53020f6d730c48b02753db607b67ddab05cb406028bd96acf14af8774e5747ba

Submit
Reports

Overview

overview

Static

static

wordfence/...er.ps1

windows7-x64

wordfence/...er.ps1

windows10-2004-x64

wordfence/...al.ps1

windows7-x64

wordfence/...al.ps1

windows10-2004-x64

wordfence/...dom.js

windows7-x64

wordfence/...dom.js

windows10-2004-x64

wordfence/...net.js

windows7-x64

wordfence/...net.js

windows10-2004-x64

wordfence/...dom.js

windows7-x64

wordfence/...dom.js

windows10-2004-x64

wordfence/...ium.js

windows7-x64

wordfence/...ium.js

windows10-2004-x64

wordfence/...acy.js

windows7-x64

wordfence/...acy.js

windows10-2004-x64

wordfence/...ypt.js

windows7-x64

wordfence/...ypt.js

windows10-2004-x64

wordfence/...int.js

windows7-x64

wordfence/...int.js

windows10-2004-x64

wordfence/...pat.js

windows7-x64

wordfence/...pat.js

windows10-2004-x64

wordfence/...pat.js

windows7-x64

wordfence/...pat.js

windows10-2004-x64

wordfence/...pat.js

windows7-x64

wordfence/...pat.js

windows10-2004-x64

wordfence/...519.js

windows7-x64

wordfence/...519.js

windows10-2004-x64

wordfence/...a20.js

windows7-x64

wordfence/...a20.js

windows10-2004-x64

wordfence/...Fe.ps1

windows7-x64

wordfence/...Fe.ps1

windows10-2004-x64

wordfence/...519.js

windows7-x64

wordfence/...519.js

windows10-2004-x64

Analysis

max time kernel
39s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06-10-2022 10:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

wordfence/crypto/vendor/composer/ClassLoader.ps1

Resource

win7-20220901-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

wordfence/crypto/vendor/composer/ClassLoader.ps1

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

wordfence/crypto/vendor/composer/autoload_real.ps1

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

wordfence/crypto/vendor/composer/autoload_real.ps1

Resource

win10v2004-20220901-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_com_dotnet.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_com_dotnet.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_dev_urandom.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_dev_urandom.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium_legacy.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium_legacy.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_mcrypt.js

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_mcrypt.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_int.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_int.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/php72compat.js

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/php72compat.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/sodium_compat.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/sodium_compat.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Compat.js

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Compat.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Ed25519.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Ed25519.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Salsa20.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Salsa20.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Fe.ps1

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Fe.ps1

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Ed25519.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Ed25519.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Ed25519.js
Size

15KB
MD5

7c1dc7b128b98d0f9872c0d771d6a723
SHA1

1c3fb7ebb4c6e85edefc933d65975ed806315ecf
SHA256

85db00a3dff51a90dbb1ff0d82671ece83210a0cbca60a13f46ba9b5c4d0b070
SHA512

89c2a45ed26a89439785a72ec1be2eb4358363270f245b1fc7e30caa6e9761c4d70b2813ce7f031327d7128e96c694190786b188b61224256422362fb4bfc71e
SSDEEP

192:ZYgguNMzF+pngd3SAl60+deU6i0bODVF3t7SelGFEG4LVtVVk7tTKy/:HFKCIXRi0bOBGFOtVVk7tP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\wordfence\crypto\vendor\paragonie\sodium_compat\src\Core\Ed25519.js
1⤵
PID:980

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads