Static

static

wp-asset-c...ain.js

 

wp-asset-c...ain.js

 

wp-asset-c...min.js

 

wp-asset-c...min.js

windows10-2004-x64

1

wp-asset-c...re.xml

windows7-x64

1

wp-asset-c...re.xml

windows10-2004-x64

1

wp-asset-c...ie.xml

windows7-x64

1

wp-asset-c...ie.xml

windows10-2004-x64

1

wp-asset-c...al.xml

windows7-x64

1

wp-asset-c...al.xml

windows10-2004-x64

1

wp-asset-c...ue.xml

windows7-x64

1

wp-asset-c...ue.xml

windows10-2004-x64

1

wp-asset-c...me.jpg

windows7-x64

3

wp-asset-c...me.jpg

windows10-2004-x64

3

wp-asset-c...go.xml

windows7-x64

1

wp-asset-c...go.xml

windows10-2004-x64

1

wp-asset-c...min.js

windows7-x64

1

wp-asset-c...min.js

windows10-2004-x64

1

wp-asset-c...rt2.js

windows7-x64

1

wp-asset-c...rt2.js

windows10-2004-x64

1

wp-asset-c...min.js

windows7-x64

1

wp-asset-c...min.js

windows10-2004-x64

1

wp-asset-c...bug.js

windows7-x64

1

wp-asset-c...bug.js

windows10-2004-x64

1

wp-asset-c...ar.ps1

windows7-x64

1

wp-asset-c...ar.ps1

windows10-2004-x64

1

wp-asset-c...es.ps1

windows7-x64

1

wp-asset-c...es.ps1

windows10-2004-x64

1

wp-asset-c...nUp.js

windows7-x64

1

wp-asset-c...nUp.js

windows10-2004-x64

1

wp-asset-c...ug.ps1

windows7-x64

1

wp-asset-c...ug.ps1

windows10-2004-x64

1

Analysis

  • max time kernel
    107s
  • max time network
    42s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2022, 13:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    wp-asset-clean-up-pro/assets/icons/themes/betheme.jpg

  • Size

    11KB

  • MD5

    7a6007292cf77321d0e1f496e6bd068e

  • SHA1

    495db84461e7ffb423e8f02172a0fcfe0991f817

  • SHA256

    53b6955c2db38edd92d3f2aaf262de681f6cb32526233a50c0348b1f4db7a977

  • SHA512

    dc09628c4ef8944ecfc66214959413fdfefedf76dd14da6f8cd77c434e3b79be84cb84102ac1977d444a35128b46e0b53a581d7c5ded1fb9ea5faf9c975a4050

  • SSDEEP

    192:lrCRB/Ohjx6PmALWmkUgEE1Ii6iS3FtXw+eii8du98xL4rGo3bENGgWJ9aqLd38K:lrEBiPaJkavnXFtw+5du9tGoOK9Z2K

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\wp-asset-clean-up-pro\assets\icons\themes\betheme.jpg
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:1516

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1516-54-0x000007FEFBC01000-0x000007FEFBC03000-memory.dmp

    Filesize

    8KB

    Download