Overview
overview
6Static
static
1ci4_payrol...nts.js
windows10-2004-x64
3ci4_payrol...nts.js
windows11-ltsc_2024-x64
3ci4_payrol...on.ps1
windows10-2004-x64
6ci4_payrol...on.ps1
windows11-ltsc_2024-x64
6ci4_payrol...bug.js
windows10-2004-x64
3ci4_payrol...bug.js
windows11-ltsc_2024-x64
3ci4_payrol...4.html
windows10-2004-x64
3ci4_payrol...4.html
windows11-ltsc_2024-x64
3ci4_payrol...on.ps1
windows10-2004-x64
6ci4_payrol...on.ps1
windows11-ltsc_2024-x64
6ci4_payrol...n.html
windows10-2004-x64
3ci4_payrol...n.html
windows11-ltsc_2024-x64
3ci4_payrol...e.html
windows10-2004-x64
3ci4_payrol...e.html
windows11-ltsc_2024-x64
3ci4_payrol...n.html
windows10-2004-x64
3ci4_payrol...n.html
windows11-ltsc_2024-x64
3ci4_payrol...add.js
windows10-2004-x64
3ci4_payrol...add.js
windows11-ltsc_2024-x64
3ci4_payrol...dit.js
windows10-2004-x64
3ci4_payrol...dit.js
windows11-ltsc_2024-x64
3ci4_payrol...add.js
windows10-2004-x64
3ci4_payrol...add.js
windows11-ltsc_2024-x64
3ci4_payrol...iew.js
windows10-2004-x64
3ci4_payrol...iew.js
windows11-ltsc_2024-x64
3ci4_payrol...x.html
windows10-2004-x64
3ci4_payrol...x.html
windows11-ltsc_2024-x64
3ci4_payroll/spark
ubuntu-18.04-amd64
1ci4_payroll/spark
debian-9-armhf
1ci4_payroll/spark
debian-9-mips
1ci4_payroll/spark
debian-9-mipsel
1ci4_payrol...er.ps1
windows10-2004-x64
6ci4_payrol...er.ps1
windows11-ltsc_2024-x64
6Analysis
- max time kernel
0s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
25/09/2026, 18:06
Static task
static1
Behavioral task
behavioral1
Sample
ci4_payroll/app/Config/Events.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
ci4_payroll/app/Config/Events.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
ci4_payroll/app/Views/errors/cli/error_exception.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
ci4_payroll/app/Views/errors/cli/error_exception.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
ci4_payroll/app/Views/errors/html/debug.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
ci4_payroll/app/Views/errors/html/debug.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
ci4_payroll/app/Views/errors/html/error_404.html
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
ci4_payroll/app/Views/errors/html/error_404.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
ci4_payroll/app/Views/errors/html/error_exception.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
ci4_payroll/app/Views/errors/html/error_exception.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
ci4_payroll/app/Views/errors/html/production.html
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
ci4_payroll/app/Views/errors/html/production.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
ci4_payroll/app/Views/layouts/login_base.html
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
ci4_payroll/app/Views/layouts/login_base.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
ci4_payroll/app/Views/layouts/main.html
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
ci4_payroll/app/Views/layouts/main.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
ci4_payroll/app/Views/pages/employees/add.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
ci4_payroll/app/Views/pages/employees/add.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
ci4_payroll/app/Views/pages/employees/edit.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
ci4_payroll/app/Views/pages/employees/edit.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
ci4_payroll/app/Views/pages/payslips/add.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
ci4_payroll/app/Views/pages/payslips/add.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
ci4_payroll/app/Views/pages/payslips/view.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
ci4_payroll/app/Views/pages/payslips/view.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
ci4_payroll/app/index.html
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
ci4_payroll/app/index.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
ci4_payroll/spark
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral28
Sample
ci4_payroll/spark
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral29
Sample
ci4_payroll/spark
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral30
Sample
ci4_payroll/spark
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral31
Sample
ci4_payroll/system/Autoloader/Autoloader.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
ci4_payroll/system/Autoloader/Autoloader.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target ci4_payroll/spark
- Size 2KB
- Sample260925-wp71rashpc
- SHA256 acef48f6bfd7a2ced602a8dabb4a18006d9a051402124c4ab92862f885f4cd23
- MD5 c32763d90608685a8c781ff6521533b5
- SHA1 c8cb87388573237a0063ded8c0c038bf56dd2b58
- SHA512 5fff792f2e08656b6eda16849d192f11f3be77f62b65a9ea7cff8c2d5434c6782cf9adb1779d21b6ba952297e524b0b5020c72f0313ad8d46463bae989e74892
- TLSH T110518653BEEC027344B1E9EB660E4661C325997EF350F7204819111C5EE959083FEEEB
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
/tmp/ci4_payroll/spark/tmp/ci4_payroll/spark1⤵PID:772
-
/usr/local/sbin/phpphp /tmp/ci4_payroll/spark1⤵PID:772
-
/usr/local/bin/phpphp /tmp/ci4_payroll/spark1⤵PID:772
-
/usr/sbin/phpphp /tmp/ci4_payroll/spark1⤵PID:772
-
/usr/bin/phpphp /tmp/ci4_payroll/spark1⤵PID:772
-
/sbin/phpphp /tmp/ci4_payroll/spark1⤵PID:772
-
/bin/phpphp /tmp/ci4_payroll/spark1⤵PID:772