Overview
overview
6Static
static
1Guide.docx
windows10-2004-x64
1Guide.docx
windows11-ltsc_2024-x64
1Update_Cur...ard.js
windows10-2004-x64
3Update_Cur...ard.js
windows11-ltsc_2024-x64
3auto.js
windows10-2004-x64
3auto.js
windows11-ltsc_2024-x64
3backup_auto.js
windows10-2004-x64
3backup_auto.js
windows11-ltsc_2024-x64
3vendor/com...er.ps1
windows10-2004-x64
6vendor/com...er.ps1
windows11-ltsc_2024-x64
6vendor/com...al.ps1
windows10-2004-x64
6vendor/com...al.ps1
windows11-ltsc_2024-x64
6vendor/fir...WK.ps1
windows10-2004-x64
6vendor/fir...WK.ps1
windows11-ltsc_2024-x64
6vendor/fir...JWT.js
windows10-2004-x64
3vendor/fir...JWT.js
windows11-ltsc_2024-x64
3vendor/goo...ion.js
windows10-2004-x64
3vendor/goo...ion.js
windows11-ltsc_2024-x64
3vendor/goo...eck.js
windows10-2004-x64
3vendor/goo...eck.js
windows11-ltsc_2024-x64
3vendor/goo...eck.js
windows10-2004-x64
3vendor/goo...eck.js
windows11-ltsc_2024-x64
3vendor/goo...eck.js
windows10-2004-x64
3vendor/goo...eck.js
windows11-ltsc_2024-x64
3vendor/goo...ild.js
windows10-2004-x64
3vendor/goo...ild.js
windows11-ltsc_2024-x64
3vendor/goo...tep.js
windows10-2004-x64
3vendor/goo...tep.js
windows11-ltsc_2024-x64
3vendor/goo...ion.js
windows10-2004-x64
3vendor/goo...ion.js
windows11-ltsc_2024-x64
3vendor/goo...ion.js
windows10-2004-x64
3vendor/goo...ion.js
windows11-ltsc_2024-x64
3General
- Target vendor.zip
- Size 16.9MB
- Sample261002-wwxtcsvbmd
- SHA256 0baed7f88ff9665d4b8c7e7f16a696d2233d115c3640b647b6ed3bd77616c549
- MD5 536b40fd184bf97ea0628e306c5b7f7e
- SHA1 d11f47722cbeba45166de6975ae2cc86656f4f9d
- SHA512 b33a9dbff135cacfee869273cb27279e0bf238b991b738f59358873270dfa82f54fa9868d7b36acf3e7316e899b7bf31780a1fd3caef5da956e5485ae6a86991
- SSDEEP 393216:XMx5lEQPdwB+GeMG3ey0dRPndhc3WB1vwPrPxO1B2prrAA30J3Fapy73XPHmxFIK:A9PqgMvvgbkJgwTPGvZ5c0EFi1wG
- TLSH T192077CB7E1C69072E54BA636EF47862AD8ADE542F5C4F0454F8C0293079DB8E1A3C6DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Guide.docx
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Guide.docx
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Update_Curriculum_Dashboard.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Update_Curriculum_Dashboard.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
auto.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
auto.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
backup_auto.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
backup_auto.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
vendor/composer/ClassLoader.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
vendor/composer/ClassLoader.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
vendor/composer/autoload_real.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
vendor/composer/autoload_real.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
vendor/firebase/php-jwt/src/JWK.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
vendor/firebase/php-jwt/src/JWK.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
vendor/firebase/php-jwt/src/JWT.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
vendor/firebase/php-jwt/src/JWT.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
vendor/google/apiclient-services/src/Apigee/GoogleCloudApigeeV1DebugSession.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
vendor/google/apiclient-services/src/Apigee/GoogleCloudApigeeV1DebugSession.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
vendor/google/apiclient-services/src/Appengine/HealthCheck.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
vendor/google/apiclient-services/src/Appengine/HealthCheck.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
vendor/google/apiclient-services/src/Appengine/LivenessCheck.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
vendor/google/apiclient-services/src/Appengine/LivenessCheck.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
vendor/google/apiclient-services/src/Appengine/ReadinessCheck.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
vendor/google/apiclient-services/src/Appengine/ReadinessCheck.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
vendor/google/apiclient-services/src/CloudBuild/Build.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
vendor/google/apiclient-services/src/CloudBuild/Build.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
vendor/google/apiclient-services/src/CloudBuild/BuildStep.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
vendor/google/apiclient-services/src/CloudBuild/BuildStep.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
vendor/google/apiclient-services/src/CloudFunctions/CloudFunction.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
vendor/google/apiclient-services/src/CloudFunctions/CloudFunction.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
vendor/google/apiclient-services/src/CloudLifeSciences/Action.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
vendor/google/apiclient-services/src/CloudLifeSciences/Action.js
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Guide.docx
- Size 506KB
- SHA256 22694d1459a3c5a050c696f5ae7934f3a45dabec7d1e5d14faa9e268afff40d1
- MD5 b60930965a7b10a215b84b8e4e195ccc
- SHA1 b75fa1713765b0dcb7ec5dc9648937b27aa3171f
- SHA512 47da528c9f660f545758a2945d529d77af8590df023e390f582df9ac3e52af09edca6a8ffdf17ac8276187fd5ee7887794a15522b4bd0b362178df44fa86ea6b
- SSDEEP 12288:1jGBbbZqFZwTlUnGT3K2vSwbWG5nn8aFwN8F3JPvr/5:pkZqFChGGT3K2vSwbWin8a0wJD5
- TLSH T18EB4DF03D9403C6FD568567533C72081D13A683B7A27DB6B2F8359AAB9CBED1F834948
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Update_Curriculum_Dashboard.php
- Size 5KB
- SHA256 1692670641b55bdd427f1bed7796e439a22b8085543ef6714c00deb807d0477f
- MD5 a5ae6151473c00fe406bc5c86eebd310
- SHA1 fea10d1b8500361927f2d3271ba6656d1b84d469
- SHA512 15ca3224c1e35f47d209c9736822dc74219a28ea04c4b944c2a1c90e8fccb2fe66b3eac2b3818fee8f4e3a8f2893c5921aee9a66f5ffa7e4b5991d79d2e20500
- SSDEEP 96:GJjWvtpWJ7mJ0mUrY/Hojm/tpWx7mJ0mBrY/5:GW87mJtUkPN07mJtBkR
- TLSH T136C1503FBD58F4614273F8155E09C53AEC2E7500350A38732F9B886D85E59E92D6E8CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target auto.php
- Size 2KB
- SHA256 03367ac5343537355c51b91c3dba68d4c5ff8debc1263c69a56b9dd553257b86
- MD5 16a800daaaa97b594fd60884bad85020
- SHA1 de234dec21bcd260ad8a3af67a1094d2b9df4c93
- SHA512 7f0780d7b16b54161e5ae43a6ac7b89c030ab5889baf1912313cc1f69a04a36e3798a2e1a86f84b0e3825812fe4b494c3b561227a3ea4889c33352266771dd7c
- TLSH T1C051643FBD08F8514273F8145E09C526EC2E7501351A38725F9B886CC5E5DD92D6E8CE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target backup_auto.php
- Size 2KB
- SHA256 03367ac5343537355c51b91c3dba68d4c5ff8debc1263c69a56b9dd553257b86
- MD5 16a800daaaa97b594fd60884bad85020
- SHA1 de234dec21bcd260ad8a3af67a1094d2b9df4c93
- SHA512 7f0780d7b16b54161e5ae43a6ac7b89c030ab5889baf1912313cc1f69a04a36e3798a2e1a86f84b0e3825812fe4b494c3b561227a3ea4889c33352266771dd7c
- TLSH T1C051643FBD08F8514273F8145E09C526EC2E7501351A38725F9B886CC5E5DD92D6E8CE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/composer/ClassLoader.php
- Size 14KB
- SHA256 7ceb118bc1aacf96492eecc0573f663613056159080c6305c386e1d1a6658419
- MD5 e056765dcc4c8f20c2d1fd26695076e6
- SHA1 df649952234382d2b9c3a84feae61598bd44cbf6
- SHA512 563f24b38f3ffc430324d14c0d9abc36ba864c2fe35e94335c6f0c46f51321480265fd0bdbe3bb1297c877d31326fdf1029fb1be5a8dfefb0fcfb478305cb615
- SSDEEP 384:bRMAJdusE8VVa8jvQDnGobewQbuUNN7dJbZ:bjuj6byNo
- TLSH T17A52326915EB08390853A1B9978F9055E05BF077722E4D16FDFE06E46F4032C82B6FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target vendor/composer/autoload_real.php
- Size 2KB
- SHA256 468d1502117e941f9704442716cb6751e03894849ed16cef3051ec0241a662e0
- MD5 7f4ef9f047fbd4bd1055a2931a615e5e
- SHA1 8bf883c2edd4fc16880817be5d1e6bd9a694141b
- SHA512 b8817216b59f6d5e87dd99730c5f61918fae0eba11d823c71aaa7dfdcac2bd71eaad97446c755a738475f764fb1f3c137616a75a44fbae58f9323d376745c0a6
- TLSH T14A51F06919E2D4620223F0DC938E2810945E901358058943FEAC41ACDFC166ECEFABF7
- MD5 SHA1 SHA512 TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target vendor/firebase/php-jwt/src/JWK.php
- Size 5KB
- SHA256 94f1b7a6fc70451ab7ac6cfc840622832e57bab779623bb561f4f36329455d26
- MD5 56fc0e4229635b887695e0c253b6b345
- SHA1 2260a26e452779b929a6575a065268623c3416a4
- SHA512 eb49928ba3ec91570406a72f3d28d7f3f0284fbf3f12622eea0470a8f486e2da6c37022ab58a590e1126a5dcc38b1eae9d408c7949e31e1d6f98cd5af8dfa366
- SSDEEP 96:/gw+h242in1C5C2s2FnElBAob1A/FwHFEosaxC:/gw+QBiI5DFFEvAob1A/FwHWosaM
- TLSH T1F3C15604A9E70021119324792BA75483D2AB520B206DDF96BC6F53F45FC47389FFE6E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target vendor/firebase/php-jwt/src/JWT.php
- Size 19KB
- SHA256 de65eedefabcda3425f1e3a28098763bac09a4fe03217e088a075737a9960589
- MD5 fc99b7a14de7a5c74e4c6e4944ab1f74
- SHA1 4dc421b46ccd64097f9aae20007d85530dbf8943
- SHA512 89473ce86523135b72d4eda57b9edff8b5608e084a8f0250e22039e6a802bbe2553b3dd3e9e23b36c9b12ab7d9d3cc7126ee28261d4cce600dfe8b66452921cf
- SSDEEP 192:M9H8+QcLQ5ToKRN9u7aPI2P/+uFSaLUEi83WQhV+8eUEySgmGESgpcoP9u0+d2MV:THkG/Sa2EB45bLnSuiPZHZxVoa
- TLSH T19C9296087CD79122059731791F9BE040E26B613F22789A81FD5D8BB81F84B38DBB9F95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target vendor/google/apiclient-services/src/Apigee/GoogleCloudApigeeV1DebugSession.php
- Size 1KB
- SHA256 ede0613f2e0fef41718b78de3aff3a2e90ee9b45ccfc5651b63c342c5f3b5503
- MD5 6ab45bb48767d05c5bf19c053e20b5e1
- SHA1 d3916ca3807be19c4987aa60c520634e51cda02f
- SHA512 c853b1839ccabaa3805d8b6e7120ce0fc9ac84cf0b6ac68ecd18f5ac8a0bf5b96c9126ba31ef51e2def09e4bb3200f6b6126b51a3c5eded509c9fc17e410ed2a
- TLSH T1AE31ACAE36D55DB27202A1F57B1FC4CFEAA7E112511F4E4230E882704F2621FA8D9C79
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/google/apiclient-services/src/Appengine/HealthCheck.php
- Size 2KB
- SHA256 62ece77bae274abd66ede4a4d9eb364ef6b8916a013f987d5ef9524ea701b196
- MD5 9541a6f85e8e46d24245d3e0544d22e6
- SHA1 7f4e9aef7678dfd70d22dc7285bba5ec26e2721f
- SHA512 642a90c24ebf36f06f4251a87ae0b6f879962cf81ccc9b271d566a9b0a6cf5b577dd82f3ee13f5f02db9813dd4e25c0ab19188b7e8d61e67a1d6a4884a52e116
- TLSH T1C641CC5837465F77BB4200B0670BEAC7A157D926421F5D2238E841704E2A30E69D7DFF
