dcc60d59a0746999f99064a01c020445d54d84228c691cdbf25b49ac3b59150a | Triage™

Login
Reports

Overview

overview

4

Static

static

1

node-v26.1...ls.bat

windows10-2004-x64

3

node-v26.1...ls.bat

windows11-ltsc_2024-x64

3

node-v26.1...de.exe

windows10-2004-x64

1

node-v26.1...de.exe

windows11-ltsc_2024-x64

1

node-v26.1...de-gyp

ubuntu-18.04-amd64

1

node-v26.1...de-gyp

debian-9-armhf

1

node-v26.1...de-gyp

debian-9-mips

1

node-v26.1...de-gyp

debian-9-mipsel

1

node-v26.1...yp.cmd

windows10-2004-x64

3

node-v26.1...yp.cmd

windows11-ltsc_2024-x64

3

node-v26.1...in/npm

ubuntu-18.04-amd64

3

node-v26.1...in/npm

debian-9-armhf

4

node-v26.1...in/npm

debian-9-mips

1

node-v26.1...in/npm

debian-9-mipsel

1

node-v26.1...cli.js

ubuntu-18.04-amd64

1

node-v26.1...cli.js

debian-9-armhf

1

node-v26.1...cli.js

debian-9-mips

1

node-v26.1...cli.js

debian-9-mipsel

1

node-v26.1...fix.js

ubuntu-18.04-amd64

1

node-v26.1...fix.js

debian-9-armhf

1

node-v26.1...fix.js

debian-9-mips

1

node-v26.1...fix.js

debian-9-mipsel

1

node-v26.1...pm.cmd

windows10-2004-x64

3

node-v26.1...pm.cmd

windows11-ltsc_2024-x64

3

node-v26.1...pm.ps1

ubuntu-18.04-amd64

1

node-v26.1...pm.ps1

debian-9-armhf

1

node-v26.1...pm.ps1

debian-9-mips

1

node-v26.1...pm.ps1

debian-9-mipsel

1

node-v26.1...in/npx

ubuntu-18.04-amd64

3

node-v26.1...in/npx

debian-9-armhf

4

node-v26.1...in/npx

debian-9-mips

1

node-v26.1...in/npx

debian-9-mipsel

1

Sharing

Copy URL Twitter E-mail

General

Target
node-v26.13.0-win-x64.zip
Size 39.3MB
Sample261030-pgs4asee82
SHA256 dcc60d59a0746999f99064a01c020445d54d84228c691cdbf25b49ac3b59150a
MD5 d734b7668e652c357c315982185406b6
SHA1 41524ec67a6f978f8f7dc5bc8035a27ddf9a2d13
SHA512 8f9f17c48cd3b48a3ef610582c8b2ed790372a0d3f4e261e22a431024d7c32968ddefd47e1962733e53ad91c2f2326123549df7870461d3660e814bed4eae157
SSDEEP 786432:2MoAWvlrbqez53Yk7ZhHZhpA0B9LyyRu5zao5CmO5dZcanZ/GR:SfvBT9FHHTpA0nk9a4PanJGR
TLSH
T16B97339450FA0677EFAE7BB7B1C691764ECCA2C6AC206C6E086C37CA9D670B047D514C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

antivm discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

node-v26.13.0-win-x64/install_tools.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

node-v26.13.0-win-x64/install_tools.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

node-v26.13.0-win-x64/node.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

node-v26.13.0-win-x64/node.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/node-gyp-bin/node-gyp

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/node-gyp-bin/node-gyp

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/node-gyp-bin/node-gyp

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/node-gyp-bin/node-gyp

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/node-gyp-bin/node-gyp.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/node-gyp-bin/node-gyp.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral12

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral13

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm-cli.js

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm-cli.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm-cli.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm-cli.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm-prefix.js

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm-prefix.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm-prefix.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm-prefix.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npm.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npx

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral30

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npx

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral31

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npx

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

node-v26.13.0-win-x64/node_modules/npm/bin/npx

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  node-v26.13.0-win-x64/install_tools.bat
- Size 3KB
- SHA256 56b0737b893d96c09bbf64acd701e73d01438f0acec81e63c9588d303cf083b4
- MD5 99990a2e67475740ebdcdc06b9afd8dd
- SHA1 1b03144138323aa1e70736ea84c3b9562b90c314
- SHA512 7f2223a9ac850b06c87758602188e46b7bb4623551d68466da343194c116daaff8bca3865dfdfbacceff355ad60921cd65f38a53b6dd80c12a8dcfbf134912bd
- TLSH
  T11A517325FE18C3666EE0C799BC3A52F5F70F501793128D15B0AB40348A527EFB27E299
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  node-v26.13.0-win-x64/node.exe
- Size 95.5MB
- SHA256 14319838b3f355e0398c13569a90270bce4fc68f25189f58c59b03dadae0e6d5
- MD5 fcb80d12bea4aec2066510b0f43fe1a5
- SHA1 d3968a42b456c9867ea14d8996fd7fd95f1fcab8
- SHA512 b13138fd9bf1978ffc0c5fa618d15f14b74a92f0a02a5c80ce6734db0eb14bf1b8aa7079993727e81e11738cec71c09b886f0714f6e5fcfd25f245235278abb6
- SSDEEP 393216:UzLTtiTuQbivnZY2RGrpSexlHZw+zlbnYsPILVBEdGiTBxFSsiXUx7WT0wWlF3IV:exnZ4Zl5wKbnYsP6mdGFe0lWibSK
- TLSH
  T1D8288E13B3E605D5E4FBCA7196E65223A932BC066F3091DF324C07261F73AD09A7AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  node-v26.13.0-win-x64/node_modules/npm/bin/node-gyp-bin/node-gyp
- Size 178B
- SHA256 ee2c0cd004287093a3767c0a31d9a0a3c4b00c0517cc974473e2b483eef438e7
- MD5 6e25816f1ec43ca4d9df43634f4fdc74
- SHA1 34dff6b10e03a33507fb0ad9131304ee036381cc
- SHA512 55d1a85ab49a293a7787a7a223977e8472b8204a447135de7e01e8e82566485a268508497bd81fa9d5ca454d23541035e9d7a75ad5521f82c84bd4065d1ea76b
- TLSH
  T191C01235B2F50D960E6D1953ED508C050DE9D2F10D4A5E04D39C2683D4A621194ED00E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  node-v26.13.0-win-x64/node_modules/npm/bin/node-gyp-bin/node-gyp.cmd
- Size 149B
- SHA256 8cb8b915e6f433f7f8994eae04e74595d5a169d1e593833bb4a5f2cbe213f02d
- MD5 bb78133f243ec53a16c89c436ab54216
- SHA1 e6071dd04dbe0b3560c3279ded8e44e1d0a0cede
- SHA512 8a94c4ad3cd4b414d5c6788083b801a6273c970a173461ddef7ec48626fdba8040c9a8f4d1d848bf05240a36ae0eec40db2c779d1a5c3cb04c99ef5bdaddfb59
- TLSH
  T148C08C1A66FC0C174B2B2E23B282803948EDDAE306040952AA5C25E0ABCD00000C2085
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  node-v26.13.0-win-x64/node_modules/npm/bin/npm
- Size 2KB
- SHA256 13372aa943f8eb32c9a8b6f946ed6a49118edd60051321953288b1f35611aefb
- MD5 ae1c3065bf4b17a2f100d890275c6480
- SHA1 670c2e61320b0883455985166751acfec1c23025
- SHA512 1d70c629133a7bc134cf4721837570a8b4c059f64b2def870bba877e7156cccbad6c998ecce8fadfe1945f61a56ad83b1a758d644fd6f80a4f892d55694e97bd
- TLSH
  T11641A7B7B9EC5FB46D980BA03C0B58253B5A90FF077435D0A01EA60069D8579986737B
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  node-v26.13.0-win-x64/node_modules/npm/bin/npm-cli.js
- Size 56B
- SHA256 3ce7cba6f5128dd5f54c98b6a5036b0f850496878cc2e21044b675fe3c594e3e
- MD5 4e2eb14252f20eba055e03500ab8539e
- SHA1 a4e63b6178ac905afe39ca3cd79516a20a57a798
- SHA512 085031f9da657ab25df26baddb0b0c1e41ed0a8dbd297f717def0ceb04bc2ce34c143fc7bd46273a3980468be75b1314caf79e42df70c73fcac1668836bcccc4
- TLSH
  T188902200AF8C000828002C82802C03002083E0280220B22820800A8283022E00088B02
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  node-v26.13.0-win-x64/node_modules/npm/bin/npm-prefix.js
- Size 864B
- SHA256 673f620e40137c295f2cf057364468bf3a71653dfc0973be895ebf7a8c368c2e
- MD5 92dd1b5a463374142271ff420cb473a5
- SHA1 a9f946c6a8c6f273f837703acc74c367b7781a99
- SHA512 5e0a6e4a9cff4b37acbece070a592a65ed044a78e1b104517eb5bb233d4398f67140b44e986e7a2de16bfb65b0ab7609e831341efea2a6f583258b6a85f70e01
- TLSH
  T123110017109F8AA265328ED2E78F1900F253DBEB26339041B47D9A8E8A692016033DCB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  node-v26.13.0-win-x64/node_modules/npm/bin/npm.cmd
- Size 538B
- SHA256 21b46c69ad6e2f231f02a9e120f4ba6c8e75fef5a45637103002eab99f888ab8
- MD5 6895fc6423c97fbf721a71333137d1ca
- SHA1 e0a531a3a869f2c3bb1ea91801a8a386d6aaf73e
- SHA512 0cdaa6bbeefeabf676839d88e96a096b13b9176bd936e11665ebf01e57540e131981a7bee4f113d2b5bd6858656f7cb689d29ee81d9f9e8d7f87d2d91e041ac0
- TLSH
  T1A0F0F6B6F8E94EECB11B0F613C76482574CBB4573C6610E6262C8514C7E46E004C235B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  node-v26.13.0-win-x64/node_modules/npm/bin/npm.ps1
- Size 1KB
- SHA256 e8aedc8c76d6cb9423b70ede071228f7cb1644094c114b8721ae6d121100d4fe
- MD5 f89500014ea9c4adea054f309b727825
- SHA1 285563a5ccff0ffe3064a6b41f0c6c34477c589b
- SHA512 62361baf83e8d7971d686737992949c990c982e22bdf59ae0100a37b024a37bf22f1554ea1f5177084aa6250eba23fcf7392105b4b2e240aa82849a87232799c
- TLSH
  T1853132527C9C2D5A5DEE7F236AE04C88FC2210EF18A400D571AC8C408CFA779364A34F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  node-v26.13.0-win-x64/node_modules/npm/bin/npx
- Size 2KB
- SHA256 a8be7733861aede8f9c331ad7b60aa225dd085271d6de68946f0fb5d0717de09
- MD5 352a17c7c68fb5e0ae18bb982450adfb
- SHA1 7ffb9b789213f85d86b50f223fce9eff40023055
- SHA512 99ac7f35c7abe72d4c550c5668fc0eba4cc321cdee6318b003886662ac7b3f7d00ede2218323fbaddb224e1528d6a4d69d0886a090a87e2fcf739b81552b0375
- TLSH
  T13841B7A7B9EC6FB46D981FA03C0B18153B5A90FF077431F0A11FA6002E9857599673BB
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

discoveryexecution

behavioral12

antivmdiscoveryexecution

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

discoveryexecution

behavioral30

antivmdiscoveryexecution

behavioral31

behavioral32

© 2018-2026

Terms | Privacy