53020f6d730c48b02753db607b67ddab05cb406028bd96acf14af8774e5747ba

Submit
Reports

Overview

overview

Static

static

wordfence/...er.ps1

windows7-x64

wordfence/...er.ps1

windows10-2004-x64

wordfence/...al.ps1

windows7-x64

wordfence/...al.ps1

windows10-2004-x64

wordfence/...dom.js

windows7-x64

wordfence/...dom.js

windows10-2004-x64

wordfence/...net.js

windows7-x64

wordfence/...net.js

windows10-2004-x64

wordfence/...dom.js

windows7-x64

wordfence/...dom.js

windows10-2004-x64

wordfence/...ium.js

windows7-x64

wordfence/...ium.js

windows10-2004-x64

wordfence/...acy.js

windows7-x64

wordfence/...acy.js

windows10-2004-x64

wordfence/...ypt.js

windows7-x64

wordfence/...ypt.js

windows10-2004-x64

wordfence/...int.js

windows7-x64

wordfence/...int.js

windows10-2004-x64

wordfence/...pat.js

windows7-x64

wordfence/...pat.js

windows10-2004-x64

wordfence/...pat.js

windows7-x64

wordfence/...pat.js

windows10-2004-x64

wordfence/...pat.js

windows7-x64

wordfence/...pat.js

windows10-2004-x64

wordfence/...519.js

windows7-x64

wordfence/...519.js

windows10-2004-x64

wordfence/...a20.js

windows7-x64

wordfence/...a20.js

windows10-2004-x64

wordfence/...Fe.ps1

windows7-x64

wordfence/...Fe.ps1

windows10-2004-x64

wordfence/...519.js

windows7-x64

wordfence/...519.js

windows10-2004-x64

Analysis

max time kernel
41s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/10/2022, 10:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

wordfence/crypto/vendor/composer/ClassLoader.ps1

Resource

win7-20220901-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

wordfence/crypto/vendor/composer/ClassLoader.ps1

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

wordfence/crypto/vendor/composer/autoload_real.ps1

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

wordfence/crypto/vendor/composer/autoload_real.ps1

Resource

win10v2004-20220901-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_com_dotnet.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_com_dotnet.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_dev_urandom.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_dev_urandom.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium_legacy.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_libsodium_legacy.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_mcrypt.js

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_mcrypt.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_int.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

wordfence/crypto/vendor/paragonie/random_compat/lib/random_int.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/php72compat.js

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/php72compat.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/sodium_compat.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/lib/sodium_compat.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Compat.js

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Compat.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Ed25519.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Ed25519.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Salsa20.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core/Salsa20.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Fe.ps1

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Fe.ps1

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Ed25519.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

wordfence/crypto/vendor/paragonie/sodium_compat/src/Core32/Ed25519.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_dev_urandom.js
Size

5KB
MD5

d40347c972f586bee59c105dc4e92fbb
SHA1

6aa8c640bcd7ee63720af99977b46b3319d492d8
SHA256

b52fdd1946a764d87df5055c6ca57b51b431d3933002b779b1cfcc83c1cdffb6
SHA512

0b47be77bf1af9af5256678db2846684745389dd3fed613a63b9f24821b5afc8ede92d683f83305c8a2aee36e45aa557d3c614536af68f79a1f8bd17225ec385
SSDEEP

96:jbXrgtkoQHqEorFZZgkFZZbbX2emZgvnHr62mfgFZZCCFZZCCJja6/FHsVHmSLSP:jbkkoQHRorgSrbbX2NZIL9mf2rCorCCh

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\wordfence\crypto\vendor\paragonie\random_compat\lib\random_bytes_dev_urandom.js
1⤵
PID:1440

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads