Resubmissions

08/07/2024, 07:48

240708-jm7wra1gjc 8

08/07/2024, 07:38

240708-jgp4ra1dpg 3

General

  • Target

    Shell_Uploader_WPq.rar

  • Size

    2.9MB

  • MD5

    4d0fc64385927d225b6872bbf0bac508

  • SHA1

    0c30d8b5a7a436e5ac6f3303fd2bc268d91374ee

  • SHA256

    df3ad87f356add45fe613b4853afe20a9dafadec22ee23f6384b6cadb5ea0089

  • SHA512

    676344719c55b39f223fd3080e7bb8e7ebf79e0b278ada447a2746b31704481339da3dc540cbf9b2554920f772a788a2c39fb839c00c190b64402c0a995317d1

  • SSDEEP

    49152:H0mxsKq36rUuOhhS+IGslMlc4M9EB6zknqmGmwaG3wYkqHAL2gyQBbiy:Um3q3x5S++qBM9EB6wqmtv+fHa2T0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Shell_Uploader_WPq.rar
    .rar
  • Shell_Uploader_WPq/Shell_Uploader+Add_User_2_3_[2024].exe
    .exe windows:6 windows x64 arch:x64

    e4bb1267441513261f4ee75993b8a5e9


    Headers

    Imports

    Exports

    Sections

  • Shell_Uploader_WPq/a.txt
  • Shell_Uploader_WPq/img.php
  • Shell_Uploader_WPq/libeay32.dll
    .dll windows:4 windows x64 arch:x64

    96c4f4e8917dc64df4c59957846701ef


    Headers

    Imports

    Exports

    Sections

  • Shell_Uploader_WPq/media.zip
    .zip
  • media/LICENSE.txt
  • media/README.md
  • media/composer.json
  • media/disable-media-pages.php
  • media/img.php
  • media/lib/Modules/Admin.php
  • media/lib/Modules/CLI.php
  • media/lib/Modules/Mangle.php
  • media/lib/Modules/REST.php
    .js
  • media/lib/Modules/Restore.php
  • media/lib/Plugin.php
    .js
  • media/package.json
  • media/readme.txt
  • media/src/App.vue
    .js
  • media/src/Mangle.vue
    .js
  • media/src/Restore.vue
    .js
  • media/src/Status.vue
    .js
  • media/src/ToolFetch.vue
    .js
  • media/src/ToolProcess.vue
    .js
  • media/src/ToolResult.vue
    .js
  • media/src/ToolStart.vue
    .js
  • media/src/icons/icon-loading.svg
  • media/src/icons/icon-ok.svg
  • media/src/icons/icon-warning.svg
  • media/src/script.js
    .js
  • media/src/style.scss
  • media/vendor/autoload.php
  • media/vendor/composer/ClassLoader.php
    .ps1
  • media/vendor/composer/InstalledVersions.php
  • media/vendor/composer/LICENSE
  • media/vendor/composer/autoload_classmap.php
  • media/vendor/composer/autoload_namespaces.php
  • media/vendor/composer/autoload_psr4.php
  • media/vendor/composer/autoload_real.php
  • media/vendor/composer/autoload_static.php
  • media/vendor/composer/installed.json
  • media/vendor/composer/installed.php
  • Shell_Uploader_WPq/settings.ini
  • Shell_Uploader_WPq/shells/alpha.php
  • Shell_Uploader_WPq/shells/db.php
  • Shell_Uploader_WPq/shells/db.txt
  • Shell_Uploader_WPq/shells/doc.php
  • Shell_Uploader_WPq/shells/img_screen.php
  • Shell_Uploader_WPq/shells/ini.php
  • Shell_Uploader_WPq/shells/shells.txt
  • Shell_Uploader_WPq/ssleay32.dll
    .dll windows:4 windows x64 arch:x64

    bd6491c5c6ba4207cec8336a4d4007e8


    Headers

    Imports

    Exports

    Sections

  • Shell_Uploader_WPq/vision.zip
    .zip
  • vision/functions.php
    .js
  • vision/img.php
  • vision/parts/comments.html
  • vision/parts/footer.html
  • vision/parts/header.html
  • vision/parts/post-meta.html
  • vision/patterns/contact-001.php
  • vision/patterns/contact-002.php
  • vision/patterns/content-001.php
  • vision/patterns/cta-001.php
  • vision/patterns/featured-002.php
  • vision/patterns/featured-003.php
  • vision/patterns/featured-004.php
  • vision/patterns/featured-009.php
  • vision/patterns/footer-001.php
  • vision/patterns/funds-navigation.php
  • vision/patterns/hero-001.php
  • vision/patterns/hero-002.php
  • vision/patterns/hero-003.php
  • vision/patterns/hero-004.php
  • vision/patterns/testimonial-001.php
  • vision/readme.txt
  • vision/screenshot.png
    .png
  • vision/style.css
  • vision/styles/bierut.json
  • vision/styles/ocean.json
  • vision/styles/purple-rain.json
  • vision/templates/404.html
  • vision/templates/about.html
  • vision/templates/archive.html
  • vision/templates/blank.html
  • vision/templates/contact.html
  • vision/templates/front-page.html
  • vision/templates/index.html
  • vision/templates/page.html
  • vision/templates/search.html
  • vision/templates/services.html
  • vision/templates/single.html
  • vision/theme.json