Static

static

3

Resubmissions

08/07/2024, 06:45

240708-hjaamszanc 7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Wordpress Shell Uploader (3).zip

  • Size

    4.9MB

  • MD5

    5a61939771c05414382f07a4cf34b95f

  • SHA1

    233de5e667ad218bcc3c78e456ec243887666d41

  • SHA256

    3b40843fdb45629eefca5752f7b2023f8f56cc246095b5ac359b3d2d087b4423

  • SHA512

    2429cd51590dba25d0b135d176ab3a93536e0882635115fdea2b153e9dd36d44b19bc991dbea059560b23fbcd5e888146befc4bf37391d12d37739c4608ce607

  • SSDEEP

    98304:twO57IDCRat7KizlRpihNslwLp34kU/i8t8WpES9R8La0K1CPHa3NzIuugyMi5:t7CeC7KiZRpi0Q9I/i8tN39RVrzIufC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Wordpress Shell Uploader (3).zip
    .zip

    Password: 1337

  • Wordpress Shell Uploader/Shell Uploader+Add User_1_9.exe
    .exe windows:5 windows x64 arch:x64

    Password: 1337

    d53a5af1627a733be9bc6580864a104a


    Headers

    Imports

    Exports

    Sections

  • Wordpress Shell Uploader/Shell Uploader_recatcha_delete.exe
    .exe windows:5 windows x64 arch:x64

    Password: 1337

    ed4761236fa7cb92b35a5c6ad5eea252


    Headers

    Imports

    Exports

    Sections

  • Wordpress Shell Uploader/Shell Uploader_x64.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1337

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Wordpress Shell Uploader/db.php
  • Wordpress Shell Uploader/don.txt
  • Wordpress Shell Uploader/gaukingo.zip
    .zip

    Password: 1337

  • gaukingo/404.php
  • gaukingo/archive.php
  • gaukingo/author.php
  • gaukingo/category.php
  • gaukingo/comments.php
  • gaukingo/css/editor-style.css
  • gaukingo/db.php
  • gaukingo/footer.php
  • gaukingo/functions.php
  • gaukingo/genericons/COPYING.txt
  • gaukingo/genericons/Genericons.eot
  • gaukingo/genericons/Genericons.svg
    .xml
  • gaukingo/genericons/Genericons.ttf
  • gaukingo/genericons/Genericons.woff
  • gaukingo/genericons/LICENSE.txt
  • gaukingo/genericons/README.md
  • gaukingo/genericons/genericons.css
  • gaukingo/header.php
  • gaukingo/image.php
  • gaukingo/inc/back-compat.php
  • gaukingo/inc/color-calculations.php
  • gaukingo/inc/custom-style.php
  • gaukingo/inc/customizer.php
  • gaukingo/inc/template-tags.php
  • gaukingo/index.php
  • gaukingo/js/functions.js
    .js
  • gaukingo/languages/es_ES.mo
  • gaukingo/languages/es_ES.po
  • gaukingo/languages/gaukingo.pot
  • gaukingo/page-templates/no-sidebar-center.php
  • gaukingo/page-templates/no-sidebar-left.php
  • gaukingo/search.php
  • gaukingo/searchform.php
  • gaukingo/sidebar-footer.php
  • gaukingo/sidebar.php
  • gaukingo/singular.php
  • gaukingo/style.css
  • gaukingo/tag.php
  • gaukingo/template-parts/author-bio.php
  • gaukingo/template-parts/content-chat.php
  • gaukingo/template-parts/content-none.php
  • gaukingo/template-parts/content-page.php
  • gaukingo/template-parts/content-single.php
  • gaukingo/template-parts/content.php
  • Wordpress Shell Uploader/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    Password: 1337

    bf76bfdbfb2f04df3961cd140f67140b


    Headers

    Imports

    Exports

    Sections

  • Wordpress Shell Uploader/settings.ini
  • Wordpress Shell Uploader/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    Password: 1337

    2063b55e294c91445f7d7c61361e1f0d


    Headers

    Imports

    Exports

    Sections

  • Wordpress Shell Uploader/three-column-screen-layout.zip
    .zip

    Password: 1337

  • three-column-screen-layout/db.php
  • three-column-screen-layout/icons.png
    .png

    Password: 1337

  • three-column-screen-layout/style.min.css
  • three-column-screen-layout/three-column-screen-layout.php