86d9e9f9bb9c0db0ecb228b42dfa2ffcf21f6dd4c9f4f1fbbf9c28982dacff63 | Triage™

Login
Reports

Overview

overview

4

Static

static

1

Api-Server...trc.js

windows10-2004-x64

3

Api-Server...trc.js

windows11-ltsc_2024-x64

3

Api-Server...tch.js

ubuntu-18.04-amd64

3

Api-Server...tch.js

debian-9-armhf

4

Api-Server...tch.js

debian-9-mips

3

Api-Server...tch.js

debian-9-mipsel

3

Api-Server...ver.js

ubuntu-18.04-amd64

3

Api-Server...ver.js

debian-9-armhf

4

Api-Server...ver.js

debian-9-mips

3

Api-Server...ver.js

debian-9-mipsel

3

Api-Server...est.js

windows10-2004-x64

3

Api-Server...est.js

windows11-ltsc_2024-x64

3

Api-Server/index.js

windows10-2004-x64

3

Api-Server/index.js

windows11-ltsc_2024-x64

3

Api-Server.../acorn

ubuntu-18.04-amd64

3

Api-Server.../acorn

debian-9-armhf

4

Api-Server.../acorn

debian-9-mips

3

Api-Server.../acorn

debian-9-mipsel

3

Api-Server...rn.cmd

windows10-2004-x64

3

Api-Server...rn.cmd

windows11-ltsc_2024-x64

3

Api-Server...rn.ps1

ubuntu-18.04-amd64

1

Api-Server...rn.ps1

debian-9-armhf

1

Api-Server...rn.ps1

debian-9-mips

1

Api-Server...rn.ps1

debian-9-mipsel

1

Api-Server...odegen

ubuntu-18.04-amd64

3

Api-Server...odegen

debian-9-armhf

4

Api-Server...odegen

debian-9-mips

3

Api-Server...odegen

debian-9-mipsel

3

Api-Server...en.cmd

windows10-2004-x64

3

Api-Server...en.cmd

windows11-ltsc_2024-x64

3

Api-Server...en.ps1

ubuntu-18.04-amd64

1

Api-Server...en.ps1

debian-9-armhf

1

Sharing

Copy URL Twitter E-mail

General

Target
All.in.one.bundle.API._.BOT.zip
Size 20.5MB
Sample261027-jm6npada49
SHA256 86d9e9f9bb9c0db0ecb228b42dfa2ffcf21f6dd4c9f4f1fbbf9c28982dacff63
MD5 230b025410e662186d574de7117b8932
SHA1 b0dbde976169e348ef669ddf4d7572ab6b0f3d91
SHA512 e5076ed042db63074cfc4c8f00b4508b3649c72779a2c41e05127de82de290192095c46f3b4c636fc30dc67ac784d59bebc0cedd22a8b3dda054323de021d91c
SSDEEP 196608:RImwpmfWIe7kJpqrSLjsbHz+9Pxw0iyaBfk1tNw2Jo4/d/LiEuZhYivvUng7PZTS:VQmeUpdYO5S0ly2DdwH7BiBhBLgEJ/
TLSH
T111270188D9B5018BDEEEB776F8C585219FD9DB862070A817832C5BC34CC2EB9178365D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

antivm discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

Api-Server/.eslintrc.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

Api-Server/.eslintrc.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Api-Server/bin/fetch.js

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral4

Sample

Api-Server/bin/fetch.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral5

Sample

Api-Server/bin/fetch.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Api-Server/bin/fetch.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Api-Server/bin/server.js

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral8

Sample

Api-Server/bin/server.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral9

Sample

Api-Server/bin/server.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Api-Server/bin/server.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

Api-Server/bin/test.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Api-Server/bin/test.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Api-Server/index.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Api-Server/index.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Api-Server/node_modules/.bin/acorn

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

Api-Server/node_modules/.bin/acorn

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

antivm discovery

Behavioral task

behavioral17

Sample

Api-Server/node_modules/.bin/acorn

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Api-Server/node_modules/.bin/acorn

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

Api-Server/node_modules/.bin/acorn.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Api-Server/node_modules/.bin/acorn.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Api-Server/node_modules/.bin/acorn.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Api-Server/node_modules/.bin/acorn.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Api-Server/node_modules/.bin/acorn.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Api-Server/node_modules/.bin/acorn.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Api-Server/node_modules/.bin/escodegen

