d0cafebc70e7ade5ca9951c1278688420a50f9f7ca4e1f71e76a80b7e06eca70

Login
Reports

Overview

overview

Static

static

clients/fl...ber.js

windows10-2004-x64

clients/fl...ber.js

windows11-ltsc_2024-x64

clients/fl...le.bat

windows10-2004-x64

clients/fl...le.bat

windows11-ltsc_2024-x64

clients/fl...Ext.js

windows10-2004-x64

clients/fl...Ext.js

windows11-ltsc_2024-x64

clients/fl...ver.js

windows10-2004-x64

clients/fl...ver.js

windows11-ltsc_2024-x64

clients/fl...ler.js

windows10-2004-x64

clients/fl...ler.js

windows11-ltsc_2024-x64

clients/fl...ine.js

windows10-2004-x64

clients/fl...ine.js

windows11-ltsc_2024-x64

clients/fl...gin.js

windows10-2004-x64

clients/fl...gin.js

windows11-ltsc_2024-x64

clients/fl...gin.js

windows10-2004-x64

clients/fl...gin.js

windows11-ltsc_2024-x64

clients/fl...gin.js

windows10-2004-x64

clients/fl...gin.js

windows11-ltsc_2024-x64

clients/fl...gin.js

windows10-2004-x64

clients/fl...gin.js

windows11-ltsc_2024-x64

clients/fl...er.vbs

windows10-2004-x64

clients/fl...er.vbs

windows11-ltsc_2024-x64

clients/fl...dle.js

windows10-2004-x64

clients/fl...dle.js

windows11-ltsc_2024-x64

clients/fl...der.js

windows10-2004-x64

clients/fl...der.js

windows11-ltsc_2024-x64

clients/fl...ice.js

windows10-2004-x64

clients/fl...ice.js

windows11-ltsc_2024-x64

clients/fl...ice.js

windows10-2004-x64

clients/fl...ice.js

windows11-ltsc_2024-x64

clients/fl...ase.js

windows10-2004-x64

clients/fl...ase.js

windows11-ltsc_2024-x64

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 18:12

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

clients/flclash-member.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral2

Sample

clients/flclash-member.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral3

Sample

clients/flclash/Makefile.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

clients/flclash/Makefile.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral5

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/Ext.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral6

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/Ext.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral7

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceBroadcastReceiver.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral8

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceBroadcastReceiver.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceController.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceController.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral11

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceStateMachine.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceStateMachine.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/AppPlugin.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/AppPlugin.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/BatteryPlugin.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/BatteryPlugin.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/MemberUpdatePlugin.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/MemberUpdatePlugin.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/ServicePlugin.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/ServicePlugin.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

clients/flclash/android/common/src/main/java/com/follow/clash/common/RunIntentArbiter.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

clients/flclash/android/common/src/main/java/com/follow/clash/common/RunIntentArbiter.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

clients/flclash/android/core/build.gradle.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

clients/flclash/android/core/build.gradle.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

clients/flclash/android/service/src/main/java/com/follow/clash/service/FilesProvider.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

clients/flclash/android/service/src/main/java/com/follow/clash/service/FilesProvider.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

clients/flclash/android/service/src/main/java/com/follow/clash/service/ProxyService.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

clients/flclash/android/service/src/main/java/com/follow/clash/service/ProxyService.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

clients/flclash/android/service/src/main/java/com/follow/clash/service/VpnService.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

clients/flclash/android/service/src/main/java/com/follow/clash/service/VpnService.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

clients/flclash/android/service/src/main/java/com/follow/clash/service/modules/MemberWakeLease.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

clients/flclash/android/service/src/main/java/com/follow/clash/service/modules/MemberWakeLease.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Report Analysis Logs

General

Target
clients/flclash-member.js
Size 1.4MB
Sample261110-wthxeszz3m
SHA256 d0cafebc70e7ade5ca9951c1278688420a50f9f7ca4e1f71e76a80b7e06eca70
MD5 dd048e6908588b01637b0b47bc32618e
SHA1 53bd4b0532e6a3f253beefd34b42b9d3f8642f40
SHA512 25950c3aac1181fe7b89748bf2a7073145ec1b53226aa9d3d1a57c0bc83c1bb5c5bd0a368cd74f17f3842c7067d8e3e3fefb3b2cafd5524663b4cd7442d9a511
SSDEEP 24576:c4D8rczAQBDySjXuIk+cc5cPyzS2xto1VO5FKZG6mgw5jxoZiJwL:ND8rczAQBDySjXk25Eyv5KGQwV0im
TLSH
T1BA65F1C118E900B059B703DE6F3F71496261E11B7FD468B9BE2E62407FC50D4A6B3BA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\clients\flclash-member.js
1⤵
PID:2988

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads