General

  • Target

    wp shell up.zip

  • Size

    2.8MB

  • MD5

    3c87668db90017e9377faf28e3ee455e

  • SHA1

    367c3097e457002a615f59e2f17a992b5db595e1

  • SHA256

    0152972a6ec3abdaf96fa711340314adea1363b5244804a93962bb14665f8cec

  • SHA512

    30eea695da8a31f2664112a25834bc156553d3df54f95608fdaa2381355c3cfdfc925020cedce1b759f19112744dc131d99c67752df673838453019e778978b8

  • SSDEEP

    49152:+PELXchAfivVFjzv8TYsRumlk7P0JaZIXbWfvVvSUCr7JAIE6HMZmLnn:+Pss2ivVFXv8T3umlSZw+vc7J/zAmLn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • wp shell up.zip
    .zip
  • 1877.php
  • 1877.zip
    .zip
  • 1877/13.php
    .js
  • 1877/131.php
  • 1877/1877.php
  • 1877/index.php
  • Wordpress Shell Uploader.exe
    .exe windows:5 windows x64 arch:x64

    f5d4be825330b75e879af961193dc202


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:4 windows x64 arch:x64

    96c4f4e8917dc64df4c59957846701ef


    Headers

    Imports

    Exports

    Sections

  • list.txt
  • settings.ini
  • ssleay32.dll
    .dll windows:4 windows x64 arch:x64

    bd6491c5c6ba4207cec8336a4d4007e8


    Headers

    Imports

    Exports

    Sections