f50742d15fbdda1f4df58989c191c493d53eede4d600ede0fb86dfe9678bdcbf | Triage™

Login
Reports

Overview

overview

3

Static

static

1

admin.js

windows10-2004-x64

3

admin.js

windows11-ltsc_2024-x64

3

api/category.js

windows10-2004-x64

3

api/category.js

windows11-ltsc_2024-x64

3

api/discount.js

windows10-2004-x64

3

api/discount.js

windows11-ltsc_2024-x64

3

api/index.html

windows10-2004-x64

3

api/index.html

windows11-ltsc_2024-x64

3

api/invoice.js

windows10-2004-x64

3

api/invoice.js

windows11-ltsc_2024-x64

3

api/keyboard.ps1

windows10-2004-x64

3

api/keyboard.ps1

windows11-ltsc_2024-x64

3

api/log.js

windows10-2004-x64

3

api/log.js

windows11-ltsc_2024-x64

3

api/miniapp.js

windows10-2004-x64

3

api/miniapp.js

windows11-ltsc_2024-x64

3

api/panels.js

windows10-2004-x64

3

api/panels.js

windows11-ltsc_2024-x64

3

api/payment.js

windows10-2004-x64

3

api/payment.js

windows11-ltsc_2024-x64

3

api/product.js

windows10-2004-x64

3

api/product.js

windows11-ltsc_2024-x64

3

api/service.js

windows10-2004-x64

3

api/service.js

windows11-ltsc_2024-x64

3

api/settings.js

windows10-2004-x64

3

api/settings.js

windows11-ltsc_2024-x64

3

api/statbot.js

windows10-2004-x64

3

api/statbot.js

windows11-ltsc_2024-x64

3

api/users.js

windows10-2004-x64

3

api/users.js

windows11-ltsc_2024-x64

3

api/utils.js

windows10-2004-x64

3

api/utils.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
mirzabot-host-0.5.4.zip
Size 3.6MB
Sample260916-w72lpace25
SHA256 f50742d15fbdda1f4df58989c191c493d53eede4d600ede0fb86dfe9678bdcbf
MD5 255b6d9e1a11494f6a26226ae0f2955d
SHA1 ed60b744587794ca1e04d074c343b5bdbd7f3858
SHA512 31a0d00963c39b272942c6c44b2e8300010a6366f61f53efdf96cbbb0cd2617737faa8bddba94f7110fe522532ee7909c376685783959e7e1ee8c2277db9e816
SSDEEP 98304:1Cy97qdIQ4tZGvYWM/jjkFX1nT1S0ZnbUuIOwZ6X:1lFrRGgf/nJWgdaX
TLSH
T16D06F1B90608A194EB0FDD30EE4DD95AA0AED7819092F4DB2E454542D60EE8DE7FFF04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

admin.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

admin.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

api/category.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

api/category.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

api/discount.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

api/discount.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

api/index.html

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral8

Sample

api/index.html

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

api/invoice.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

api/invoice.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

api/keyboard.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

api/keyboard.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

api/log.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

api/log.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

api/miniapp.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

api/miniapp.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

api/panels.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

api/panels.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

api/payment.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

api/payment.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

api/product.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

api/product.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

api/service.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

api/service.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

api/settings.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

api/settings.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

api/statbot.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

api/statbot.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

api/users.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

api/users.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

api/utils.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

api/utils.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  admin.php
- Size 571KB
- SHA256 b3ac638cfc26b7cbabc6e43b9708f57e0dc105feab8e207384969e5c3ca129e7
- MD5 54704ab754b45ee2d4c1e1df59c84147
- SHA1 c3d6c8658b3335bd86121d1a51dd1ebd6feb152a
- SHA512 2a4700f58f376882cd10f520f097d691283be4f5dff276a71a9bc5a5d215627904f1b851d97f50471215f53e269ab0c248a1a32d53b67e436a19a65940cbc07e
- SSDEEP 6144:CkmX2nXhxVBVQHKCGloUBO9s5uc72MnN5bIeZkxzSbM7o5SL9ZsdZs+5qTklxORH:Co/P26PSjZ
- TLSH
  T139C48610B0DFDEA08A67B09BEB19C1182F4897032889F641FF6C75C44F6A765FDB9168
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  api/category.php
- Size 5KB
- SHA256 2e78c95338483a20fda60bdc0ce3cd6c294a7b29c7772792e605f3ae105db2eb
- MD5 f45d63b471463d5ac0899fd158f15356
- SHA1 0799962fd98f5e6cd7fd299d92668903617c0bc4
- SHA512 a532740fce72b8edf2e6e47ed1712da4687ed862a23c17855efa3bd9d514c58fab802553d25d3c5a9e8bc8134c43ecf8e1bbe34603d12b1f02649e2d229e8b39
- SSDEEP 96:c9kdtRBKeESmqkPyKRdBTRWlw3cL7UddA/+:c9mBlESmqkPdBTsK3e7U3A/+
- TLSH
  T19AC1023D34BF829642AF946E47D3DC0E26A7914326C6EDC07E5EDD801F8C498ED5C266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  api/discount.php
- Size 10KB
- SHA256 541e0531de8d81b5678c87d3f063ef049a3b2c50957ae69a540b9d74aba1d154
- MD5 aeb1233b7faa81d7a7a703baf97d3689
- SHA1 0212b0709be2fa35643ea51942eed6510d7533e9
- SHA512 50ee2f2cde478c25f62fc5d774be63929ec521424cd24c1c711882b7d78276b5ea649415260811d75aab28f6ef7e0a54077ca56ffc3ff5edbffbe1fc9a18bb63
- SSDEEP 192:898Az6A/mCKQL3utBHHNaPeCOGrnAAn6A/mw88s/tzxLDas/Txhta0CEJ9Lq+BHO:8SAmAOCZutBNa2CTArAOGs/Rh/G+B5Kh
- TLSH
  T13E322051ECA7892149EE903E3F93CD1A3BE790C312D1F5847E9D66801F4C4EAFB64265
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  api/index.html
- Size 97KB
- SHA256 d4a45c8f4d1c4d85175944611b14bd1c1ace9723221682ec810b382efc4cffca
- MD5 895e10a0efc1eea322582a7e01a650a4
- SHA1 940eb01326eec90086a2003a07f2899e481b21db
- SHA512 2413f5582da56445f787add7594b3258e71dec11fed402c19ca0da6b9847162b961ae9eb5a299ded171fc1b8894e028d286c38dd7f984f13d66dcd3074f7b9e8
- SSDEEP 1536:DpK5sCB1mFYvzv9UmLVJKPBMxFeO1XgiLzD5iV:7Cmi6iuPBMBLoV
- TLSH
  T1B8A3A769B9B646B30653D22152F62615FB36A503E10DEC10B9EC03600F1DA9F66AFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  api/invoice.php
- Size 14KB
- SHA256 d2761aad35f3f202bbb689fcb779e61b494a2ca659a2e85ebc71126ca45d9b46
- MD5 63c8cb4c763916daa5c126f2701907cb
- SHA1 dcb1744c85acf5fb0b3c69debecdae836ed0320d
- SHA512 bdf0b37c8acff09f3693f0351b19a9a6722e13a6fe804ea5435f68275ba95267dfc7e6ccd7009efae771aeb86d5d7a2a3787f139168d3fad67c04f894501dafc
- SSDEEP 384:VV0IZjQXK0MAtUw3NMsFMyDpi5E7uOuMsMl:n0mQXTo+l
- TLSH
  T1D662761834EB40B382EB506E5FB7CC547ADE410321C0B5907FAF66842FC9A7DFA61166
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  api/keyboard.php
- Size 2KB
- SHA256 88f8ba9033fc7dd9e468edf6a31258059a702531f2e44fa4778fc1282b8c5dad
- MD5 89456a82f0d2fa16ebe717dc61963e8f
- SHA1 33be192ea80d662ab447f2347c6b89a9c5c57e59
- SHA512 0261cdaa2c487009befa7b3d304e6dfb0dc001c3f05e958e3a86b4ee37f946bfc35a2922eef183d0d2fdc3118d88e95ffecd3d79057e48caacb143abde90218a
- TLSH
  T1F541C951105FAE9ECD85990BC92D1069C34585138C59E280FF5C3EF04FCE268E5FE26C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  api/log.php
- Size 1KB
- SHA256 1ee9276edf69ba8588c4ea4a3c934d848d4cb9b6a0579268aadc3d02d9f33569
- MD5 632c7fc1b48b283de52c135cd06fb22c
- SHA1 4da96d1927e0c19eba8ebbc485c45a098acf3be5
- SHA512 2deb5dca402be7173a6b5daf8d38405e7e72674413121e192434a1e382016b08cf3fbef9f29ddb47738c643720d42f157745acb9b5aadfc6586ea3b019256e7f
- TLSH
  T1E111CC16146B69231BF9AC852BA794A8244AD80B25C4F090FDFE574F2FC86BCA631171
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  api/miniapp.php
- Size 48KB
- SHA256 bb6f64d711233d5b20a68e72c04de20d36571c900f97697a67e7470aa934f7e6
- MD5 cc84ad5665e91d89999971ba605e073e
- SHA1 3fa0483a7a09bb6dd2c94e438af836c3af2a0ac5
- SHA512 b6e5eee6e004b9c314568d2b13f4718849c8ef9cb919d3dfe93abe501d636473ebee5c43168c85eeb2cacb1d2b512075b6d50ae5b757b9e01b825fec2ee2a904
- SSDEEP 384:On8bUvHDv25kOZxrum2KsB+k3gJZF+A8tcsqwV0wEAlDsgvpWg/w+sUhsgvUZNiU:9C5o6cZynCx5T3zT2iiTrM1wgYH37U
- TLSH
  T13023641870FB44B0419B502F8B6FD9986BD4850315CAEE507F6E75847F88A3EFAB50B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  api/panels.php
- Size 17KB
- SHA256 3c4ce754676dd282cf7708b7ed5b345aa95aa060f2fe09012563accd516e6654
- MD5 a507fa9d1c70ec7992da2867fedb3157
- SHA1 21c429fcb583f0312997cd77bdcd12fa5a401849
- SHA512 1c422143d17bd27ec83941c1ee175f8ea3a757012907d8d4a94d6858c1cad53490e5d61a5e8ea8f8ad766fd5a6a9db8a7ce33fc3d717694d7f5d719a21e572f0
- SSDEEP 384:8dRXg6gCm9sSsVagkMSAtsOlshsyrWHfrq+qsHYs4NuuHJuCYsjX:8e+Tui+r
- TLSH
  T14E82652134AB81F5516FA43A07EB9C081ED3558316C3F6907F5DA5882F8C9BBFA307A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  api/payment.php
- Size 2KB
- SHA256 53f8cb3a621e014eaf39a67b69bbd349d3bf4cce559d92db367d1019ee332138
- MD5 9ad21dc8d8216bee41dd6a36be7432db
- SHA1 5c3c9d4df57c8dd2a7a0d0a068ef20327b4c8681
- SHA512 c9ab8bf7f70c514cbab33608210937f166bab2ea4050612ece8e44e262700475bf6bd89100579a6277661ce8d3b75b5dfa57592247cd3a921bbda06a8960bd7f
- TLSH
  T1085144123497416182AAE86F5BA6CC2627F6E00736C4F580BD6C47880F8DAF9AA11166
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  api/product.php
- Size 15KB
- SHA256 c7fcbbc0074653e2cdcd18e42824b76c4cc146c1f86ba511c9bce1e82cb8e5ce
- MD5 44c534cb723c1753302a751cc008d46a
- SHA1 03a475fdf0ae59c1e2dded7b0916eb60b643bc5a
- SHA512 7344cc6dcce4bcc966b0df8bcc1ea27c528fb9a133153ecca891c3a1f6e8333c970e4e113dca338b5b6a7901df8c4b6f96ca00a16eb41ddfed808a6fc1cf35cf
- SSDEEP 384:8yX16iIsncsnLuti8nsfBCJ/Rksf60OOs1uZluuHJmO062v:9tw/Rud
- TLSH
  T1B7624095F4FB81A1A2AB543E5BF38C893ED3244712C1E5803E1EB5802F4C92AF7751A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  api/service.php
- Size 2KB
- SHA256 12c50f0fa738c81123c6b7affd8769a1eb4b677eeb7984721ba0ed4ca5f05f31
- MD5 b8444e6d359689e46f84225508076137
- SHA1 f7a0a9dedcef3bb6052512d70a7c3e5966b61f09
- SHA512 6d790497280bc2589f9ea593e27169541bf604c1cfbe667bd0528c9dbf97bc82dbba363ade60e9ad863aecf47c16ff3a3dd0e4cec76834b7d7fd17e5cdf38491
- TLSH
  T11B41830134A3237582DAB86A0A83CD0D24EED51767C4B0407E6C53081FCCAEDBA6223B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  api/settings.php
- Size 4KB
- SHA256 08fbaf0fa8e833d585e7c0ab505a44b530aca1489c2880a15c3a90cd658ce7b5
- MD5 aad5d1ac4e2ffcfafb6c623089858f2b
- SHA1 c1b18ec8ee183367dcc2a26e92dfc44476bb7010
- SHA512 ddc1705fd16be9da03f9ff84e5f1fd73d18640101086b1b3c862274ee5b93e784f6e2a10103e9ae2f72280b82946ec9b3921963532c877d4ef6a652810db2ba2
- SSDEEP 48:v0ISK81daZHsVwGSE8aOc04UpWiZY2Kb9APRK5JHNW1rMNWO8RjeNiUVCqB:c91dOkAMK5bOYyP
- TLSH
  T1A591755118934D2A53AEB47AC9A78D0B73A280532FB4D5A4FD3C0E801FCC8E59E157F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  api/statbot.php
- Size 1KB
- SHA256 d4f9f07eb88f811ee46e7aba867d4069371239ea3409701a5a939857789c4597
- MD5 30aef4abf3e58492ff199edb4ed0b0d0
- SHA1 c67c2b97b82fa66987204155503be64a9e08476a
- SHA512 1b401d62733a651c4c2884c479f4fe5cebe8a3547f5277382b58c588f3a2a423d1cfefe29a7ebab528c34561347c8bf611bf7dfb1740b6573a97e61934008a77
- TLSH
  T13411CC56146769231BF96C822BA7D4A8204AD80B25C4F090FDFE975F2FC86FCA631171
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  api/users.php
- Size 30KB
- SHA256 1e7c41aa6f43dbce742c808cba7e3a8296176ed342b926b288508ab9f6657332
- MD5 36f8330e7f2b60a3b970affd89326dbe
- SHA1 72f2c8295190eaae19511c42d2236ed6e2e04f67
- SHA512 e60c4963b119d29fda80138497ee514596e1ab76c28007cca88b2f50b49b4e4ffcf08c943ed80bb9df2b08ea0567b8b0b6bb38055653648fd27c8aa7fc3e5bf0
- SSDEEP 384:kpI5fRGUIspzQjsD8WvJeKEGYGk7C9OkUjiGeAZCOybUoFOglCAEnNbxx:wWGzjQ8GeKdWxiUoFOhb
- TLSH
  T149E2850032A3862593BF857E5BF3CC0A2AD3A1131784F5447D7E84949F8D1ADFAF4AA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  api/utils.php
- Size 6KB
- SHA256 e1ca13fd7b15c4126503a898a3d0f5d329d86747fe72cfaba8b981e2f123dbf7
- MD5 a8aab262f19be74ed8ee253ef8b06465
- SHA1 fbb07fc3cdd19dc3538d443053b14d10fb013d0d
- SHA512 feebd84a135f9c02d28c45a89ad58ef8099b52aeb8ac847a49daaa7fe0643ecf7e60d0a581b9749f8d51d799df72a1b64d48cb2d3b45319d5da3541d99a0194e
- SSDEEP 192:pusFhmtj86EOqnvX8PYndwccW8E9TWQDr3Qro9D4W6wy7lDPz3:pua4zEZmsVDBID7lDj
- TLSH
  T1D3D1104438E730A18557A47C4BDFDC097BBA9003260CD640BE9C43D92FD867DEAB2A9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy