZCwxhPkThUPiAjKubv8Pz:S2kQei35loQUZZ4r9xhPYhUPZ9v8Pz
- TLSH
  T1A1A294147BD0A81923B7AE7B7B279290E85A0D471B848887F31EFD50DB79B16DAC1730
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  background-sensitive.js
- Size 55KB
- SHA256 fec5c307f1fc66aced57aa96a67a3de57f1e37f7787d540187028cc1a6df7711
- MD5 6823e0d88f247508bb027b98f6ef1921
- SHA1 e5e6a200133951883ab5dc91ce5e2bba2ee32027
- SHA512 27c3caa295d018061a6ce70cf0f42e7e79e4e7b180704e2872ea19026a4ee8108e8ddcb5baaac9db48cd7196e4266348e74f4bbf317fb6a763bf6ee53bc0aa8c
- SSDEEP 768:z/GFeiAPUW34IgNsqhgNWYIav2CpzVKiR3FRPR17mJVz0vS9pUufJe4PIDPqPfY5:zD34HNpaOMzvP5DmE6p3JebD6y0knwk
- TLSH
  T19543D90059C4685D43767A7B6623E7D6F8920DAE2DA0C882F102FC19E6FA607EDF5731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  background.js
- Size 53KB
- SHA256 b53b05dde8f289df724cb74a9c37663605f33a7454b0b1017912de8cc4ee54a4
- MD5 dd2601a9695044d68b9c8c298141cfcf
- SHA1 afff84d195a2d84b0ab626b3115868a0f3e6308c
- SHA512 5e4d99d49cccad7f5d3eb5037bed235c62a19ec139696b3dbf53b96cb34efa78c36154a903e9d0d42882ce01c28b24321b8644af7045dad629e5c99c2676982d
- SSDEEP 768:bsMlCvsXLXiOS1W/GtMDyAfidLLus/PP7etxtKlw27kL4btKUZqMTVsYHGIelNPe:MvsXDNS1yHfhztxtKlQ4btYYZ
- TLSH
  T148331B9139D2207A4363663A7B6BA1C4F53604072E49C9C2F90DFD14AFE9612D3E2FB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  centro-popup.html
- Size 4KB
- SHA256 3f3e6ec3a0cccfc9719511b6a9e1de5c3506fde3cb8531e9b984605b56431f1e
- MD5 77dd5f458146bbef7d54ba61086bd8b8
- SHA1 9a3d4cfbec6b478fbb01f2d844cb5d9967f1f9f1
- SHA512 5ef93d7a2bbfc9648db770999be66a895da9f45b836b1c75d022835bc847d57f2639468cf0d65c17015eea7df0e96395d7291d5603d59ce7427fb6a7ce59e17c
- SSDEEP 96:5NxIG3V89F6ghJAts+fLI5pfE7zgWtTosCfoZCI2baxsiW8Ai:5NxIG3V89F6ghJAts+fLI5pfE7zgWtce
- TLSH
  T1C781449B69734462A923E5A627FFC34D3276900FA207CA183FAC52544FD0BD464927E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  content.js
- Size 178KB
- SHA256 6acdb479411262d9294b812c6d157fb852364d86972e446a0ae5b9ac9f40796b
- MD5 e5fb9810e55bab8f1403b01e7ed7e4d9
- SHA1 bb4e83bfe46ea69dead1cd5744fe6e9be26d6c3d
- SHA512 a7a214cb1b61ef20dda204e9777308b94173bd8cc99cfb0d6ddea1a8825ea5cb479d8bda4254f987ba14bfebf8729350d073bca6da8cce81b2f521bc97c49849
- SSDEEP 3072:2BbwnJEKzigMBDClIlfx8G5ATEWn3jiMt73lDmSKo0VNrR:NyL8nEWn3jH73lDmSKo0XrR
- TLSH
  T1EB04D800ABC0B55E23435FFB7B65E9E8E5161C8E68408ACBE240FC79D4D951AEEB0735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  data.js
- Size 38B
- SHA256 ef914028cc750a438f849e2d83e3572a14cde5e48ca86dec3a15b1ae30baf639
- MD5 0893e6cc2bb7bf96b04a8170aff264b1
- SHA1 6b95efc11bd9f9aaf123330024c48d6120c97948
- SHA512 3a9d050a0a1fff556e476b8ef7fbafff6ad593a387d8a2d5625f3b1e300927911c357c5bfd3be0d058f4df6bbcee22c0e1b6f8271ab172d26abee9fdb9e41699
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral13 behavioral14
- Target
  email-capture.js
- Size 5KB
- SHA256 21a0b9af792fc9e0d870c96b1dae2baed743903d2c8e1959760273d7e218eb11
- MD5 d78f05a85f78ef087441756b81f083fe
- SHA1 0f1f70c734b75e0459a8be32bab8d25b7c3d8b3e
- SHA512 6255052a8328151bb7ae17146e57d5340d8c592d56bf173a47998039811de32b2ab8033272269802d27074cb8163708075bdf598061eb704249e0e50552b70bb
- SSDEEP 96:6yRUtGBOPhLTl2sOfsQfId7fq+Qru3hYDs/KTPyTvaS7IFMR8K2jjuc/6:6y1BJVf/I7ySsgKTPYvaS8MqK2jjuc/6
- TLSH
  T1B6B1640C46E731E009B3D478B71B6107A9251617EC18DE563E0C42A8AF89F58FEF5BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  email-modal.html
- Size 5KB
- SHA256 28ddb7a6fffc135880c7d26af88321d00421490ccb62649de85c6d9781cda6cb
- MD5 ad2493569245e7560142a340a9de0b29
- SHA1 92d7829934650f9f3c9b5b9db88e78a19b2d8e50
- SHA512 f2ab60b2333627f71db6ee206cfae1012f1ac0b16c4780f2496a33cfb58db8fbff144175539bc61fa9a4938d0f352c2cc1b28009c01f08adc1424641432cbf17
- SSDEEP 96:p7Evq+BjJ+2uqRkLGkxEYCf5CCN1gHRuj0J4CGazJCy8Lk/m/Q0Crd9N:p7ENBJ+2uvAvPLgG0JPbCFzC9
- TLSH
  T11EB11191AAF415527117D49838A29F6337A4C583C90EC7387BFC209CAFC9DD5AC6B28D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  email-modal.js
- Size 4KB
- SHA256 2529aa7d9960294289703f58cf59c50d9d2083e34777692699a47c96c8dea908
- MD5 683184970cb424da94fe7eb5f2ec31a5
- SHA1 ea1018fcb673f74465a48c0ab4d14a74427e905d
- SHA512 fe8de67b567a15a14a7fa4e43f230021eceeda2ec7800b3bebd0d9eced238f6764d4cedbb18343907d5b91cec51b0177f48f42af104291da4e70259266f6e56d
- SSDEEP 96:ebqLFwmKs5NyJqnH5QWnMrl6u/Tdx5bRv5UEXfRP4PTyKc:eb4F9vyJ6HGWnMR6u/TfFRvmAfRP4PTG
- TLSH
  T1FAB174DF3BE9282005BB697B701A53C9793080052C09EA437D5C45E89FA4F90F976FDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  hide-popup.html
- Size 3KB
- SHA256 b1df917309442fa858dcf35d01f41bbea1f919fb6190f1f1274771bad9847280
- MD5 48202da58b3061c5911bca4dc8f8b1fb
- SHA1 fddf4b6cab170868984b17286db943a1c4e2ac06
- SHA512 07fd7ed0a18424aec13a44619f0ad4ad654ef1e408c71aa0ee479d95cc636ee30d7f285d5f091156e2d413f784e77209fe94898dc3727988fc6808b22d3ed38e
- TLSH
  T18681445BA5730462BD23E56627FF834D3276A00FA207CE183FAC52544FD0BD4A4927E4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  injected-functions.js
- Size 134KB
- SHA256 f08ea86aeaeb6a91432924ca13730dac50d56dabf0f7756365ac9df6206ff659
- MD5 4b21e664e3ee8f7640164021ed1487cc
- SHA1 f5b4abdfdf149632a2823a7759184e19be242d44
- SHA512 07e71419c387435c301b3c07330fb8c43f7f03ec3774a34edc9b3d03d956c751d178186cb8735dd715d6ad697bc3aeeff4b2851977b06045f8093a520bd46e38
- SSDEEP 3072:uBODNS/8ZfLPl5cvcii9sNIZIAZ40ln+Fz:jZRir7Tw+Fz
- TLSH
  T13AD3D967A2EB2036D2E7543EBF7B9E0A7334C0038844EA48BA1C95654FD895E4735FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  nm.js
- Size 34B
- SHA256 1038272e3be17076cecad68274aed589401ae8b43edebe7911a83900abe5ee00
- MD5 a064ae4c7100af52759bf8ff43ab43db
- SHA1 61b8f67df591f29a3cb34f4216f376353756671e
- SHA512 69cd7a9f0624883de1ff80743f01fcfd175acb7584e60084f02ae393863de9a6ec7af061a3cf44230e1470064411075587cb67b56e1f50bce873a14c594d02cb
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral25 behavioral26
- Target
  popup-loader.html
- Size 2KB
- SHA256 bbf15760b727eac263183894abfe097ea3d10a0779a6691088655e3ee0b7eae2
- MD5 cadc3796777b96565b4054d65ffafc8c
- SHA1 7c7865202f58eee285f1510df1d394611b88e42f
- SHA512 5e0fe24864a330c16d919824030ee590613a5f96c2580a887363033a6033c4c661db74fec6d739f48bbc73e27c644727e0ad2548775af1caf2fff34a2c22178a
- TLSH
  T1E551169B95335166BC23EA9427EF474D2299D50FD207CE1C3FDC62588FC06E5D891788
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  popup-loader.js
- Size 13KB
- SHA256 efbf6d62efb569cc1ab247019949012b8aff11ed6d5a1a4044b1e07ec53c08c9
- MD5 289218c92f0f53550e5037030defb006
- SHA1 9427cd376d9f84426c9c8bcbaba249b721ba0cb7
- SHA512 066e0cce7521049fe5e304baea08d43da42a5143cffea64a6d624d1e2ba8cf219d7982c12b7c17d6bc84a9ba32fb67d789b984e2146229693b81f29dafb604b9
- SSDEEP 384:99UAN0xMrumxGYqfoOT0hfkx00hwZfHNz:9v5Gpfo80zlNz
- TLSH
  T1C152C9146B11BD4A06ACB7F77226E0D4B1E66C6AAD44D8F7F20ABC32C532685F4007B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  socket.io.min.js
- Size 45KB
- SHA256 b0e735814f8dcfecd6cdb8a7ce95a297a7e1e5f2727a29e6f5901801d52fa0c5
- MD5 9713e9c4d98ccdc59a5d806719105c33
- SHA1 e6494a8b98a45068949015ab22135bad6f596e11
- SHA512 f04c40463596908965325373560ec92aaf512963e524005050daba62f02313f1e86dcb631ff340f9b4a20cc0efa2e0558e9e16c277f554fd4e12fed9823b6ec7
- SSDEEP 384:Hm6sC2J5KtekYtfe7CEYWuPRWnym7z5Q/5fWJOZTXGTe+F2w5UYKTbPBdDCjRlNS:LsC2JmKf7UZA5fDGSOJU52TP1ELXR1oM
- TLSH
  T1F123B6C9F291706183E370B1857F050BF33BA958688A816CB718D9F16C7C99E6127F79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy