Overview

overview

7

Static

static

3

Wordpress ..._9.exe

windows7-x64

3

Wordpress ..._9.exe

windows10-2004-x64

3

Wordpress ...64.exe

windows7-x64

7

Wordpress ...64.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Wordpress Shell Uploader (3).zip

  • Size

    5.5MB

  • MD5

    c4f98bd8063be43c2fd0ed61abb18107

  • SHA1

    93555b0047b89fbf584c85f3dcbcc72fd3c3e12e

  • SHA256

    2408fcd51a55c5f428b3d4d51f956de69c71b96a43bb220ded2c69cf3d020ac0

  • SHA512

    264ec93954c0349c567380c24b67c6ff72c2f19161f4e10f3b6d3280ab62b1ff0b340ef16668d93b92545ae33890323617c2a7a1e8b999a93a9a481c2b5e287c

  • SSDEEP

    98304:twO57IDCRat7KizlRpihNslwLp34kU/i8t8WpES9R8La0K1CPHa3NzIuugyMinRf:t7CeC7KiZRpi0Q9I/i8tN39RVrzIufE1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Wordpress Shell Uploader (3).zip
    .zip

    Password: 1337

  • Wordpress Shell Uploader/Shell Uploader+Add User_1_9.exe
    .exe windows:5 windows x64 arch:x64

    Password: 1337

    d53a5af1627a733be9bc6580864a104a


    Headers

    Imports

    Exports

    Sections

  • Wordpress Shell Uploader/Shell Uploader_recatcha_delete.exe
    .exe windows:5 windows x64 arch:x64

    Password: 1337

    ed4761236fa7cb92b35a5c6ad5eea252


    Headers

    Imports

    Exports

    Sections

  • Wordpress Shell Uploader/Shell Uploader_x64.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1337

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Wordpress Shell Uploader/db.php
  • Wordpress Shell Uploader/don.txt
  • Wordpress Shell Uploader/gaukingo.zip
    .zip

    Password: 1337

  • gaukingo/404.php
  • gaukingo/archive.php
  • gaukingo/author.php
  • gaukingo/category.php
  • gaukingo/comments.php
  • gaukingo/css/editor-style.css
  • gaukingo/db.php
  • gaukingo/footer.php
  • gaukingo/functions.php
  • gaukingo/genericons/COPYING.txt
  • gaukingo/genericons/Genericons.eot
  • gaukingo/genericons/Genericons.svg
    .xml
  • gaukingo/genericons/Genericons.ttf
  • gaukingo/genericons/Genericons.woff
  • gaukingo/genericons/LICENSE.txt
  • gaukingo/genericons/README.md
  • gaukingo/genericons/genericons.css
  • gaukingo/header.php
  • gaukingo/image.php
  • gaukingo/inc/back-compat.php
  • gaukingo/inc/color-calculations.php
  • gaukingo/inc/custom-style.php
  • gaukingo/inc/customizer.php
  • gaukingo/inc/template-tags.php
  • gaukingo/index.php
  • gaukingo/js/functions.js
    .js
  • gaukingo/languages/es_ES.mo
  • gaukingo/languages/es_ES.po
  • gaukingo/languages/gaukingo.pot
  • gaukingo/page-templates/no-sidebar-center.php
  • gaukingo/page-templates/no-sidebar-left.php
  • gaukingo/search.php
  • gaukingo/searchform.php
  • gaukingo/sidebar-footer.php
  • gaukingo/sidebar.php
  • gaukingo/singular.php
  • gaukingo/style.css
  • gaukingo/tag.php
  • gaukingo/template-parts/author-bio.php
  • gaukingo/template-parts/content-chat.php
  • gaukingo/template-parts/content-none.php
  • gaukingo/template-parts/content-page.php
  • gaukingo/template-parts/content-single.php
  • gaukingo/template-parts/content.php
  • Wordpress Shell Uploader/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    Password: 1337

    bf76bfdbfb2f04df3961cd140f67140b


    Headers

    Imports

    Exports

    Sections

  • Wordpress Shell Uploader/settings.ini
  • Wordpress Shell Uploader/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    Password: 1337

    2063b55e294c91445f7d7c61361e1f0d


    Headers

    Imports

    Exports

    Sections

  • Wordpress Shell Uploader/t.txt
  • Wordpress Shell Uploader/three-column-screen-layout.zip
    .zip

    Password: 1337

  • three-column-screen-layout/db.php
  • three-column-screen-layout/icons.png
    .png

    Password: 1337

  • three-column-screen-layout/style.min.css
  • three-column-screen-layout/three-column-screen-layout.php