789fda23504fb4a6faf40c6f0c0557d66561fee8826fb347205bc2f78d4cf3b5 | Triage™

Login
Reports

Overview

overview

5

Static

static

3

BlackNet B...m1.vbs

windows10-2004-x64

5

BlackNet B...m1.vbs

windows11-ltsc_2024-x64

5

BlackNet B...m1.vbs

windows10-2004-x64

5

BlackNet B...m1.vbs

windows11-ltsc_2024-x64

5

BlackNet B...on.vbs

windows10-2004-x64

5

BlackNet B...on.vbs

windows11-ltsc_2024-x64

5

BlackNet B...er.vbs

windows10-2004-x64

5

BlackNet B...er.vbs

windows11-ltsc_2024-x64

5

BlackNet B...es.vbs

windows10-2004-x64

5

BlackNet B...es.vbs

windows11-ltsc_2024-x64

5

BlackNet B...er.vbs

windows10-2004-x64

5

BlackNet B...er.vbs

windows11-ltsc_2024-x64

5

BlackNet B...ch.vbs

windows10-2004-x64

5

BlackNet B...ch.vbs

windows11-ltsc_2024-x64

5

BlackNet B...me.vbs

windows10-2004-x64

5

BlackNet B...me.vbs

windows11-ltsc_2024-x64

5

BlackNet B...er.exe

windows10-2004-x64

1

BlackNet B...er.exe

windows11-ltsc_2024-x64

1

BlackNet B...st.exe

windows10-2004-x64

3

BlackNet B...st.exe

windows11-ltsc_2024-x64

3

BlackNet B...il.dll

windows10-2004-x64

1

BlackNet B...il.dll

windows11-ltsc_2024-x64

1

BlackNet B...ub.exe

windows10-2004-x64

3

BlackNet B...ub.exe

windows11-ltsc_2024-x64

3

BlackNet B...er.exe

windows10-2004-x64

1

BlackNet B...er.exe

windows11-ltsc_2024-x64

1

BlackNet B...vb.dll

windows10-2004-x64

1

BlackNet B...vb.dll

windows11-ltsc_2024-x64

1

PHPStub/PH...ME.vbs

windows10-2004-x64

5

PHPStub/PH...ME.vbs

windows11-ltsc_2024-x64

5

PHPStub/PH...CP.vbs

windows10-2004-x64

5

PHPStub/PH...CP.vbs

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
BlackNET_Sourcecode.rar
Size 902KB
Sample261027-ec5ana1vb1
SHA256 789fda23504fb4a6faf40c6f0c0557d66561fee8826fb347205bc2f78d4cf3b5
MD5 f6f0217a02a8c619e52dbeaf8a35774a
SHA1 249ad455087c9a9d2ac0985db074b84309410934
SHA512 07b5ce08a0beccf13d6e54570d736912a1e11ccd66904841bcac7b8862487a46d9feb4184c285f890cff1c3580fe2804692f63edfe4daeeb40650e30c9568c15
SSDEEP 24576:aNoj1y6fTDMtFBuxzMMAIBK2pWNojVnnkyerAPAobi/l:Kojvc6x2tojVArqAoW/l
TLSH
T14815235B819ACE19D3D0609AA11C9FF7158F8D11B87BF0267412674B7FBDAA2342C8F4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

BlackNet Builder/BlackNet Builder/Form1.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

BlackNet Builder/BlackNet Builder/Form1.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

BlackNet Builder/BlackNet Builder/Form1.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

BlackNet Builder/BlackNet Builder/Form1.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

BlackNet Builder/BlackNet Builder/IconInjection.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

BlackNet Builder/BlackNet Builder/IconInjection.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

BlackNet Builder/BlackNet Builder/My Project/Resources.Designer.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

BlackNet Builder/BlackNet Builder/My Project/Resources.Designer.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

BlackNet Builder/BlackNet Builder/My Project/Resources.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

BlackNet Builder/BlackNet Builder/My Project/Resources.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

BlackNet Builder/BlackNet Builder/My Project/Settings.Designer.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

BlackNet Builder/BlackNet Builder/My Project/Settings.Designer.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

BlackNet Builder/BlackNet Builder/Splach.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

BlackNet Builder/BlackNet Builder/Splach.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

BlackNet Builder/BlackNet Builder/Theme.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

BlackNet Builder/BlackNet Builder/Theme.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

BlackNet Builder/BlackNet Builder/bin/Debug/BlackNET Builder.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

BlackNet Builder/BlackNet Builder/bin/Debug/BlackNET Builder.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

BlackNet Builder/BlackNet Builder/bin/Debug/BlackNet Builder.vshost.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

BlackNet Builder/BlackNet Builder/bin/Debug/BlackNet Builder.vshost.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

BlackNet Builder/BlackNet Builder/bin/Debug/Mono.Cecil.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

BlackNet Builder/BlackNet Builder/bin/Debug/Mono.Cecil.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

BlackNet Builder/BlackNet Builder/bin/Debug/stub.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

BlackNet Builder/BlackNet Builder/bin/Debug/stub.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

BlackNet Builder/BlackNet Builder/obj/Debug/BlackNET Builder.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

BlackNet Builder/BlackNet Builder/obj/Debug/BlackNET Builder.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

BlackNet Builder/BlackNet Builder/obj/Debug/TempPE/My Project.Resources.Designer.vb.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

BlackNet Builder/BlackNet Builder/obj/Debug/TempPE/My Project.Resources.Designer.vb.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

PHPStub/PHPStub/ARME.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

PHPStub/PHPStub/ARME.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

PHPStub/PHPStub/ByPassSCP.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

PHPStub/PHPStub/ByPassSCP.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  BlackNet Builder/BlackNet Builder/Form1.resx
- Size 313KB
- SHA256 c88115254ce4d36f42d9ab5429d4d9f099acb9fbf6b1ac1181729e99f1cff4e4
- MD5 ed5b852911eff4c9eaa237e37cf9bfc8
- SHA1 2df3b12fe65c64ee0a8d3e30bac12988e08a1832
- SHA512 ba69489e41f2676068905555e7d20dd3e897a3be76512a6eb3723a495efdb277225beeb04b55b8fd141104a493affbe7593fb4032a69ad576577f2684ece8835
- SSDEEP 1536:Kj2v6sWpngc/si1v7LpWyYxHg62B2wKzE0nUAomc3NFwbT+b0VYgjLA40FxrasT2:Kj2pkVkGv7tYdg65TT6wbT+bij83FMsy
- TLSH
  T11C641FB2554894B06F3CD920D71EA9B8FEBD634F4F400E14B16C9BB84F34B28BA29755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  BlackNet Builder/BlackNet Builder/Form1.vb
- Size 5KB
- SHA256 9a9ea5b0caafe2ba64c810481b3e23a7678de0af93dd3759a0400b511d72ad33
- MD5 5f84cfd6afce809c6480a750acfa871b
- SHA1 c7764bac400cb44d34fd77aae55a82336aa67568
- SHA512 69f88e0f40123abb240180123a68c88a5a00bbc77e27b23beed022a02b80385fca35d39132f4a8b912157f37e2281d6c5f603c500b28ab3c570f4acab49f6244
- SSDEEP 96:0a7Hj52l8ypsZd2VCcqaQTld+6fcd9tVBpbNKo3dY:0i5jd2VCraQD+6Ud9tVBBNKo6
- TLSH
  T102C1541B3E5342B9D5BBCE1499ADB096F9B1242369190DD8B08C01E58FB65DCF2A2B84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3 behavioral4
- Target
  BlackNet Builder/BlackNet Builder/IconInjection.vb
- Size 7KB
- SHA256 e6939e14d90b804e4533580ec8b2f8a8efd3162744151ba1e5878d525d81e125
- MD5 b48d622f03fc1189bc4b3b54b12a718a
- SHA1 49d0e89f78e8de546d685e38a78bdb9648cf5f39
- SHA512 d7634d57e93308958054f5d171316e2f44da707eb7ccb5dd5be58c95aedb91f2c2f54492ab89b64bd33e11869f812288ad9642a30df1bf79f4c6a25febb35cc9
- SSDEEP 192:Gy8z0ik9+y4j9oPTdSo0CRQF7Kt/PKxPChHiocUjHYJszsM7bw:+z0iwp4pobBVRQF7Kt/qPChHiMjHYJsS
- TLSH
  T12DE1521A2B0DA43456FB4C047C197657FC8624171E286CA07E8D87B84FF23DCF62A769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral5 behavioral6
- Target
  BlackNet Builder/BlackNet Builder/My Project/Resources.Designer.vb
- Size 2KB
- SHA256 2e36c145a78de1bac9007158a0d4da123801a281c33096f7e4ca0d17dbd05a20
- MD5 c14a9b32492a22807f51d4f2eea1862b
- SHA1 f549f4b6f6214977d12cf2211d9f20a1b7aff6d1
- SHA512 e97d8df75db8a97e80d81edc5b6abe3ec5c08c1a93297b74f8ff1601d822f580a33d289054488db4f71f3314e22b173055c1c0b65a25b8afae1d8cbd7ce23f05
- TLSH
  T10251BBFB1F8E91315832DC4B1A05A412CEA251A7C53CA8A5F9DE02994FF7384137EDB2
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8
- Target
  BlackNet Builder/BlackNet Builder/My Project/Resources.resx
- Size 5KB
- SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
- MD5 0cd8c971317d19bbed44757809bcb92b
- SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
- SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
- TLSH
  T17FC11245B1C09D220BF3482DE6527988F7A8923B0235AC54B4DCA61F5F73C85A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10 behavioral9
- Target
  BlackNet Builder/BlackNet Builder/My Project/Settings.Designer.vb
- Size 2KB
- SHA256 6b5642ab000b7cd736f37f53be6f5c95989575cfb81ab4041eea39e204fe53d1
- MD5 43a04fb44ca49f50046e4e77953897bc
- SHA1 ae8a090a1b27ab42b39a5dca120288c9d3b5f1a0
- SHA512 0b0d12ea8cfc3ae67e32bad5131a734bd0ce093a34e08d7392f5e7be27727185928d8842ffdf9d1c473dbc40d79e4400f65686c9e4d921c95592555498d5493a
- TLSH
  T1EC51CDBE2F4EA67D5571CE84DB0AB553CFB002A7861D78B0758C21C9CF3668453BD660
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral11 behavioral12
- Target
  BlackNet Builder/BlackNet Builder/Splach.resx
- Size 25KB
- SHA256 3c413c273e79e5d88ae3b4f89ba4f317c287bf299c80e2c762ac5223cc41ad4d
- MD5 cd0aa67193f37a1e97cb1eb0ef5e529a
- SHA1 661aebdc32f6ea042b99c8a3db45f0a35660cc95
- SHA512 cca51c13f1bd17e68b6f77c38627939f2c061a827796d4bc489c563f3148b4f888e5ab96cc27ac85518924a56cd8cc10302b1d57a4251331aca10b0d704b0dac
- SSDEEP 768:KjXdskSv69JyamlUoYitRYBcu2dKPZS+E:Kj2v69sbbJYmlmZi
- TLSH
  T171B28E51B6C2CE320AB5853DD7523D48FB68417B12158E84B4DD671F6F328C667A33A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral13 behavioral14
- Target
  BlackNet Builder/BlackNet Builder/Theme.vb
- Size 112KB
- SHA256 e5a6849d0fcb42a51a9d0f92545d1ca49957cf6b3ee0e97fcf3954a542b16dbd
- MD5 9e5c42cddd4203a570efcb7e245d25fc
- SHA1 17296e24f313389321f5413b172337c782655fe4
- SHA512 60bb13d602143c99ecba201f788c732edc4c37c1577765180f7021c4ffd1cb343422979799d8c8b584020d37d5cb02fa70b3fa47e0c4644ad59a73fc66af9f47
- SSDEEP 3072:zyVbObvb/FVrLIbcFVE5mbpFVE5wFVMXxzFVcmI9vkAym0WtLYcSQZLmrPPmFVu2:LQO
- TLSH
  T14BB3532F2A0F10381EF3DE6D5C8EB895EF96381714720985B7AD09D95FB024C616F3A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral15 behavioral16
- Target
  BlackNet Builder/BlackNet Builder/bin/Debug/BlackNET Builder.exe
- Size 516KB
- SHA256 e3eb0704194c9d350cccc1639cb4376e37d104d289bb5eae4fcfa8e0c6d0869f
- MD5 e736f035ae5349ac7deec362cdf80aad
- SHA1 778325efb6a39635915f787ebbbec82b74c463c3
- SHA512 ad98300245ca999300f6f3581a5338f59ad0b4dbf067b7a478faad69bdf25fcaf973ca93b8dd41a1d376b807c5545c071ced552ca74fef32d100d05c5b50b071
- SSDEEP 12288:YihpXXXXX3DXXXXXX3XYXXXXXXX3XXX83XXXXXXX3XXXXeX3XXXXXXX3XXXXHX3V:YibXXXXX3DXXXXXX3XYXXXXXXX3XXX8y
- TLSH
  T14DB4F7D42BCF4921EED845B52E3FAE46227D9843631D92372B742F78993D900EB83167
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  BlackNet Builder/BlackNet Builder/bin/Debug/BlackNet Builder.vshost.exe
- Size 21KB
- SHA256 7b0fa55256b097abe9bb2a4cd7f8c069c5e7e87f18b850304b1fc3d2a07c0a13
- MD5 91df22d4adb0ce96817937638bfae13a
- SHA1 8dcb86ca5b3d269001c787e524d41202b6ca8a2c
- SHA512 c13903fb48357345a04d5d370d364eefc0985ece9e814224e95a3f4caf354722cde96fdd3ce3915252d0864713491a7e9ba7d648049d025bd90315c2ab915cab
- SSDEEP 384:csLXuBWb9Wqn/zX0GftpBjdGJjH3HRN7fCRjlSCIqqcf:DXuq6iPGpHf6fq
- TLSH
  T188A24B96CB7C9243DDA35D7066A5DAC37C3CD7C61D20A56B089EF2D92C837C0EB24529
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  BlackNet Builder/BlackNet Builder/bin/Debug/Mono.Cecil.dll
- Size 305KB
- SHA256 cdadc26c09f869e21053ee1a0acf3b2d11df8edd599fe9c377bd4d3ce1c9cda9
- MD5 851ec9d84343fbd089520d420348a902
- SHA1 f8e2a80130058e4db3cf569cf4297d07d05c93e0
- SHA512 5e1d1b953fda4a905749eff8c4133a164748ba08c4854348539d335cf53c873eae7c653807a2701bf307693a049ae6c523bd1497a8e659bdea0a71085a58a5f1
- SSDEEP 6144:ueMQM/aMOZabe3h1PtRjAqmYVNf3yTXcYBbt6KMBhu:uF/aMDb8BtRjA7XcYNclB
- TLSH
  T1D46429185AEC5B3ADD6F97BFD0E6581183B0F0126643E30E4BE4B2B22CB3761C95255B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  BlackNet Builder/BlackNet Builder/bin/Debug/stub.exe
- Size 49KB
- SHA256 566fadd6b768fb29498236eab1fbd9f34ebdb022d00e01069b01effd15dc2a2d
- MD5 8e604cf0bdf48932cefcf8f664ca655f
- SHA1 f0daee24fdd829e497d85af888d3d3fa41de6ada
- SHA512 deace37479e8b8e485741b156bc67cb3c15f58695568938d564a54d35d9315e5927029b3bfc05850a524a370e0ca20747e5dee1881940ac695880344b419a3b9
- SSDEEP 1536:+Dbxyhx8IW57IOjdqv5MrdgJuZVBHVkURak0:+D1vIW5sOj0RMrCU7HVkUR/0
- TLSH
  T1D8333B2837F98A18F1FF6FB9097166510BBAFC265517E26D4F95609A0E33B00CE50A37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  BlackNet Builder/BlackNet Builder/obj/Debug/BlackNET Builder.exe
- Size 516KB
- SHA256 e3eb0704194c9d350cccc1639cb4376e37d104d289bb5eae4fcfa8e0c6d0869f
- MD5 e736f035ae5349ac7deec362cdf80aad
- SHA1 778325efb6a39635915f787ebbbec82b74c463c3
- SHA512 ad98300245ca999300f6f3581a5338f59ad0b4dbf067b7a478faad69bdf25fcaf973ca93b8dd41a1d376b807c5545c071ced552ca74fef32d100d05c5b50b071
- SSDEEP 12288:YihpXXXXX3DXXXXXX3XYXXXXXXX3XXX83XXXXXXX3XXXXeX3XXXXXXX3XXXXHX3V:YibXXXXX3DXXXXXX3XYXXXXXXX3XXX8y
- TLSH
  T14DB4F7D42BCF4921EED845B52E3FAE46227D9843631D92372B742F78993D900EB83167
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  BlackNet Builder/BlackNet Builder/obj/Debug/TempPE/My Project.Resources.Designer.vb.dll
- Size 7KB
- SHA256 3ad6002620143bf7df7a14dab965b386076142466e74a9aae8e56d0743143889
- MD5 8ccab10ad237f7b3d92a0c9a7bd7880c
- SHA1 80973d6ae6b9b16ba00d32079f98bd5fcc4dc6b2
- SHA512 ca4fe112a64e06b65bf6e45c154d03b93af04d7c6b199480e83aa1dfc49281b235edaf1938f09f1b670d4b27bf3a99a75674a34090e70e29260add596eb7cfd9
- SSDEEP 96:+W9RpalZHBN3uz3kqSZE2VYlnlYJnLEM/mNdtIDL0Kf4NiN4e01ZPhXmrkLpbHC:+db7btZVInlYJL/ertIDLTG2IC
- TLSH
  T144F1E87223E0837ACB7A477249A356114B71E748CE67BF6F08D0932659E37448B62FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  PHPStub/PHPStub/ARME.vb
- Size 3KB
- SHA256 0358382c38c6ed7ede31a513d7a479ae8781578c21b5daec9ad591c2aa111c53
- MD5 bfdae900e5a23f93c1c8818a55aee44e
- SHA1 7bb9b2c946689458c072b5ba294f164c6cd92409
- SHA512 8c8ea82e85cf5f067e206f024e72017eee05b907762f74ad711672feb9a77664502a3709c8effcb491fdfd73c3ef7318cba25899250c2751052a2a977852d5bd
- TLSH
  T10361E0527F2C91E043E288AC48D4F1023C9F9B1B434A6AA4F38DD5744FB969543787F6
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral29 behavioral30
- Target
  PHPStub/PHPStub/ByPassSCP.vb
- Size 8KB
- SHA256 79965f87ebf3e589b088f881e14d716f19afc297e819709ffe4fd3b808594bda
- MD5 0e68d7b90c0ac641180466b8e0253429
- SHA1 454b912fe7e91deecae8085b1660782713008c85
- SHA512 068b45a3daa31b96276565af79cef065bed901745cf460f8da49a41f1fec25d5b7002e59f7f57c59d94a788c3c94e5255cbc3654151038b0c828e433f5e83f73
- SSDEEP 192:userqgc2reSLUL5IGX8fBCAUu3NWmc+4Af3x:utLXx
- TLSH
  T14F02E652BB4D963484FE180A3DB120A6DCFF166B1B37C870766C8143BF7BCB24995989
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy