56e5aacdeee7168871721b75819ccacf2367de8761b78eaceacdecd41e04ca03 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

node-v20.1...repack

ubuntu-18.04-amd64

node-v20.1...repack

debian-9-armhf

node-v20.1...repack

debian-9-mips

node-v20.1...repack

debian-9-mipsel

node-v20.1...ck.cmd

windows10-2004-x64

3

node-v20.1...ck.cmd

windows11-ltsc_2024-x64

3

node-v20.1...ls.bat

windows10-2004-x64

3

node-v20.1...ls.bat

windows11-ltsc_2024-x64

3

node-v20.1...de.exe

windows10-2004-x64

1

node-v20.1...de.exe

windows11-ltsc_2024-x64

1

node-v20.1...ack.js

ubuntu-18.04-amd64

1

node-v20.1...ack.js

debian-9-armhf

1

node-v20.1...ack.js

debian-9-mips

1

node-v20.1...ack.js

debian-9-mipsel

1

node-v20.1...ack.js

windows10-2004-x64

3

node-v20.1...ack.js

windows11-ltsc_2024-x64

3

node-v20.1...npm.js

ubuntu-18.04-amd64

1

node-v20.1...npm.js

debian-9-armhf

1

node-v20.1...npm.js

debian-9-mips

1

node-v20.1...npm.js

debian-9-mipsel

1

node-v20.1...npx.js

ubuntu-18.04-amd64

1

node-v20.1...npx.js

debian-9-armhf

1

node-v20.1...npx.js

debian-9-mips

1

node-v20.1...npx.js

debian-9-mipsel

1

node-v20.1...npm.js

ubuntu-18.04-amd64

1

node-v20.1...npm.js

debian-9-armhf

1

node-v20.1...npm.js

debian-9-mips

1

node-v20.1...npm.js

debian-9-mipsel

1

node-v20.1...npx.js

ubuntu-18.04-amd64

1

node-v20.1...npx.js

debian-9-armhf

1

node-v20.1...npx.js

debian-9-mips

1

node-v20.1...npx.js

debian-9-mipsel

1

Sharing

Copy URL Twitter E-mail

General

Target
node-v20.18.1-win-x64.zip
Size 28.2MB
Sample261030-wt2pjafs8p
SHA256 56e5aacdeee7168871721b75819ccacf2367de8761b78eaceacdecd41e04ca03
MD5 4b23bc4d7e74620f464de6410561d17c
SHA1 d1f337aeb4dae62af6af311000f77ec4de0f7b6d
SHA512 19199f8820bfd46f427b993d228f749ab0e597657c76668c5e0b83454785f109ee4223cb06c1a106b4490475003178ebcb6eb5f1c0fdb607f518348b9b8cf729
SSDEEP 786432:2fwE0UomhrcwGTk1h+uhCKQWOGyuUtuGSlh9G:OwE0rEc34/+uhtQJGyrtupk
TLSH
T18C57238490B91A3BCF9B7BBBF2C691AA4CCDA2D65950DC36047D1BCE9C720B007C956D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Static task

static1

Behavioral task

behavioral1

Sample

node-v20.18.1-win-x64/corepack

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

node-v20.18.1-win-x64/corepack

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

node-v20.18.1-win-x64/corepack

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

node-v20.18.1-win-x64/corepack

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

node-v20.18.1-win-x64/corepack.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

node-v20.18.1-win-x64/corepack.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

node-v20.18.1-win-x64/install_tools.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

node-v20.18.1-win-x64/install_tools.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

node-v20.18.1-win-x64/node.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

node-v20.18.1-win-x64/node.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/corepack.js

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/corepack.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/corepack.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/corepack.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/lib/corepack.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/lib/corepack.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/npm.js

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/npm.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/npm.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/npm.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/npx.js

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/npx.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/npx.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/npx.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/pnpm.js

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/pnpm.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/pnpm.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/pnpm.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/pnpx.js

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/pnpx.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/pnpx.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

node-v20.18.1-win-x64/node_modules/corepack/dist/pnpx.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  node-v20.18.1-win-x64/corepack
- Size 334B
- SHA256 dcef0a787c4654ac5c085fafa3a1e12d60d6f42e0d259c38378b61ef64295fa2
- MD5 1a27e3e2f449816f5ffcdd57703a3f78
- SHA1 b529a4d96ca51d2bb96f7868970ed39c7259f3cf
- SHA512 32c2bc00b1ac8755c571eee99a565e82a9e617bec608229992a66628b50f647848598064207c9c1631a68d709220f6b84601f5aeb8554a8c35edc70ef996119d
- TLSH
  T1B5E04FA451AA5F72491D7AF0AC599459449E43832051AE98EC1C3B41847439E72CB6AC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  node-v20.18.1-win-x64/corepack.cmd
- Size 218B
- SHA256 920630a1d1ec47aedea7345e3c868ecdc07e191373497bbf47fbbf5942fbad4f
- MD5 c046e14548ebb384ef71c0efea0e857a
- SHA1 504e3d339b444b1051fb0b033da0f2e661385c0d
- SHA512 efac98aadbdea59064d5752884bc9697c9fd15ad44e820f9457f679ad4e68be2e11e965af03ad70fee1f34c93c64eaf1813c60f19145ec1b693787a45c602833
- TLSH
  T12FD0127005BE4F333A5A2DF9F48213B778CDABA104150DBC7D29439202CC2C687D12D5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  node-v20.18.1-win-x64/install_tools.bat
- Size 3KB
- SHA256 7f34f73126f62888c7354fea6ec4ed48679824e8972ae47f650b520055b8a975
- MD5 be9d6ff7f9f07f2d35e42a397928f165
- SHA1 8bf0944d393e76aae1d8fb370d31b99c9f093d84
- SHA512 cf64626dcdd4125a6d4d50b7b57f2c2be80a0af75ef2fbe99fa0871e4a79b472d24664c75f3234ffd59e3dfe6e8de347f956dd2f6c281369459346bcba525c50
- TLSH
  T1ED517525FE58C3665EE0C795BC3A52F1F70F501793128D15B0AB40348A527EFB27E299
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  node-v20.18.1-win-x64/node.exe
- Size 66.6MB
- SHA256 06c1dec1b428927d6ff01c8f5882f119ec13b61ac77483760aa7fba215c72cf5
- MD5 8d2efa3d036b874d947913923b7a96c0
- SHA1 c0af72e8a8edfe4d8f42037a62f66ae8c4927e72
- SHA512 5c5e3a6af693dc33147b01c25b5d692c52b920cb374442560a59435b2840c4ce641b5defa6d13d72eab0663b500e18856dc4d46b90d56966c021b52a53ce9566
- SSDEEP 393216:m77dcC832ZEa2rzfCOIEVpxhGGv3o5rWjkEQu58EISEhoIaE2FShkWQH8kYOE+Xb:mtWQxhULE6qmGXEQvxOtxTP5bJ
- TLSH
  T1ECE75B4267EA04C5F9F79A3499E25213D673BC067F3082CB325C172A1F736E09976B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  node-v20.18.1-win-x64/node_modules/corepack/dist/corepack.js
- Size 134B
- SHA256 179e3587e2f27b32f8e7b94bdc577c14ead0f4639a7ac7b767d980734c392bc2
- MD5 ffadd717b17fc24d91ac24e47dcd92b8
- SHA1 598941b2f5ed2b224440bc663861319f631cb82c
- SHA512 b979fb56e5916293053373ba0b1b311984240964a95a2f5504e737837e58f834db2e0dc65d68090d16c82ad33729142266dff459c16af802deac86d3aa764705
- TLSH
  T199C02B48554C0E7C22566700202D030B1CC6A2314EE0D510D443BB475ED13B02A0A81A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  node-v20.18.1-win-x64/node_modules/corepack/dist/lib/corepack.cjs
- Size 942KB
- SHA256 35d1ec9bc4d612fc727159bbdbfe8fd425d1b12f862b1f1ee462f4369828c8c2
- MD5 862bdf04fdbb9c420e4eb238bc022e02
- SHA1 064656d1245668b08f426c1081d860c3b8dda5c3
- SHA512 688a160ce1fc81cd727a4fe0433c6bab2ea859ae7ceae87b5845b3a7a8dcb7b6eb2bb057c2049c3f94a1a9cc864ab79b7c69ac747e885d0e1847447290d6b1d6
- SSDEEP 6144:BwLMIkTn5USjqVRrUSIK2wr+1fK7IuUiaqpPwIir4wyRiZvNtp1uc80v:BwLXkTn5dORrmxuUkwIC4wyRfc88
- TLSH
  T10225D65D56E529168773B37DDF578001FA3A912B22054254BEBC86A02FF1428C7FAFE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  node-v20.18.1-win-x64/node_modules/corepack/dist/npm.js
- Size 145B
- SHA256 8845efa17a44122dae0ad45f6866679849fdc8d5fd2255e74c34083fcddc8c1a
- MD5 c1a80914bccaade38b2e2cb9107af0d8
- SHA1 f4d9ea23efe591d16f602dc01ddd536a8de4bf6c
- SHA512 6924b943a71864767ef480eec3f2fc057192286b22ebf94bef822e2b3252fee971c8e1a1c8b96e33ad4daf30816ea61613b3043fe99aff22f1633819f7c5ba1e
- TLSH
  T103C02B09564C0C7C13169F00311C030B1CC6F23B8FFA9414E883BA8B5ED13F56E0E82A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  node-v20.18.1-win-x64/node_modules/corepack/dist/npx.js
- Size 145B
- SHA256 cde64141e991db117a9d43e2c91a8da9905a959681d94992ff53b027ba52a880
- MD5 5b4f6669cbc86599c21ea0e76d85bb22
- SHA1 828b3bb14520e6baf685a5b8cd650f23713243db
- SHA512 8b9f93b48e3ff5f4983e6d3f7cf6ccaa86ddda7374022e348f6d8e8ca09222b66b6ad7506bbeb903c92cdaaa0ac61b91fb599deec9e70f2d5d94af56b74bd2b7
- TLSH
  T108C02B09564C0C7C13169F00311C030B1CC6F23A8FEAD410E483BE8B5ED13F52B0E86A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  node-v20.18.1-win-x64/node_modules/corepack/dist/pnpm.js
- Size 146B
- SHA256 a74a2fc513f784b39674f543198aec64f6f856aef066bb951903c6b3df26725a
- MD5 2a7ddcbf53854e076857e1f1e6dce8c2
- SHA1 cfecdde23f6880a2e003e324a6380135fd0931cc
- SHA512 cb4361aec61eeef4989a02aa93cb15d9e8bae6a6a30d8adaa6d2f15bb34dfd33eb9765e46d38055e2f795d2b4c8f21df1518608f2b966bd7ae9517b7b92321ba
- TLSH
  T1CCC08C0956480C7C16169A00221C03071C86F22A9BE19414A883BA8A5E952B56A0A86A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  node-v20.18.1-win-x64/node_modules/corepack/dist/pnpx.js
- Size 146B
- SHA256 def8748ad4eb42e7abf3f582fb91a9b9ae0b12865c51558e95823fedf4108886
- MD5 1eacc626219d03ec74440f7ea3dfbdee
- SHA1 f682fa2db3a248e2a6cd12b5097210e147280d39
- SHA512 a22fb1c0cf9401eb0eefba8cf336ddd8086f68ea19a06e53f21743aa5e9704475594c1eaa589373a437d88192c5a0e806e3b6f44f8b113d1bb1f2f129d20b988
- TLSH
  T194C02B09564C0C7C17169B00321C03071CC6F23A9FE1D410E483BA8B5EE53F56B0E8AA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy