Archive[.]zip | Triage™

Archive.zip

SHA256 069c447748119139977ec4d6c9e8e0d2eaf835e099d6252c191f674c406fb87d
MD5 a54a4d4ae30a24a29eb360855611315a
SHA1 d564f70eb33a0f5da21e13fd904e508a9c76fb48
SHA512 01504b19fc800442f4ff2e4bf97a1fafef8a5f4717959fc199855fbe756009a3dfa6fc4d0b533d94bc1656b5f06c24508daa0f1bbe9c9eaaaba6df41681def2b
SSDEEP 786432:7BTXIRfijKb/UerpkvWUDHr57mwUQjA6mo0D2gv85q1:7BTXIR6jwUdOUDRuF00fkY1
TLSH
T11777334FC873E7EDD2FAC13D1435232009255F90A893F65CEEA9136A38937DA5EAD601
MD5 SHA1 SHA512 SSDEEP TLSH

__MACOSX/._node-v26.9.0-x64.msi

SHA256 967c73143bac454becef4815f4b5227a37681f10ec4112d198e46cb4160f0cbf
MD5 ff93a899273e57785c38d4263bd39cff
SHA1 f8aaf1212f874fefec3fee375ea5b0e0c30a680d
SHA512 8f969bdb5d0b9467fe2d97d541953aa84c9df55b4c1c4cca058f4edbbe8a5e456b207d03eee6e7c4a6c2aa78ed654dc0e614034e82f68415ef11b7783916eaec
TLSH
T1C1F0F12903D016B3C646C3F50493FB6D43AB107EC8C6230F751988064B40AD02B74396
MD5 SHA1 SHA512 TLSH

__MACOSX/._npm Install Dependencies.txt

SHA256 56935f9fc22d9e6a8bbd8b22b18244594c8e57def8a5f8dd836002927060a0cf
MD5 6009b225311525f181cf60c6eb3cfeea
SHA1 25e7283e6ce37abaf3522c876572c98d2d7574b1
SHA512 52bbcb16c110baaa6121b99018adb74c73930d9246cd239a68c963c5530e88630589ff3e5b0834003d31603030d93a78d00ed58a56da1cf6a89539469a775374
TLSH
T1A6F0AB9E13480602F955047090CEE341A315F83CC2966FB7B6E9CD801E10ED43EB0ECD
MD5 SHA1 SHA512 TLSH

__MACOSX/._stage4-decoded.js

SHA256 df822a58a4fd24b735e3a4e41eb674d60ae456fdc6e2e99e5899dba1c2ab1558
MD5 4e677981b9665a45e431fef09a870022
SHA1 1d32fc9e0501219bd7870b18105a270fbbc6e2fd
SHA512 0d3df893d44876904c9316ac22d00813742c33428cfcd8416bdbc9560b4bed8e03a016cee57fb51c6e5f9184c77b26a99afd554e07aea86814994e6ec877bc28
TLSH
T15AD09B7052041145C552C6F806452EF4621D74B5C7911263B74E864417009607FFC915
MD5 SHA1 SHA512 TLSH

node-v26.9.0-x64.msi

SHA256 9abc94e80f63feca139725812c2a8a78e00db986477d12c3042e876045f056bb
MD5 8c354b7905068db274234372eec6e7ec
SHA1 562367ffbb001575e2aa5e882ce24a89add7eba6
SHA512 8134824f44aa68d7de287d35a07cdd9eaeeee29d81de264ff543ebeb5c3265a031b32c82e89e9939b54c371cefc8dda484bb290582934a9838dd13bfad289f4c
SSDEEP 786432:8PEFnFYdXuSz/Cpu1jCJOvFR09611Z24/2U:8PE5FGujA1j3sw1Y+p
TLSH
T116873327F2A21AB7C1FEC135D06393506F3A7E103751469D8A74E15CBE362E42AFA706
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

681fff70ae781392c997d833946d614c201e2e18374d9c8bc13293bb1be21c0e

Digest Algorithm

sha256

Digest Matches

Trusted

Prehash

Signing Certificate

CN=OpenJS Foundation,O=OpenJS Foundation,L=San Francisco,ST=California,C=US

Chains

Sep 16, 2026

CN=OpenJS Foundation,O=OpenJS Foundation,L=San Francisco,ST=California,C=US

CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=OpenJS Foundation,O=OpenJS Foundation,L=San Francisco,ST=California,C=US

Serial Number

33:00:06:7f:42:c3:2c:a1:51:59:01:b1:6a:00:00:00:06:7f:42

Issuer

CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 15, 2026 - Sep 18, 2026

Subject

CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:16:31:92:8d:92:02:65:7b:9a:00:00:00:00:00:16

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7A00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:58:65:cd:eb:3f:a1:d7:fc:d2:00:00:00:00:00:58

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

npm Install Dependencies.txt

SHA256 015db072b4ee8b66dc03bb62e8114082fff230a66c1222dd040831fbf15ba91a
MD5 7ba85a93609eafd5e18aefd3b3c3db15
SHA1 db5dfa82991eb93bb18f9726a7b93f1d8a72005b
SHA512 3d2b732ca282ba5a018c9194cfe29506bfd1c5b8ce3fc1c43ace6b5a1f1493737967942b03c458fb96e991b4ca5aef72330c8e9ed886a6b3704f5ef3393df8a4
TLSH
T1A7A0021ED43408B8BCB2237544B360102733415717795C121DCFBEB4192300C379B48F
MD5 SHA1 SHA512 TLSH

stage4-decoded.js

SHA256 ec032d357d1685220bc38ecd6d3cf3493b4eb092ed3b6409ec6b643a8c6cae57
MD5 44e583906374b4e0b88e578258072ce1
SHA1 bedb6750d87589cf33a965168f3b20de8d7da6b3
SHA512 d66b6c3376da2fe00a6959108004987a309f4231b3031218da032766e74b0cb66dd44d714fd74494af59f913c1c5726c6b0afb08decb5cffeb04bd76aaa86e40
SSDEEP 6144:EbV9SKOiqtq+zNrJOaD+2y43bJwsI0EiEO:EbV9XIqiNrnhlwsIh/O
TLSH
T19B343A56B3E6353987E129E0517A0112EAB88F513909C1D4F16CEC473E3B5079ABBFAC
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

Archive.zip

__MACOSX/._node-v26.9.0-x64.msi

__MACOSX/._npm Install Dependencies.txt

__MACOSX/._stage4-decoded.js

node-v26.9.0-x64.msi

npm Install Dependencies.txt

stage4-decoded.js