Overview
overview
10Static
static
10vendor/bin/phpcbf
ubuntu-18.04-amd64
1vendor/bin/phpcbf
debian-9-armhf
1vendor/bin/phpcbf
debian-9-mips
vendor/bin/phpcbf
debian-9-mipsel
vendor/bin/phpcs
ubuntu-18.04-amd64
1vendor/bin/phpcs
debian-9-armhf
1vendor/bin/phpcs
debian-9-mips
vendor/bin/phpcs
debian-9-mipsel
vendor/com...er.ps1
windows10-2004-x64
3vendor/com...er.ps1
windows11-ltsc_2024-x64
3vendor/com...er.ps1
windows10-2004-x64
3vendor/com...er.ps1
windows11-ltsc_2024-x64
3vendor/com...ler.js
windows10-2004-x64
3vendor/com...ler.js
windows11-ltsc_2024-x64
3vendor/roo...er.ps1
windows10-2004-x64
3vendor/roo...er.ps1
windows11-ltsc_2024-x64
8vendor/roo...fig.js
windows10-2004-x64
3vendor/roo...fig.js
windows11-ltsc_2024-x64
3vendor/roo...pt.ps1
windows10-2004-x64
3vendor/roo...pt.ps1
windows11-ltsc_2024-x64
3vendor/squ...phpcbf
ubuntu-18.04-amd64
1vendor/squ...phpcbf
debian-9-armhf
1vendor/squ...phpcbf
debian-9-mips
vendor/squ...phpcbf
debian-9-mipsel
vendor/squ...bf.bat
windows10-2004-x64
1vendor/squ...bf.bat
windows11-ltsc_2024-x64
1vendor/squ.../phpcs
ubuntu-18.04-amd64
1vendor/squ.../phpcs
debian-9-armhf
1vendor/squ.../phpcs
debian-9-mips
vendor/squ.../phpcs
debian-9-mipsel
vendor/squ...cs.bat
windows10-2004-x64
1vendor/squ...cs.bat
windows11-ltsc_2024-x64
1Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
06/07/2026, 00:16
Static task
static1
Behavioral task
behavioral1
Sample
vendor/bin/phpcbf
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral2
Sample
vendor/bin/phpcbf
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral3
Sample
vendor/bin/phpcbf
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral4
Sample
vendor/bin/phpcbf
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral5
Sample
vendor/bin/phpcs
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral6
Sample
vendor/bin/phpcs
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral7
Sample
vendor/bin/phpcs
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral8
Sample
vendor/bin/phpcs
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral9
Sample
vendor/composer/ClassLoader.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
vendor/composer/ClassLoader.ps1
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
vendor/composer/installers/src/Composer/Installers/BaseInstaller.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
vendor/composer/installers/src/Composer/Installers/BaseInstaller.ps1
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
vendor/composer/installers/src/Composer/Installers/Installer.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
vendor/composer/installers/src/Composer/Installers/Installer.js
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
vendor/roots/bedrock-autoloader/src/Autoloader.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
vendor/roots/bedrock-autoloader/src/Autoloader.ps1
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
vendor/roots/wp-config/src/Config.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
vendor/roots/wp-config/src/Config.js
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
vendor/roots/wp-password-bcrypt/wp-password-bcrypt.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
vendor/roots/wp-password-bcrypt/wp-password-bcrypt.ps1
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
vendor/squizlabs/php_codesniffer/bin/phpcbf
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral22
Sample
vendor/squizlabs/php_codesniffer/bin/phpcbf
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral23
Sample
vendor/squizlabs/php_codesniffer/bin/phpcbf
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral24
Sample
vendor/squizlabs/php_codesniffer/bin/phpcbf
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral25
Sample
vendor/squizlabs/php_codesniffer/bin/phpcbf.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
vendor/squizlabs/php_codesniffer/bin/phpcbf.bat
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
vendor/squizlabs/php_codesniffer/bin/phpcs
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral28
Sample
vendor/squizlabs/php_codesniffer/bin/phpcs
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral29
Sample
vendor/squizlabs/php_codesniffer/bin/phpcs
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral30
Sample
vendor/squizlabs/php_codesniffer/bin/phpcs
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral31
Sample
vendor/squizlabs/php_codesniffer/bin/phpcs.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
vendor/squizlabs/php_codesniffer/bin/phpcs.bat
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
General
- Target vendor/bin/phpcs
- Size 3KB
- Sample260706-aky2dscv4p
- SHA256 c0aa86699796e3411325849e49e73c238411410a7b1f71ec322770e2aab6da76
- MD5 89df0a308816b9f91054497c60591b43
- SHA1 8e8b5a8f927d8e5c7a6e23c8ec8ebed7b1cc0f0e
- SHA512 26ad06403bc1913857ced9135cee2ce96d35da18cf3f29dde055717a6170636fda2455fc7d19e11a2b6e8618ef66eaa1ed66c0dac8e61c3a907c70f50428afe1
- TLSH T1E861CE58A4AA2CA05123B3B9574FD54610B65123110E4C44FE9D83F0EF9232DEE76FAD
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
/tmp/vendor/bin/phpcs/tmp/vendor/bin/phpcs1⤵PID:739
-
/usr/local/sbin/phpphp /tmp/vendor/bin/phpcs1⤵PID:739
-
/usr/local/bin/phpphp /tmp/vendor/bin/phpcs1⤵PID:739
-
/usr/sbin/phpphp /tmp/vendor/bin/phpcs1⤵PID:739
-
/usr/bin/phpphp /tmp/vendor/bin/phpcs1⤵PID:739
-
/sbin/phpphp /tmp/vendor/bin/phpcs1⤵PID:739
-
/bin/phpphp /tmp/vendor/bin/phpcs1⤵PID:739