0fb0362ea3c17f3db1ed89b27343b0a4549e26e875f2136dd8377f94caafbc1a

Sharing

Copy URL Twitter E-mail

General

Target
woocommerce.9.1.4.zip
Size 20.1MB
Sample260507-pg3mqsdw3w
SHA256 0fb0362ea3c17f3db1ed89b27343b0a4549e26e875f2136dd8377f94caafbc1a
MD5 10f5c0f5294c52336a16a7e80151e20b
SHA1 45c7384fb20614b070fca1b0e83221bbf55980ab
SHA512 4ee254010f0c9dc8eaed1212ffee1edadac22e26aa372137987a01b85d0f63686e7af8c065911d3aaba2286f3ab812ca5ce669543cf31453ba8b02ca86760da7
SSDEEP 393216:I1COP9MwIj3N8RU6Zt4mbbnabdofm30gDopbYcgwUr6juhcpL1tY66:I1CObI76dORBofkMWEqgLE
TLSH
T1D62713A3C23C2D70EBC276B9DE0041C1EC24EB12B942719A6D649B5C79FA8D53F16B1D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  woocommerce/assets/client/admin/47c7fb356fcb2d963681.svg
- Size 57KB
- SHA256 da21f57a4ff51cbd3029b951e9d325afac1f0a1287f0db6fe1d855a2d16c5006
- MD5 4f1e1b7fb900e032fff9a83bec5c631b
- SHA1 7e3392e07994777327b32d70e3d741ecfa03a1b2
- SHA512 c71f901f41ea1a8f3fe9ad09e802cd702a7c703da2d49d8ee98fd527fe2a23025add84eeea289a3c0c348f82714e834ac234ad6de3c2353b6b68dcf23026ef57
- SSDEEP 768:H1ibascmZL3XQ5/Cr8wHIdy2ULq2nxR+Tb9EwwuvfVAMNzEZ4:H1xmZL3Xs/Cr3owprnbEb9nw0VPNzEq
- TLSH
  T17F4341979F78374E384DCABAAF1DA165506F70BB35DE808C784F472453AF144E9AAE00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  woocommerce/assets/client/admin/73ae3f4886531d9c3fee.svg
- Size 15KB
- SHA256 1d1b4009a70ec405400f586d39057379a8ebc2252ac3013bbbec3c3851a1ca9b
- MD5 abc722f07c40eeb0b9e58fc0aa05e37a
- SHA1 50b4aadf6a1a32387d616cf096b5125a5f1a9aef
- SHA512 02dc07c38916d9ca6f505b67d9ee25e55073e5388f393e7f7fbce521e1e5ed4e708d6be3e05b1343f472e21f5321231fd51abcf36fc07cd6e0ecfa55ec7c2486
- SSDEEP 384:mCepRUQ0UFMVw7hOzB2CBFc9NnUdwQuhbD:VenUQTM32GUUL4
- TLSH
  T1E862541EE70D5BA1F0AFA3FEE7F57007243B56D91F534CA3D3192D22A82226910A74D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  woocommerce/assets/client/admin/admin-layout/index.js
- Size 2KB
- SHA256 c32c3c96a66435729a2c6032c33b21364dc0da67b4a96b1ff29b9bad9e0cd243
- MD5 5991d2f2acaf6e8e42990dbd67617bb8
- SHA1 a2a7fac4fd2a13148fbbaffbb72f7e5fb3b52c9f
- SHA512 bfbccd0c9b7e96535cb0eb16381c3172e88a9db5185ec64f46174092406828186e5d55e9b62aa441b8da7ea09bcfe5eba7f724f9bd04f9096381b76cb781d0b7
- TLSH
  T1F1515322B06074C933AB68EB5A3A465DFB49440835B980B073EE986EB4FDD9D34355C7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  woocommerce/assets/client/admin/app/index.js
- Size 600KB
- SHA256 114a6274f0daf3af40f97c65f7851eef02e8e894e6cef269b6b6bf32086d6778
- MD5 249398040f5c843c58e6c3b81f919cf2
- SHA1 e001b10c8297c77bf0e5a351f78bde4311e5a38b
- SHA512 eb55844f01e60d09706a508644f6265799140ef868ad0355505303d7934f403887cf68e93b75ce41650b915fd0ec826f6d92462565c86deaa8925bff91e149c1
- SSDEEP 6144:c+B4+gxTyVk3CxMxMhUwuvdQlbTV9HvvBrM:fgxGmXxMawuvdgbTLa
- TLSH
  T19BD43ADB72A460B9B5CB53EE85774010B7681ABC3530C060B2ECCD6CB961ACC957EA5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  woocommerce/assets/client/admin/bfec8d1574ef61285fc9.svg
- Size 9KB
- SHA256 bda0f92fd135740c5daf6516505998cca7c21fd10b2c3ba6ed4b6d090c03d0e7
- MD5 ed6f91ac1200fef1c58ed199501e1855
- SHA1 1a9f906d1b90011d71e5f88f344b009e585d7d82
- SHA512 f8702076c0fea6d899f1a71c269990a449dae8162e98d47381373f8df83e4bf3340d2f88cef6f67781d9094c5e9d861844e5fb5c2b2974b2b168504b70483772
- SSDEEP 192:sEfIoiTae2YUV33E36Kru1zHwlRNob0eNx4l0LwyrHm:sEwoiTae2YA33u61ElRNo3NC0Lxy
- TLSH
  T1DB2274DF3BA445F0EC4387D2E7071069222AE4FF8A668774C7986F05389586DCC6AD87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral10 behavioral9
- Target
  woocommerce/assets/client/admin/block-templates/index.js
- Size 123KB
- SHA256 6e531bfd0b29c4a6ca9c72b13d5e8cfbe48fff160f4d53862b6e5a14c24bbfa3
- MD5 bafa2c57feb8481573d099be10bf7689
- SHA1 ac859c57dc362a38e7e24e2a26c7ecbc1b4c1481
- SHA512 b3f107fd37a7511a400b02d5788b5e96c4aef9617a3a40ad6010927c70ce16de345d4a2175bc0eb3b2712fb5b57f08543fa73030b3524fd19bb1153235f1738e
- SSDEEP 1536:OHJVokWbclPQ5llNoE7XEfN4/GskzfSSgqYK3NWZ/r8Ih8HWBaM6Qfj4q865TqO0:OEWK4UwEjbftMpx3oDsYTAbX
- TLSH
  T181C33CEB269035671791A0C5947B2001583E9E6A740C7435FA3CDDEB2B3E0DDE2E7E68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  woocommerce/assets/client/admin/chunks/1565.js
- Size 7KB
- SHA256 df2700673a3a43ae7da688b2ccab8e7164b212b904e986d1368b049b5c33faa3
- MD5 91c658aa2d91e052cf9c5ca7b9e85793
- SHA1 b13a3c90743e67ccaa8f415f2a7c7d7b0156c045
- SHA512 5cfa58946a2291ba7010c44c40cbdb61a5c8878d2dff67791d4ea52cf0dda441d7c5681d8dd5f01e0cecaf75a7849ee61274bfb4dc8e9d2af8163adf4d5bf5b2
- SSDEEP 192:RslCS9GNpQq8JiMy47jHeUKIGTP7q76l8:IzjGTP7q76l8
- TLSH
  T115F1A7CD7BC1F47A0BAB71B5883F2016F33A2929345A5040A362E4D0BD6578E466BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  woocommerce/assets/client/admin/chunks/1850.js
- Size 52KB
- SHA256 d3bf29cf48bc3374a9b5eb46f487c4e9368d74125f8c0e37910115a2506dd7a5
- MD5 433cdf84e577d97977d7173cae2138f8
- SHA1 e6c1acb186b74023aaa1bc3a037e99ee441cd1f3
- SHA512 51be87b6645dc3a55472bd3d19ccab53b1235a0704908304bffbb045ebab0beabf0a7dc1e120fbce67a4a975144ced6fa6adceba3481daff16c56575e5a292f4
- SSDEEP 1536:SCaZDGOUCvcoprmWmupRHmohBydonatOXMl6Ba8G:SCU9pRHmohByKnatOXMl6Ba8G
- TLSH
  T1A233D6CA3695A0144BA551D214BA0843E2ADBE6C325D88E8F4ED85DF7F9CC41F273B39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  woocommerce/assets/client/admin/chunks/1878.js
- Size 104KB
- SHA256 25e9f6e5b63d0753b9b7670e8335153fb927e2b20e15b1726cef007ee0495da1
- MD5 c407686701a72361d6110d02bb0c7063
- SHA1 7a2d3eec4429fcb525575459edea93c0b95fae5e
- SHA512 2f5b802cfec16412d8e33fae744fa22a294a16bbd7e502fb09e3f26e7e5e3a6ead62866dc5a50803a4d0afbed69108c0535158661d0d18a54dcad99761eca45d
- SSDEEP 1536:cQ7cqre/quvQS4ajb53RwJ6DD2SUlGNdGU5q7nFtNUJ3/EEXIdvEIUKv++oS++4o:c+e/q8Z33SJ6lrI1EIn7sa/
- TLSH
  T13AA32AD474A1F9A5438384D9043F1006F22A6C79711DA8D1F3A3ECE8B8E49CE6177FA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  woocommerce/assets/client/admin/chunks/2106.js
- Size 10KB
- SHA256 9979b8b059a902a884750c43a830445a0d60e078117e1b1c83ec14d9c54b2ce4
- MD5 83c7ff0745ec20791c2b47fbbd30507f
- SHA1 b5fd2d54956ca6947868e63d6db2a69960e965d5
- SHA512 f6a99a9df4a96fea7478ec023bfb9ce6a629e17254a6eee7b1186e00fa3dc94b3490b995b54060148923fd6d2a91397da3f485fc6bd503793a3d1bec64191964
- SSDEEP 192:1LgkDPfROX300taANlno2yAEWBaaSZIW/mJJlInR9Sb2ICW:1EkbR70taANlnXy9UaPZqJlWSP
- TLSH
  T16F327544F0D364A61AF31694DC2F91477179680EB58EC064F466E8EA3CF649E2077FB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  woocommerce/assets/client/admin/chunks/4098.js
- Size 196B
- SHA256 1cae5c1400e790402adc16e296f6cd35cb550823743ca0e0719516dbb4fc42d1
- MD5 59c9beaf93924495c2d008b6a4f44c04
- SHA1 96dbdc398e49db77bb888bfd40d476cd7b9cd727
- SHA512 8040aff0349709515fb52a3a670bc46a32f84c83fe48fba5337eaf8374927639465985001caaee836658ffb036baa8e55df50c82e8030a4027fc4f1921c0f826
- TLSH
  T118D0222AA2D27C5462B810CC808305E7C86F01257F1F9CD2EE88C8E000A190C06600B7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  woocommerce/assets/client/admin/chunks/4272.js
- Size 12KB
- SHA256 fe0c40a2fb6bf21b6632de17e39f81940080fdb11db63e81260f82e8aa7070b9
- MD5 7438a7b2ab26b212e34288c8c1bb5d0d
- SHA1 069aaf408dcc1d7e81dbbd421e9abfe2dd7bcf7a
- SHA512 1d7c4148ecde92572add1c747487fa12d4b9dbaf3995aef15132070f090be7b8031a2c12ac1a3deb3c7be579d08006dc5f65c406c379f757f6d2467b144f54c3
- SSDEEP 192:xPKp1PJ+SqdNMpyaEOSgbNbo8fxKnGA8Rlg8OGBZ60DbP7UTJXN36Knru2qYwa6q:xPK5+SiN+hWofA8O10f7m2KnrRwaDjYe
- TLSH
  T1704284C3F078691822AB019F596525C8BF5A4B1CF6F84850B9F4FF1CB9A6AC9711C24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  woocommerce/assets/client/admin/chunks/5691.js
- Size 16KB
- SHA256 70cbd01e2e9a7f28c5fa62be4d5c902cd149693130c0afea8a4d8c5f7237a64f
- MD5 42ff60bd93d5534cfaae1fa67f93bb8e
- SHA1 3b7f3efdad75dbb5b13832b7ce59764961e777a7
- SHA512 40617db83bc4ca632db2b4208c06b1754bb9ee551e9e34a9f8bea1246d70ef1ffcd063abda5dcb9048aeb4d5c3a89025a3f09dfd7b80916873287f6e5ca8c94d
- SSDEEP 384:oZlUXJpEY7C+5iwh28GHLkWBgZW0kuODXxIW:oMXEGCmDh28ukWuW0kuODXqW
- TLSH
  T15A727293B0602C5D22DB126B49A7059CEB5A5E48B43D1854B5FCFD0C78AFB993328F1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  woocommerce/assets/client/admin/chunks/5771.js
- Size 10KB
- SHA256 46dabc8e41de9db05e97dd74fee51d00a8063e5a74730b7a157e206654fcfbb9
- MD5 1ef4165997f687f665cfcdb508edb558
- SHA1 09930fa68a121fd2d55f6146ece09764bb8a0e55
- SHA512 08ec7223065df61f9cec2bb29e539a03d7a0a46c7d4ff26a475448d68397e036420e40577d6f8ef25fadbe9ed64ac84e429c8a1af49801fe962d18921f0a9cbb
- SSDEEP 192:5l7/BBWftxwdK0ppkzipLOi72ycWhzCdNXluKRG/dG9GXGdmNCM6DXSCdFlkneTU:5ldB8xBChEuVa/TyzLH
- TLSH
  T176327683F075181A32CB11DB1AA6009CBE984D58A4310450B9FCEF5C76FA7C9736A7AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  woocommerce/assets/client/admin/chunks/5948.js
- Size 18KB
- SHA256 47643a8807b81cc53bde21dde909512e121612ac7477f77d1682abc7a271fbb5
- MD5 3268e58b3ada54456730ed59b050cd3f
- SHA1 2411376dabc68c87f7962a6206a1308ef12f32b4
- SHA512 a7d778e142105e671ef3ebb52745ffb0bc05b785db717e29b060684c673d605e37bcfec544b9d2f619ec0c69d3c01cf1889a37d5f2a2a2af89218526ca8e658f
- SSDEEP 384:tKDK7KLwOKxKjKC78zbpjApmps1/UtcDmFis991Qmhw/WFyLkZRPrNJBmIx9aXmu:tKDK7KLTKxKjKC7oApmSJUqD+b9Kt63M
- TLSH
  T14592F7D6729454EB23CE4B9B1CBA1004D7E8A8547429885CBF8CBAD3BC26CD551EDF31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  woocommerce/assets/client/admin/chunks/6083.js
- Size 2KB
- SHA256 5e954ec8f47b35dd307fd0d508b0e1e20c2505f1d2f5eb4af8a68a5b0137c0f0
- MD5 50080a91c6bff17a615c6b003e5c4b2a
- SHA1 61aa725759186b709608b62672e6bb7a633862e0
- SHA512 4700d228ab739f858a18112434648fb72f7f3c3a920ebc223a7ebe8cfa86ec8b215074f5593ce485a243ea049c8cd0c933e09e4d74b16327389a993b6aa075c0
- TLSH
  T1E6516487F4A5391C228B11EE486081D4FF1D0F84B16C1451FED8DF5C347AB9AA12B26F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32