921637fcb08ce9982b8df9ec56c375224f09e4c0d3e656312f16b60fb15d28ef

General

Target
gobrightcart-wordpress-plugin.zip
Size 39KB
Sample260701-pjf7hsd14k
SHA256 921637fcb08ce9982b8df9ec56c375224f09e4c0d3e656312f16b60fb15d28ef
MD5 9e7b046b5734be5b0def828ade7640b6
SHA1 afb9c3e9a5da0a4d8fd64905d4ac6395a97677df
SHA512 98e8d5144bcd3abdf5eee05e25e5672ccf47f938a08b12d96f19c7794278f9e1840c7b4402af1eb5fb1997d2656508f41b0fc7b033656f290d2bbfceb71ad4a4
SSDEEP 768:tTL3C3UNdaRIYckGMRkYc1O9pWR8Wvitb3EbtdlPKyDajpyNmvktpDkyU:32CLkG456nv2jElPKyDajpywstFU
TLSH
T1AB03D0F49B580505C254E4BBE8ACA1D6286C8502F1DAD8E77620E6D0EE4B287FF3675C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  gobrightcart/admin.js
- Size 3KB
- SHA256 14c09b443a67ea82dfa4853fd58ff357fb052c197d6bf744b531ff119ccbfe17
- MD5 ed1524c9a62a1a95431cf3cf291d71ac
- SHA1 a256f5ab8b7f311ca379e2a857056a1254a3ba07
- SHA512 0300b17666589ed3137c9d2352b062223e4d8cd61b3720d8deb614c0826df79ffd392a0d43f22d189aa0d50b57eac8efc5ba16396e7349457dc16ffbb95ad8b3
- TLSH
  T1B361D11AF6E718652677A0C5A0ABD9DF3D014123434BDE11714C7060AF82A15BE097FB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  gobrightcart/assets/js/admin.js
- Size 25KB
- SHA256 430a1e720578517d6aa3e995c0b2e3f8c34c845e33bbf17218f11abb4e769d5e
- MD5 a75b7503728ef6e480f8a6670ccc3bb9
- SHA1 b2819192f705b93f349015f73710713546a7df0a
- SHA512 db99b5d021f9a80bcb9ad6487d9b5cce76794bb3ce2aee2a58f4388f78f84a551985a41955735376164cf2f067d7dca0378e7a1735ce1913912b13561a06db9b
- SSDEEP 192:cGXlUm20yct7C/IQk6yWaYwqb9qn7jQi7krFdzp3RX5767yaS5aQ+HYGRYGyAc0a:cOkaAbmr9hBVKosN2yjv
- TLSH
  T1F3C2540C7DB722A79633317A4B6F4406363280071209DE507E5C93D09F65B69AEBB7EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  gobrightcart/blocks.js
- Size 7KB
- SHA256 574e616078b33dda574fe2c9678a136c6721f49b05e4aec8f2e4ecdefd299158
- MD5 522507fcbff0d8a9bb26cd84988fbb07
- SHA1 66d969914109e3a1f0c8652a0e2f55c09420cadb
- SHA512 6f498df8dd0b6686a837c1d08cbefb71e823360b121707875ce589488fa689453f08b39f976d7f8a6d759d6ed1e719a4e7ebd71df098836a72f64400f7d5f81c
- SSDEEP 48:dRsKCOnyks/RojTDkPXOdoVKu6K52XaZomJ+JJQNoh/kWT7/JBsvPrLs5g1cHUZE:dRo/RojHkP30/es21LZ7NmpBuEh
- TLSH
  T127F1ABE9B4B132258827F027DE1748826A1E414BCDE63C757A6DAE002F7D41FA2F538D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6