Overview
overview
10Static
static
10home/gbohd...dex.js
windows10-2004-x64
3home/gbohd...dex.js
windows11-21h2-x64
3home/gbohd...dio.js
windows10-2004-x64
3home/gbohd...dio.js
windows11-21h2-x64
3home/gbohd...dex.js
windows10-2004-x64
3home/gbohd...dex.js
windows11-21h2-x64
3home/gbohd...dex.js
windows10-2004-x64
3home/gbohd...dex.js
windows11-21h2-x64
3home/gbohd...dio.js
windows10-2004-x64
3home/gbohd...dio.js
windows11-21h2-x64
3home/gbohd...wi.ps1
windows10-2004-x64
3home/gbohd...wi.ps1
windows11-21h2-x64
3home/gbohd...dex.js
windows10-2004-x64
3home/gbohd...dex.js
windows11-21h2-x64
3home/gbohd...dio.js
windows10-2004-x64
3home/gbohd...dio.js
windows11-21h2-x64
3home/gbohd...der.js
windows10-2004-x64
3home/gbohd...der.js
windows11-21h2-x64
3home/gbohd...oad.js
windows10-2004-x64
3home/gbohd...oad.js
windows11-21h2-x64
3home/gbohd...oz.ps1
windows10-2004-x64
3home/gbohd...oz.ps1
windows11-21h2-x64
3home/gbohd...ced.js
windows10-2004-x64
3home/gbohd...ced.js
windows11-21h2-x64
3home/gbohd...cks.js
windows10-2004-x64
3home/gbohd...cks.js
windows11-21h2-x64
3home/gbohd...ent.js
windows10-2004-x64
3home/gbohd...ent.js
windows11-21h2-x64
3home/gbohd...orm.js
windows10-2004-x64
3home/gbohd...orm.js
windows11-21h2-x64
3home/gbohd...ags.js
windows10-2004-x64
3home/gbohd...ags.js
windows11-21h2-x64
3General
- Target porcelaine.orgdc2406f84cc138f4cbf0f75e53403ecd.zip
- Size 4.5MB
- Sample260604-phl2daet5x
- SHA256 0e00155494307c2137d76af80b9b8260e7a32da55211b32dd177c5eed4591c32
- MD5 4d1bf3fe955054331e83529437c65017
- SHA1 d2aaab178ced87d8fb8c4e7e6a6cd6a9dc6b98f7
- SHA512 3c8dc1c566f9e32c04640d41457e8606814a5509bf7a17a3148d2bab2bac4506dcb526e7b3c1e74f12b3ab112326102c619d323873b79ea8aca9f8f174bab6b3
- SSDEEP 98304:FBLaiszbq6bAiygQ7iv1BUJBhJ1zjS97VDrMtyNnRlxI1br:FBLaFnqy+gQUnUJ3JZOkKnRlxI1br
- TLSH T1E726F1BB831F56DCD1F3BD7F70D42719985F0233202D85ABF1182A94A94B6ED26B2613
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
home/gbohdan/public_html/artemiscanes/042bym/2index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
home/gbohdan/public_html/artemiscanes/042bym/2index.js
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
home/gbohdan/public_html/artemiscanes/042bym/radio.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
home/gbohdan/public_html/artemiscanes/042bym/radio.js
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
home/gbohdan/public_html/artemiscanes/2index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
home/gbohdan/public_html/artemiscanes/2index.js
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
home/gbohdan/public_html/artemiscanes/6etd8i/2index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
home/gbohdan/public_html/artemiscanes/6etd8i/2index.js
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
home/gbohdan/public_html/artemiscanes/6etd8i/radio.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
home/gbohdan/public_html/artemiscanes/6etd8i/radio.js
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
home/gbohdan/public_html/artemiscanes/7xscb94/nhxesrwi.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
home/gbohdan/public_html/artemiscanes/7xscb94/nhxesrwi.ps1
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
home/gbohdan/public_html/artemiscanes/plkyae/2index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
home/gbohdan/public_html/artemiscanes/plkyae/2index.js
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
home/gbohdan/public_html/artemiscanes/plkyae/radio.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
home/gbohdan/public_html/artemiscanes/plkyae/radio.js
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/admin-header.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/admin-header.js
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/async-upload.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/async-upload.js
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/css/colors/ocean/wklfqdoz.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/css/colors/ocean/wklfqdoz.ps1
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/edit-form-advanced.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/edit-form-advanced.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/edit-form-blocks.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/edit-form-blocks.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/edit-form-comment.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/edit-form-comment.js
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/edit-tag-form.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/edit-tag-form.js
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/edit-tags.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
home/gbohdan/public_html/artemiscanes/wp-admin/edit-tags.js
Resource
win11-20260513-en
Malware Config
Extracted
-
ps1
-
exe.dropper
http://api.wordpress.org/plugins/info/1.2/
Targets
-
- Target home/gbohdan/public_html/artemiscanes/042bym/2index.php
- Size 3KB
- SHA256 5b254f03485d8ad001091f9407f719d51a2078fef85c64fbce17dd9d2a31ae13
- MD5 05d2c9499d677586d6b06f2fb0c935a4
- SHA1 7df356534c69c5001896147a02c4c1e55b68ef7d
- SHA512 bb3f1f6d5e6161dc10d6e8beba02a911e52a21543132d3d801a5340c83a1e770a0566923cb8de6936d0c2f8fdf8d008c6d4d841e79428b8f83ae18d272a58684
- TLSH T144817D4D0E1A854C00BAE531A07DEB18D2534255C8D3AFC9FE743FDD6F4874D2A66A0C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/042bym/radio.php
- Size 3KB
- SHA256 038131fdf7263089c59f7c8f220ab5f695c4aceec9e5c82ec0c65309047af01d
- MD5 baac908a27f173e6ebd934a824d8573f
- SHA1 bcff14b78970045267ba9f8d08ffef5288d6890b
- SHA512 04ea6eb4427876e0709b1ef44f5af354a554276fab687a69d0f8e6a7e0adc768eeddb49aa03964e11085689b5d54b0886267cbf06807698a6f2bfad4ac2fd3b5
- TLSH T1C3818D4C0E1A850C00BAE431907DEB18D2534125C8D39FC9FD753FAD6F4874D2A66A4C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/2index.php
- Size 3KB
- SHA256 5b254f03485d8ad001091f9407f719d51a2078fef85c64fbce17dd9d2a31ae13
- MD5 05d2c9499d677586d6b06f2fb0c935a4
- SHA1 7df356534c69c5001896147a02c4c1e55b68ef7d
- SHA512 bb3f1f6d5e6161dc10d6e8beba02a911e52a21543132d3d801a5340c83a1e770a0566923cb8de6936d0c2f8fdf8d008c6d4d841e79428b8f83ae18d272a58684
- TLSH T144817D4D0E1A854C00BAE531A07DEB18D2534255C8D3AFC9FE743FDD6F4874D2A66A0C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/6etd8i/2index.php
- Size 3KB
- SHA256 5b254f03485d8ad001091f9407f719d51a2078fef85c64fbce17dd9d2a31ae13
- MD5 05d2c9499d677586d6b06f2fb0c935a4
