42c1bae0da6861320789abecdcb456b5457be4d029b018d3d569bb4bce9d3cdd | Triage™

Login
Reports

Overview

overview

4

Static

static

3

config.js

windows10-2004-x64

3

config.js

windows11-ltsc_2024-x64

3

controller...ler.js

windows10-2004-x64

3

controller...ler.js

windows11-ltsc_2024-x64

3

database/m...ent.js

windows10-2004-x64

3

database/m...ent.js

windows11-ltsc_2024-x64

3

database/m...Log.js

windows10-2004-x64

3

database/m...Log.js

windows11-ltsc_2024-x64

3

database/m...ost.js

windows10-2004-x64

3

database/m...ost.js

windows11-ltsc_2024-x64

3

database/m...ser.js

windows10-2004-x64

3

database/m...ser.js

windows11-ltsc_2024-x64

3

database/m...ser.js

windows10-2004-x64

3

database/m...ser.js

windows11-ltsc_2024-x64

3

index.js

windows10-2004-x64

3

index.js

windows11-ltsc_2024-x64

3

middleware...uth.js

windows10-2004-x64

3

middleware...uth.js

windows11-ltsc_2024-x64

3

node_modul...n/atob

ubuntu-18.04-amd64

3

node_modul...n/atob

debian-9-armhf

4

node_modul...n/atob

debian-9-mips

3

node_modul...n/atob

debian-9-mipsel

3

node_modul...ob.cmd

windows10-2004-x64

3

node_modul...ob.cmd

windows11-ltsc_2024-x64

3

node_modul...ob.ps1

ubuntu-18.04-amd64

1

node_modul...ob.ps1

debian-9-armhf

1

node_modul...ob.ps1

debian-9-mips

1

node_modul...ob.ps1

debian-9-mipsel

1

node_modul...upport

ubuntu-18.04-amd64

3

node_modul...upport

debian-9-armhf

4

node_modul...upport

debian-9-mips

3

node_modul...upport

debian-9-mipsel

3

Sharing

Copy URL Twitter E-mail

General

Target
MCO3.zip
Size 19.5MB
Sample261027-hmzdyaa181
SHA256 42c1bae0da6861320789abecdcb456b5457be4d029b018d3d569bb4bce9d3cdd
MD5 8619db5a3acc1280bcfa376c55e83aea
SHA1 edd7e6858b1dc15c9951365ecd3d1b3436b69311
SHA512 f4df9184758c0a93eab62608beecb2e321504afd54685771caa851cf9081da70780dea4af6a5aa6010256009ce7556b83fc0e44fddd4c2b2e9d158b06ee4dfc9
SSDEEP 393216:zPmMWodTUiyYSK/YHdXvLQKAj+9V4888EdLYXc4x6lbL3aj:TmMFFtOHxvi+9M8EdLX4x6lPaj
TLSH
T18D2712E9DABA052BCF4EB337F4C686129EDCCBC88562AB1B145D83E15C461E10BD750E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

antivm discovery execution linux

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

config.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

config.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

controllers/userController.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

controllers/userController.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

database/models/Comment.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

database/models/Comment.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

database/models/Log.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

database/models/Log.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

database/models/Post.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

database/models/Post.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

database/models/User.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

database/models/User.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

database/models/regUser.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

database/models/regUser.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

index.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

index.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

middlewares/checkAuth.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

middlewares/checkAuth.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

node_modules/.bin/atob

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral20

Sample

node_modules/.bin/atob

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral21

Sample

node_modules/.bin/atob

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral22

Sample

node_modules/.bin/atob

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral23

Sample

node_modules/.bin/atob.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

node_modules/.bin/atob.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

node_modules/.bin/atob.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

node_modules/.bin/atob.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

node_modules/.bin/atob.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

node_modules/.bin/atob.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

node_modules/.bin/color-support

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral30

Sample

node_modules/.bin/color-support

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral31

Sample

node_modules/.bin/color-support

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral32

Sample

node_modules/.bin/color-support

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  config.js
- Size 184B
- SHA256 8503b7d4c13796f3cedbd7367326ffb53fccb1607acd809ff85d5d0631b6f942
- MD5 464e529872fe4adbd266801028a94a04
- SHA1 99adcdb643fd4cf4ffa74b9497a3413acc7adffb
- SHA512 dafa958459928f5ec0533d88a9cba6c74a5c6508cdc6f5dfa9af903e32d22b52ca528aad24e65e0503e24136125112cfa3573436790ef5e1608dec011a68aef7
- TLSH
  T1D7C01209D24E39E211B6D7D4F36404032DE49161131455317125E0D6175A67407A2D5A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  controllers/userController.js
- Size 9KB
- SHA256 bc3e3a2772fd2e19e1027a88f04c2393072f64f0e31b76cc857ace7cf05e6461
- MD5 cfe778fc2661bd1252ddaaeeaba07807
- SHA1 900df4880ea989769e02697382e35d046715589d
- SHA512 d53f5584554fe578814ee8c5f803d490852478d43d5dc5d77b65fcddf98cbfd0543a13eb27d9a7b7a3eee22f2534603b94e7808813fcd30df4b52d986f938df2
- SSDEEP 96:6pAfWHcHLKXjJkI7kL7+yiwXRtlK3zCc2xBqFKNxspVsnYB6FNBHUbR:34gPvSsHlACbMFExGsVR4R
- TLSH
  T1D412ED6514A91552463AFBA95EA31109FEC6E093B0684344FE6C47741FFA881C8E2EFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  database/models/Comment.js
- Size 404B
- SHA256 97cd5803e880853dee753ec830dc42cfea8886a67e11a76e96aa6ba824ac304e
- MD5 efa73c8219b6bde86dadb5a55ce36c88
- SHA1 3d9a01907c1c0ed8242ce1c6540f3bdfa090a53f
- SHA512 d9128723348d5cd7807576157dad75625551ee39afae439c9a90cdd3db9052040c4fe09ad7374dfee3e2604bebfb105ba31618bf2a5e2f92c29818af10a24eca
- TLSH
  T1D8E0651364F652C9153578E0D4491221E5C1574E2125F0AEBF7DF9851B71E808572B6F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  database/models/Log.js
- Size 201B
- SHA256 8c26ad23b1f4194bbe9cccde54e7d9a2f0c46a1cb9b5c8b551bd5fbc19227214
- MD5 c8c8ce6724db9292f81a02109ec135c9
- SHA1 5a49e66a2a0e03b5b9ffd864be4b73154785dd30
- SHA512 ea36eff0d9a0ec6f422ab86ac9ebfe092624d057cec7bb172a8fda94c2a182725d5807be03f00033ab28540bc5107c22ba2e043622ae62359deef06d4d1e6a8c
- TLSH
  T149D080534CFB34DB0754D8F0D08D0403B4958074BC2670F2F51A7545173BC5455739B5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  database/models/Post.js
- Size 939B
- SHA256 b7dc9f5d39ee90f83fe0453b87ad4674fdfc96633a80f3c6402e92e6a3430516
- MD5 e3c00e2344ebe8797b58d3e28b8309a1
- SHA1 ad2604ad5039df79a712dc7df5259b43f01054e5
- SHA512 08bdb9802f9d06b8c2529b336a5382061e411f8e8c5caaf3a954b17bdd8a8458bfbfd8560d8071c66dff7b213c0357b31b02fec5c6eb25c31c0b6124336450a2
- TLSH
  T18311C113A4EA92961B32E4E4D8890532A9C1034D6673F0F7FD38A9851B33E80C56776B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  database/models/User.js
- Size 570B
- SHA256 d47c32efd7a8c3de020397d7925a9df91f7faf03b008ee8a63c40f8229143fa3
- MD5 04addd1e513a7f061b9bfa05fe2b881f
- SHA1 f9ae8f3ee9d9ad745290bef641c72de1b0bcc46b
- SHA512 933d7e02c4394eb85bd962fa21d1e95b6032ae27eab0cabf71f64230f7310a74a369e3c629006f0ca50e38569bf25184bcb19a67c9686c7428bccb84c7178874
- TLSH
  T175F0FCC32CE396E51B20C5F0C9857673F5C1D61A5313E5B2B9758D893773C988411B67
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  database/models/regUser.js
- Size 1KB
- SHA256 bad0a79bd1690d8b25f28e5e4ba05b04bb52978826f4f0c6d994e34613f08194
- MD5 428f220109dc2de9425aad6c7e64e670
- SHA1 1e160a848a1d41d0c2baa93e655c37ddbc2217fc
- SHA512 cb086618273c815557544277c3b7ec4ebf0392b00acb29799a5a6b3e90620b86cfb056b0f8ad3de7a8647d21349f087fbb78d6231845b7f6e5e47e64cc38338a
- TLSH
  T10A117D9525BF9B99993237F9D1225010F1C3D13B75166BB1F73C6DA00F304189A56EEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  index.js
- Size 9KB
- SHA256 db55c3d69cd78fc782f8c93ad364256f05b0d442f54905763fa6e7732bf1ba49
- MD5 95725bc50d740b190360098092f81dd7
- SHA1 0e165f030c3ef270bcaedbbbcdf009a56a8ead37
- SHA512 1d4ec8afead11d665a2ddcf31f2d0989c1b8aad2ecd5801056d0e842d0a352c6d716220edb7c74d77096a9f75ffcb5722402364cba86ca649162392f985c505e
- SSDEEP 192:hr5/+GmJiqHKDnF1iquWKQNLBDNEUF7Ba74IpLVPHmPLUyp4Cp:uKDnF1iHWxh7F7+OLUyj
- TLSH
  T11622A521846211A709B647E948731216FE81E27B315042A57BBDC7B86F7BC5188FBBFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  middlewares/checkAuth.js
- Size 294B
- SHA256 6e12b660f21fc4d4708e22bf2765b73ef40dd9ad6e1072fbbff7ce848819aae3
- MD5 588953db68cbbfa01e124acc1a02ca31
- SHA1 e0969c09e27de55ab84ffde06e68db5aa0de8347
- SHA512 1585ec340d2c6345ddca6d080363fef2b61f98ce4b2d9c52ffc2d3ab865507ff80044f54bd39259a3e40ca3356f07571b074a696777928b111e389d862cde049
- TLSH
  T1B6E06294B9E36BE447DFD04C066B8501A9998157704C4521FC5DB3D4DFD066445E02F9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  node_modules/.bin/atob
- Size 381B
- SHA256 55610346a91fdaf66617b52a37ada2f55afc418525e2e7b48c141bed5960c240
- MD5 875996e3b40258083b2b0e0457702395
- SHA1 b92987f8bc0b874062239a20433543683c8672f6
- SHA512 bc16159afcf5e6344b4ba0890594e3cf75849c9865c87213112e08e95367e4bc908a3af445ec6b6f83ba2ef6720c6872a59e218a586d458ae8a6dab0793617c1
- TLSH
  T1EEE0D87516E15F36940942F8DD015858415B1383BD04BF99FD4C3B465F6431EB1EB72D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  node_modules/.bin/atob.cmd
- Size 321B
- SHA256 f67d4b91379fc8fca9cc783b9e81d7228d409e33d07b7ec45dae7d5013f9da94
- MD5 35a09443ab0504e04d88fdcbbf544783
- SHA1 9a15d71fd1018ad411f98413ce08951f6e983383
- SHA512 29767c07e9f2c3285e05eb7a29854f2d4010430a52a906285d889a190b3781e62f086cc7012d2870d85f6e292fb05a1c2e3d2ef7e5d267004dff0538ed75891b
- TLSH
  T12EE0267AF0007045B2379B71A406264226E2BA88844701B6B83804AB6B417865BCA89D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  node_modules/.bin/atob.ps1
- Size 789B
- SHA256 39dbe126ba1aa0eeed315310d236e6c0fc58fa8646635b35c132eaf7926faec7
- MD5 0aebfd90de0fb000014ec7ee8e89d108
- SHA1 4693e45e79c81eeeb6f2ca13bd989a52441a702e
- SHA512 6bd7219da345805aae39f2430c0f361eb772ec674041d9b55ae2cbe41fc1197b1631b34cfe4e4c7364b76de3226f9622fb61616855b2cd76e88e55f5ec61224c
- TLSH
  T1850142287AF03E6BC2069B9373551E016346959B2D485F19E4483F824D6072D23FB771
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  node_modules/.bin/color-support
- Size 389B
- SHA256 3e35e9ec55d1a0b4d942bc1c87861b467859a741ab59f56a39577a06177ac73c
- MD5 69db5395c183a801da7eae78cdad8ef5
- SHA1 ee0d53dd6f64affff5e2c0cdef7012b2ea675be2
- SHA512 299d9dee5052d8d94490b80af0c37391bd1767c61a7c22caa6dc3794134e6cb2bb081e86476aa0cd882b5d286272bfe0b89a048a153991446339bbb2330c0deb
- TLSH
  T159E022B4A4B05F37805A5AB89C014C58866A034378407F49F90C3B429F6034EB1EB729
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

discoveryexecution

behavioral20

antivmdiscoveryexecution

behavioral21

discoveryexecution

behavioral22

discoveryexecution

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

discoveryexecution

behavioral30

antivmdiscoveryexecution

behavioral31

discoveryexecution

behavioral32

discoveryexecution

© 2018-2026

Terms | Privacy