87c68a1a916e3f4a4449c3c817e4781ba47b03f46fa449db61619815bee9b320 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

Student AP...uth.js

windows10-2004-x64

3

Student AP...uth.js

windows11-ltsc_2024-x64

3

Student AP...odemon

ubuntu-18.04-amd64

6

Student AP...odemon

debian-9-armhf

6

Student AP...odemon

debian-9-mips

3

Student AP...odemon

debian-9-mipsel

3

Student AP...on.cmd

windows10-2004-x64

3

Student AP...on.cmd

windows11-ltsc_2024-x64

3

Student AP...on.ps1

ubuntu-18.04-amd64

1

Student AP...on.ps1

debian-9-armhf

1

Student AP...on.ps1

debian-9-mips

Student AP...on.ps1

debian-9-mipsel

1

Student AP...etouch

ubuntu-18.04-amd64

3

Student AP...etouch

debian-9-armhf

4

Student AP...etouch

debian-9-mips

3

Student AP...etouch

debian-9-mipsel

3

Student AP...ch.cmd

windows10-2004-x64

3

Student AP...ch.cmd

windows11-ltsc_2024-x64

3

Student AP...ch.ps1

ubuntu-18.04-amd64

1

Student AP...ch.ps1

debian-9-armhf

1

Student AP...ch.ps1

debian-9-mips

1

Student AP...ch.ps1

debian-9-mipsel

1

Student AP...semver

ubuntu-18.04-amd64

3

Student AP...semver

debian-9-armhf

4

Student AP...semver

debian-9-mips

3

Student AP...semver

debian-9-mipsel

3

Student AP...er.cmd

windows10-2004-x64

3

Student AP...er.cmd

windows11-ltsc_2024-x64

3

Student AP...er.ps1

ubuntu-18.04-amd64

1

Student AP...er.ps1

debian-9-armhf

1

Student AP...er.ps1

debian-9-mips

1

Student AP...er.ps1

debian-9-mipsel

1

Sharing

Copy URL Twitter E-mail

General

Target
Student_API_server_7.1_.zip
Size 1.5MB
Sample261102-hlchsatv2q
SHA256 87c68a1a916e3f4a4449c3c817e4781ba47b03f46fa449db61619815bee9b320
MD5 1c451b150b535b5b70f545f32131819f
SHA1 f997e8c1282ddef6fa40257f27af6932614fa015
SHA512 6cc24fa2e64383b98b4917ab4801d1b5fc9aa23ad18c74f1952cb1cd7c38fb9f198eb76448c77c389f2be66908ffa0963a73cc73908a694ec6d7ead457c8b311
SSDEEP 24576:/pHgn+FYjKbAyO9YMA+55DyUo2DQLJhvG0conBOxLQJ:/pA+GjKbAy6A+fDdDQLnOonBOx+
TLSH
T1AB759D7AC478D147EB5F3236F4EBC3557F8E828D8600BC811B9C47823C4E6965B66A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

antivm discovery execution linux

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Student API server/middleware/auth.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

Student API server/middleware/auth.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Student API server/node_modules/.bin/nodemon

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

5 signatures

150 seconds

discovery execution

Behavioral task

behavioral4

Sample

Student API server/node_modules/.bin/nodemon

Resource

debian9-armhf-20260513-en

debian-9-armhf

6 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral5

Sample

Student API server/node_modules/.bin/nodemon

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Student API server/node_modules/.bin/nodemon

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Student API server/node_modules/.bin/nodemon.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Student API server/node_modules/.bin/nodemon.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

Student API server/node_modules/.bin/nodemon.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Student API server/node_modules/.bin/nodemon.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Student API server/node_modules/.bin/nodemon.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Student API server/node_modules/.bin/nodemon.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Student API server/node_modules/.bin/nodetouch

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

Student API server/node_modules/.bin/nodetouch

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

antivm discovery

Behavioral task

behavioral15

Sample

Student API server/node_modules/.bin/nodetouch

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Student API server/node_modules/.bin/nodetouch

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Student API server/node_modules/.bin/nodetouch.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Student API server/node_modules/.bin/nodetouch.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

Student API server/node_modules/.bin/nodetouch.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Student API server/node_modules/.bin/nodetouch.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Student API server/node_modules/.bin/nodetouch.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Student API server/node_modules/.bin/nodetouch.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Student API server/node_modules/.bin/semver

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

Student API server/node_modules/.bin/semver

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

antivm discovery

Behavioral task

behavioral25

Sample

Student API server/node_modules/.bin/semver

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

Student API server/node_modules/.bin/semver

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

Student API server/node_modules/.bin/semver.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

Student API server/node_modules/.bin/semver.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

Student API server/node_modules/.bin/semver.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Student API server/node_modules/.bin/semver.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Student API server/node_modules/.bin/semver.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Student API server/node_modules/.bin/semver.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  Student API server/middleware/auth.js
- Size 695B
- SHA256 45a343157d1c7423eaa6dfc99b6faa0ced31ca62aef0614918d8c83b37a335c6
- MD5 9a86a6be34237e99f782147b48f7aacf
- SHA1 21c60508b73cb642b7dc94041d856cc6988a7178
- SHA512 1764b2f091068c8df74aee19fce0e76b94dd7c4561547ba5dd8095378ac3f80bb8bed963560a0b493ffbed22d7e5b9967df2d03ba4e559a4e9a7136b7c3b9512
- TLSH
  T1040128D6A4636101CDBB6A89EC03945EDF86E957200C4541BEAC87DD1FB509081532EC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Student API server/node_modules/.bin/nodemon
- Size 393B
- SHA256 66a2e9a75919b51a98f0fecf4746dd603fbb7784350449408a444a87f8d63d1f
- MD5 737c12e86024f7181c4c77c36bf1b8e0
- SHA1 2806524bcb9e516417a2758dcf1f26b0b5d047fd
- SHA512 08045b0c9f32de5dd2b15e48c933e1a510642fba2560b995b4a5ec98abd275b30ad6368eee0e7497620060796fdec724c210d4a501ee9136581cadc744b1470a
- TLSH
  T1E5E0D87525E15FBB960942F88D065858416B034378443F5AFD0C3B435BA031DB2E773D
- MD5 SHA1 SHA512 TLSH
Score

6^/10

discovery execution antivm
- Enumerates running processes
  Discovers information about currently running processes on the system
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  Student API server/node_modules/.bin/nodemon.cmd
- Size 327B
- SHA256 d79d4631f4d46ef11c589653fc99552ac24cc462558b829fd7d3c2a60baaa994
- MD5 1942c9ad8d2732ef4f15be0deb7d7d19
- SHA1 bd4cc0cc619d4d81f73636e62a4e12775b1046a7
- SHA512 fe4550c745fbedca55f23a174392378cdf85fbbae823d33dbc35da894ed0b4c5458b45c2f42ef1c8df24fc3ac3b545279670e8f8820624d89e8846eee7d1434b
- TLSH
  T190E07D7AF180748A77379B72940B664226F3BB4984430176BC3C04FB6B413865FCE8AD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Student API server/node_modules/.bin/nodemon.ps1
- Size 813B
- SHA256 3721509b20daf22ba511568f643bf4c6964976819462cb50ebebe67a7be61019
- MD5 9229e055de5f394272ef31780d669047
- SHA1 adcb7497945770f95925e9894f34ed896221a92b
- SHA512 e52aa5b10b34e5f677f0fc8e841c167ff35a2383e8b4ff348b185b4cd3a6e68c49f2bdee5920066a1eb8abb34b0e65f432e0af3ba8367c8aded6528a02cf970f
- TLSH
  T10001CC2879F03EAFD7069AA317591A016356C55B28441F1AD40C3B8345A072C63F7675
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  Student API server/node_modules/.bin/nodetouch
- Size 393B
- SHA256 d90b3a1b9f7d156423056cbb946dfbece388e6f216825dcfaedefd2d6c8034b0
- MD5 9667ae444192cb9e384fe8b9cbcdce9a
- SHA1 37d8ab8c9027ba209201a11d9631394710961aee
- SHA512 8d22679b3904dbdb4d9949f42724e08481e89385fcf28dbd5b01be2c874f9da5488275385e62e5b05cbedcc5be525c52513baca361c76c9f26bf879424413980
- TLSH
  T1DEE068B251E46F76800962F88C054858415A034378003FAAFD0C3B436BE133DB2E777D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery antivm
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  Student API server/node_modules/.bin/nodetouch.cmd
- Size 327B
- SHA256 22bef4fdaf686ccdc47f1b67f130727ba8287955695f25321a3d8133db3c624d
- MD5 f36e69f7fe78d5fde97d3418190c2e9a
- SHA1 95e24fc78b4583cfe665e84a3adc37cf16e9ea36
- SHA512 0c552f729cf3e68465ebcd462140f65cac9065f7690943d52412050f578345e3e66ab3a54eb6b4ab51acb8dc54af941b1c477313526b43b7a18eb74a71c9d67d
- TLSH
  T17BE02076F14070457136AB715806664125E2B64444430166F83804B76B413655BCA89D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Student API server/node_modules/.bin/nodetouch.ps1
- Size 813B
- SHA256 2b7a495d51e3a579590b9ca894725fa16297321be5c96238da97d30a92ce4c00
- MD5 eab86da448704d51bea4b831f2c1d9c0
- SHA1 206a3aa94834a811822710891d6f2a793068fc0f
- SHA512 83f342ac16559c2a493155b6da6ac5110e7f9527f05fa71d19d6ec6ca0aa44589fd20ae1d5d612a1b16fea6f6bd978a8dc9f8f6c82de09dbcf19a4a4d8f8d270
- TLSH
  T15A016B6579F43EAAC206AA922F6D5E406345C96B18441F2AD80C3F8356E173C23F7675
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  Student API server/node_modules/.bin/semver
- Size 389B
- SHA256 77ef070b2790156c37dd77efd5d0cf54fbff85d9c1adabc890948192cd2b2639
- MD5 1bfba09d643e7607fc6f1c37b8f45603
- SHA1 0c7b860a46de97e04c3f7e1cb8595b61c231c918
- SHA512 687719bf3bef716393bb43cd00e49f239535438bff63f6367558c9cab276162ddce9750d8b66f9e4c624329bbf443adde2c31775e200ccdf19dd66c33d21eec5
- TLSH
  T162E0927164A55F7B940D42B89D455C58425E034378083F55F90C3B475B6131DB1E773D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery antivm
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  Student API server/node_modules/.bin/semver.cmd
- Size 325B
- SHA256 3fa2710c6522669c2253edbd465ccf4c58d0d29e0eff3337d7900cd4e5cec7ac
- MD5 eba7c469176dbc3fad15e2ae0f8c802e
- SHA1 0417b2e953dde16603704c8e3b70874b75124e1b
- SHA512 0585b704dfe82546f7916f3da25e8bd50ed576a081bbe2548f423095fc795eea5a8098d2e337bbe9f72bef44969ae24eb6af15b4a89e97d8b6a38335f94861ea
- TLSH
  T17FE07D76F100704A723B9F729447264237F6B74984470176B87805FB6B413865FCF8AD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Student API server/node_modules/.bin/semver.ps1
- Size 805B
- SHA256 1e1355d1aaf2a75275f9d884dbcd2f1c713d4ada1782fe8370bc21db6aedbc31
- MD5 f9e4a5cd62ddedd074d4ce1eccd0a51a
- SHA1 0fc9a592457db4cfce5c3e08db0d299624b5c9bf
- SHA512 f56df783b74ca20894e268fb6b0d8493d9077c5d1ce0a3ceec3f7f059399b0dabb31fef6e1d6bb723ee6266cacdd393d15ee80b1882b40badccfb3e475b6b9a4
- TLSH
  T1AB01DB2479B43EAFD24A9A9773A91E01634D876B2C4C2F25D40C3F83466172C63E7675
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Unix Shell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

discoveryexecution

behavioral4

antivmdiscoveryexecution

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

antivmdiscovery

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

antivmdiscovery

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy