53020f6d730c48b02753db607b67ddab05cb406028bd96acf14af8774e5747ba

Submit
Reports

Overview

overview

Static

static

wordfence/...er.ps1

windows7-x64

wordfence/...er.ps1

windows10-2004-x64

wordfence/...al.ps1

windows7-x64

wordfence/...al.ps1

windows10-2004-x64

wordfence/...dom.js

windows7-x64

wordfence/...dom.js

windows10-2004-x64

wordfence/...net.js

windows7-x64

wordfence/...net.js

windows10-2004-x64

wordfence/...dom.js

windows7-x64

wordfence/...dom.js

windows10-2004-x64

wordfence/...ium.js

windows7-x64

wordfence/...ium.js

windows10-2004-x64

wordfence/...acy.js

windows7-x64

wordfence/...acy.js

windows10-2004-x64

wordfence/...ypt.js

windows7-x64

wordfence/...ypt.js

windows10-2004-x64

wordfence/...int.js

windows7-x64

wordfence/...int.js

windows10-2004-x64

wordfence/...pat.js

windows7-x64

wordfence/...pat.js

windows10-2004-x64

wordfence/...pat.js

windows7-x64

wordfence/...pat.js

windows10-2004-x64

wordfence/...pat.js

windows7-x64

wordfence/...pat.js

windows10-2004-x64

wordfence/...519.js

windows7-x64

wordfence/...519.js

windows10-2004-x64

wordfence/...a20.js

windows7-x64

wordfence/...a20.js

windows10-2004-x64

wordfence/...Fe.ps1

windows7-x64

wordfence/...Fe.ps1

windows10-2004-x64

wordfence/...519.js

windows7-x64

wordfence/...519.js

windows10-2004-x64

Analysis

max time kernel
15s
max time network
40s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06-10-2022 10:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

wordfence/crypto/vendor/composer/ClassLoader.ps1

Resource

win7-20220901-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

wordfence/crypto/vendor/composer/ClassLoader.ps1

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

wordfence/crypto/vendor/composer/autoload_real.ps1

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

wordfence/crypto/vendor/composer/autoload_real.ps1

Resource

win10v2004-20220901-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_com_dotnet.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_com_dotnet.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_dev_urandom.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_dev_urandom.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium_legacy.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium_legacy.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_mcrypt.js

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_mcrypt.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_int.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_int.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/php72compat.js

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/php72compat.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/sodium_compat.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/sodium_compat.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Compat.js

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Compat.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Ed25519.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Ed25519.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Salsa20.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Salsa20.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Fe.ps1

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Fe.ps1

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Ed25519.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Ed25519.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

wordfence/crypto/vendor/paragonie/random_compat/lib/random.js
Size

7KB
MD5

ad7f6e4800f775847d922060a4e8f3cf
SHA1

ad2e39f541216b0f91e656eb196881f55cb57bd2
SHA256

3783e4a576bd8db099f2cfd92d3c831e58dba07bcd716ec123d8b26b29350588
SHA512

c0fdfb9978009497ac12e4f6e380d82f05a68f384e1d71feb832b49e019051286bc841bafc70fbaa10b699a769b59f8296ad2ebc7b50b37dd9603f207cc97901
SSDEEP

192:jJwaYMQHRXA2rgSrZBxof6sCylCpHGasTkMZmxCH50mV1nlQkpoFOrTxTnbP1w0K:jJwUEZcShQFkyXTnGeBHJmZ

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\wordfence\crypto\vendor\paragonie\random_compat\lib\random.js
1⤵
PID:956

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads