7fdbc6c009cf58c1214ebacf7cdeaf644a5913eaa6a8e0e783e951a40e04e2f0

Sharing

Copy URL Twitter E-mail

General

Target
team-grid-team-member-showcase-wordpress-plugin-team-editor.zip
Size 2.0MB
Sample260724-aj3cesdg73
SHA256 7fdbc6c009cf58c1214ebacf7cdeaf644a5913eaa6a8e0e783e951a40e04e2f0
MD5 a5d6e49c453a5bf23776d0e0729eed7b
SHA1 8834b93cd6b03d8b73a41f5807e1dda7a5fa6615
SHA512 805a307195207bfd1f62dbf22817f9f80e2ccc75ad2e590331ff816eea6472a75959317b72af927fd9c3824913c72a8856c162ac0f5ebfdb4d5d4fce7cd5ba49
SSDEEP 49152:lALFTu6MToheEfm1gBIMdr6Df7gj71eXgnrIlPu040pi/MPRT:qzxsqmkJQ471jnrIqSAMJT
TLSH
T17E953332CF3E9588E649643AC3C90FEF834A63C56251FAD162605250FFBD87417BEA91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  plugin-premium/app/Main.php
- Size 20KB
- SHA256 7f8e2862dd93496a03403b5f8a1576e5f1c685636bca6da2c1cfb1bef0f1aa6b
- MD5 80cd60551ba1fcc5fd1fb0e7960b7fda
- SHA1 17e0edc1a7eee0aea91c92a74350465fda436097
- SHA512 90789971329f04febbbef565cd15cf7339ea6a750daef91fe6f233557b7d8ebd36a1a38d196b4dc31ef43f9f767f73e297d516c31384b2cd37b631dfad003cb2
- SSDEEP 384:F5HTfNt1QB6mngh5KcP4kdaGLtn54vbUpLC9H8SAhQhErDucNWZp:FNfNmnXqn2eLC9H8SAhzrDucN0p
- TLSH
  T14992C62554FE5327047754A62BAFA8D2356EC3935304CC007CBE03946FA7E78DA9369B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  plugin-premium/app/Plugins/Base.php
- Size 21KB
- SHA256 0cf446b054fb87847b36468d555de2f199cfcc6b1061e33571032f64a137071e
- MD5 312cde636502c5badf3b28e590fdbe50
- SHA1 44b2f16438a5cb6aa5152caa8e7795a6d0f570ae
- SHA512 1d388ada85198ed49805ca30c727a718fca92023e3e5e4aaf0ba1aa193c294c9d7805ad52563587ed7d7e920228fb72ba9f25cc1f59f131062f1742d17ac18bb
- SSDEEP 192:9YjqnFCysSvxtV8AU7kjaRQN5IH/EyNl1QAuP0Nbv/Iob/bCskkSB4m8yWyfEAS1:ujee7ijK/0AuPQsdsk8AfB4Pr
- TLSH
  T122A2CC0A24DEA136447BA5784BAF99C924AEC3D31344C9407D7D03C4AFB1578C5FBAAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  plugin-premium/app/Plugins/PluginUploader.php
- Size 13KB
- SHA256 30d4b6547c34ac93aa9b1b31107c3feed2803f76167b4468d11491ceadc18ead
- MD5 56c2178286286e5d53bbc8ebc42be601
- SHA1 453191a666a711178b842fa0bf2c3c6939c2e7a9
- SHA512 45041a1fc035e8c6fde2397f0029d4a692163fe4013137c15b7b241dc71684bed6d805c61db24fb3e05d38f532dc7448d5e92feb83b932534243d27b12dacef5
- SSDEEP 192:Xs2+fpRRFPUYQ6muNCL2AX2QUKi3xgmo1TM+V0xO4WpigSkN+otlpMjFRiVx6NNK:3+fzpQh2IiGDmZo3pMjFRPNMb
- TLSH
  T1D552214AA6CE51761037F5B01A7A40D970AED3E35204C8087D7E52C8BFA113885F7FAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  plugin-premium/app/Plugins/templates/multiple_upload_plugin.php
- Size 3KB
- SHA256 075e0f88d7305fc1895c117ba7bed6321ac49386c7c816591a8e03c44434d6ef
- MD5 53f43262724d48f8fd817fb788839986
- SHA1 9f07727866435a3e4810cc53ae3f52982bedef3b
- SHA512 e913009aae617f4ffc06f6a380e68296c3aead82138b51203fe95919189dd31025f9fccaba74d9c97b1af1b284faad02d7d4cdc9e6b9b59643c4cf1b88c12bb0
- TLSH
  T1D5618426510C9E720037A2E26DBA16C2718FCFF1A716D2897EF7D5E46DD18708C478A7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  plugin-premium/app/theme-template-functions.php
- Size 17KB
- SHA256 fd123be17a74b5dec24ffa7d6a11bdeb0336f1badc9abad554ce0de426f01aa0
- MD5 fce32b5e445825b17566253f27f235ab
- SHA1 10d79618dd0686e7cf1b9c1a79b66c899c7c30df
- SHA512 cc9a66f410be033d9e7ce01ba54bf997a3921ac3a3adc7292177194fc6ed9c9001fe452b6a07234e907ce68b43415bdb3a55c63c700a34fea8adbd9823ccf5f6
- SSDEEP 192:kKvyEyxfjQyIZ3ytwCUYSCTTC1OtZY6vpxvpuozS/Ut+e/CEzCyf3loiVtBWS432:kbZDO1mYEpxDFzlrq6JL
- TLSH
  T1A082446928AF64260173A57E5B9F944D62ACC9534648CD007E7C01C86FC033CEAF6B7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  plugin-premium/assets/images/failure-icon.svg
- Size 1014B
- SHA256 28cddda1d5efa9def10ac541bb53bf7f3303c7fa777221d1486c265084aab0f5
- MD5 0d5c1a37b3a19e29e9ab29b2c2d45dee
- SHA1 8d2a731e763ff14fba946e4ef3c23ab3b5996163
- SHA512 fe3e422e0d57392a6344192b8e9c61024fb6823d2a19f106949dbf6bf1d452041356518c593e4924ab46924ecc3bb9a665da5917f33950a237a4e90e9a2def2b
- TLSH
  T12A11CE0C9516DDA281E4CF709BF5A0F21833594F0286894DFDD6315B88A98B31FF87A9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  plugin-premium/assets/images/mg-logo.svg
- Size 12KB
- SHA256 0f294832b62041c822e199f3d0528a207a691535bab2d8ce3d3121cea2e0ab86
- MD5 275da3846eb8c1996719e64cf2b2750d
- SHA1 eaee465fba829af4b8f3edea5037a1a7c22e2ca4
- SHA512 576a7452ae741850839f842474d5bce2ea48f0695761eff4285c5a15a0a09e10ea52e6ba8af9a628d67f745e42302754e356ad7d91c9ebc7180140ad17d20230
- SSDEEP 384:1zvY8BSiZHp0R5C7kSiZHpvfx0Z1e9Z1erm7zQ28Mhk:1z3ciZKAiZVx0Z0Zf7zQ28J
- TLSH
  T1DD4234F983E885E02EED6378C7E30AC23A6450F56C909DC8731DA8749753EDA3734A49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  plugin-premium/assets/images/success-icon.svg
- Size 3KB
- SHA256 49ae5c5c8c839b7cf1e3b52e259ba9a21af1980eec254858dbd4e92a4e85cb10
- MD5 b867637292031524205de313115c2471
- SHA1 4bb986c9fed0a9ef76a34bced78781cbe83145d2
- SHA512 1f9fc2c8d656e15cacafeeb438dec0aaac239d0ffe14e173d2d496671da565ac83f0e133bf4e12f433bf37aeed7801d4d73b4a2bf8d96d05fd975ba907ff884a
- TLSH
  T1276165FC2B266DE18DC045609BE1D1010723607B8BBEDADCDE4EDD9628614A84D38FF4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  plugin-premium/assets/js/bootstrap.min.js
- Size 36KB
- SHA256 909ae563eb34f7e4285a3a643ab5d7c21c5e6a80f3f455b949ac45f08d0389b4
- MD5 3d8308804264c5b751f6e54734c46897
- SHA1 369a832ef7f8a57e9b59b84b181fdb4fc9125050
- SHA512 ccf07732f7a858a966ac33532803d3c7787e414b29f172d717fe82a2a2067740ed36da7acb99fd44483073bd94c75e8912548ec720218a2fc236888b79d12b7c
- SSDEEP 768:0mLwtev6lwUt0eWN3Me9DU1Vt0Zpdcsi153K0rmqeYW:eJuUmTiNrmqeYW
- TLSH
  T152F2840AB23035A107EFA1A1414B020E73366A7DE94791AC78B9DAF12DB4C49717BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  plugin-premium/assets/js/customize-modal.js
- Size 5KB
- SHA256 31bfc5b7083690b9237c49f7d0c1802977fcf6af5cfc5738565b87fcfb129bbb
- MD5 b3832c48b3aef66035c4d6a0d0e54896
- SHA1 86930b8a21b7eda7eb05d23e7ffb005ed77781da
- SHA512 a5e9d97d5b81195f2a08c796becede3255b96895eed1e0df8af92fb70ddefef50b2ca6d3910c14aed2671998efd93d616c64ffdd22b35153d6b487b66e9481a4
- SSDEEP 96:GXZenDP1hN+nLf5wbEHhlhsLHjhMLn7eI:GpephN+nLf5xLGDjmjV
- TLSH
  T1D5B10168F8FF28E1147F34FF57EB99803629A547B204D6047A9E47C40F86818A8577DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  plugin-premium/assets/js/download-theme-popup.js
- Size 1KB
- SHA256 18f88c6372535c056bf802ab42f17797674d704877c6cd2126a7d916b44c5422
- MD5 6ab0cc7e360cb1eb2d8aad20cb83d501
- SHA1 c77f6681e3b362fe2b85d58ad5a04ba912c3146e
- SHA512 c0246db44eb4a883c1be980ce634d897b5392d296d2e7e70250a26590a660666300646be45dc6932bdff98a4573e0841cdc2b8f9d5d5b296fd4fdbbdc4a6b9b4
- TLSH
  T17F21B4243DF6A6A5937F15E7FBFF5F50264A3902F90A4C15B07C029F1F0229A7186629
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  plugin-premium/assets/js/dpwap-common.js
- Size 1KB
- SHA256 2ccb863c8ab1168c74718c37a95049226b5d4aeae67340864d3b95d6dd37d851
- MD5 0182de7fceb3b031218065441157dbda
- SHA1 6ac1155aa93d8fc6a2fbc7bcbc10772599d1f418
- SHA512 cb071cdb9703354a079e5e2eb1d3980dc259ea0e31688d8fd0ee3856e63b02f5ec2a5358915785253cfe6dd08a183a01438ca6d8b1131c03fbd4e9d764dc8857
- TLSH
  T1B831CE1DB9E13757753770EE9E7FA4903A3B6103B204CD40768E0B848F963589C22E0B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  plugin-premium/assets/js/dtwap-admin.js
- Size 1KB
- SHA256 fdbdbab3731f880ca705eb796929d986b6f5c11c9109218dbe7f14c105fc7316
- MD5 43ad513dddf6b7c639ba430df01df473
- SHA1 98c88fa08ec0e32322d521db15a5b25f3bcdb75f
- SHA512 efc16a2b8d07be498159cf47b6275bc1d2b1529334e358106e55942217125224039d21121701cca896f06628a9dd786b5ef69fb21d2c68b88fdc28c8163036fe
- TLSH
  T108218E3AEA5EB720C6161052E36F1983F31774555054D471EC7D045A9EF930B73E5707
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  plugin-premium/assets/js/multiple.js
- Size 8KB
- SHA256 ed6693bb6196e92f98d0e18ff5e8e1487cddfc0f7455c7e18a074d94ffee1049
- MD5 fb546665e60939c32fc4afab7a7f659a
- SHA1 eb626ebf1d82c960217b67df2077f549d50ea857
- SHA512 15a4808196d9ac41eadb4b3f4de8cb63cfafdd11eb0474c79a67c6acdc62ac9f39c83dcbd0c905260337201d44c9d83e214b7051ac7a2d8bfdd40f69511a790d
- SSDEEP 192:mJUWGUaiatmerW6ZNR330EMHnywK2iEaoViGXo+kYDncftbiGLcftIGsfoLBqE:m5OH30EMHnAEaoViGXo+kYcftzcft3L9
- TLSH
  T19502112D3DD220E8C5376437AAFF073434A325433944E940F8ED85595F9172868AFBEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  plugin-premium/extra-more.php
- Size 16KB
- SHA256 c6b5990b49e59e2143bfd25412e3962ac4ad06abb396b6a0d9e2d6561f81d1bf
- MD5 dfc96dd5753141fda3edb2588d0aeead
- SHA1 749e1c2804743c2521e6e78381e4bffcd8e6c605
- SHA512 9555a71d9d1e8ccd2d168b711aab1bd4c4bf5d2189cbfe67f8c3ff2b8a77dc3deec8d2284c614dd2c496c88ff7c7e8a9006719861a3d2ce7ae1b582625b77532
- SSDEEP 192:3t+lRVuKaj3kpSOUsFp1inqU9iu2ilr+AJ7JhgTPSbh1PCyvjbx7siSCy+BoZy3N:YObuGVx
- TLSH
  T11F72822938EF74210493F9BD134FB419962AE16386099D00BDAD43C45F8133CDAE6BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  plugin-premium/languages/download-plugin.pot
- Size 8KB
- SHA256 966d3765aad3bdab5dbab90472ad5a9beabcf03c01fbf126df40aa839fb4185f
- MD5 5047b264b471d7ec4cde12b63d106127
- SHA1 d8b77ba895040b29164ad36159150e4534b487c5
- SHA512 b49a9d10e738c681c864c1de115b10e6645a4ae5547076839cd374763d24a1f905dfc9cc2c33982911f361976772da9d35caf51b0d3313960de6412f0e0d4fc8
- SSDEEP 96:hMu1HRle+jq4KqppyL20MTR58Hc1NyWsLf391Scc1MHGYb3mBIrEm4XXZ+wi8j:eWRleuKe/0MTP1NyjP93j3J4fj
- TLSH
  T1C5027C62A5A84F26857D5B599AFD6DD130CE03E24672C3053D3A0A9E7F10CBA03FB395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32