c43b5a2a9726c4e0d41f1ed3d94f67d7fdf4ec2c2d89ec4eb3b6f85ebe436618 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

sqlmap-mas...ion.js

windows10-2004-x64

3

sqlmap-mas...ion.js

windows11-ltsc_2024-x64

3

brotli-dictionary.js

windows10-2004-x64

3

brotli-dictionary.js

windows11-ltsc_2024-x64

3

sqlmap-mas...ct.vbs

windows10-2004-x64

5

sqlmap-mas...ct.vbs

windows11-ltsc_2024-x64

5

wordlist.ps1

windows10-2004-x64

6

wordlist.ps1

windows11-ltsc_2024-x64

6

sqlmap-mas...t__.py

ubuntu-18.04-amd64

3

sqlmap-mas...t__.py

debian-9-armhf

3

sqlmap-mas...t__.py

debian-9-mips

3

sqlmap-mas...t__.py

debian-9-mipsel

3

sqlmap-mas...t__.py

ubuntu-18.04-amd64

3

sqlmap-mas...t__.py

debian-9-armhf

3

sqlmap-mas...t__.py

debian-9-mips

3

sqlmap-mas...t__.py

debian-9-mipsel

3

sqlmap-mas...eep.py

ubuntu-18.04-amd64

3

sqlmap-mas...eep.py

debian-9-armhf

3

sqlmap-mas...eep.py

debian-9-mips

3

sqlmap-mas...eep.py

debian-9-mipsel

3

sqlmap-mas...eck.py

ubuntu-18.04-amd64

3

sqlmap-mas...eck.py

debian-9-armhf

3

sqlmap-mas...eck.py

debian-9-mips

3

sqlmap-mas...eck.py

debian-9-mipsel

3

sqlmap-mas...run.sh

ubuntu-18.04-amd64

1

sqlmap-mas...run.sh

debian-9-armhf

1

sqlmap-mas...run.sh

debian-9-mips

1

sqlmap-mas...run.sh

debian-9-mipsel

1

sqlmap-mas...t__.py

ubuntu-18.04-amd64

3

sqlmap-mas...t__.py

debian-9-armhf

3

sqlmap-mas...t__.py

debian-9-mips

3

sqlmap-mas...t__.py

debian-9-mipsel

3

Sharing

Copy URL Twitter E-mail

General

Target
c43b5a2a9726c4e0d41f1ed3d94f67d7fdf4ec2c2d89ec4eb3b6f85ebe436618
Size 8.4MB
Sample260930-lnbaaatyc1
SHA256 c43b5a2a9726c4e0d41f1ed3d94f67d7fdf4ec2c2d89ec4eb3b6f85ebe436618
MD5 027e952d07da91765b98f7bc1455d59a
SHA1 cd6104f09e8027fb96d322e360887977abea44b3
SHA512 665077df141154979b7b19ed331d7789ed21674c554904ae0b1c901c5cf9038dfd69b8630a907c881b7404310318627f2b185e129fb7ce8bed9dd328f4dc088d
SSDEEP 196608:xobrnOQiMXRLjWvOcsPwVx1n1YVucDKN9aiffe+kPRB9ROWNrN:xobrsMhX0PsYn11YVucDKN9ai+++qWNx
TLSH
T12E9623FD5A5E5EA8C912B8BD21158263FB30AE5C61A9EE8FD7C110B01C572177E082FD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

sqlmap-master/data/procs/oracle/read_file_export_extension.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

sqlmap-master/data/procs/oracle/read_file_export_extension.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

brotli-dictionary.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

brotli-dictionary.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

sqlmap-master/data/txt/smalldict.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

sqlmap-master/data/txt/smalldict.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

wordlist.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

wordlist.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

sqlmap-master/extra/__init__.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

sqlmap-master/extra/__init__.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

sqlmap-master/extra/__init__.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

sqlmap-master/extra/__init__.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

sqlmap-master/extra/beep/__init__.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

sqlmap-master/extra/beep/__init__.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

sqlmap-master/extra/beep/__init__.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

sqlmap-master/extra/beep/__init__.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

sqlmap-master/extra/beep/beep.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral18

Sample

sqlmap-master/extra/beep/beep.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral19

Sample

sqlmap-master/extra/beep/beep.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral20

Sample

sqlmap-master/extra/beep/beep.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral21

Sample

sqlmap-master/extra/boundarycheck/boundarycheck.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral22

Sample

sqlmap-master/extra/boundarycheck/boundarycheck.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral23

Sample

sqlmap-master/extra/boundarycheck/boundarycheck.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral24

Sample

sqlmap-master/extra/boundarycheck/boundarycheck.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral25

Sample

sqlmap-master/extra/boundarycheck/run.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

sqlmap-master/extra/boundarycheck/run.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

sqlmap-master/extra/boundarycheck/run.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

sqlmap-master/extra/boundarycheck/run.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

sqlmap-master/extra/cloak/__init__.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

sqlmap-master/extra/cloak/__init__.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

sqlmap-master/extra/cloak/__init__.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

sqlmap-master/extra/cloak/__init__.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Malware Config

Targets

- Target
  sqlmap-master/data/procs/oracle/read_file_export_extension.sql
- Size 1KB
- SHA256 606fe26228598128c88bda035986281f117879ac7ff5833d88e293c156adc117
- MD5 36227f8e5fb643c92a739746df693dda
- SHA1 cc9ece1550c0dc7613f1496e115c16e8f0b5a94b
- SHA512 12ce118f39b32b6b79c44350c3330c83dd6a8b0c7525fa80f155e7bd1cefa3699b5280ce37baa8fac164553419395877bcff3beab9948e5ff074e3a39b5f1f7b
- TLSH
  T19B4110DBBCEEBF805308D4B3E0562BB3EB46AC77D8556082E32BD84A996D501D1B5182
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  brotli-dictionary.bin
- Size 121KB
- SHA256 5687ac0104350d9e90cc16018b6147945787d4e7f95e73917c575a7f41122775
- MD5 473de578da3d807147df9ed0c9ba74da
- SHA1 eba437c7cb2a8d524d2e3301d7e3110aef611c36
- SHA512 481fbc49707e27bcf00b540292ea1af395241cb61e5dfee33cb73972cfc573a8d908facf2bca43683b82503bd86488c07583970e3ff5d71b9726bcceeab5bdc0
- SSDEEP 3072:K4lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxBp:K4AhdNorGvHdbi09GJj
- TLSH
  T15CC36CA1F3051336825B627AE45967B9F37582B893670520B4AD06AD60C3CA4873F7FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  sqlmap-master/data/txt/smalldict.txt
- Size 78KB
- SHA256 522cce0327de8a5dfb5ade505e8a23bbd37bcabcbb2993f4f787ccdecf24997e
- MD5 999fafc8f8fdbfd04d506b990eaa4ef8
- SHA1 fba413f64f3f2dee92eff037bf381a87b6089153
- SHA512 ab240970c620b2aed1f1f69844b91a45375584630a1ed99033534f27499ebea9112f413e1f20cd3fe952f8070763b8f07818d90e99d5dbbd2fd91162521fac8f
- SSDEEP 1536:TPuyoUX9PPeSLRynd6AlWnwIv9hk8+//D1cnRbLEbmNBe6dv5PNQ+gk/BXsYTQEy:TPuyou52GRid6PnwxJ//G3EeP/DXYEy
- TLSH
  T118737CA5F6643077FACF57CED4013F81950975336D22A06ABBB806CA110BEC98976E37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral5 behavioral6
- Target
  wordlist.txt
- Size 14.2MB
- SHA256 eca20556f2e8a1849a3b80b84c9126a0293d1a932f162419c131ae13728eecb4
- MD5 c2f9bf856ff5943bfe5ea790b0340bbe
- SHA1 b464bbbe8c62a23710aecadf0ea117e9ebdd1180
- SHA512 9595e7109d20a1c521960929e20849eec2ec234594d4d25a48ecd2e6c0476561f14f687316c929b98d5ae2330a8a2cc563ee4bbb951f97e3b215a4e864c2c131
- SSDEEP 49152:v6IqTYDRJEelhlUgMIbCyIhSMqbBBy3TJ7H1BVm1LbcCdJGoFBq0JNJ+D41kG3B1:x
- TLSH
  T1E7E6CFB0FAD0347AFA8F9B4E444D3F40422DB7336D22649AE76D17C40607BDA4A69D27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  sqlmap-master/extra/__init__.py
- Size 146B
- SHA256 1966ca704961fb987ab757f0a4afddbf841d1a880631b701487c75cef63d60c3
- MD5 c03353210afc77ad2d6b010ffeb6efe2
- SHA1 6302821fc2a468043c5c07f850c370260406b4db
- SHA512 3fe2f9f3b473d558a5aa8d0d8b87e5ea7805858752d0076ecbfd7b27995c37eec4151bc2facfa28c651c519a99eb63491613b8e4bdb437e27e75af798d739b32
- TLSH
  T152C02BFF461C0337C4008D9A103E8E58D530141D07C7F40E5034AF503C00395015DBC4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  sqlmap-master/extra/beep/__init__.py
- Size 146B
- SHA256 1966ca704961fb987ab757f0a4afddbf841d1a880631b701487c75cef63d60c3
- MD5 c03353210afc77ad2d6b010ffeb6efe2
- SHA1 6302821fc2a468043c5c07f850c370260406b4db
- SHA512 3fe2f9f3b473d558a5aa8d0d8b87e5ea7805858752d0076ecbfd7b27995c37eec4151bc2facfa28c651c519a99eb63491613b8e4bdb437e27e75af798d739b32
- TLSH
  T152C02BFF461C0337C4008D9A103E8E58D530141D07C7F40E5034AF503C00395015DBC4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  sqlmap-master/extra/beep/beep.py
- Size 2KB
- SHA256 8c4b528855c2391c91ec1643aeff87cae14246570fd95dac01b3326f505cd26e
- MD5 5781a9539fe2e4b5fa5e72a29bd508da
- SHA1 6ba8da42bb9cb6f729598165a9bc075af4890641
- SHA512 54874556314a3136920b8be804136873b28ebd9be610654a8a73fbefda693b216b738e4bf184882672c6167cb17c399662110b94369acdbea67b26ea960763a6
- TLSH
  T1F751429E0829882BD3C3D48D909BD07C2662BE174845693DB3FCA076AF9851DC7B4F5D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  sqlmap-master/extra/boundarycheck/boundarycheck.py
- Size 18KB
- SHA256 38aca7e33f94b0330251084c9133ffd7aaa46570c0d8d5d3692e4b456406dfbf
- MD5 a84dc59f2cbcb3e60309e9bc893e7827
- SHA1 77c45dd0c87f7b5ae2ab75e86dfb6e229fd2e4dc
- SHA512 0db7e87e41d4930c65e14a213031433fa7e2355631ddebe236e0cbbd7cde1c71d1231e5c719a353ce8153c771e42b866a43662ab3bb42db9ee08c01b8d833335
- SSDEEP 384:cVnnz/ITez/GLhKTkEUXTuRftTWez9yPTB2qTdmUOTNWkO7EWZ:YnzATEdkEUjuzWeZAPCjWZ
- TLSH
  T12D82C8367E41BD37A3C3D06549A76181732FA92B55116438B0ECC2984F9D73842BEEF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  sqlmap-master/extra/boundarycheck/run.sh
- Size 2KB
- SHA256 857c2090a4fd5b8c49f1e3f54f24a5c79715ba2f83b2fca55fbe6144652eac2c
- MD5 7280b4b72b3b686e764f32af70b6ecff
- SHA1 d6117b0904855fa0f8ceeb69a17664735e43b458
- SHA512 e75917065c5e301640d88f93411fbc012df1b92856f9231287f1b05dd5e84fd68ca38768fd1b03d6978b9599c7008d0b2b1d796916c96a08d8cba9af2e9580e4
- TLSH
  T13841B77DBB542B70A0578837349E61A2DCD3C66B9300AD2870CEC615A78D19AA23F6B0
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  sqlmap-master/extra/cloak/__init__.py
- Size 146B
- SHA256 1966ca704961fb987ab757f0a4afddbf841d1a880631b701487c75cef63d60c3
- MD5 c03353210afc77ad2d6b010ffeb6efe2
- SHA1 6302821fc2a468043c5c07f850c370260406b4db
- SHA512 3fe2f9f3b473d558a5aa8d0d8b87e5ea7805858752d0076ecbfd7b27995c37eec4151bc2facfa28c651c519a99eb63491613b8e4bdb437e27e75af798d739b32
- TLSH
  T152C02BFF461C0337C4008D9A103E8E58D530141D07C7F40E5034AF503C00395015DBC4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Python

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

discoveryexecution

behavioral18

discoveryexecution

behavioral19

discoveryexecution

behavioral20

discoveryexecution

behavioral21

discoveryexecution

behavioral22

discoveryexecution

behavioral23

discoveryexecution

behavioral24

discoveryexecution

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy