Extracted

• • Target
    vendor/bin/phpcbf
  • Size 3KB
  • SHA256 bce344d6239633531ef89609c61a11f2cb659377814c6eb7ef7f8b66ae767d8c
  • MD5 20293a6b0a52ddf90ab71f225055c6da
  • SHA1 23288cecf9581e83d5fd832fa47cc2a3a2066724
  • SHA512 7fc2fb55a3fbdfd2662410fbdad0cd0449ab6b316ee1be3f87fb9628d9afd8c1207940b18095fd356f6447c176462150a83c79c3d0118f1db2f053fc1409b6e8
  • TLSH
    T18A61DF58A4BA2CA15123B3B9574FD54610B62163210E4C44FE9D83F0EF9232DEE76FAD
  • MD5 SHA1 SHA512 TLSH

  Score

  1^/10
  behavioral1behavioral2behavioral3behavioral4
• • Target
    vendor/bin/phpcs
  • Size 3KB
  • SHA256 c0aa86699796e3411325849e49e73c238411410a7b1f71ec322770e2aab6da76
  • MD5 89df0a308816b9f91054497c60591b43
  • SHA1 8e8b5a8f927d8e5c7a6e23c8ec8ebed7b1cc0f0e
  • SHA512 26ad06403bc1913857ced9135cee2ce96d35da18cf3f29dde055717a6170636fda2455fc7d19e11a2b6e8618ef66eaa1ed66c0dac8e61c3a907c70f50428afe1
  • TLSH
    T1E861CE58A4AA2CA05123B3B9574FD54610B65123110E4C44FE9D83F0EF9232DEE76FAD
  • MD5 SHA1 SHA512 TLSH

  Score

  1^/10
  behavioral5behavioral6behavioral7behavioral8
• • Target
    vendor/composer/ClassLoader.php
  • Size 16KB
  • SHA256 42b8c5525dbc133045f47f4275f017071c82144a34acb9396d955ca10729cb2e
  • MD5 5d45ecd9753b384fd1d36531ccf01f8e
  • SHA1 8d9f47db4e033e631ebc6dc1f0bd282d23bdaa97
  • SHA512 a6884d84d11c4bcc2a53f86929ad8f519d5e1cda93724a3069df108b91a71345e59f2598cb0361ac0f88576fc03315a4158215b33e9609d8f07dbd3819754d61
  • SSDEEP 384:bRMAJd+A7QCp1mKj7YyiznGoCewQbuUNN7dJUu8:bjHsYxENi
  • TLSH
    T18C72426929EB043A0853607D978F9055E05BF13B622D4DA5FDFE16F06F0032C85B5BAB
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  execution
  behavioral10behavioral9
• • Target
    vendor/composer/installers/src/Composer/Installers/BaseInstaller.php
  • Size 4KB
  • SHA256 216e773daf98f801d1bbb83623f17fb3af29ac547ecb058d572086d0185eff6f
  • MD5 3efa44d2ed2d09891c26502bee4d2041
  • SHA1 22f7cd92ace14130c82633915a8fccdaf7c2f5d6
  • SHA512 099bbb64784ffd3677d288acf0960feba457f529ac54d588ef3112373799b811438558c579811c0d2addaf63b1fe8e8e64bcd34af792a209b693a78fe1a4da38
  • SSDEEP 48:FmdWYG/ZR6/uNUqRi1cCyADbxIHVmI+j6IarDfh3B/zcv/HrY/sdPA/T4YE4TCaK:336GNau1sjOBVkuEYE4TCala/5
  • TLSH
    T17581634E28FB5175689327BC57CF8810ED5E941B122688E1FDCE06B12F8153C99B27C5
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  execution
  behavioral11behavioral12
• • Target
    vendor/composer/installers/src/Composer/Installers/Installer.php
  • Size 9KB
  • SHA256 43dfda986023052fb3b97634ca0481d3ef4449f900d690651845058e627f2252
  • MD5 1ca9d81690d282202baa160bc5027d5a
  • SHA1 4aeb6bf125681fc8cce9d7d2bb3e746d7c98f00e
  • SHA512 d79463292bd1a0de3398ed4aa963705d7d603a49a9de1a26b544b521f88a0f0be2303cfd7d61d9c422dd9595fba53b7008956cceb9a2affc46167e7e541c5294
  • SSDEEP 192:TW1b8yZzELviJEN/ro434dlVaTsNXz318Y4CAd4QtUyL:xyVM4dQsNjl5A9
  • TLSH
    T1FB22A33963EB14B57393276F6B8B4C7794583013288165B3BDCFA2601FCA52C8571B7A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  execution
  behavioral13behavioral14
• • Target
    vendor/roots/bedrock-autoloader/src/Autoloader.php
  • Size 5KB
  • SHA256 eb29775b2dcdc8d3206df8e31f1f0e1df104b737aa935126b97faf6e11b14215
  • MD5 622789954d36c1dc81d322e5e1f2e445
  • SHA1 f8926a3ee3240bc724408de8ae56c1ddec2adb36
  • SHA512 f741fc9d1c8b8fc202ff08e3fa04bdcdd9524f86d2184ce45edb0dc6a5fe46cd266e7b9c09e36d3da2036d3036db561ac16aa5a6e477fd8ffa67635dd476c7a2
  • SSDEEP 96:aVQim73x9cqzKJHUi5ztjE8KSRKfFjXYtC+X0bjOZ/lqQMyyjU1nwitA3f3hvyly:aVQi43q3ZEDSYVXV+XMS5GzI9+3vJyrw
  • TLSH
    T1ABB12E2A29ED4873243369BC2B4F90E174DD676B0349C9467EBC02A85F61738C97B668
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  executionadwarepersistenceransomwarespyware

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral15behavioral16
• • Target
    vendor/roots/wp-config/src/Config.php
  • Size 3KB
  • SHA256 ef72f1a52b9cf0c2636cec8949af777455799c476c365b88fd37e483140dce1c
  • MD5 d8f5030723c9c1a7a41c6159fe2080c0
  • SHA1 af3ec3a1903d4d029fff77ff9043cc429eee1e63
  • SHA512 3ec10b10b652b1f82af055a936237c5d803c7e5e92529a5ce0de829572205bee7acab78240e27bcd871e79473dc128039e9eb35e5f2cc4818d3734a079ae4c66
  • TLSH
    T1DD514516ADD2A453047758A4830E9044D912DB7F331AC5D3B0BFA6782F48B349EAEE9D
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral17behavioral18
• • Target
    vendor/roots/wp-password-bcrypt/wp-password-bcrypt.php
  • Size 3KB
  • SHA256 477b7c0a3144dda065d5ebd4e0c8f3a02e714c484f02567aa29a41a5a06ad407
  • MD5 58123bec8d5cc39af0302228328fa2d9
  • SHA1 6f432918d380e970cdc0c223bbfd36d6aabd0d0f
  • SHA512 7a4f8971e5ff3344edfae464605a9474b5f26c99b92a9190d7a81fa615d0665a42491657d94d56b6b9aa32ffce2dec3a3a885ad8e315a0e1ae87badc3ed04f50
  • TLSH
    T1EC71DCD539824D82124BF69882CE95157624D417265F5508BBBEF38C3F7BC6EC2B2D23
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral19behavioral20
• • Target
    vendor/squizlabs/php_codesniffer/bin/phpcbf
  • Size 572B
  • SHA256 125bfed81231a737cab5afde18e36990ba9e4e7bf29c51c12d589e18e03d2d40
  • MD5 e7ced778ff49137c740ec9e97246e4b4
  • SHA1 d46ffc34a5fd4d4f51f919573054f41c259ce321
  • SHA512 cb020f876df1f9698249aa260268c1052de5b45d2423a5d7a2906e1f143e76c9c4f02068cad2d314665335fc80fe1395ff72ca44d5e6cf6026f7c6898e2de324
  • TLSH
    T1E8F0A24E589D0820471D3C6D854D500BF13C501B394135AFF58205A4F695919CADBBFB
  • MD5 SHA1 SHA512 TLSH

  Score

  1^/10
  behavioral21behavioral22behavioral23behavioral24
• • Target
    vendor/squizlabs/php_codesniffer/bin/phpcbf.bat
  • Size 423B
  • SHA256 e10dfdfa54723c5cd560d39a5be2fd5c77b8f1e9d7fa3a49ea2afacc09638bb6
  • MD5 8b242e092b22151d42ffdf7afe8ca50e
  • SHA1 fb0ed53a2061478971804093b886c9a5c2ea7b33
  • SHA512 e73fd3a746701c34621625c57abb2e41980df727667c0cad707ed733e1de5b831684c1a58e99ecc62f3c38bf41cca5d21e71ce5ec49181208eda834ebc13d03d
  • TLSH
    T100E0550E99CC58855F5529FFC83B616EE13F525B354836EF60C2068832EC80ED1E6636
  • MD5 SHA1 SHA512 TLSH

  Score

  1^/10
  behavioral25behavioral26
• • Target
    vendor/squizlabs/php_codesniffer/bin/phpcs
  • Size 559B
  • SHA256 e0c5facbeb49bec24f1eeb876f6fbc5b2bda95ed9f67bea5d2dcbefdcecc87ee
  • MD5 cf0e83a421d28cfd3c2fb95ec87b1444
  • SHA1 79432050e12b5028e2ee1a4795722819a43c6ea9
  • SHA512 fb9934298dbd06a7ba41c14d897f54b3de1ab5daa4dd15bcc27d3a18e4e4e3d8b9d82b16f697795c4591cc7942bed0209c9da617e99299e48bc260fc8ff1dacf
  • TLSH
    T1DBF0814E44A90810471D3C6DC50E500FF27C9017794135AFF54205E4E9969368FDBFFA
  • MD5 SHA1 SHA512 TLSH

  Score

  1^/10
  behavioral27behavioral28behavioral29behavioral30
• • Target
    vendor/squizlabs/php_codesniffer/bin/phpcs.bat
  • Size 410B
  • SHA256 24658c8ff17b85bb2978e30dbabce9624aa96adccc994cfe149b4d63535a2a17
  • MD5 cba6256981a14cdba70ade18f6c74280
  • SHA1 952f9bd577530f316775947fa47dd720217562fd
  • SHA512 5150bbee5225575dd6b6ab219a122867b147c204d5e68c47e9b15d5e650f765f6404e14deabe3570cc638e19eb7fd71f84eea0fc416eefad6094a840998ada3d
  • TLSH
    T1FEE0E50A84C848855E5939FEC83F156EF17F5217254875EFA082068861ED81A92E6A22
  • MD5 SHA1 SHA512 TLSH

  Score

  1^/10
  behavioral31behavioral32