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/google/apiclient-services/src/Appengine/LivenessCheck.php
- Size 2KB
- SHA256 885d7e2edcb55c289ab2d2e34317217f4909fab3514170d093c8ff15e2fe1d0c
- MD5 97e379ef0ccab4ac4c1cead9c6e6e527
- SHA1 9852c942c10b9bc3ba549c59cd1bf0131b37d262
- SHA512 e8f78207804587eaf313400dce4b45710e465178de9f8a83643ac06e5bc207614c05e95e19a400d224a35ff8fe46b19e7a7ca8e8d70d52b2c7779c4c769fceed
- TLSH T1F941B45937971EB1B34241745B0B99CB5007A91A020F6E5234D442B04F3611E65C7EBF
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/google/apiclient-services/src/Appengine/ReadinessCheck.php
- Size 2KB
- SHA256 9a4f938a394750963fab3537902bf478b2d9d39e452d606dddd11cc6352a5526
- MD5 db1ae2a91150f10129cb4210b9555b76
- SHA1 1866650277c8906139c3c9d39cc84a0f2cc0378f
- SHA512 7741bd4bd02a6397149c6b45227f7117bb51bb40958dc5a8d1c6a92a211d49c742e40b25329ba32bae150dcf03564e6ee00171b23e5c9427eeac34e797c940a4
- TLSH T15741C36937571EB2B38201B56A1BD9C75017A51A020F9E6238E441B04F3625FB5C7EBF
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/google/apiclient-services/src/CloudBuild/Build.php
- Size 7KB
- SHA256 e97e49ea60673f1926c189509df6b37378a3d806235a390105ae2f59ee6a9fef
- MD5 ce9d7a5c76e10b3eeecf82daf9d405e9
- SHA1 3433b756ce6e8cc51365aff25c269fc97573ad7b
- SHA512 07f4692697efd5ca91bed038462e092acde82dc6ef16b461e57da7ccbe4f771ab4718d09b7406b5422f9239dd1d6cca509884ce8966386ce0750f0777c90218c
- SSDEEP 192:j13M0PgY6kvYaODgbt2N1pR02EZTef7ZpJwn5LtbEKs3T6GvJQfjjPCD3Pacg/1b:j13GkvHO7wn5LBEnNS
- TLSH T10EF18D687AEA6DF5A70260F8560FD4C6F057A611000F884B74DD83B49F31B29F9D68BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target vendor/google/apiclient-services/src/CloudBuild/BuildStep.php
- Size 3KB
- SHA256 76fe61be02931f6f27d3120ffb8230e1fb63dd7ec48986f1ad0d5e2dc6a59591
- MD5 6e19f28d511446f6a14d1c8c53ae18e4
- SHA1 825e57758f544151c7b03818809cb9ddc890eda1
- SHA512 d84310a8621b967b709a9c51b92af9e37447f1650e176b2f0f60db14973e72bee4c63b8985ce314fefea0729f107474a8c15b0ceb926bcba63c9e34562ef5ade
- TLSH T1F9617C997EF56EB2624230B55A1BD4C6E417E625100F88473CEC83B08F3162ABDD58BE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target vendor/google/apiclient-services/src/CloudFunctions/CloudFunction.php
- Size 7KB
- SHA256 98bc848e8646cd773d9e2a526d45702293c637fb43b5bcb894dbc874a72495a7
- MD5 876a4051f3d09d9b42bee40426aea0a4
- SHA1 e44880dd3a9b4d3c6c5000460601b9ead99780f3
- SHA512 dd50e834dce98a05360e893fafb439c1e640f5e0d21ab0df10ecf916db07508c1568bc32503b02967782d72f5806514b19b9c3c069221458828d2a10fd0eb76d
- SSDEEP 192:j1zdvQyZRr3FUJsHi4Br0O4SjK3dYJCzmlzRnVLhPH/ucNX:j1zbqBCXPNX
- TLSH T133F18BDC37A66CA5B3467178960BD986E037A222104F885774D843B0CF3562EADD6CBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target vendor/google/apiclient-services/src/CloudLifeSciences/Action.php
- Size 5KB
- SHA256 6aa9d0e7056bab2ea298d5da35fdd8676ddcbfa41b80d17c2c8e77ba15e0b9ba
- MD5 7401404db9774644a52e794c536f65bf
- SHA1 ce2af075501e1a1385ee6d87fa5043dfe8138e4a
- SHA512 fa2b45e113ec04bf7572b4d094b71b50777ade0739527f809a786e5fcfa0cd496c3ed4d9b2930165586d9314fba64ad4c5c91274a5349a12335df5a900041eed
- SSDEEP 96:j48/F2rqILDVL0bGMgFb4tm6/v9Qv4adDfVNfv6vl9/9SywyhaEwv7B+U40a5BLx:j1wqu6gN4tm6n964adDfVNHEl9/9Syww
- TLSH T18DB16B9C3BF52DA1A70260B9960F94C6E467E621100F8D8774E84374CF21729AED7CBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10