d318ec6edb6268583bfd2671bf8da24ead8a5f6612f3eb78f84a1527de18d504 | Triage

Submit
Reports

Overview

overview

1

Static

static

1

vendor/bin...er.php

ubuntu-18.04-amd64

1

vendor/bin...er.php

debian-9-armhf

1

vendor/bin...er.php

debian-9-mips

1

vendor/bin...er.php

debian-9-mipsel

1

vendor/bin...hp.bat

windows7-x64

1

vendor/bin...hp.bat

windows10-2004-x64

1

vendor/com...er.ps1

windows7-x64

1

vendor/com...er.ps1

windows10-2004-x64

1

vendor/gre...x.html

windows7-x64

1

vendor/gre...x.html

windows10-2004-x64

1

vendor/joh...ry.ps1

windows7-x64

1

vendor/joh...ry.ps1

windows10-2004-x64

1

vendor/joh...ry.ps1

windows7-x64

1

vendor/joh...ry.ps1

windows10-2004-x64

1

vendor/joh...ry.ps1

windows7-x64

1

vendor/joh...ry.ps1

windows10-2004-x64

1

vendor/joh...pe.ps1

windows7-x64

1

vendor/joh...pe.ps1

windows10-2004-x64

1

vendor/joh...in.ps1

windows7-x64

1

vendor/joh...in.ps1

windows10-2004-x64

1

vendor/joh...in.ps1

windows7-x64

1

vendor/joh...in.ps1

windows10-2004-x64

1

vendor/psr...ce.ps1

windows7-x64

1

vendor/psr...ce.ps1

windows10-2004-x64

1

vendor/psr...er.ps1

windows7-x64

1

vendor/psr...er.ps1

windows10-2004-x64

1

vendor/sym...tor.js

windows7-x64

1

vendor/sym...tor.js

windows10-2004-x64

1

vendor/sym...er.ps1

windows7-x64

1

vendor/sym...er.ps1

windows10-2004-x64

1

vendor/sym...or.ps1

windows7-x64

1

vendor/sym...or.ps1

windows10-2004-x64

1

Analysis

max time kernel
4s
max time network
133s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231026-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231026-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
02/11/2023, 07:39

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

vendor/bin/CertificateDownloader.php

Resource

ubuntu1804-amd64-20231026-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

vendor/bin/CertificateDownloader.php

Resource

debian9-armhf-20231026-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

vendor/bin/CertificateDownloader.php

Resource

debian9-mipsbe-20231026-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

vendor/bin/CertificateDownloader.php

Resource

debian9-mipsel-20231026-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

vendor/bin/CertificateDownloader.php.bat

Resource

win7-20231025-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

vendor/bin/CertificateDownloader.php.bat

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

vendor/composer/ClassLoader.ps1

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

vendor/composer/ClassLoader.ps1

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

vendor/gregwar/captcha/demo/index.html

Resource

win7-20231020-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

vendor/gregwar/captcha/demo/index.html

Resource

win10v2004-20231023-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

vendor/johnbillion/args/src/DateQuery/Query.ps1

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

vendor/johnbillion/args/src/DateQuery/Query.ps1

Resource

win10v2004-20231025-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

vendor/johnbillion/args/src/MetaQuery/Query.ps1

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

vendor/johnbillion/args/src/MetaQuery/Query.ps1

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

vendor/johnbillion/args/src/TaxQuery/Query.ps1

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

vendor/johnbillion/args/src/TaxQuery/Query.ps1

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

vendor/johnbillion/extended-cpts/src/PostType.ps1

Resource

win7-20231025-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

vendor/johnbillion/extended-cpts/src/PostType.ps1

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

vendor/johnbillion/extended-cpts/src/PostTypeAdmin.ps1

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

vendor/johnbillion/extended-cpts/src/PostTypeAdmin.ps1

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

vendor/johnbillion/extended-cpts/src/TaxonomyAdmin.ps1

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

vendor/johnbillion/extended-cpts/src/TaxonomyAdmin.ps1

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

vendor/psr/http-message/src/MessageInterface.ps1

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

vendor/psr/http-message/src/MessageInterface.ps1

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

vendor/psr/log/Psr/Log/Test/TestLogger.ps1

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

vendor/psr/log/Psr/Log/Test/TestLogger.ps1

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

vendor/symfony/finder/Comparator/DateComparator.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

vendor/symfony/finder/Comparator/DateComparator.js

Resource

win10v2004-20231025-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

vendor/symfony/finder/Finder.ps1

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

vendor/symfony/finder/Finder.ps1

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

vendor/symfony/finder/Iterator/CustomFilterIterator.ps1

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

vendor/symfony/finder/Iterator/CustomFilterIterator.ps1

Resource

win10v2004-20231025-en

windows10-2004-x64

2 signatures

150 seconds

Report Analysis Logs

General

Target

vendor/bin/CertificateDownloader.php
Size

3KB
MD5

c9bd431a61894db495caea8c6799fbc7
SHA1

df9f86c934762d2d286b82cd99974be138a4eae8
SHA256

46762e3c47a9db5b615f9e96ad6789be342236051a032c2a02cbd58f5734be0e
SHA512

da2d895f72258bae091cc0ecb3ac9d549e9bd1c2e87be5cd2d051f90c96ecf4aae957d7b208511ab923f96eb0330239812b01a5fb060afecd9c56bcf3a93a32e

Score

1^/10

Malware Config

Signatures

Processes

/tmp/vendor/bin/CertificateDownloader.php
/tmp/vendor/bin/CertificateDownloader.php
1⤵
PID:1540

/usr/local/sbin/php
php /tmp/vendor/bin/CertificateDownloader.php
1⤵
PID:1540

/usr/local/bin/php
php /tmp/vendor/bin/CertificateDownloader.php
1⤵
PID:1540

/usr/sbin/php
php /tmp/vendor/bin/CertificateDownloader.php
1⤵
PID:1540

/usr/bin/php
php /tmp/vendor/bin/CertificateDownloader.php
1⤵
PID:1540

/sbin/php
php /tmp/vendor/bin/CertificateDownloader.php
1⤵
PID:1540

/bin/php
php /tmp/vendor/bin/CertificateDownloader.php
1⤵
PID:1540

/snap/bin/php
php /tmp/vendor/bin/CertificateDownloader.php
1⤵
PID:1540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy