c7de8780a1c4697171622208e212703858150cd470b041bbdbd332ae7233bb2f | Triage™

Login
Reports

Overview

overview

3

Static

static

1

approval.html

windows10-2004-x64

3

approval.html

windows11-ltsc_2024-x64

3

argon2-worker.js

windows10-2004-x64

3

argon2-worker.js

windows11-ltsc_2024-x64

3

background.js

windows10-2004-x64

3

background.js

windows11-ltsc_2024-x64

3

content-bi...ain.js

windows10-2004-x64

3

content-bi...ain.js

windows11-ltsc_2024-x64

3

content-bi...lay.js

windows10-2004-x64

3

content-bi...lay.js

windows11-ltsc_2024-x64

3

content-di...ain.js

windows10-2004-x64

3

content-di...ain.js

windows11-ltsc_2024-x64

3

content-di...lay.js

windows10-2004-x64

3

content-di...lay.js

windows11-ltsc_2024-x64

3

content-in...ain.js

windows10-2004-x64

3

content-in...ain.js

windows11-ltsc_2024-x64

3

content-in...eck.js

windows10-2004-x64

3

content-in...eck.js

windows11-ltsc_2024-x64

3

content-re...ted.js

windows10-2004-x64

3

content-re...ted.js

windows11-ltsc_2024-x64

3

content-we...ain.js

windows10-2004-x64

3

content-we...ain.js

windows11-ltsc_2024-x64

3

content-we...lay.js

windows10-2004-x64

3

content-we...lay.js

windows11-ltsc_2024-x64

3

db-worker.js

windows10-2004-x64

3

db-worker.js

windows11-ltsc_2024-x64

3

expanded.html

windows10-2004-x64

3

expanded.html

windows11-ltsc_2024-x64

3

expo-stati...acd.js

windows10-2004-x64

3

expo-stati...acd.js

windows11-ltsc_2024-x64

3

expo-stati...a8f.js

windows10-2004-x64

3

expo-stati...a8f.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
pera-extension-web-production-b454-2af35ee.zip
Size 10.3MB
Sample261023-trpwvaez6m
SHA256 c7de8780a1c4697171622208e212703858150cd470b041bbdbd332ae7233bb2f
MD5 c21bf3efb566044fb191c3b41fdfba72
SHA1 6fa6158f31b2e8026caa747b31064c78d5c98e8c
SHA512 8d5ea19aa065d4cc3074ee0f24a3dd0e41fba30378419001096177b68fa5eb521d1a1d1055756ab2f63e7ad15526ccd35d4e7d8b2b11890c6073201e806ed5f6
SSDEEP 196608:syCLyOxX61uzww6wFyuHPB0lPCyQ04xVnQe0/qAn/orT5rGy8rjjtTXSpP49:Ah9cu4+RG/qAAHWfjtTXcw9
TLSH
T1FBB6333517FC8093CC2F3C3BBE5926C96594801684C878291ACDF366B76178AFC679B9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

approval.html

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

approval.html

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

argon2-worker.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

argon2-worker.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

background.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

background.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

content-bidali-main.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

content-bidali-main.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

content-bidali-relay.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

content-bidali-relay.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

content-discover-main.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

content-discover-main.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

content-discover-relay.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

content-discover-relay.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

content-inject-main.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

content-inject-main.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

content-integrity-check.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

content-integrity-check.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

content-relay-isolated.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

content-relay-isolated.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

content-webauthn-main.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

content-webauthn-main.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

content-webauthn-relay.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

content-webauthn-relay.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

db-worker.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

db-worker.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

expanded.html

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral28

Sample

expanded.html

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

Behavioral task

behavioral29

Sample

expo-static/static/js/web/AppShell-ba41ba12f3d99fc765df42df30262acd.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

expo-static/static/js/web/AppShell-ba41ba12f3d99fc765df42df30262acd.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

expo-static/static/js/web/__common-a463eb2f27b30a83adb6d16015685a8f.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

expo-static/static/js/web/__common-a463eb2f27b30a83adb6d16015685a8f.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  approval.html
- Size 2KB
- SHA256 dd99725fc5642fe590da4c43e217503d9c7e7306717614e67825ca843866dd6c
- MD5 f8629e42e47aa6834cf72be70e4ee964
- SHA1 8b9175048fb0b25cae29a5927ff579abf5de91c2
- SHA512 e15cd192148a70cb11f613dd5794990f975486344dd277461476ff9ceb69d25d1b7b2f2e2e0b0da7fcc0d6658f3164932c761d8fe19d7ef6a0c53cf8ffdf3bf8
- TLSH
  T1AA41C587CE52828F4423CA7756F5E22D8715CB9F47A4A8A8B4EC1A30CF42F6C05EB4D5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  argon2-worker.js
- Size 26KB
- SHA256 74efe2e43f0d621d7aefd12dd3e31cb154bc2314b72e5be96b106bfa18c98525
- MD5 a238735e72494e858562b21849c7b530
- SHA1 3ff73357cfd36dce466b51b9456285d4f4f04f39
- SHA512 fb8bfd44e4d634754f4b11efb3421d7cc37744af8cd4a239b00a0d81a0245330f336bdb254518347438d48f3a48bba598a9e01fc2f9f7ce1a07aff33d6fbe1e7
- SSDEEP 768:XmP7Iat5pJXzcrns5NUMaP42pGIP4mpGdC6DQySHzo/H:XmP0y5NUMaP42pGIP4mpGIyq+H
- TLSH
  T1E8C286000AB61061A337B0BA3B4BE8167625E00B3536FD5DB50DC5640FAD97586FFEBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  background.js
- Size 2.1MB
- SHA256 6f89b9e980f96439e47cffb1ce97694557087b3840c9c8a9a09683bc6ec381e1
- MD5 4ee389e47ae0cc2947e4fcec5745a082
- SHA1 d445cf3ee0003bae79e0f7fd98eefdf38c34b0d3
- SHA512 68a06e73e0f331d5ecf3a866fa09339f4476f88c4dd42bfee01ccc552a2661d40354999d87ede4855b380d692d7024525efe3b0b540eab077f770513bec7d2bc
- SSDEEP 49152:zjIIC2pjTvspO+jNag8l2ngcHurkYthGtc:KO
- TLSH
  T12CA5E94D7AF720614653B0795A3F9005B6389407244CEEA5BE9C83A06F8D93D96F3BEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  content-bidali-main.js
- Size 3KB
- SHA256 b1206cd76f3b51edceaf23bc3dac79d7577b32c1ede9a27cbb3d338aeaf567a7
- MD5 2b3def48d3923341f365e28e17e2b152
- SHA1 94fd2721fe196e4931e1e7c896d7556edc54341f
- SHA512 1cfddee5bf93a43764a91041dc01f650a31f9537f4737ebb2fe89997c2eb4b0a2fcefc74bbee60846ddad9af5ea59a20f097f3aaafc78c24fd5212c4c6c3d989
- TLSH
  T15C712F8431E7606512A7309D1F8B31027325F1437008D921BADCEAE17FB99ABE8E27CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  content-bidali-relay.js
- Size 1KB
- SHA256 cf9900d741aabea140e0e353428f860347d4294d49e83e63edad48dfe5e27654
- MD5 6a44f42e96811a5ff2427564268f4233
- SHA1 1be3f1e29acb31f2657f12878ea85ce550454513
- SHA512 1e263832c96e7791db956891395a437edeca4f1562efb271005137a9452eccbefc471b1e68e22d216ad1ba49e18a173cdf0394b34921495b9eb10da4ffae7a9c
- TLSH
  T14431FF0921A7615521B320AC3B4E37453322E19B3114C610BE9EFA959FB9BDBF85A3C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  content-discover-main.js
- Size 6KB
- SHA256 4cbd0246aa20326874c36c1fae7925a710a44d9bfe19f5e66f6936aebafdf770
- MD5 ce9b907ddc420aa189b48d407c8445aa
- SHA1 bdcf9a193a45678fb7225b8660d41910c49bf35d
- SHA512 0382b876c34733d4ad15f7e88ba5ed0a7448e956ec6e81024cb3e598f13e25c83684fddcee58319514853fb77918332d3827b0749063dad88a7139206f861fbd
- SSDEEP 192:DiUeEjn3+q8pf1wzwSQW9K2rFak5aR1QYp:lT3YCvPHaAs
- TLSH
  T12AE1528521F76171055B2A6F3B8B31827231A0033219CCA8BF9CD794AFB875DC9E67C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  content-discover-relay.js
- Size 1KB
- SHA256 eda1ea8d199521ce51f66487042731cac9e847e7e3d90f353a547cdac7cae6fc
- MD5 341bf4d425a8f46caf860e815d89e513
- SHA1 0dcf789eaf548027e39d3b430eb45e84b5471b36
- SHA512 c6191d25c996df8ed5aed0f31d6b5c8229214eaf884d7fa08d2b19bfb34c7dac8ec1f505f4035997e1e2c30eac66637d93d5f4825e8d72f02a07bfd9e0a9408c
- TLSH
  T1D531FE0522A3619520B320AC3F5E77053326E18B3114C210FE8EEA955FB5FDBF85A3C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  content-inject-main.js
- Size 12KB
- SHA256 d6c3d2804fba29174e6dfc7370002178ce333b9cf77fb1ae915446a71415b2ee
- MD5 d12fec7434a5e97af7352f458f1d80d8
- SHA1 216ec85c0b6e8eb2e76624d5b684d84abde3c721
- SHA512 0c07779ac4e780608f635013bb9718e25194f4c33a1621f3dad669515ee99934494e2fc05fce1a2a15982784f05850b229e73198ba304b83aed33269ee053460
- SSDEEP 192:D4/giUeWT4AWWlkwMHjeWEI5iywHoA6pXsGn17aQ4M/Atcmh3iFm05iAkZoTs9rw:D4/WKAoww4V+Pn3Ls/m6q
- TLSH
  T16A42B54626B72134521B83BE6F0B691B333160532209C9187FECD258EFD1B59DAEA7C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  content-integrity-check.js
- Size 4KB
- SHA256 81e8ca1c6f5efad311cd36cd6265e82ae3de9fdf265289ab9f854f5e2e2262cf
- MD5 5fbfdf60f9faf0a320f07f5ce8ac0be0
- SHA1 20f44734c02d2898683d05bffb6d23b87649bc03
- SHA512 42c89b8d629bdca9c417810773e4862661cdd017d96c8e78b5e72d82f35acabb48820bfbfe9eddc53d28f9f177d1671021698d41fc5a506d5c793128ca2d1830
- SSDEEP 96:XV918BPXaEqeyIByTy3ysknQqA3njgWyUzyVQyzPWETkbOHqTypC2oTU0Fk5KRq9:XD1UVqeZyTy3ysVqANysymyzPWETkqHd
- TLSH
  T135A1DE8868E36C092217111A37E670827628E483125CEF99FEACD9717F59626D5FB3CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  content-relay-isolated.js
- Size 3KB
- SHA256 eba6998673fa3a50195f8365901c744bf5a9d64fbde6a60751b61cc1d61ff1b6
- MD5 443772160d106d83d42ca1b88a1f0cad
- SHA1 499b407ade4617dba0fba34bf864c5fc369b558e
- SHA512 57326d387c1c9fa0e0dc5f987581fe8accf83cf57c585190d170de70c4ef190d5adb7dfe1659e5f7d402304cee917a2c12effcede9971d6ca0001feb98a3579a
- TLSH
  T1F88173861DA3246D080311767F5FF5033316A087122CD679BE6CD6B0BF15B6485B93DE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  content-webauthn-main.js
- Size 7KB
- SHA256 ad94f0b090b00b63a5bd69b002c2c80f40cd89b7b2606306f79806be61c48f29
- MD5 14c8cd8b3a036ffd09fe4e3832dcdb40
- SHA1 bff218aa5026efd6b6cd7ce55e9f8004152639de
- SHA512 8e724a0bea2bbbf9131a6a31e38d89d90161145885f0b3f99f7c9693712280db9b6dee76a9e58147b40ca564320817bdde5f9fd3398cf38ad9d283fbc082415c
- SSDEEP 192:1HXUbLtfX2BqMTad1x7sEvrjAqDfxhAQzaitQHKEitQY1oj3Kd9fVt:1HXYtPrNVuTKf3
- TLSH
  T194F141090EE2124342E321BCAF1F255A7235C5231A4CD684B9DC92E45F956ECF3E6BDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  content-webauthn-relay.js
- Size 2KB
- SHA256 e7a23e36c5996dd44c6a088dc2cb5451eaa24945f90b4be5c93900ea468d4c88
- MD5 8b216ed781e37dd24d8ce06dd122e828
- SHA1 6702c20124c52d024493fc4fb5b56a5557bde05a
- SHA512 7b5102b36d19d3cc5016bf00bcff000eb7f39f3f537a6b83d8a36ef0353ae735cb270e9a170f7e84e981d880609ebc41df0e2103119c33453c535ba26b8e0ca3
- TLSH
  T15941339A0EF310645E4350B81F1F37033629E2431198D766FBACE6A4BFC279181997D7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  db-worker.js
- Size 430KB
- SHA256 f978e5b944c321b4d0329eeee3b2062402ed9d2321b3feec00daf050924a7164
- MD5 f76a86e7fc160374e3e8334abb8867cc
- SHA1 af4697a5ce1c5f30aa342d10b6266da5261cdab1
- SHA512 145c26518988449fee324c303043933f7c50c2f53705b4ad8c0859ac4d5bcf6ef4ebfbb73a46c24c6431e24e2ed7422af9b17ad20edc776e65a04466cd01c9b3
- SSDEEP 6144:+DhbDFpD8XV6iiAElelFHm8TbB1HKdICPIg4jlpX4iqqY:Ihz8XVSelF/B1MzWY
- TLSH
  T17794D74A5AB3146225E3B1BCDB6F6144723990036D2CDE88BE9CC7941F4952E82F5FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  expanded.html
- Size 2KB
- SHA256 4a783670d21bf7276bb2fab3d589a220a0fc370cb18b0572e185bea4bcbf8e8b
- MD5 a6ac7d531ba1473b02e44db5df1a8d62
- SHA1 3714162bed5434b0c0f9121bc6c9112b14b9495f
- SHA512 0420f3b0c0dc8eae0b2eeb099ac6e408c708c876acdedf53c09443f1a55ff99de3fd3047f665588b94098410da04ee0c7b7980c3802c23b043090e6dc22bfa9e
- TLSH
  T1E641C687CD52828B0423CA7356F5E22D8715CBDF57A5A4A8B4EC1A30CF42F6C05EB4D5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  expo-static/static/js/web/AppShell-ba41ba12f3d99fc765df42df30262acd.js
- Size 4.6MB
- SHA256 e3554176d936ac23affe897dc0a4502da7230e25ccd8be252957e824854eb0cf
- MD5 75bc8b3d6ea6e985cf32440d0a954fd0
- SHA1 b5a991fe9b3a37a0743c2df260906d29bdc062b2
- SHA512 e7afb1a8832791c5807e6010a2c4ff25c54f363b379e1b02cf71b7317ca64b86702b702008ed874edb746a72748e38729db09fd4525969f360970ed8a3dfee4d
- SSDEEP 49152:rp0hlAPfIQWxSyjeaKFLIIcxnAlYM3pIpiXglwzGCR77b+QAiJoXv3q7Oe5/:am
- TLSH
  T111267C3268946DA5428706DDD4AB820DE13D8061C06994D6FFFB4EEE46944CCF2B7F8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  expo-static/static/js/web/__common-a463eb2f27b30a83adb6d16015685a8f.js
- Size 8.4MB
- SHA256 457cc4981d9e94402992ae370a3fdf0fde2b123e0057cb00b07c010f8edad8ac
- MD5 caa4f970ebb5df41a264bacdc2112caf
- SHA1 185c1f4dee1b8c354bbd1e96e6720819a7d96187
- SHA512 544a495622516e09b8e9df1c7491fbe6a47caecd562ee0da740e6c290b5e04eba9dcfdc56eb2431dc6bad8599bc8bcd5ea457bd35ae79379ea2b4236a8c5a51e
- SSDEEP 49152:RwXOIG0Bgm95p7qavGkm/0ILLbSVWnWzqfZK/KNYNyVQy88k3RgOkyla+kOtYeWf:sut9wkAYej2/0rETp7Q0Z9ymH5ZNABKT
- TLSH
  T128963BB675E1F8A103C395E9803B4005F23A58757029A1E4FBB98DEAFD5448D90B7F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy