a413242f203b59003bdcb160d96f368d31173d237808879c8aada488407af170 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

billmon/ad...api.js

windows10-2004-x64

3

billmon/ad...api.js

windows11-ltsc_2024-x64

3

billmon/ad...api.js

windows10-2004-x64

3

billmon/ad...api.js

windows11-ltsc_2024-x64

3

billmon/ad...api.js

windows10-2004-x64

3

billmon/ad...api.js

windows11-ltsc_2024-x64

3

billmon/ad...ter.js

windows10-2004-x64

3

billmon/ad...ter.js

windows11-ltsc_2024-x64

3

billmon/ad...ail.js

windows10-2004-x64

3

billmon/ad...ail.js

windows11-ltsc_2024-x64

3

billmon/ad...ist.js

windows10-2004-x64

3

billmon/ad...ist.js

windows11-ltsc_2024-x64

3

billmon/ad...api.js

windows10-2004-x64

3

billmon/ad...api.js

windows11-ltsc_2024-x64

3

billmon/ad...api.js

windows10-2004-x64

3

billmon/ad...api.js

windows11-ltsc_2024-x64

3

billmon/ad...put.js

windows10-2004-x64

3

billmon/ad...put.js

windows11-ltsc_2024-x64

3

billmon/ad...api.js

windows10-2004-x64

3

billmon/ad...api.js

windows11-ltsc_2024-x64

3

billmon/ad...ile.js

windows10-2004-x64

3

billmon/ad...ile.js

windows11-ltsc_2024-x64

3

billmon/ad...api.js

windows10-2004-x64

3

billmon/ad...api.js

windows11-ltsc_2024-x64

3

billmon/ad...api.js

windows10-2004-x64

3

billmon/ad...api.js

windows11-ltsc_2024-x64

3

billmon/ad...api.js

windows10-2004-x64

3

billmon/ad...api.js

windows11-ltsc_2024-x64

3

billmon/ad...api.js

windows10-2004-x64

3

billmon/ad...api.js

windows11-ltsc_2024-x64

3

billmon/ad...api.js

windows10-2004-x64

3

billmon/ad...api.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
billmon_old.zip
Size 1.9MB
Sample261023-apcc7abh59
SHA256 a413242f203b59003bdcb160d96f368d31173d237808879c8aada488407af170
MD5 b302df13466d1c4cff1be14ad904d167
SHA1 40b7f80ecbbe207c1cc175a9846864541023b1b0
SHA512 ccfddbdad0c1134debeee12ad5373329a68928c4c23a13057c61728fe46d3d584ff2e109a5034354a13964b7ca8144f759b4c1c9bfc4ded7f5cf466cac5adca1
SSDEEP 49152:PKRGBdGMf9GZqkVeybL4a13rjYBQRXqjFQeC/:WMGMfk4k8y3gBQBh/
TLSH
T17D95125CC96901D1C92AEFB437CF0785F89E60852630991B1A3935C8EC827DB2F5E5EE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

billmon/admin/agent/agent_add_api.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

billmon/admin/agent/agent_add_api.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

billmon/admin/agent/agent_delete_api.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

billmon/admin/agent/agent_delete_api.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

billmon/admin/agent/agent_edit_api.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

billmon/admin/agent/agent_edit_api.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

billmon/admin/agentmembergroup/agentmembergroup_delete_cluster.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

billmon/admin/agentmembergroup/agentmembergroup_delete_cluster.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

billmon/admin/agentmembergroup/agentmembergroup_detail.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

billmon/admin/agentmembergroup/agentmembergroup_detail.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

billmon/admin/agentmembergroup/agentmembergroup_list.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

billmon/admin/agentmembergroup/agentmembergroup_list.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

billmon/admin/bonus/bonus_delete_api.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

billmon/admin/bonus/bonus_delete_api.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

billmon/admin/bonus/bonus_job_api.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

billmon/admin/bonus/bonus_job_api.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

billmon/admin/bonus/bonus_job_input.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

billmon/admin/bonus/bonus_job_input.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

billmon/admin/bonus/bonus_list_api.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

billmon/admin/bonus/bonus_list_api.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

billmon/admin/bonus/bonus_list_mobile.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

billmon/admin/bonus/bonus_list_mobile.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

