c349e0f456d5317519310afc6fea58553452de1b2f298b2183c1f420cde4027a | Triage™

Login
Reports

Overview

overview

4

Static

static

1

ToDoApp/app.js

windows10-2004-x64

3

ToDoApp/app.js

windows11-ltsc_2024-x64

3

ToDoApp/co...ler.js

windows10-2004-x64

3

ToDoApp/co...ler.js

windows11-ltsc_2024-x64

3

ToDoApp/no...dex.js

windows10-2004-x64

3

ToDoApp/no...dex.js

windows11-ltsc_2024-x64

3

ToDoApp/no...in/ejs

ubuntu-18.04-amd64

3

ToDoApp/no...in/ejs

debian-9-armhf

4

ToDoApp/no...in/ejs

debian-9-mips

3

ToDoApp/no...in/ejs

debian-9-mipsel

3

ToDoApp/no...js.cmd

windows10-2004-x64

3

ToDoApp/no...js.cmd

windows11-ltsc_2024-x64

3

ToDoApp/no...js.ps1

ubuntu-18.04-amd64

1

ToDoApp/no...js.ps1

debian-9-armhf

1

ToDoApp/no...js.ps1

debian-9-mips

1

ToDoApp/no...js.ps1

debian-9-mipsel

1

ToDoApp/no...n/jake

ubuntu-18.04-amd64

3

ToDoApp/no...n/jake

debian-9-armhf

4

ToDoApp/no...n/jake

debian-9-mips

3

ToDoApp/no...n/jake

debian-9-mipsel

3

ToDoApp/no...ke.cmd

windows10-2004-x64

3

ToDoApp/no...ke.cmd

windows11-ltsc_2024-x64

3

ToDoApp/no...ke.ps1

ubuntu-18.04-amd64

1

ToDoApp/no...ke.ps1

debian-9-armhf

1

ToDoApp/no...ke.ps1

debian-9-mips

1

ToDoApp/no...ke.ps1

debian-9-mipsel

1

ToDoApp/no...ser.js

windows10-2004-x64

3

ToDoApp/no...ser.js

windows11-ltsc_2024-x64

3

ToDoApp/no...ser.js

windows10-2004-x64

3

ToDoApp/no...ser.js

windows11-ltsc_2024-x64

3

ToDoApp/no...ata.js

windows10-2004-x64

3

ToDoApp/no...ata.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
ToDoApp.7z
Size 2.0MB
Sample261113-lt7wfaat5k
SHA256 c349e0f456d5317519310afc6fea58553452de1b2f298b2183c1f420cde4027a
MD5 4436dfb8aed37cee0d21e2dc9c9d0b7b
SHA1 91aa2d023dcc9edd2999ce01242187323e6dfa17
SHA512 abc9f9d28740b98a719b236767b46a40c1a4d4894b5871f38932c80c05312f8c866756a88e0fa28b10b7f48bca9022d50b27ddff0206994578f58c086c2b130e
SSDEEP 49152:N9ijVail/nOg8hKkyHcWscriWUGL3uMEjBQzFtvE1gM7eF/8TGPgBu:N9ijYiHHkyHcNGLuvdUpUfYcGau
TLSH
T12E9533E441049FBF4ACD19A3BEFFBC3812987EE16E29558E073440689913AF4B4BB5D1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

antivm discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

ToDoApp/app.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

ToDoApp/app.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

ToDoApp/controllers/todoController.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

ToDoApp/controllers/todoController.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

ToDoApp/node_modules/-/dist/index.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

ToDoApp/node_modules/-/dist/index.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

ToDoApp/node_modules/.bin/ejs

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral8

Sample

ToDoApp/node_modules/.bin/ejs

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral9

Sample

ToDoApp/node_modules/.bin/ejs

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral10

Sample

ToDoApp/node_modules/.bin/ejs

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral11

Sample

ToDoApp/node_modules/.bin/ejs.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

ToDoApp/node_modules/.bin/ejs.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

ToDoApp/node_modules/.bin/ejs.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

ToDoApp/node_modules/.bin/ejs.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

ToDoApp/node_modules/.bin/ejs.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

ToDoApp/node_modules/.bin/ejs.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

ToDoApp/node_modules/.bin/jake

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral18

Sample

ToDoApp/node_modules/.bin/jake

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral19

Sample

ToDoApp/node_modules/.bin/jake

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral20

Sample

ToDoApp/node_modules/.bin/jake

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

ToDoApp/node_modules/.bin/jake.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

ToDoApp/node_modules/.bin/jake.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

ToDoApp/node_modules/.bin/jake.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

ToDoApp/node_modules/.bin/jake.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

ToDoApp/node_modules/.bin/jake.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

ToDoApp/node_modules/.bin/jake.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

ToDoApp/node_modules/@mongodb-js/saslprep/dist/browser.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

ToDoApp/node_modules/@mongodb-js/saslprep/dist/browser.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

ToDoApp/node_modules/@mongodb-js/saslprep/dist/code-points-data-browser.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

ToDoApp/node_modules/@mongodb-js/saslprep/dist/code-points-data-browser.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

ToDoApp/node_modules/@mongodb-js/saslprep/dist/code-points-data.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

ToDoApp/node_modules/@mongodb-js/saslprep/dist/code-points-data.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  ToDoApp/app.js
- Size 372B
- SHA256 08f2fb1ea4c4ac19784ccdef0e72e8737fc3b14f02e877ffadec70b51c463ee4
- MD5 9875ef35fbc50d6184da8fcf7806d09e
- SHA1 d55d5b919f31b9a6429845c8ff93028c2b497c60
- SHA512 922198f208fca884b7e5b9ba84d72701ab266f143fbcd3220d8c6941452093351fe94910466cae87681056d14bf19a329e9285b29a85044077fec17853fe1978
- TLSH
  T14CE0D8B19FE2A33D1AE0878EF250423EC443B0464B61E30A921C59D819808E89B73CAD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  ToDoApp/controllers/todoController.js
- Size 1KB
- SHA256 a9eb5c441594df409f8d42da29e3ee9bf636552dfd8520eece98658ad4e1e67c
- MD5 2ba50f15ec16cb125edbe4c3be285e60
- SHA1 bf5db3b2769a683c5465bded0cf0a74ded529b8e
- SHA512 61e46d0ef71f50ae68b10d2a8828ba3a294d790a32f36f6a61681537db1363a13c7f92bf464ae2feebf7f2945528a4040f0fccd9fa495fddebaf6bf492d94533
- TLSH
  T18031B15B772B2291827A37A9CA0F1049F456F27BD650D65ABD4CB3401F74824A473FEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  ToDoApp/node_modules/-/dist/index.js
- Size 104B
- SHA256 cef0e8820372605e53dee9b700fb3f6463af4995c1302f15d7f253e0fa2bd4ba
- MD5 155ae184bd60f0c68b72e8350642ddc4
- SHA1 dacf3b01b478b05a758a1d503c764b8d01f587d3
- SHA512 2a829467e576c3b5bd52bd4a271e391441d0914e3229784d66bd74c5a92b89d17f65dae3567c97bc852ad79ad3641cb4364f76d94f9e4eb7076726e01b4674d3
- TLSH
  T116B01206BD7DC5F507C000C44725E0C2A4C14C33226538B65BEC5E6A4500C9CD450101
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  ToDoApp/node_modules/.bin/ejs
- Size 377B
- SHA256 1e0eca4cd9544c51b6ce17a06b63922b722b3d2176be63173d6f1341a475f5db
- MD5 2a0037343649370dd349b78bf00f9b8e
- SHA1 b9ae2794dcb753713189578842eccffb0161d62d
- SHA512 615490f2de11e7a2f8174c4ba931b812bf3af37a785b4f86c3115e998711a7fdc304b08e06a5026bbdd72d0168ec4a1336fcc66d9e0f3bb990993080c35fb5c0
- TLSH
  T1EBE0D87114E15F76940D52F88D555858419B1343B8047F96FD0C3F426B7036DB2E776D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  ToDoApp/node_modules/.bin/ejs.cmd
- Size 319B
- SHA256 df5fe09fbcbba91143c7a1bf7be480531c42ab0b775f104765da54ea1965055f
- MD5 740434f8eae00e1297c18602e6a0f54d
- SHA1 96ae8d5ccf29448d726aee95c109bbe6f913eac5
- SHA512 2e0156aff283fb894b3b6c3015aa85aaef2c3b9d75d95f2f27c95d9d456b5365cc66a343839aeb1bc509bdd0734adea91ca545af59863f720122b8ab954d02a0
- TLSH
  T103E07D76F0007045723B9B759447764226F3B749844301B6B83805FB6B413965FCEC9D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  ToDoApp/node_modules/.bin/ejs.ps1
- Size 781B
- SHA256 41e1aecd9319e281daafd42b0a7914175a7ad3778c0891fb58ad56fd88f19f8e
- MD5 d491ad982f5881282540a9d5d8c4e699
- SHA1 080f06e7b9d97914b15e7de2b55a140a34edf6df
- SHA512 121a0b1f8ab7ae12cd79a823b07e8eb81763c037e834a8c7ebcc35b6fe4f90d2b85ec56b6f037fbd90f99989124045c4b97d9a70d2e31c0b5182a95ecc4b0341
- TLSH
  T1A3012B2479F03EAAC20EAA9617B95E016386D56B18445F16E40C3F82577073C23E7771
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  ToDoApp/node_modules/.bin/jake
- Size 379B
- SHA256 9662b74d0813a6efeeedd2147ea5de5898080f9df1dc842c01866c5593ac6231
- MD5 b019d56bf9d3b9e09c3ec2cac4c4d843
- SHA1 dc3fbe143d72a70c2ba4ea324c0a90f15ec5b0f1
- SHA512 0ddac9c6562ed803ff6d977f481777582a4e5b33f404f69f5b3e87d99fbc43ed5222582af9630624c05b0f35522247fedcc164e18a8f2026a76327b305223ef1
- TLSH
  T1C4E0D87125A16F72941E43F88D225958415A2343BC043F95FD0C3B826F6032DB2E772D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  ToDoApp/node_modules/.bin/jake.cmd
- Size 320B
- SHA256 abfce76f6cf39b27affcdc9bed162b8627a45f2c6ea8d35a6e775fc8c2a1466f
- MD5 8c8d9be1f86bebdff30c3af89134340e
- SHA1 f6d49f577d486fb4c4f444616b41dbeb9909fa5a
- SHA512 aab85029c3e1cd9c95bd361d315c91017822da1885d33a0f6977980aff4e1a796fd67565c35979f93593f656fa984525fa22779df511c8014bb024a6727a42b5
- TLSH
  T1D7E07D76F000744572379B75A417674226F2B748844301B6F83805FB6F417865FCE8DD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  ToDoApp/node_modules/.bin/jake.ps1
- Size 785B
- SHA256 5828a38682c817d7cb6f8047a8b95104da47b5fb0c478416b08234bd361b7228
- MD5 6ba6f388bae7099de486d4c9add04dbd
- SHA1 ec62c15c2d24c0de1402b7a4c2a9f3351cc0e859
- SHA512 5c3ccd7d9b06f9c4ee54d2270fab5ebd00e2f80a0939395ad77191f2b01a567face01a82efae4424bdaf66093cd60ec54cb233954041d288eb663b3c670ef2ac
- TLSH
  T14801DB2479B03EA7D20A9B9617765F016245D66B1D481F15E8083FC25B6073C63E7771
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  ToDoApp/node_modules/@mongodb-js/saslprep/dist/browser.js
- Size 641B
- SHA256 ea13a21a08fc3f7ddfb6273d552748f84f72828302a931395e9acc50b4f3def0
- MD5 455b83c27dad47f65460eef682873149
- SHA1 7752b6b118ca1c8859b5999e0a04d9bfced18cf3
- SHA512 3bf5676ba4b72cb9d01b68530f18de9967f07a40b2744b63e2702c3b029af9f04151445e2a221b84684843bcff3a203dcd57a408971e328edc8737d7010d08e2
- TLSH
  T181F04EE2B8FCE8D04A34568D303344121EEF5DAE51D174049CCB87E243A94C15B3CA19
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  ToDoApp/node_modules/@mongodb-js/saslprep/dist/code-points-data-browser.js
- Size 546KB
- SHA256 3aa38b1051835d485bd1ea986524adf534984ed5b1cdfa491f8d2e1e614403ce
- MD5 34457bab795a7f7f04fe1d4a0e77970a
- SHA1 82e9672ecd1678ae706d69e925cde0b745539d6c
- SHA512 8fdb7cff7e2dbd149d4fb892be7225ea671774dbec25c60ccaf0151370bd1c4af3509058131e8d1b6fe943c95aa5e2b894969b22379ffe22f228141b52c5289a
- SSDEEP 96:KmkY7SegBMgGVt0MefbiceySK51OWSbGG50eJEEEEUCL7PeY9WA3CeArrGpeveNp:K5M5t0+b/SO7p
- TLSH
  T178C44BB2505FFCA6162B2D84400C3F72BDA824DBC528A150F84EBBD531CC562FD7C9A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  ToDoApp/node_modules/@mongodb-js/saslprep/dist/code-points-data.js
- Size 2KB
- SHA256 17e61cf245e5724b6917567e61c9fb1e969934eae55c17c549916c4e668572c2
- MD5 fd5e81f8edf136fe2146043955071548
- SHA1 fdd18678171c1d9b8817b88ae38ecaa18b27d171
- SHA512 b7081f7eeb00624d3f331c1da9fafdfbbfe296a1009dc1e8b0d8202eb7d6adf1410347a255d1ba1fb173b6d7f52b99b6e652c395f7af349cc565ad5beceece75
- TLSH
  T1EB510B739A343A4A17E30CD72B1A28F65CD494D3F570D528C9135DF685B491F2078235
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

discoveryexecution

behavioral8

antivmdiscoveryexecution

behavioral9

discoveryexecution

behavioral10

discoveryexecution

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

discoveryexecution

behavioral18

antivmdiscoveryexecution

behavioral19

discoveryexecution

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy