18ea6e8b89daf400f94048b5dc6e4fe75ab2818e6be328b7035050e8bf861d00 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

Antibot/pro.ps1

windows10-2004-x64

3

Antibot/pro.ps1

windows11-ltsc_2024-x64

3

api/add_activity.js

windows10-2004-x64

3

api/add_activity.js

windows11-ltsc_2024-x64

3

api/admin/...ase.js

windows10-2004-x64

3

api/admin/...ase.js

windows11-ltsc_2024-x64

3

api/admin/...ity.js

windows10-2004-x64

3

api/admin/...ity.js

windows11-ltsc_2024-x64

3

api/admin/...ity.js

windows10-2004-x64

3

api/admin/...ity.js

windows11-ltsc_2024-x64

3

api/admin/...ase.js

windows10-2004-x64

3

api/admin/...ase.js

windows11-ltsc_2024-x64

3

api/transfer.js

windows10-2004-x64

3

api/transfer.js

windows11-ltsc_2024-x64

3

assets/admin.js

windows10-2004-x64

3

assets/admin.js

windows11-ltsc_2024-x64

3

assets/portal.js

windows10-2004-x64

3

assets/portal.js

windows11-ltsc_2024-x64

3

db.js

windows10-2004-x64

3

db.js

windows11-ltsc_2024-x64

3

emails/cas...d.html

windows10-2004-x64

3

emails/cas...d.html

windows11-ltsc_2024-x64

3

emails/cor...e.html

windows10-2004-x64

3

emails/cor...e.html

windows11-ltsc_2024-x64

3

seed_demo.js

windows10-2004-x64

3

seed_demo.js

windows11-ltsc_2024-x64

3

telegram_webhook.js

windows10-2004-x64

3

telegram_webhook.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
FDIC.zip
Size 118KB
Sample261020-w431cagy2k
SHA256 18ea6e8b89daf400f94048b5dc6e4fe75ab2818e6be328b7035050e8bf861d00
MD5 d8051ed79ea41e959034669778b154ed
SHA1 05d38284d9366972aef79d51882cf89823bfebd0
SHA512 c795a685096f5227f1cb2ca107e2f56baaddb81f30eb5b4d9f9a2ab8681caac53ebd165a2b484dfbc57b35f2eb8db4144510f61ee6258dead294d7d453780c13
SSDEEP 3072:QHY7ynzblt/taEYk/Dh/IXi+4l6WWDkT3CdUBeX2Uv5f:Q4unzBPaSrh/iitlWDkTCUBeXfp
TLSH
T138C3F03BCF084409DD7FEC3A92D9C36C424F8515EE046D4A6E85A316398C99B6B35BCB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

Antibot/pro.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

Antibot/pro.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

api/add_activity.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

api/add_activity.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

api/admin/create_case.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

api/admin/create_case.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

api/admin/delete_activity.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

api/admin/delete_activity.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

api/admin/edit_activity.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

api/admin/edit_activity.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

api/admin/update_case.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

api/admin/update_case.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

api/transfer.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

api/transfer.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

assets/admin.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

assets/admin.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

assets/portal.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

assets/portal.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

db.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

db.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

emails/case_created.html

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral22

Sample

emails/case_created.html

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

Behavioral task

behavioral23

Sample

emails/correspondence.html

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral24

Sample

emails/correspondence.html

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

Behavioral task

behavioral25

Sample

seed_demo.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

seed_demo.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

telegram_webhook.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

telegram_webhook.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  Antibot/pro.php
- Size 1KB
- SHA256 65550d9c52c994219b1fea22f53659cf5ea1d2d784b9c3dfc4b607c432750138
- MD5 4448006d0f26bc847a3e3050adf3a15f
- SHA1 893f2b61f90e718615ef163ab2c86d06adee31e6
- SHA512 de894a05240d2272ec643af70614d9fec85f17afd09c0667de53f6fdf3ca934f9856ffca6505d6bd4a74a0ca298498355477b4825f15a67c0aab3816fd0e3ee8
- TLSH
  T1C741BD69F9137AFA06B5D31887A50882E495520B8B07C726B6FD620C2F7C124E5A0DDD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  api/add_activity.php
- Size 1KB
- SHA256 e227d1b1dc5fd636f7eb9e7e46bdc0aedcd818dbec135a01c9bc19672f7d27a5
- MD5 0d1d31e604d2f2da17f9aa685b7f8204
- SHA1 5bf7be9d7c5fe4604bf1c246c1a7b10788e908b6
- SHA512 e6ac02452bdedf7b0fcb40ea3f4c140c5bc4d516b8e276273ba79af66eb1c35598e8534249e28127a73bbf8ad545581bd806e3f159bd19b5b564d6fcb4bc75e1
- TLSH
  T1123176353CDA2F924BF1985C3D96D962325AAA0432E1C451B590A1EA1FE17DCC930A4D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  api/admin/create_case.php
- Size 3KB
- SHA256 ba3a046b69b879fb8c933c054aa25c30b3156aa86a48c225dd739aa8019a50d1
- MD5 574696ddfef621a8df5f9cf80092b60e
- SHA1 6602e134105c885de5b470a69cd3fd90e8a909ef
- SHA512 f4d3ca86a8b2ea7bdaa7c4acc61b1b6989727f10aa40d0683572045a8ca5b71aeb4a6482c2141f03bf3f69e8a55b1f6b7c39caf2f6cdaa5a46ab12a76ba88952
- TLSH
  T14C61323058CB6771067A99DC97605D80EB6981035E8208537AFCFB881FB5D25F3768ED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  api/admin/delete_activity.php
- Size 1KB
- SHA256 156b60a467cd41470d597ce9d6b88eefb68e4338da3e41f3e268ad3b1de59ea4
- MD5 690d6f873cb98fd92e592a53b87491c4
- SHA1 80d41574c6ea0a907909ee81f1ccf7cd6d4f5442
- SHA512 15b361fd08395da5f32dc6a07c539191bdb17ef68453e07083f45cb3a72bc5ef2f8533c220133bad01ef2a56c67a4fd84bde7959239448f707fba3c23c202da4
- TLSH
  T1E611F03678F36BB1036F458D13A650B3121EA5033681C0517E19A3D91FC7BC8DA79A83
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  api/admin/edit_activity.php
- Size 1KB
- SHA256 9166c974901918d8a5a88405fcc173991807f3e816e435778cd94cdf50152e25
- MD5 6de1753310c0fcfed8875675d2729ea7
- SHA1 9522ae8a8c9052cd61975c00a5bbefd7031c976b
- SHA512 e1ce6b72f25e97c02d02855880469c0e45258b063b48b62ac1e4c240dd00ca1e3302176b0b2583228ec9d090a247c60933e1f6003f93df9fc55b915f6c8c227f
- TLSH
  T17831623134FA5BA1076B64AF2782E072317EA60726C0C010799992F42FE67D8EF74642
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  api/admin/update_case.php
- Size 8KB
- SHA256 4a4ca1513fa9c87ee9db079bfdd5dd65b34be4967660237d21be2cab547a6744
- MD5 f4cc378c7c92869eb07ba83d935c9ad9
- SHA1 7b95d4e5efaf103dd3b1ae37f8d9d8f60a01e293
- SHA512 fc7d7d14465931217180f9a8c3ff0983495cd8f27b79740deac87bdaac8697262bab74635c2fab15d1369469c5f266651bcd25eb732870438639564c4fd90ab9
- SSDEEP 192:AppjYJhmXrA470kSu8HXvMeT53rmZAJQ7xVmNi2qU0OGLrbPNmob2GW:SYJhmP4uctTFrgAHnsFtbdW
- TLSH
  T1EE02972818EB39310987603D5E89D2C87F6A40432928D891BD9EC0C12FE567DC7BA7A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  api/transfer.php
- Size 1KB
- SHA256 2d800d97ef4af4ebc3fc9d15ef9d767567c30b3c469131a7a1571bfdbbd9cc81
- MD5 f7bfb4d8f94b3495d0c37bd3ae995757
- SHA1 fdced5d8526af4e3b0b2ba8fa337bdbdd41ca3f7
- SHA512 a57e8ac3e369643051d1db45e634240249a10a9c3a2bba9070c808d59f4c8ebdd8dcb01776922957ca3537f9daaa7d36a540cc0e3fedd26db24feb36daaece81
- TLSH
  T1AA3144293CF69B71036794EC3A11589A319DE70771C1C8827CADA7E11F99BECD234947
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  assets/admin.js
- Size 38KB
- SHA256 a131e2db1f1e1d910ed922902193840cbd6c473451959295f6d426c44856f118
- MD5 529e6b86113d96b9b3f99a766a186927
- SHA1 c0262e74b1951af74bd39522e6690e4a29741b97
- SHA512 ed0a82f643b70e3805a94cf90e63e68aa6a67900853ab56df94f316b514a9664576d16cb98d5a05d072620d9a7819eb350f1a3ca9c458f0cd57d95d1317712aa
- SSDEEP 768:UNFMPa/7hk3SUpAo5z9yivJxIJVmmWCc+UF+aplRF2ELt:UNFP/7hk3SdIINnWF+apQELt
- TLSH
  T1A203B56731F728310AAB69BBA76BE34939308107BD428885FF5C81844F91F55E837BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  assets/portal.js
- Size 38KB
- SHA256 11b7dc022d02e278f3e3ce938c0dd9b6be3280790ebb17b016438370d112c34a
- MD5 740ac53a97130c629742a647b4ae08ba
- SHA1 0b1cf595d46bfc333dbd44cd0028685cbc49d7db
- SHA512 37d6c9b564cd3603ce1d6bdc091a8dceb6749038f9e9ce6481c6543b591ba7781ea89e4292e6969e5580def588ef6c02949786be52d955717255a5b8be3ec66d
- SSDEEP 768:ecWDmJQlz+R6S5ONiMxK4YgeSRLrnlfZoUD:QDmJQlz+R6S5qiMD
- TLSH
  T11B03C56B38F7203509F7A6BFA7CB964D792090037486C9147E9CC2445FD2A61D9BBBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  db.php
- Size 27KB
- SHA256 92c0b0aa72ee2f9f0f4bedd2f70ee4f3818e0d7ee6de6d8fa6bf302c09475f95
- MD5 aeca1e0b01713132c6fff2ea706e0114
- SHA1 f5ae1a38ec667f1f1c59eb7b4b714ae55e89a5aa
- SHA512 56d54f0471b0c90fca20405bd9580298f494740b3f9d4532404575a164ddedb79e3534b92b6b300ed3face598cfcef636b51b2f8ef33db7a2951400f3b22ac9e
- SSDEEP 768:tdOvJaymBOEWa5pEnKHjk4P8V7O0dzbPQ9kLon:tCDsNRoBdzLQZn
- TLSH
  T1CAC2D515B6D76A2001A3847D8BB7A845773DA40F1B01EDC0BD6CC1C25F6CB9EE278AE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  emails/case_created.html
- Size 3KB
- SHA256 c0861883649a6a35096ae2cddb33f77019a6865161eba2f9a53e334dda4b6fb8
- MD5 0bc8f81fedc536a32b9fbed5247098dc
- SHA1 9e98bf19a46496dd0d8bb6a1030b7c6cb2849536
- SHA512 406697c5a7ee624fed9e3e2e707a584b5bade7e56bd08bb198206011105dae13ae9243dff83047c339819908d3c37131fe6a2d71da3882e0352b4785d836563b
- TLSH
  T19E813221D6C8780579BA84A8F040FEEBF9C84657135A1E10BE9B6437FA944739B1338E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  emails/correspondence.html
- Size 2KB
- SHA256 16bc7c4a91af4d9e40d2c673aa8c94f464c716bd9227b364cd09f8432d9d5721
- MD5 48b09753d71d71cc7e3a5d107d742950
- SHA1 bd492a9175fda111d2c778d351779b4c0020b04c
- SHA512 5cfa05517dbef2c304da24a27283116f6cc1d9b9c9fddc096532704a689fc7b1d70a05d30565d09a2c88c75794bbecef71bb7550c820973d20a89bc3bf6c2696
- TLSH
  T127510E2193C42609A537D048F195EADAFEC4096783595D74BEAE2037FFA40318A332EA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  seed_demo.php
- Size 3KB
- SHA256 6caeddc31822b9ac6de577dae725be23bce6156eae5d8244adb218f403c88cb6
- MD5 420a6d1eaee9b1389ce940600194a022
- SHA1 7c2aa31b74547e521554e2d2f0c5e42b6c30420b
- SHA512 31a385e918de5d10dbdb041d276496b5ac928fa8b430ab870bf01db38c408a11d62d5ec8ae0b9a6bb70e50a3ab0fdec35e4b06ef9e25d104ad140afc2320f263
- TLSH
  T1DE6195BB79A13B2117BA99E895206CC4FB11A143153088E670FDD5C11F71D19C3BEBCA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  telegram_webhook.php
- Size 63KB
- SHA256 0e1992989bf1964600c92fe49c14130d06bb56b875286f37ee6a138ca780bb83
- MD5 1f9afcc1a12d58d5e746c4688faf19ca
- SHA1 acd469fdcb81dc8510357f1d4d1526e8d15f406c
- SHA512 c15f3f86ea027e5688fd80b8bd4787f7cd1ca59a975ff334b164537f1831425a898608429da53c85ca453ec06e2f6203bbc7fb0249441c0531b469919ca0b3bf
- SSDEEP 768:RYZBXSVJlGffVODiTQJDG989+Wnavjite3R1ZGEVnQWH9WPCoo:kBXglG3VLTMC989+WamtehqEVnQyWPno
- TLSH
  T1A053A3A571876C384563A87B1B51DB01677491035AC8ED93B6ACEED80F4077AE3FC2E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

© 2018-2026

Terms | Privacy