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral26

Sample

Api-Server/node_modules/.bin/escodegen

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral27

Sample

Api-Server/node_modules/.bin/escodegen

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral28

Sample

Api-Server/node_modules/.bin/escodegen

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral29

Sample

Api-Server/node_modules/.bin/escodegen.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Api-Server/node_modules/.bin/escodegen.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

Api-Server/node_modules/.bin/escodegen.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Api-Server/node_modules/.bin/escodegen.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Malware Config

Targets

- Target
  Api-Server/.eslintrc.js
- Size 10KB
- SHA256 256fe4d0d0f8bfe99c4998be545efd301b9c7aca1d1f826997b7cdf65d4ab71d
- MD5 d2b5657c76f977172e059cb315ff4934
- SHA1 687711290f40c9386b457687f7dc09425edf47d8
- SHA512 8d023b66b9ab68c700739e5240be5262ba1e328b072fd4987923a7cc7156e9c311f69cdad6522536e9f4122fcfc479cdab795ba4a1fcc99c0cd9c6f5f3181338
- SSDEEP 96:7aQFczBcNy1jFUen3/iGcl+ZairH1g6OjLBzmQD9dADrFQTzv/8hv8SEl9xUXiqX:70BcNy1JcPsHWdLBFDU/mTwhvm8x
- TLSH
  T1B02266FAA96B5C63957581EFCAED6153B210000BDD343B64F1ED8A802FCC64D29BE5B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Api-Server/bin/fetch.js
- Size 3KB
- SHA256 0004ca4e4a1110bf22879da644a95dbaa1070b2c9126c45c97baa41421655fe4
- MD5 c3d17f4727a907a0984870593172c101
- SHA1 24287106c496c0f6fdab1c7352e399a540b41658
- SHA512 68bfda76c4f8fecb9a15805d244a438be80b06b2e8f475874e18cf56e0123627f63f9fbcb374456c23df7dcefaceaff01d8ac5f31e413b45758730305922d061
- TLSH
  T13C718B0978B7A9325A7BE080A77BE0126339E5073444CCA0F6BC86145F9BC14DF92FB8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  Api-Server/bin/server.js
- Size 512B
- SHA256 05778e8903cf5fc46474fad2a4b487567d0b405d41087f9a35d7a39729bf6ef0
- MD5 90cdd3dc458c91b28e5cd06cd747ed80
- SHA1 ed59b2f15d56d8289a062f0ac146014d7df81097
- SHA512 6c3a0573495b4c61f047a1b86d0bc6b5d8dee1eaa9c4dbba9c760f7681f4e5a9fbdbe14a69638390376b30655a5446dfb69cd956136c3dff0685720209281ce5
- TLSH
  T1E2F09E10DEFB903D153B09818906960BE36C6D37165CFC686208DF673FCAFD2846119C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

execution discovery antivm
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  Api-Server/bin/test.js
- Size 394B
- SHA256 c730904f04e0d42ed87e76bafd28d004b5f10342351baf57b50790bed0643088
- MD5 406b2ef74a84beb482fb38dca2f8caf5
- SHA1 c170d74c685ce6435a9fd4aa1368900b1636dde1
- SHA512 576a34e614a50daef7bc5c7f0f4fb94bfcf95051928b11194ee29ea9c22f11323ca181509d2b6a8a013c109af048dc252590911531a80eedcb761952726f7b24
- TLSH
  T1FCE0C05FD8F6B5B9A2B288C89F05582537AFD1253900C5D0F7BCB09216CB2600F235DE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Api-Server/index.js
- Size 2KB
- SHA256 4d705c9d2b03242fe4d4c7a73b3efe00000ed02dde48a2c037b5b604c1f518ac
- MD5 9f1084d61426d0c22cbabc02cbe555d4
- SHA1 51b17b6c8d2d2dfa08eedce23ceb2530a6e19db5
- SHA512 12b13b6671fd15cb5720a3af560b009d22b862f84d20ce6c8e6634843e6ad6dae6412c9aca68c0d2133ec110dd53a4082933624289b02ed47b54fe93f623831b
- TLSH
  T122416AA65ED5602E20D2FAD4DE609032E61BE2023419F0B0FC389E719BC345859FECDE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Api-Server/node_modules/.bin/acorn
- Size 298B
- SHA256 99dbaad2d5495910ae1782f7f5c9230a8b6a142b73c1caebaf464712a5a54d1b
- MD5 28b14a698a8fe08edb4b85c99b1fe0dc
- SHA1 465172f427a91e14090711aa3cdfac0643f9d67c
- SHA512 c6922e3f555c75599de72c25f60a6945e090857aa173ae5d5f4c2aaa2344e597be42de2b696c4a5aa13c35a26ef7ebd5ff8d5578b76ee90f578d787b9a4dd361
- TLSH
  T149E08CB016D14B38D44A63F08C005C6881AF028BB8007E59EE09FB4A897034D32EB66A
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery antivm
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  Api-Server/node_modules/.bin/acorn.cmd
- Size 320B
- SHA256 6d3aecbaf5fc581a03b5d6d0358566cfb3be6babda6e0cd72a1b7b9d6c8ee21f
- MD5 40952943c052e7ba6f94eba977c23dfb
- SHA1 d169a32c27c3d479345369127e79598f0b4e3027
- SHA512 1851356c322710aeb2851c1f85e5284e0b047fdaa6261ca1aa0d0af6cb4a9878911364baccd1a6614dd8534ac9483b25c85d02f51d80d5bb40534af757d03560
- TLSH
  T181E07D76F00070447237AB7964076A0226F7BA4C84430176BC3804FF6B413862FCF89E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Api-Server/node_modules/.bin/acorn.ps1
- Size 785B
- SHA256 264bfc66f8543c5adafaa0e1b01dcc93f94b9480377131c0127c541f53f865f2
- MD5 925684663982d84120346bab01d4056e
- SHA1 c753468e02340fdae68d7223c6f16d9d31413e41
- SHA512 1f0c08597a50be744af3fd8121d564cd6cec42b7b83b57926fc21f6e6b30d88eba3f1493ea697fd69773d20bb31d82f842b880a315f098fba57e245b1f4a43e3
- TLSH
  T11801FE247AF03F6AD247AB9313651E0163CF896F18441F19D90CBF8A8A6072C27EB771
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  Api-Server/node_modules/.bin/escodegen
- Size 320B
- SHA256 47e6e92e218beded105c78e83317506f0470333ca148cdd7299e2dcc1366ba22
- MD5 b4e16fcda71c3bcbd19f76f64e1e3e47
- SHA1 01491103ff7a00e747189084834617ddef933426
- SHA512 ec088e5ea1c78d12672231b3ac077d8b6421cf7625715304cf4c71fb24faf34a9a17fb51b4d3d8c890293c8af32d19dfe2cd8a9824b88dcaf8c5ae32ef25da87
- TLSH
  T12EE046A414935F76D40A42B08C4A696C9BEE0783B9807B99FD043B42A46030D72EB7AA
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  Api-Server/node_modules/.bin/escodegen.cmd
- Size 331B
- SHA256 c38e08f1d3b0e8caca8ce9e563dbf1d646a5d3368a185ecf697ae7c56473c1fc
- MD5 c36f2a32be191cfdfea1d3384d279ec9
- SHA1 a33412a78a2e63d259e868b2cc50f907b4c9bd18
- SHA512 3c34bdbaa61c1016e64822fe55c2a0541cbc9af5aa742402f58d89234f87f3efb59766edcc4559003c6a77d4589bd1b288b131822914a9c4c3f6d9bb9887509e
- TLSH
  T125E0C035F000340131379B71504B220127F67744404302A1BC3401A76B003450BCEADD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Api-Server/node_modules/.bin/escodegen.ps1
- Size 829B
- SHA256 bf803422fa6579eb22f12c6ed4fce8453d973427887f6ab1849e87b9b3536f74
- MD5 f125fce83714481dbe8d82e020e19e4d
- SHA1 bd4d05c4fad6f4b6c0338757ee570a6ade3e8203
- SHA512 622b0e729c08f1dd2e2a2aecf84a6425d96951811781088907669290cbde39ac032eef7e5176f5be1a6213ba8f3d86acbb8ccb13e2c92dd8ac10224dc19dd1ff
- TLSH
  T16701402878F23E77D1055AA2175E2A1463D9CB6B69C42E55E8083F82556071C23FB7B2
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

discoveryexecution

behavioral4

antivmdiscoveryexecution

behavioral5

behavioral6

behavioral7

discoveryexecution

behavioral8

antivmdiscoveryexecution

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

antivmdiscovery

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

discoveryexecution

behavioral26

antivmdiscoveryexecution

behavioral27

discoveryexecution

behavioral28

discoveryexecution

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy