53020f6d730c48b02753db607b67ddab05cb406028bd96acf14af8774e5747ba

Submit
Reports

Overview

overview

Static

static

wordfence/...er.ps1

windows7-x64

wordfence/...er.ps1

windows10-2004-x64

wordfence/...al.ps1

windows7-x64

wordfence/...al.ps1

windows10-2004-x64

wordfence/...dom.js

windows7-x64

wordfence/...dom.js

windows10-2004-x64

wordfence/...net.js

windows7-x64

wordfence/...net.js

windows10-2004-x64

wordfence/...dom.js

windows7-x64

wordfence/...dom.js

windows10-2004-x64

wordfence/...ium.js

windows7-x64

wordfence/...ium.js

windows10-2004-x64

wordfence/...acy.js

windows7-x64

wordfence/...acy.js

windows10-2004-x64

wordfence/...ypt.js

windows7-x64

wordfence/...ypt.js

windows10-2004-x64

wordfence/...int.js

windows7-x64

wordfence/...int.js

windows10-2004-x64

wordfence/...pat.js

windows7-x64

wordfence/...pat.js

windows10-2004-x64

wordfence/...pat.js

windows7-x64

wordfence/...pat.js

windows10-2004-x64

wordfence/...pat.js

windows7-x64

wordfence/...pat.js

windows10-2004-x64

wordfence/...519.js

windows7-x64

wordfence/...519.js

windows10-2004-x64

wordfence/...a20.js

windows7-x64

wordfence/...a20.js

windows10-2004-x64

wordfence/...Fe.ps1

windows7-x64

wordfence/...Fe.ps1

windows10-2004-x64

wordfence/...519.js

windows7-x64

wordfence/...519.js

windows10-2004-x64

Analysis

max time kernel
88s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06-10-2022 10:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

wordfence/crypto/vendor/composer/ClassLoader.ps1

Resource

win7-20220901-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

wordfence/crypto/vendor/composer/ClassLoader.ps1

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

wordfence/crypto/vendor/composer/autoload_real.ps1

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

wordfence/crypto/vendor/composer/autoload_real.ps1

Resource

win10v2004-20220901-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_com_dotnet.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_com_dotnet.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_dev_urandom.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_dev_urandom.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium_legacy.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium_legacy.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_mcrypt.js

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_mcrypt.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_int.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_int.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/php72compat.js

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/php72compat.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/sodium_compat.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/sodium_compat.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Compat.js

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Compat.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Ed25519.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Ed25519.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Salsa20.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Salsa20.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Fe.ps1

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Fe.ps1

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Ed25519.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Ed25519.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_mcrypt.js
Size

2KB
MD5

e13d6f6e7e5a83841cd2544f51964265
SHA1

a530295fbfb2f5abd69904040875eb1185480540
SHA256

f9d5d756c04a96dbe73b60781a9f6b511bec54dac97b00fb521e34b493acda8d
SHA512

e5fcf1db06d4cfcef46208094c5c0cc69bf804d930e94c8658ec33ba00d83c5bbba6487ef7070efbc296ca043137f91bf4e09c62c8c81db21262d57be16ada49

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\wordfence\crypto\vendor\paragonie\random_compat\lib\random_bytes_mcrypt.js
1⤵
PID:3716

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads