Overview
overview
10Static
static
10wordpress/readme.html
windows7-x64
1wordpress/readme.html
windows10-2004-x64
1wordpress/...der.js
windows7-x64
1wordpress/...der.js
windows10-2004-x64
1wordpress/...oad.js
windows7-x64
1wordpress/...oad.js
windows10-2004-x64
1wordpress/...rt.ps1
windows7-x64
1wordpress/...rt.ps1
windows10-2004-x64
1wordpress/...ns.ps1
windows7-x64
1wordpress/...ns.ps1
windows10-2004-x64
1wordpress/...er.ps1
windows7-x64
1wordpress/...er.ps1
windows10-2004-x64
1wordpress/...der.js
windows7-x64
1wordpress/...der.js
windows10-2004-x64
1wordpress/...ftp.js
windows7-x64
1wordpress/...ftp.js
windows10-2004-x64
1wordpress/...er.ps1
windows7-x64
1wordpress/...er.ps1
windows10-2004-x64
1wordpress/...zip.js
windows7-x64
1wordpress/...zip.js
windows10-2004-x64
1wordpress/...er.ps1
windows7-x64
1wordpress/...er.ps1
windows10-2004-x64
1wordpress/...le.ps1
windows7-x64
1wordpress/...le.ps1
windows10-2004-x64
1wordpress/...ata.js
windows7-x64
1wordpress/...ata.js
windows10-2004-x64
1wordpress/...ets.js
windows7-x64
1wordpress/...ets.js
windows10-2004-x64
1wordpress/...ers.js
windows7-x64
1wordpress/...ers.js
windows10-2004-x64
1wordpress/...le.ps1
windows7-x64
1wordpress/...le.ps1
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
04-02-2024 17:54
Static task
static1
Behavioral task
behavioral1
Sample
wordpress/readme.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
wordpress/readme.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
wordpress/wp-admin/admin-header.js
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
wordpress/wp-admin/admin-header.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
wordpress/wp-admin/async-upload.js
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
wordpress/wp-admin/async-upload.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
wordpress/wp-admin/import.ps1
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
wordpress/wp-admin/import.ps1
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
wordpress/wp-admin/includes/ajax-actions.ps1
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
wordpress/wp-admin/includes/ajax-actions.ps1
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
wordpress/wp-admin/includes/class-core-upgrader.ps1
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
wordpress/wp-admin/includes/class-core-upgrader.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
wordpress/wp-admin/includes/class-custom-image-header.js
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
wordpress/wp-admin/includes/class-custom-image-header.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
wordpress/wp-admin/includes/class-ftp.js
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
wordpress/wp-admin/includes/class-ftp.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
wordpress/wp-admin/includes/class-language-pack-upgrader.ps1
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
wordpress/wp-admin/includes/class-language-pack-upgrader.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
wordpress/wp-admin/includes/class-pclzip.js
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
wordpress/wp-admin/includes/class-pclzip.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
wordpress/wp-admin/includes/class-wp-automatic-updater.ps1
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
wordpress/wp-admin/includes/class-wp-automatic-updater.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
wordpress/wp-admin/includes/class-wp-comments-list-table.ps1
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
wordpress/wp-admin/includes/class-wp-comments-list-table.ps1
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
wordpress/wp-admin/includes/class-wp-debug-data.js
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
wordpress/wp-admin/includes/class-wp-debug-data.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
wordpress/wp-admin/includes/class-wp-filesystem-ftpsockets.js
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
wordpress/wp-admin/includes/class-wp-filesystem-ftpsockets.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
wordpress/wp-admin/includes/class-wp-internal-pointers.js
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
wordpress/wp-admin/includes/class-wp-internal-pointers.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
wordpress/wp-admin/includes/class-wp-list-table.ps1
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
wordpress/wp-admin/includes/class-wp-list-table.ps1
Resource
win10v2004-20231222-en
General
-
Target
wordpress/wp-admin/includes/class-wp-automatic-updater.ps1
-
Size
51KB
-
MD5
1490be5bcbd5ddbcb49939f46e845701
-
SHA1
eecfff11c7cbf69b3d99048009e9c8d26071ae57
-
SHA256
8314aa0736df73bf6391504631b93b88fba54a061808bbb3dbcf51987f8cbf5a
-
SHA512
f9e60543f2ab1543c15c07f0724d79067c39d17d9218b83a855a357604a91f546696a8c60f5e6b665f6f520dc290d33667bc47b45b35b8b68b389b0c2393eecc
-
SSDEEP
1536:aoX3e4Q3/3KbyI9Pv3+HEjJ0QAUXs7Xpvdp/XxQDKMrEXh:O3/imHcJ0QAUXs7XFXxQDKxXh
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1412 powershell.exe 1412 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1412 powershell.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60B
MD5d17fe0a3f47be24a6453e9ef58c94641
SHA16ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA25696ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA5125b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82