3044174613d763f1661ceadf9902c6bcecad839f44e7ad14b299638052e870f8 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

Backend Ca.../db.js

windows10-2004-x64

3

Backend Ca.../db.js

windows11-ltsc_2024-x64

3

Backend Ca...are.js

windows10-2004-x64

3

Backend Ca...are.js

windows11-ltsc_2024-x64

3

Backend Ca...Car.js

windows10-2004-x64

3

Backend Ca...Car.js

windows11-ltsc_2024-x64

3

Backend Ca...tal.js

windows10-2004-x64

3

Backend Ca...tal.js

windows11-ltsc_2024-x64

3

Backend Ca...ser.js

windows10-2004-x64

3

Backend Ca...ser.js

windows11-ltsc_2024-x64

3

Backend Ca...n/mime

ubuntu-18.04-amd64

3

Backend Ca...n/mime

debian-9-armhf

4

Backend Ca...n/mime

debian-9-mips

3

Backend Ca...n/mime

debian-9-mipsel

3

Backend Ca...me.cmd

windows10-2004-x64

3

Backend Ca...me.cmd

windows11-ltsc_2024-x64

3

Backend Ca...me.ps1

ubuntu-18.04-amd64

1

Backend Ca...me.ps1

debian-9-armhf

1

Backend Ca...me.ps1

debian-9-mips

1

Backend Ca...me.ps1

debian-9-mipsel

1

Backend Ca...odemon

ubuntu-18.04-amd64

6

Backend Ca...odemon

debian-9-armhf

6

Backend Ca...odemon

debian-9-mips

3

Backend Ca...odemon

debian-9-mipsel

3

Backend Ca...on.cmd

windows10-2004-x64

3

Backend Ca...on.cmd

windows11-ltsc_2024-x64

3

Backend Ca...on.ps1

ubuntu-18.04-amd64

1

Backend Ca...on.ps1

debian-9-armhf

1

Backend Ca...on.ps1

debian-9-mips

1

Backend Ca...on.ps1

debian-9-mipsel

1

Backend Ca...etouch

ubuntu-18.04-amd64

3

Backend Ca...etouch

debian-9-armhf

4

Sharing

Copy URL Twitter E-mail

General

Target
Backend_Car_Rentel.zip
Size 4.5MB
Sample261027-jphpmsbv4v
SHA256 3044174613d763f1661ceadf9902c6bcecad839f44e7ad14b299638052e870f8
MD5 8c213372b9f0ea48b90b5c5bc4cd5127
SHA1 9e3b55cad1f6e4fb4fcf4ccc8d56d4a330f940a3
SHA512 3b111b8d40356ca4222e36c1cb1d7f38342a56fa9ebefeffa4e500cc7d2c35093fca1d08cf9d995ed98b6734abe26da83609d4b8b02f1b85841554a7637248c6
SSDEEP 98304:tdso9AAjvPCHuCTCplf1mTzvSzLUHvzaNgMSiCWJm:tCo9AAji7TCpd1cKz474gMRW
TLSH
T11C26BFBBD57AA466DF3FB436F5BAD210C6DEC24E450C8C02194827C13A6D09196FDACE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

antivm discovery execution linux

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Backend Car Rentel/backend/config/db.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

Backend Car Rentel/backend/config/db.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Backend Car Rentel/backend/middleware/authMiddleware.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Backend Car Rentel/backend/middleware/authMiddleware.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Backend Car Rentel/backend/models/Car.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Backend Car Rentel/backend/models/Car.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Backend Car Rentel/backend/models/Rental.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Backend Car Rentel/backend/models/Rental.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

Backend Car Rentel/backend/models/User.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Backend Car Rentel/backend/models/User.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

Backend Car Rentel/backend/node_modules/.bin/mime

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

Backend Car Rentel/backend/node_modules/.bin/mime

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

antivm discovery

Behavioral task

behavioral13

Sample

Backend Car Rentel/backend/node_modules/.bin/mime

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Backend Car Rentel/backend/node_modules/.bin/mime

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

5 signatures

150 seconds

discovery execution

Behavioral task

behavioral22

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon

Resource

debian9-armhf-20260513-en

debian-9-armhf

6 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral23

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Backend Car Rentel/backend/node_modules/.bin/nodetouch

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

Backend Car Rentel/backend/node_modules/.bin/nodetouch

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

antivm discovery

Malware Config

Targets

- Target
  Backend Car Rentel/backend/config/db.js
- Size 308B
- SHA256 6a708cd1105eff135877d641d210ae60c54de7f6ff21ae9024127a32e27f259b
- MD5 590f3ba3ef905b6b6a8787f7cfa63f2d
- SHA1 013833647f491ddeb584ba867e714cc752e83616
- SHA512 b17ce39ee7c08d45d9e8085f0d21aaf59b8de70ccb8b03ea239e83832506417a81d24ec3901ced6ed9e5dc581f3f9dc983792d55d9f399e7045b05550df241b9
- TLSH
  T1B4E0C2661AF6182922AF10A1690F04077091B9512B08FC557358E224CFB5EE0DED37DB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Backend Car Rentel/backend/middleware/authMiddleware.js
- Size 661B
- SHA256 5a40f65b262c0f3b413baa61138b475f1c468b6af00e85adeca85e510fc4df95
- MD5 fa15ebf7c71ff969a64431e48aa23e69
- SHA1 38dd0c3ae3dfffa22579cb5790b4a064b9d47a90
- SHA512 eeaf9ced9ad523a11f6e5aec2a2ada6772d3b01af05ea3c8816a4679af7291c52c760e183e33a153210d1f2ba6ccc9a5c5bb584bea119380be289985da85de92
- TLSH
  T1A401239021F71A15415BACDDC70AD037F155D40A504C8C617BFCD6E12FC30B90793A95
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Backend Car Rentel/backend/models/Car.js
- Size 437B
- SHA256 5c9b16fbc47235113193f132a33e8dcce751d81f26cb2b0ca7255b6f0c39da56
- MD5 a81da0f5dd26c01a24c01de2d65a4906
- SHA1 775d098776efbba12de4a3b0f09121fc6dd6abc4
- SHA512 15cd6fb000632974c6cc3fecb420964a99ff627007a66067e0fb0d21fbe7a6ef3b60e6d6dfd5a8ea9ac821be05b583882c73801bb3e94f7aaa32baf3456fb919
- TLSH
  T18DE065C227FE7576552880A892CE21527991C0575E197DB5F2E014710F6E29931773E0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Backend Car Rentel/backend/models/Rental.js
- Size 485B
- SHA256 509980ef76a9121a4b52ac9309ea37f8d3054fa1496bc98810e3d6564300591f
- MD5 f54e49707aad935601d2a6672ca4d735
- SHA1 0e37415939ad7cfdb4fa3966cfe2bdbb27277714
- SHA512 1c956ac6469a821f0166d7fdc61ae0a4cf821decb683dcac31685a0ca9a2a3ab7c3d9bb4427c4c52026e1ba221f54e389319cea5e4c73e588b33958fa257a536
- TLSH
  T11DF0A0915EFE647A652880B8C2CE25937952C0634F5C3E30F2E422B00F9D76A717B6E4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Backend Car Rentel/backend/models/User.js
- Size 718B
- SHA256 d6883199945a53b6ad35c2acb1fd827706548ff2b2ecb009bead6104b98c584e
- MD5 b15436e85d7f67befddac5f336535c5d
- SHA1 3e8f748e67fa40cf18ec9adf4f7364bc76d54dcf
- SHA512 c45af2c7a5953fda8fbe6a9f5db2a87ea3cad8447c113964d7d561a8b90c516394b7950e76306641b2aaa40552f735875382e4845d4ffd7bd0a8f76379f07504
- TLSH
  T1A101C0B019FE5E66123890F4C19EA2443161C017180B7F70F7B451F91F7BB173032AA5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Backend Car Rentel/backend/node_modules/.bin/mime
- Size 371B
- SHA256 394b93eaaac25f18a20d7cdd80920ecca1fe43c8e5b37501389e644944c6e01f
- MD5 7ab5bfff58b0a878a4614cddbe424702
- SHA1 e75ad406ef2f9fcb1a9bde44ba669f416c824c4f
- SHA512 36f59fb7f2a1f985210ce39fb90e6e7998e4ba8030f172496eda22a12c66b58c651211d0f682c2b0ec58a6e1ae19d59380d1fe0c6849f15fcf381df60123aaeb
- TLSH
  T19AE0D87114A15F76910942F9DD155858415A1347B4043F95FD0C3B435BA031DB2E7B2D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery antivm
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  Backend Car Rentel/backend/node_modules/.bin/mime.cmd
- Size 316B
- SHA256 cd5ca2f059e780c0a4b1aa9cdd6edc7dc10413d30bf51ad537adbd428e5e7a16
- MD5 2872347ac99221152281bfd56705d437
- SHA1 83fa66cd05f64de1ef7f3010344a0f7babe54819
- SHA512 3c0b9e12bc1ff8f2bbaa5301d8db78a5c3636dd93f5755728e5b255c4250c0ea9e3c53a545011087b9c2536b1c1676ff01f7eff3015e6e99f2e12c9f15386fe5
- TLSH
  T196E07D76F00070453237DB729417264226F2B748844301B6B83804FB6B413865FCE89D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Backend Car Rentel/backend/node_modules/.bin/mime.ps1
- Size 769B
- SHA256 a43d8b7d57dbbb21f2f98c331970d011177fa1c6be327aa0dbb84c1ad01e9201
- MD5 bef04abf08e89532a476c3e474b5f509
- SHA1 bb81073d8e07c483ee29121358871535973336e7
- SHA512 e20f86c40ce523477da136cb4aa3f29683dee567a31ebfad666666192417f49568e848cb8844e8dcd32d5501fb7176d47aca54c195324e6d41e73093699788b1
- TLSH
  T17301FE2479F03EABD3069B9367795E016245D66F24441F15E4083F8347A072C67E7B71
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  Backend Car Rentel/backend/node_modules/.bin/nodemon
- Size 393B
- SHA256 66a2e9a75919b51a98f0fecf4746dd603fbb7784350449408a444a87f8d63d1f
- MD5 737c12e86024f7181c4c77c36bf1b8e0
- SHA1 2806524bcb9e516417a2758dcf1f26b0b5d047fd
- SHA512 08045b0c9f32de5dd2b15e48c933e1a510642fba2560b995b4a5ec98abd275b30ad6368eee0e7497620060796fdec724c210d4a501ee9136581cadc744b1470a
- TLSH
  T1E5E0D87525E15FBB960942F88D065858416B034378443F5AFD0C3B435BA031DB2E773D
- MD5 SHA1 SHA512 TLSH
Score

6^/10

discovery execution antivm
- Enumerates running processes
  Discovers information about currently running processes on the system
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  Backend Car Rentel/backend/node_modules/.bin/nodemon.cmd
- Size 327B
- SHA256 d79d4631f4d46ef11c589653fc99552ac24cc462558b829fd7d3c2a60baaa994
- MD5 1942c9ad8d2732ef4f15be0deb7d7d19
- SHA1 bd4cc0cc619d4d81f73636e62a4e12775b1046a7
- SHA512 fe4550c745fbedca55f23a174392378cdf85fbbae823d33dbc35da894ed0b4c5458b45c2f42ef1c8df24fc3ac3b545279670e8f8820624d89e8846eee7d1434b
- TLSH
  T190E07D7AF180748A77379B72940B664226F3BB4984430176BC3C04FB6B413865FCE8AD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1
- Size 813B
- SHA256 3721509b20daf22ba511568f643bf4c6964976819462cb50ebebe67a7be61019
- MD5 9229e055de5f394272ef31780d669047
- SHA1 adcb7497945770f95925e9894f34ed896221a92b
- SHA512 e52aa5b10b34e5f677f0fc8e841c167ff35a2383e8b4ff348b185b4cd3a6e68c49f2bdee5920066a1eb8abb34b0e65f432e0af3ba8367c8aded6528a02cf970f
- TLSH
  T10001CC2879F03EAFD7069AA317591A016356C55B28441F1AD40C3B8345A072C63F7675
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28 behavioral29 behavioral30
- Target
  Backend Car Rentel/backend/node_modules/.bin/nodetouch
- Size 393B
- SHA256 d90b3a1b9f7d156423056cbb946dfbece388e6f216825dcfaedefd2d6c8034b0
- MD5 9667ae444192cb9e384fe8b9cbcdce9a
- SHA1 37d8ab8c9027ba209201a11d9631394710961aee
- SHA512 8d22679b3904dbdb4d9949f42724e08481e89385fcf28dbd5b01be2c874f9da5488275385e62e5b05cbedcc5be525c52513baca361c76c9f26bf879424413980
- TLSH
  T1DEE068B251E46F76800962F88C054858415A034378003FAAFD0C3B436BE133DB2E777D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery antivm
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Unix Shell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

antivmdiscovery

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

discoveryexecution

behavioral22

antivmdiscoveryexecution

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

antivmdiscovery

© 2018-2026

Terms | Privacy