- SHA1 7df356534c69c5001896147a02c4c1e55b68ef7d
- SHA512 bb3f1f6d5e6161dc10d6e8beba02a911e52a21543132d3d801a5340c83a1e770a0566923cb8de6936d0c2f8fdf8d008c6d4d841e79428b8f83ae18d272a58684
- TLSH T144817D4D0E1A854C00BAE531A07DEB18D2534255C8D3AFC9FE743FDD6F4874D2A66A0C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/6etd8i/radio.php
- Size 3KB
- SHA256 038131fdf7263089c59f7c8f220ab5f695c4aceec9e5c82ec0c65309047af01d
- MD5 baac908a27f173e6ebd934a824d8573f
- SHA1 bcff14b78970045267ba9f8d08ffef5288d6890b
- SHA512 04ea6eb4427876e0709b1ef44f5af354a554276fab687a69d0f8e6a7e0adc768eeddb49aa03964e11085689b5d54b0886267cbf06807698a6f2bfad4ac2fd3b5
- TLSH T1C3818D4C0E1A850C00BAE431907DEB18D2534125C8D39FC9FD753FAD6F4874D2A66A4C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/7xscb94/nhxesrwi.php
- Size 1KB
- SHA256 8c470068c1ea38427fc1451c22cf0f4d0436dc44cc5ee0c3e3badf06b2071131
- MD5 922d774c3f09bd4e6d3b8170204835f7
- SHA1 5cde0870fc4b7142ce67fb705961614b3ee0ada1
- SHA512 19b598778d16c13dea883bea0ff3e8374f88c127bac473b48c753b7e1b6430c78b30ba513dcc34cfbc15fb3ebc932152d98f863ec28afb5c4f5ae152e118655d
- TLSH T13C418965B903917614B3A2785BB644CCEF770027002602817DBE1AC01F72EACDBEAF5C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/plkyae/2index.php
- Size 3KB
- SHA256 5b254f03485d8ad001091f9407f719d51a2078fef85c64fbce17dd9d2a31ae13
- MD5 05d2c9499d677586d6b06f2fb0c935a4
- SHA1 7df356534c69c5001896147a02c4c1e55b68ef7d
- SHA512 bb3f1f6d5e6161dc10d6e8beba02a911e52a21543132d3d801a5340c83a1e770a0566923cb8de6936d0c2f8fdf8d008c6d4d841e79428b8f83ae18d272a58684
- TLSH T144817D4D0E1A854C00BAE531A07DEB18D2534255C8D3AFC9FE743FDD6F4874D2A66A0C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/plkyae/radio.php
- Size 3KB
- SHA256 038131fdf7263089c59f7c8f220ab5f695c4aceec9e5c82ec0c65309047af01d
- MD5 baac908a27f173e6ebd934a824d8573f
- SHA1 bcff14b78970045267ba9f8d08ffef5288d6890b
- SHA512 04ea6eb4427876e0709b1ef44f5af354a554276fab687a69d0f8e6a7e0adc768eeddb49aa03964e11085689b5d54b0886267cbf06807698a6f2bfad4ac2fd3b5
- TLSH T1C3818D4C0E1A850C00BAE431907DEB18D2534125C8D39FC9FD753FAD6F4874D2A66A4C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/wp-admin/admin-header.php
- Size 7KB
- SHA256 332c86fc1c666f498ddd2f52c992d42523652974627a599d19be2ce8840e91e3
- MD5 e3577506a610e6e71462375634c07856
- SHA1 5b7e2b500eb1a251bc10141b7074574c4127323f
- SHA512 71a07cff9a2c5ebfe6621e812d2e614dbdc9c2a2bdacade73798e869f37e0516b2987e35784f7fc1e314c99282b4041b7ab45ffa56545ff8225b1a8f4c3ca409
- SSDEEP 192:h/H4uTPaZ/o6v1ddqqQsY6AifPEcXZPXt/VC46q:94uTPaZ/oOy4dAiE8/VCXq
- TLSH T191F198451CF2677388A62AD176E1D278362B450BF3962451ACF941F89F4136C8DEBFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/wp-admin/async-upload.php
- Size 3KB
- SHA256 ee380d3eba4cf6bdf1326c017535739dfa09b035505170de3292571266ee3517
- MD5 43a2380a5c2985d27f9956cde71c94bf
- SHA1 c4cd6d9b1ccb4a31c22edbb6853e5a04a1f72041
- SHA512 5bb65d12d33abba622418aa60a482a51b05b4c92cea82d76fd03a2ce690f9666aa3f57025dfffd8784263dc3b57bef0d4db2303dce2b60a5327293c7d8738c40
- TLSH T1627189F5A7ECB356117370D45A09842C949DC413B480AD999C2CE4E0DA8497FE4F9EFB
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/wp-admin/css/colors/ocean/wklfqdoz.php
- Size 1KB
- SHA256 00680b21ccf43b9ec202c6657c78ade5017546e45a4a4eef5977f8e2b2565899
- MD5 8d2731c81cef3a9030e50ed256e96365
- SHA1 385c62a085ce5610dbb4fc71151655fdd459acbc
- SHA512 af4aa2a792fc930d87eb825f9230a5c8355c92096ec821ff9edfb7fb43b7f0bf1f124a4efeb9f04e81038299cb9133261d77d02df43fe2246c3ca6e3b0326b2d
- TLSH T11D4159657903917654B3A2785BB6449CEFB71027002602817DBE1AC01F72EACDBEAF9C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/wp-admin/edit-form-advanced.php
- Size 28KB
- SHA256 9a56dc59ad934ca546a996ac3d5655b2ab30f97b0c0acfa6d223b61b8cbf1ed3
- MD5 303131a138b1b6afc38c014f3f294dff
- SHA1 35ed2560198941f83dc4a92bfa2320262b12e611
- SHA512 828e1df8b491b6654cfb7f5bad6e46e9e6a52d5a570dbffa888965c548f50fbd8932410044480565cd524dc7162690b744e1ef4a5c1efeb06b634c7fb08cd375
- SSDEEP 768:ybVP7+o1Bh5wf7X3EfqKb1pcvu5a8gIL+t2Oh6Qkmb0xnSOxK:wVP7+oBhafb3Efq61pcR8gIL+t2Oh6Qh
- TLSH T1CBD20816F1F4136255131682F5C4926CEEBD8455338158EEECBE94ECBB83272453AFAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/wp-admin/edit-form-blocks.php
- Size 13KB
- SHA256 0534bdc56a30ecfcd6440777a0a27cd8b2fd3a13a93969a2bdb8f621e93f9fc5
- MD5 255a7b396be58cf45b558a281ada349b
- SHA1 ad7db68ea2847e0545c30f461123f8cee74e71c8
- SHA512 08f3ed0571e40713d5b5329538bd4c6b67fa4e1958682f8ef2917e198461e4a6cecf440a7aee30c6ab419a60b08818cfafbdbf9f553958e81dd15188e117943c
- SSDEEP 192:CDrY57aJAX8+2KI6kJnrZP3E3OuOMODOVsCLgn4YnU2A+:+rY57aJA5rqx6drqO2CM4YnO+
- TLSH T11852E92364BCA37D50226998ED1C907CAD684406375282F2F9FFBC586F4B1E94232FE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/wp-admin/edit-form-comment.php
- Size 7KB
- SHA256 db836f50f0654e7f9a048fbb22674c1c0160f727b03ab19b840472cf2495f42a
- MD5 440700bd9506089bf5c3292562865cdf
- SHA1 0758901735e87c1fd1e406781384fbcd7008aeae
- SHA512 389964f446bb387844c25b13c4e1879275caca7beff4238b85c0ffe3f9bcf7244d30e99332b3c1cb7bf3b51650716c9ae3495f893ac818d5cc6a04d7d783924f
- SSDEEP 192:yosxqDLsvTQtuBkvalbNBNRjmyV9p8ZFt+P0MLexXLtkYyPyVKL:yosxqDLqTQtIkylHjmtO08rPyc
- TLSH T140F16493A0D44770C0E33CD16D98667939C8C709E24A2C9CAABD84D86F50FB56D2ABDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/wp-admin/edit-tag-form.php
- Size 9KB
- SHA256 d9c82152fa11985816157a5e8fe3bca83c2265c037e821aacd556abb37e2d9a3
- MD5 a716b2efb0dcb0c0f7d4ece0b4dc1f6f
- SHA1 f7a5bbfd522e6561db05a31de361b926055747a3
- SHA512 3f6159031efe70ca25555ae0cf6a7ad3eb712d7201a84bb304b2c0bcfceb4ed5ab22171b5cdc2a53419b9d3380dc3b69e0b78ce774fc8cb1da94f17f890816f4
- SSDEEP 96:TvxPBKi8HRzkgVVaEEDb4NNve7JiysaIjdT+g59Hn3CIx7t558fFuFSC9L+ibe7N:DxZaklDb4NvyW9HDRtlVw14I
- TLSH T1522273F7A9DCA63055531EC03DD6734A3FADDE2976010CB5FA4ED89857209A2493BF80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target home/gbohdan/public_html/artemiscanes/wp-admin/edit-tags.php
- Size 21KB
- SHA256 beda7a6ca888db4f3bdcf7ccf2a98ba703116e463f9681b9c3f74c7394f003aa
- MD5 dbac6c4904b90439591b3b014a8de4c2
- SHA1 7d4781c6f075da0426eae774a38df01c08d48110
- SHA512 667646c7dac5226efcd068ba7ff7d2e7a83db03f677e441b4ea342741d51e94d1a94e7cb2ac9425679f00d4ecc71040331abb7b77924bf432790a4dc4a425c15
- SSDEEP 384:mQifrwOFN39fXg+qMMr/grJI1SMIeboLrAND8:mQAbplqMMr/grUkLrAB8
- TLSH T1EFA2D7EAAA9C527113131E80BDD8F25B7E7CC93426411CFA799CD458FB506A60B3AF84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10