billmon/admin/bonus/bonus_summary_api.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

billmon/admin/bonus/bonus_summary_api.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

billmon/admin/bonus/bonus_withdraw_api.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

billmon/admin/bonus/bonus_withdraw_api.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

billmon/admin/bonusagent/bonus_withdraw_api.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

billmon/admin/bonusagent/bonus_withdraw_api.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

billmon/admin/bonusagent/bonusagent_add_api.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

billmon/admin/bonusagent/bonusagent_add_api.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

billmon/admin/bonusagent/bonusagent_delete_api.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

billmon/admin/bonusagent/bonusagent_delete_api.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  billmon/admin/agent/agent_add_api.php
- Size 2KB
- SHA256 981fd4ffcbb4c9c0c4f3318d6a92cd2990d92ee926fa4966036ae8bda59fbcbb
- MD5 5d09e667bc496bee8c1ffd78caadde5c
- SHA1 c1aef49285f9c8c5e991beeea787aeb1d10b54d7
- SHA512 4721e43895b4e404cf913df958c31737710f2470dea0d552bf1f2505b67a68322665fb7c20c5a2404d079237fd10513d44e930f55ea75c6a0281392bc608a68b
- TLSH
  T1E25102A45DCB58313DB38C453F250052EDEE42179B08A503B9FE3115BFE2666A3A467C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  billmon/admin/agent/agent_delete_api.php
- Size 747B
- SHA256 79f31beba3844d4f588d3e2c9f668bcaecfd1ef57f95bae4144172c955f62249
- MD5 5ec81dd54dbf81461ed7d5addedc53ff
- SHA1 40eb2089f40db7674ca69d4c2aea41245ca53510
- SHA512 f98e978b36ca69394a393077e33d6dccff623e2e4aa65c829241d533294e2e49e8744d4342e2f973dfe1a2c0261826287949ced5e0a0f587774d76e985f0408e
- TLSH
  T16B01D5B378471591AFB73FD375146057A752C50A25806B12BCEE11141FF03A856562AC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  billmon/admin/agent/agent_edit_api.php
- Size 3KB
- SHA256 9f3b15009d4813e607103071b50193ffb9ce792ca3f453765cbf43a1975eb6ce
- MD5 bd4071b2a5912f27278fb3bbae9991b9
- SHA1 ba27f2e3b9ac87dd22845b5522a729ef8430fdf6
- SHA512 7cfddb1b40840d6bc6f2c61b4ad20c9a5f0ce51b1b7797ad509aa63336fbb0caaed9fbafdc780c0766b415889e2db3a78406a9806172ece9d759e96fc25877d4
- TLSH
  T1BC71DEA01DCB48713EB748452F251062EDDE46179B04E603B8FE3199AFB176572E43EC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  billmon/admin/agentmembergroup/agentmembergroup_delete_cluster.php
- Size 765B
- SHA256 9cd641390faeb434f4d234ea30278627dd185c6300bc2f3c596ec029c0d0ddd3
- MD5 57e6b16cf654d2a1daa8b6f459b36f3f
- SHA1 a3df885829c481017733d0dc13d4fb5518dd1785
- SHA512 eaf41d93be4feff4cb32f85ac54757df2f27a386a3058068d6c3995550f4a232b2050ac9b6f951f8151b2722bd5d2d4418aef5e767d126df2fd99bc262a76775
- TLSH
  T11B01DCB1248287212FBAFE293E1300F2D692D90B0010C2C0391E50856F37ADDF8D1B98
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  billmon/admin/agentmembergroup/agentmembergroup_detail.php
- Size 9KB
- SHA256 4f0bed0787a389ebbb38261d7d3a1cdc8bed6b19c126d0b4c791f66495907c66
- MD5 6d50677584e348addf35c564ab930502
- SHA1 0bc2056f35f30be536b8ed52ea187a8763fd791f
- SHA512 32583bd1d3f689dd0327015681679fa3b180a8f66700be9afcd7999146ca34a1fde63a65ccd27a705b32af82229977f02ee855d17b498a0a65e370d11119b303
- SSDEEP 192:i8Yd3cZgbsP6iyMGPERyKaE9WIfaAGAtoEI/eyc4:Yd3cZ8uSMqEcnEfsOcGyc4
- TLSH
  T1C9125130249209291D73F6A56D019EF9FB50C207C60686993AAC27D33FB7C2AB89795D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  billmon/admin/agentmembergroup/agentmembergroup_list.php
- Size 4KB
- SHA256 8d792b439677f8a84e7a0d6069d6c21fa9de8c8c422aaaf42aee803114425f13
- MD5 2bd25c5f171ac400fb5d18f3813f816f
- SHA1 524cc85fcdcceee52398d97f9ffa615d4c448a73
- SHA512 2f1c935299321d710e68b1f14d2210daf75a607b5b51c5eec1ae65b8c6dfc1be2c945d9f0fee1bed312e6451d2ce38cce7e92483783958c63a0ce309637cf3f5
- SSDEEP 96:HjyVx8atkRPd3cLWQnfVfMKmoQBPFpkDHMre2Z2Ne2cMQOCyifQ8U:sGamRPd3c5ndfMKdQBrkDs+QyifQx
- TLSH
  T1739133311541286A1DB2A6A46D1069FCF781D603E2478EA436FC7783BFB7C9D6CA394C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  billmon/admin/bonus/bonus_delete_api.php
- Size 615B
- SHA256 2a3b472ae915a083f13bdbf951571c1d24512542b4d4b00cee79d9b5b5d97185
- MD5 6f2192c809f0787d1e6fcc69f696894d
- SHA1 fee2d6aea495b97a233d5776937a3fc13995ad0c
- SHA512 f32ea599990da9060634a2154c2f9a78af5df65e7d3833269c80b196b52f65a43b2ccdc7956151cdc8be24bbc5c408cfb1cf0f238f2ac80a182ee36b528e837d
- TLSH
  T12DF002DB3C6737A489FB25E3355020577794860946C13470FC5130420E403A462E6FE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  billmon/admin/bonus/bonus_job_api.php
- Size 2KB
- SHA256 49979b03d96b091ee9682ae9444aa0d6cb0e7c8ca28aba9b7b88c4ea9cc13316
- MD5 15b5e6404a5ccfb5710f9e1439ecc6e0
- SHA1 2fc8f155642aed5994772154a8bb6e2a9724c115
- SHA512 ebc1fa7fcc72e7e105e8967aed3670d44ed07fda6174204d5f4b4bd5ccca0238381050e5d458063fc5ca8992e4de814a76a8afc84ee1be7dc4380a252d6625f0
- TLSH
  T1C8510038319682B699F39923ABC6B456EF000713164A6A53BCBD65801F703489DB8FFC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  billmon/admin/bonus/bonus_job_input.php
- Size 6KB
- SHA256 87db947ff443c090a2a681c590cd433efb9a89b56a5f653b79e91617f1b23b90
- MD5 eb4b1d8c1cd95bac84d6e6c2ce4ac9d8
- SHA1 490dca5bf7dbefd0fc6b383a5ab10dec57a08d55
- SHA512 5fcd34998059fb3ed245b4624b4c34fc3c3037438b6eff35e941c424ab377f711210fcc5c2d54d08b9faeddc0c03f0b2bc99942fac74c7656526ffb37e635ede
- SSDEEP 96:YKBuw0GL6IdxmakeF6d3KaVPm/Kd+dMrUSGNJdyRSxod1PbbZfBOpgggaF:Vuw0q6I/Lkz9K+1d0QUK11PbblBOCgg0
- TLSH
  T1D8D186662591183156B386E56EF6DA0DEF52C303DA4956927AFC13C31FB8D01C863FAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  billmon/admin/bonus/bonus_list_api.php
- Size 785B
- SHA256 d2708f18be5d717eaded04e62bc76a2dce5fe74f6b1b4a0c9acc33658f7341ca
- MD5 f4e42f0ce492c3b26e3e989b12230a38
- SHA1 5d0b1f5f8e3904635904b3f5d049bd90b598473f
- SHA512 3a230b5c4292bb705a995a36f89845409fb2f5c9bc9bb2df50c222b1b3e2950fff8c49b086a551f4fc59a0be432fb549f4fefdc21ad08afe04ff1b8a21567fdb
- TLSH
  T12701DDB174468A66DDF75065AC79A802DA02A703320619A3783D258D2F313C89C292A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  billmon/admin/bonus/bonus_list_mobile.php
- Size 3KB
- SHA256 f74401faf76b4c2da2445c7085fbf23c7cd9e7b26ac150f258a4d0defa1045bd
- MD5 c95b0c141146f806bf6e56308e63d8e1
- SHA1 d8a165c52d3c938d66c9f1cd4ce0c4b1c3ed0e31
- SHA512 b1d51f1283a5b4b6a87b28b8d6cbc497d477278581d7f259f8b34b388ae841640c729d4685a6c745a54215c62039ad99d44195802370f2ee6ef448668ce4d00d
- TLSH
  T1AD81851999D2245B1273CAD43EA0671AEFC1C283D7866C1633FD23076FF5C0158A765C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  billmon/admin/bonus/bonus_summary_api.php
- Size 751B
- SHA256 da6ee48465eb1399469d3208c707754166be0a757760606431789eb033b88543
- MD5 a4df89c0add10697d578ef20b070e2fc
- SHA1 bb24d847852cf9ab381290a23a6f05c64b846e52
- SHA512 5e03609be22ac5166f792c7a77fcf4d3214c9d19a10fcd26cf6b5c90b3e65803c0bcc26797dd14167a242e6a3126c5c4805ad9d581ab9e44cb687cb2b28b3846
- TLSH
  T1E701D3F0305A9D62FDF35AA978149029D7039353AA090C91787D22CC6F703EF6C7A25C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  billmon/admin/bonus/bonus_withdraw_api.php
- Size 2KB
- SHA256 840374950c23edf2b62027e0f2b13ff8cc10590cbebd2286d446e870263f0b50
- MD5 0918ad0dbb871e33a93b42282d34b188
- SHA1 153d8878f6cdc114f59e477232e063a5d0deca91
- SHA512 c95d29cc18e0f1a943e5dd2c328f4aafa745a0acbd8652e0b21a2108ad3af63823772165641106bacd33fb1dd102a128bba05fd2166206fd4c07da2e72c0a500
- TLSH
  T11D5154B4781763B256B3AE7D5E270406EF5653172611CFA1B4BD43C02F7160CC96CA9E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  billmon/admin/bonusagent/bonus_withdraw_api.php
- Size 2KB
- SHA256 cf9a548a79f1296a18ba9f6778c5a7610d28b29cc9771222b4d7c00bc19eaa96
- MD5 a8ca361633a0cf43d794a919dc92648b
- SHA1 dea1ac7a36241f40654ab722dbedd6fe2072ec53
- SHA512 89141f927bf7844e2c2c7001a78d8765ca0066f6a18c68c06b361b623a9bc79f58ba94dfec8347c1bfebab11341229d05f0c88fca4cb273be48c5ab0f7922f27
- TLSH
  T19C5143B43C1753A246B3AE6C5E230407EF62531726118F61B8BE43C03F7160CCAACA9E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  billmon/admin/bonusagent/bonusagent_add_api.php
- Size 1KB
- SHA256 c069ae627003e3d82012fcbe5616fdbcdf66f25469886947c0bd33ddd239e0ac
- MD5 2d4e0cb293f50a54287dcd28b2373f09
- SHA1 ca3844b324f020d7f0282287988e3123956aab58
- SHA512 ad82de04f9f1950b6737eec71fefe41538dc43e8992cd0bbad7704e3ba7dcad9b2c7807e9d982b0dcb03d9a39148c639ce60be39abb3f9c2f9099e710162f2e6
- TLSH
  T10621C4F8350256E2BA7BC94934526D32DFA4461B46266D4074FC44951F7078688693BC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  billmon/admin/bonusagent/bonusagent_delete_api.php
- Size 821B
- SHA256 b59cb02f25b87e503637c2ffc02986402a41c93da7bdb39479bbf2bd6b4820d0
- MD5 4980f13f59a45576e416338b6b08824f
- SHA1 54080218c756de1dfe88aa2aed7eb4a13852d1f2
- SHA512 78f00acfbcc242b7fbb8f382a1b53b29b92adf74b69604ddbd92460af49c8f8ee8044496371fb52ee9cbb0a84f8211c47f63f5bb276c13c1cf4b79af43710043
- TLSH
  T1D6018EFD740616E6EE7A459BBA842507EF949C1B02165B11BC3D51610F7438048F66FC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy