cc4d082b904fa9a636075d08fa92e288431af7b8e07f210cbbac40176a9118e4

Sharing

Copy URL Twitter E-mail

General

Target
paypal-button-paypal-plugin-for-wordpress.zip
Size 1.9MB
Sample260523-ws5d2abs91
SHA256 cc4d082b904fa9a636075d08fa92e288431af7b8e07f210cbbac40176a9118e4
MD5 2f7942387156e4193961ca336396060f
SHA1 c448a554da2340a0251ca9ba8d9300e60d54f1c3
SHA512 415c72a01107499d1ec25a54065c072c2eb6846a8bc429daf4a3052f2f3345f563e1ce727346c201fd13a6e0e77293048d68483b24d5cb015038611440bf25fb
SSDEEP 49152:oacfBp2G2oV+dr6K27/j71ibxhwzc979c0L2a:ojHQU+IL71wwQ96E2a
TLSH
T1BD9523718F580C99E70D4172C29CDF5BD16E57822103C297A6BE0670FFBDA502B7BA62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  plugin-premium/app/Main.php
- Size 20KB
- SHA256 bfe60c1bcedc8d82e6db17bb09173814d043a3c72cc84df28063172375e27a50
- MD5 79e4d1ea076e0fa6700a96d0914644ee
- SHA1 a2fbc13a1f66638d8089b16d5a65015d01cf0a69
- SHA512 bc01029acca08f43f6c5e780dd4d036ca90f5017521eab171aa87abf9976c6a05d9475aea47e1a00763a73db18b8ca83189f0d6afa501de86ef8ef353cc4b517
- SSDEEP 384:h5HTfNt1QB6mngh5KcP4kdaGLtn54vbUpLC9H8SAhQhErDucNWZp:hNfNmnXqn2eLC9H8SAhzrDucN0p
- TLSH
  T13A92B52554FE5327047764A63BAFA8D2356EC3935304CC007CBE03946FA6E78DA9369B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  plugin-premium/app/Plugins/Base.php
- Size 21KB
- SHA256 6602ae4ffbb3185a806b5fc0714358667bca77cb3ec2575a3976af7cb6994396
- MD5 a4317e88826849c83e55c5d369b0aee1
- SHA1 a8a654be4459cf6683165585a4452d64938bda36
- SHA512 9220a2d367d1a4dc744546bd2d3548f7add1a919057ab952293e2198c19b81e2fa23c3c7e062bfa8031fbf58c9c07f330c87c185ba2b4fd0bacf19f08544104f
- SSDEEP 192:BjqnFCysSvxtV8AU7kjaRQN5IH/EyNl1QAuP0Nbv/Iob/bCskkSB4m8yWyfEASzR:Bjee7ijK/0AuPQsdsk8AfB4Pr
- TLSH
  T1C9A2CC0A24DEA136447BA5784BAF99C924AEC3D31344C9407D7D03C4AFB0578C5FBAAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  plugin-premium/app/Plugins/PluginUploader.php
- Size 13KB
- SHA256 981b8d81b0d1bc8238264ce3ed7b50ebe46d476606767b8fb778c8c012ba1371
- MD5 e29e6032a42b11882e2a1c358c433cc8
- SHA1 20846e5fb2d5c105e5d0cf80db1fcc78d0907655
- SHA512 f863d8b4c40909c640bf79fceb410f41dbb352d07494af7a86a46d3433ba60898dc5921ead2673754805fd147fb9909faf57e10e256c878806df3ef364aa349e
- SSDEEP 192:12+fpRRFPUYQ6muNCL2AX2QUKi3xgmo1TM+V0xO4WpigSkN+otlpMjFRiVx6NNFY:Q+fzpQh2IiGDmZo3pMjFRPNMb
- TLSH
  T12D52204AA6CE5176113BF5B01A7E40D971AED3E35204C8087D7E52C8BFA113885F7FAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  plugin-premium/app/Plugins/templates/multiple_upload_plugin.php
- Size 3KB
- SHA256 799277cde120a35a003037c92772dcb54846e8993804694260d6d80483dceb43
- MD5 72fc1d312a7f0f17880ba02d2cac1c6e
- SHA1 2278894e91ae32f2f697d362f97dc54f0ffd9c1c
- SHA512 7c2fe95149ef5b55f7c9aca465af4aaaf2bb33ee7d36ec51125c32f9d32f5a91161258e2a28aec47dae0c490d10583673864d591b701275d8c58548ba5b933a1
- TLSH
  T1F7619416510C9E72003792E16DBA0AC2708FCFF1A716D6857DF3D5E46E91C708C078A7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  plugin-premium/app/more-functions.php
- Size 16KB
- SHA256 42f67ed2aa3d6293ac26f70416640a72d727c936dcaaa2be50615b1aa4b39130
- MD5 948b96e2c0e32208cd7c0788d4a9c219
- SHA1 57c14a242c8679cc1d8b35a521f1c507db5a188d
- SHA512 0d57d21f98ae07f55f971cbde82c0a8b29e40edae365cc1e78f9dc17d81f928e0d71fd8ee2f44a660ef4716f641fec7abe26818ef9adc47ce8c857ae9c71f93d
- SSDEEP 192:kKtyVyhfjQyoZ3yXwCUYSCTTCwEtZY6vpxvpuozS/Ut+e/CEfC7a3yeiSZtXSBbY:kC3DOwIYEpxDFfyOtc8eu
- TLSH
  T1A9725569389BA4660173A47E6B9F98486269C9534648CD107E7C02C86FC133CFEF5B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  plugin-premium/assets/images/failure-icon.svg
- Size 1014B
- SHA256 28cddda1d5efa9def10ac541bb53bf7f3303c7fa777221d1486c265084aab0f5
- MD5 0d5c1a37b3a19e29e9ab29b2c2d45dee
- SHA1 8d2a731e763ff14fba946e4ef3c23ab3b5996163
- SHA512 fe3e422e0d57392a6344192b8e9c61024fb6823d2a19f106949dbf6bf1d452041356518c593e4924ab46924ecc3bb9a665da5917f33950a237a4e90e9a2def2b
- TLSH
  T12A11CE0C9516DDA281E4CF709BF5A0F21833594F0286894DFDD6315B88A98B31FF87A9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  plugin-premium/assets/images/mg-logo.svg
- Size 12KB
- SHA256 0f294832b62041c822e199f3d0528a207a691535bab2d8ce3d3121cea2e0ab86
- MD5 275da3846eb8c1996719e64cf2b2750d
- SHA1 eaee465fba829af4b8f3edea5037a1a7c22e2ca4
- SHA512 576a7452ae741850839f842474d5bce2ea48f0695761eff4285c5a15a0a09e10ea52e6ba8af9a628d67f745e42302754e356ad7d91c9ebc7180140ad17d20230
- SSDEEP 384:1zvY8BSiZHp0R5C7kSiZHpvfx0Z1e9Z1erm7zQ28Mhk:1z3ciZKAiZVx0Z0Zf7zQ28J
- TLSH
  T1DD4234F983E885E02EED6378C7E30AC23A6450F56C909DC8731DA8749753EDA3734A49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  plugin-premium/assets/images/success-icon.svg
- Size 3KB
- SHA256 49ae5c5c8c839b7cf1e3b52e259ba9a21af1980eec254858dbd4e92a4e85cb10
- MD5 b867637292031524205de313115c2471
- SHA1 4bb986c9fed0a9ef76a34bced78781cbe83145d2
- SHA512 1f9fc2c8d656e15cacafeeb438dec0aaac239d0ffe14e173d2d496671da565ac83f0e133bf4e12f433bf37aeed7801d4d73b4a2bf8d96d05fd975ba907ff884a
- TLSH
  T1276165FC2B266DE18DC045609BE1D1010723607B8BBEDADCDE4EDD9628614A84D38FF4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  plugin-premium/assets/js/bootstrap.min.js
- Size 36KB
- SHA256 909ae563eb34f7e4285a3a643ab5d7c21c5e6a80f3f455b949ac45f08d0389b4
- MD5 3d8308804264c5b751f6e54734c46897
- SHA1 369a832ef7f8a57e9b59b84b181fdb4fc9125050
- SHA512 ccf07732f7a858a966ac33532803d3c7787e414b29f172d717fe82a2a2067740ed36da7acb99fd44483073bd94c75e8912548ec720218a2fc236888b79d12b7c
- SSDEEP 768:0mLwtev6lwUt0eWN3Me9DU1Vt0Zpdcsi153K0rmqeYW:eJuUmTiNrmqeYW
- TLSH
  T152F2840AB23035A107EFA1A1414B020E73366A7DE94791AC78B9DAF12DB4C49717BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  plugin-premium/assets/js/customize-modal.js
- Size 5KB
- SHA256 31bfc5b7083690b9237c49f7d0c1802977fcf6af5cfc5738565b87fcfb129bbb
- MD5 b3832c48b3aef66035c4d6a0d0e54896
- SHA1 86930b8a21b7eda7eb05d23e7ffb005ed77781da
- SHA512 a5e9d97d5b81195f2a08c796becede3255b96895eed1e0df8af92fb70ddefef50b2ca6d3910c14aed2671998efd93d616c64ffdd22b35153d6b487b66e9481a4
- SSDEEP 96:GXZenDP1hN+nLf5wbEHhlhsLHjhMLn7eI:GpephN+nLf5xLGDjmjV
- TLSH
  T1D5B10168F8FF28E1147F34FF57EB99803629A547B204D6047A9E47C40F86818A8577DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  plugin-premium/assets/js/download-theme-popup.js
- Size 1KB
- SHA256 18f88c6372535c056bf802ab42f17797674d704877c6cd2126a7d916b44c5422
- MD5 6ab0cc7e360cb1eb2d8aad20cb83d501
- SHA1 c77f6681e3b362fe2b85d58ad5a04ba912c3146e
- SHA512 c0246db44eb4a883c1be980ce634d897b5392d296d2e7e70250a26590a660666300646be45dc6932bdff98a4573e0841cdc2b8f9d5d5b296fd4fdbbdc4a6b9b4
- TLSH
  T17F21B4243DF6A6A5937F15E7FBFF5F50264A3902F90A4C15B07C029F1F0229A7186629
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  plugin-premium/assets/js/dpwap-common.js
- Size 1KB
- SHA256 2ccb863c8ab1168c74718c37a95049226b5d4aeae67340864d3b95d6dd37d851
- MD5 0182de7fceb3b031218065441157dbda
- SHA1 6ac1155aa93d8fc6a2fbc7bcbc10772599d1f418
- SHA512 cb071cdb9703354a079e5e2eb1d3980dc259ea0e31688d8fd0ee3856e63b02f5ec2a5358915785253cfe6dd08a183a01438ca6d8b1131c03fbd4e9d764dc8857
- TLSH
  T1B831CE1DB9E13757753770EE9E7FA4903A3B6103B204CD40768E0B848F963589C22E0B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  plugin-premium/assets/js/dtwap-admin.js
- Size 1KB
- SHA256 fdbdbab3731f880ca705eb796929d986b6f5c11c9109218dbe7f14c105fc7316
- MD5 43ad513dddf6b7c639ba430df01df473
- SHA1 98c88fa08ec0e32322d521db15a5b25f3bcdb75f
- SHA512 efc16a2b8d07be498159cf47b6275bc1d2b1529334e358106e55942217125224039d21121701cca896f06628a9dd786b5ef69fb21d2c68b88fdc28c8163036fe
- TLSH
  T108218E3AEA5EB720C6161052E36F1983F31774555054D471EC7D045A9EF930B73E5707
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  plugin-premium/assets/js/multiple.js
- Size 8KB
- SHA256 ed6693bb6196e92f98d0e18ff5e8e1487cddfc0f7455c7e18a074d94ffee1049
- MD5 fb546665e60939c32fc4afab7a7f659a
- SHA1 eb626ebf1d82c960217b67df2077f549d50ea857
- SHA512 15a4808196d9ac41eadb4b3f4de8cb63cfafdd11eb0474c79a67c6acdc62ac9f39c83dcbd0c905260337201d44c9d83e214b7051ac7a2d8bfdd40f69511a790d
- SSDEEP 192:mJUWGUaiatmerW6ZNR330EMHnywK2iEaoViGXo+kYDncftbiGLcftIGsfoLBqE:m5OH30EMHnAEaoViGXo+kYcftzcft3L9
- TLSH
  T19502112D3DD220E8C5376437AAFF073434A325433944E940F8ED85595F9172868AFBEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  plugin-premium/extra-more.php
- Size 14KB
- SHA256 829b7c4df72ed4c0b5efd4984ae59520cb0104080a1c155805b36a9ec86f9fa8
- MD5 a4256575bf479f04c8ad97fd635691af
- SHA1 8c1b2a3aa4bc2dc1cfd02f4dc09feec0331e49a6
- SHA512 5cf1bb2db5aa01f419827f7881c5a0d1ff86ef4292085134097b6c59c05b842478bc61805d8cd537d8287013165f5baf66fe37792b8eb794f0ebc2c9837e6ae4
- SSDEEP 192:Tt5lRVCKaj3kpSOUsFp1iKqK9i/ilr+A/7JhKfPSbh1PCyvjbx7siSCy+BoZy3Ul:NawSh
- TLSH
  T13462412978EF75214093FA7D538FB409566AD06382099D01BDBD57C41F8023CDAE6BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  plugin-premium/languages/download-plugin.pot
- Size 8KB
- SHA256 966d3765aad3bdab5dbab90472ad5a9beabcf03c01fbf126df40aa839fb4185f
- MD5 5047b264b471d7ec4cde12b63d106127
- SHA1 d8b77ba895040b29164ad36159150e4534b487c5
- SHA512 b49a9d10e738c681c864c1de115b10e6645a4ae5547076839cd374763d24a1f905dfc9cc2c33982911f361976772da9d35caf51b0d3313960de6412f0e0d4fc8
- SSDEEP 96:hMu1HRle+jq4KqppyL20MTR58Hc1NyWsLf391Scc1MHGYb3mBIrEm4XXZ+wi8j:eWRleuKe/0MTP1NyjP93j3J4fj
- TLSH
  T1C5027C62A5A84F26857D5B599AFD6DD130CE03E24672C3053D3A0A9E7F10CBA03FB395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32