Overview
overview
3Static
static
1wordpress/readme.html
windows10-2004-x64
3wordpress/readme.html
windows11-ltsc_2024-x64
3wordpress/...der.js
windows10-2004-x64
3wordpress/...der.js
windows11-ltsc_2024-x64
3wordpress/...oad.js
windows10-2004-x64
3wordpress/...oad.js
windows11-ltsc_2024-x64
3wordpress/...und.js
windows10-2004-x64
3wordpress/...und.js
windows11-ltsc_2024-x64
3wordpress/...der.js
windows10-2004-x64
3wordpress/...der.js
windows11-ltsc_2024-x64
3wordpress/...ced.js
windows10-2004-x64
3wordpress/...ced.js
windows11-ltsc_2024-x64
3wordpress/...ent.js
windows10-2004-x64
3wordpress/...ent.js
windows11-ltsc_2024-x64
3wordpress/...ort.js
windows10-2004-x64
3wordpress/...ort.js
windows11-ltsc_2024-x64
3wordpress/...ftp.js
windows10-2004-x64
3wordpress/...ftp.js
windows11-ltsc_2024-x64
3wordpress/...zip.js
windows10-2004-x64
3wordpress/...zip.js
windows11-ltsc_2024-x64
3wordpress/...ble.js
windows10-2004-x64
3wordpress/...ble.js
windows11-ltsc_2024-x64
3wordpress/...ase.js
windows10-2004-x64
3wordpress/...ase.js
windows11-ltsc_2024-x64
3wordpress/...ect.js
windows10-2004-x64
3wordpress/...ect.js
windows11-ltsc_2024-x64
3wordpress/...ext.js
windows10-2004-x64
3wordpress/...ext.js
windows11-ltsc_2024-x64
3wordpress/...ets.js
windows10-2004-x64
3wordpress/...ets.js
windows11-ltsc_2024-x64
3wordpress/...sh2.js
windows10-2004-x64
3wordpress/...sh2.js
windows11-ltsc_2024-x64
3General
- Target latest.zip
- Size 3.8MB
- Sample260803-gzl4psdb84
- SHA256 e14d9b3e072ab4183df776f66a8b70ae47aafd27084b2ce2d2d20973339d4771
- MD5 7f95b2f29516b04a1a3d07f69849732b
- SHA1 c0dcdfed1d5daf4821769bc9c21b4f9741357420
- SHA512 e1d902f95126cc9adf24a197d6d526440fbaa57ee9d6f3f8d58b52f5fd4ffc12652e3105fbccc1de15f36d88330451c063ac07ea6408d1e541cc001346640a5d
- SSDEEP 98304:ubcv4mAULO+shxoFfcMawQVSoSfKVfIU0/E//a8i+Y:uIv4ZUs0FrQSoQM3Ba
- TLSH T1F406127EE12F0B41D45A4B710DE6B135E2BEA4B7F20F611A63366884B7B41AC3F02752
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
wordpress/readme.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
wordpress/readme.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
wordpress/wp-admin/admin-header.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
wordpress/wp-admin/admin-header.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
wordpress/wp-admin/async-upload.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
wordpress/wp-admin/async-upload.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
wordpress/wp-admin/custom-background.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
wordpress/wp-admin/custom-background.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
wordpress/wp-admin/custom-header.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
wordpress/wp-admin/custom-header.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
wordpress/wp-admin/edit-form-advanced.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
wordpress/wp-admin/edit-form-advanced.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
wordpress/wp-admin/edit-form-comment.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
wordpress/wp-admin/edit-form-comment.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
wordpress/wp-admin/export.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
wordpress/wp-admin/export.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
wordpress/wp-admin/includes/class-ftp.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
wordpress/wp-admin/includes/class-ftp.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
wordpress/wp-admin/includes/class-pclzip.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
wordpress/wp-admin/includes/class-pclzip.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
wordpress/wp-admin/includes/class-wp-comments-list-table.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
wordpress/wp-admin/includes/class-wp-comments-list-table.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
wordpress/wp-admin/includes/class-wp-filesystem-base.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
wordpress/wp-admin/includes/class-wp-filesystem-base.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
wordpress/wp-admin/includes/class-wp-filesystem-direct.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
wordpress/wp-admin/includes/class-wp-filesystem-direct.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
wordpress/wp-admin/includes/class-wp-filesystem-ftpext.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
wordpress/wp-admin/includes/class-wp-filesystem-ftpext.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
wordpress/wp-admin/includes/class-wp-filesystem-ftpsockets.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
wordpress/wp-admin/includes/class-wp-filesystem-ftpsockets.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
wordpress/wp-admin/includes/class-wp-filesystem-ssh2.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
wordpress/wp-admin/includes/class-wp-filesystem-ssh2.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target wordpress/readme.html
- Size 8KB
- SHA256 9ab7cb286477ea50e6076bc67f80b20c851a76bd2e611202f2b1a5ac0d69920e
- MD5 98d3f05ff1e321dbd58ad154cc95e569
- SHA1 72d31ccf5c41b8caa2439ae765cc80108c5d5662
- SHA512 3f64229cfba4e3c0cac20c90877ee5f167602a4b95659e2c3d1755d6c657754bd4008837d19bcec0430106bb739bae873fc33f32d7792d8e2c65bff64a9e3d85
- SSDEEP 96:1z8iUcm1z10/4ks5kyJhOb/w98uuBKQfucpMv9KHZ3jH+4/Q5tdtGgu9IZoZFI+R:Nmri6TO8WuYH1HlidtP8Bucdjid4
- TLSH T11B12D44EB140537607519371B04A117A733300FAA3EC466A449B9A29BB623B4FE7F5DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/admin-header.php
- Size 7KB
- SHA256 0ee7eb2e79157ca7a26a0162778676c815b0fef620c55d1e7ea9d65df9869cc9
- MD5 2644993e8d3e21ad198fde3a49d660b5
- SHA1 5b54d4031be12b6cf50017cdff3db37dfa34c011
- SHA512 15fabf232c6d010c14804d5ea5121ddc10b971af1ed844513abb9fcfd2ea24eff66943bf936a31c58ffbbdc24f24e17b69f53ad180e00f4086fe0514b92a985f
- SSDEEP 192:HUZvwWCXCY8taRUAqGLTqtmzR4s6b4Xjs+Ols:gDaSA9qtYR4lb4Xjs+4s
- TLSH T130E1850559FA9B23847A6AC224D5C13C746B8A27B3C16CD88EB451DDCEE1344CCEBF95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/async-upload.php
- Size 2KB
- SHA256 9f486ae33ad0abf36d825c305077e92407749e6487ed3b16bbbbb63d4a9e6b0b
- MD5 3a1aa62c93a9974c19f8f15692784099
- SHA1 3feac5927966926138fb79e08733c335bf60ed41
- SHA512 fe75a36b0a9a091bef03e6b85569b1c3abdf2f348e15a752b04b1c5bcf3fbb68613c595c3a191a957964e42c02b86db5fa90ae46714e73330f05b17b6deb6914
- TLSH T1705155B16AB8A776113374C84B4C812FA60AC50376449C58ACE8F060E68495BE4F6EFF
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target wordpress/wp-admin/custom-background.php
- Size 12KB
- SHA256 bd602d7788c5d18e6cf9cc40cf5af9957f24b7b811594861d16399fe9f9602a0
- MD5 01f0a22d820178d123b5e24f70c9c9eb
- SHA1 574405e85f15a2703663274c8dd0d84dbfc39032
- SHA512 734ae4a8adf3671a7c66b00ddc489afbddcb5c46a6e052256e6cebb0277a5d3806a2b3e93ca23e914c28e39f65f8aa3f55d9a6ab084cb1af892fcc3bf11cef98
- SSDEEP 192:L/zW32TFIwICdbMirrSKFD1XSD4lDRzDDWtDfLDvtVVupUI1a481XPfL7a5vwoNu:usIIMidBC856/puMXX2e
- TLSH T18D425452E9DAD53E787358F326B95B4901ADC904C0404F4EAD3DF1F8A29065C9E37AF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/custom-header.php
- Size 23KB
- SHA256 0b5226a0fd5340a1afaa2443d641ad29afd2eff3d04406109cd79a305d2af28f
- MD5 04ef8b09d107911327493b62b6f595fb
- SHA1 584d523ec7e279ec6c9b1373eb4bcd124748f1b9
- SHA512 9de3f63dad9bd4dd7c8b22ce942320ea2f4bcae3a69229747b2e3c65d9a33be2e884ad93a26cbe68e69d459f708481133666612bff000d281675238824bfdfc6
- SSDEEP 384:48wCYoDX/r9bBqqz4ObrFhzZ6bZph3GlKe7dfb+i4tAO/DhjpYxp62:48wjoTr9bgEzZHlpJ6mO/Dhaxp62
- TLSH T10AB2F995E7EDFB67003318D8E55BED1510EE86149241AF46BC9CC0EE19C0A2CDE76F94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/edit-form-advanced.php
- Size 18KB
- SHA256 07568150f961f3469dcdb0882c208b1e510d4d298dcbd3981c7beec799976034
- MD5 8870c8438463187879f0e531841737d8
- SHA1 fde329ace6170148f49ac2daf2776ac693d0aafb
- SHA512 2baad5f969054b2b7dfeced3b18011a4f754a2817dea8c376592923d173cc28e2ae74512fe73d332f4ae569e0eaa09af85dc3616ae6d45407dba9e2c3b07ee06
- SSDEEP 384:zmcemKoiP3KPkTY2jnLL+t9K3I430Go08W9YP+Jd:zmcemKpP3KPv2jnLL+t9K3X30Go08Wh
- TLSH T1B382DA0460B8272549234781B680833D9EAA8599734138E9EDFD60F4EBA63735D39FFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/edit-form-comment.php
- Size 5KB
- SHA256 4ff02d369e328fc99530472eb88d23b949530bb55074fe43d02ea4bc93fd5fb3
- MD5 cee4d18d41d918b75366fa99a2f22b60
- SHA1 6845d84e03d894703413af88211688a2b05a940c
- SHA512 dd0ca2a36babe6165ff8e272e6ca2c779d00b4b42676f8a71fc16bd7b934c7a164f1a63b7cc5f119e72e673180ea9c4685f56c9c9ac99ed622aa5729d906148f
- SSDEEP 96:VhY2j/2qLiikjg675r4AajYIyXYJl3m4rKMMApWVgfxOiEcBq31:V62j/2riatl4AljYJl39eTmxOiEcBs1
- TLSH T1D3C17352B0C4973594537CA47FD49B7810C9CB55D7060C4CA5F882E86F80FA6AD2EBEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/export.php
- Size 7KB
- SHA256 f58a6cbe0638c7c3e216e1f13f08dd69296c39b8621965e55532bee995d371a6
- MD5 e95a6be92b83e1e8bab7a91db2c40284
- SHA1 34f6a209798ed7c54dcc44d6dc970b7d7cef8694
- SHA512 75c41f36124d06adf983193461e4f91066e843141818f717a8740e5b6b7035e14a839a9fdc1ca32411dbcd77c369385c37e63116e49b101510a7ba5af10d8a53
- SSDEEP 192:fvPgp1DAvcvcg0DEnZ+jvXs2AEOTrIEsnRQ:3Pgp6vnA+jP92gRQ
- TLSH T115F18753A5FC8B6484DB19D8162092B06EBD8E1490012C86CC2D56FC67E0E998D3FEFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/includes/class-ftp.php
- Size 26KB
- SHA256 917d2f0475cd5cbf8cc388403f8f8c8d28f3b49bda200b976ecd2d7df9a5e364
- MD5 950dc27ed9307f8d9c6a1345f739e763
- SHA1 d88cc1fdccdc5e4d2344e00b02444808041f68b7
- SHA512 83fd3a9f2a17121c0e840d4ab8a17355c14dfa6b496afe4fe78264c81954a7226b0edbc2efe7912900bc381d398803b982a6b83956b695f51884824d5bb3d084
- SSDEEP 768:E6qJwDhlXzMgIXGsObD5gseXAgzFb/oqW:xaKD5g5Fb/oqW
- TLSH T1E9C22EC7BF9FACD63592D0E94353509FE86CB531686A8C47BDD981303B9832D809E978
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/includes/class-pclzip.php
- Size 191KB
- SHA256 4da8c8feef62eed33ed7bf257d91627b6c5f4e58ac50ef7885d6fa6c90b6f319
- MD5 01363728c843ff93e96b6983ce38eba6
- SHA1 e7caf1f66c38bb119fe709ade012a989d8610f07
- SHA512 83ad412494f4d5f2aaa2169f801d1cefbe68c2b2f6d2f1d7ea855e43b80cc103be420b75ba5c15fb0e1f0e969b6606b178b180b296cafc410eb86b9304d9cccd
- SSDEEP 3072:4dItMRpT6v5sll1TC6RRbxWJdZK3+EUZz55w:4dKv5slrTC6RRbxWXZK3+EUZz56
- TLSH T18C144345BC8601726AE3D2FEA7CBF44ED164C6370A4DD816396D43C82F60564C6EEACB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/includes/class-wp-comments-list-table.php
- Size 19KB
- SHA256 d54bfc6f3e9c194894f2ca5c6a224d028c0dc6b227c2676bc357cb925c89ed42
- MD5 2356f798a37c7897a6cb7b2af533afec
- SHA1 a2d146964f8da76bf1f142df7513f921a08a9a0b
- SHA512 5251c2bdc06063ee5da993567606322635b6e14095e09049c619e458926b98938e0b436803759f8f3da23690b244fe02c7480d0dea9fb9154460b87cf20bb99e
- SSDEEP 384:Pyzv9MAoTwTTYbRtYlufm1YUleGzQQwL+LFQ7bSZHBZeyX2/LGjfltjS:PyZnYbRtYlVeGzQQwL+LFQ7bCHfeRSj2
- TLSH T1BA92B690E3FD37A9457370CC6F1E8139A8AC076150864D4E7DA920A43A91FBBB578F2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/includes/class-wp-filesystem-base.php
- Size 9KB
- SHA256 0c90b14d32cd26abe66d4a0d83b4f2e384a9892b8386640eeb57373e9a0deb95
- MD5 289ede90ba04987a10c35140ea536b50
- SHA1 fe77fe35008906dff0105ee1a46ed3c1ba4730b9
- SHA512 0c64d2de302ad29753a3d881ac95f634c938e04ae025038ac7c51605ede32f6de67f033b31066608682814032b7886d92ccc1b5a739a8eceecb5762dcec212be
- SSDEEP 96:FH0LRo7Lyo6LAoqLeLEWoCptoptvp9kMmYppqcSb918qupqx3lqvHuEdYJ3Gnq4p:FUs0yqZ8z0M7Hcoq1q/u2Y117Bi
- TLSH T1751273D6E7DF7617942692B55BCE778850FCECB4A2EB0C43FC5A482434482BC857ADA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/includes/class-wp-filesystem-direct.php
- Size 9KB
- SHA256 6388fce38dbb2ee9046bda829f133f76bb33d4ad642a807efef1845a8fa74eaf
- MD5 a888a93906dc46029aebf320f638d246
- SHA1 6462ce0447cb22ac6466cceaa547a04b346f6d6e
- SHA512 5c7e023092c79947cf71c15bf94a31a8213d489ac5f5cdff5d7eb7c46a860290c6f2d2f15d46403bf14bb491b57a5fd2e2c239abd0345a11e0b36955fbed0d22
- SSDEEP 96:uxRf1sFSHIq8uS9FLCqTlqskQqphqdXmt25fvIgpk9XkZkE3Bfmz4zqQWj:+ReFS/LSPpku1mqVfFlG
- TLSH T1C51275D1B7EDA9B7422123E81B4B601EB1FDDC78C19E5F05E9985090389033D85FEEA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/includes/class-wp-filesystem-ftpext.php
- Size 10KB
- SHA256 40c5909ceb95e7fd09614ec9d7bb50b638a6a601f290b5df43783f77b220fc8b
- MD5 078e731d6613d108bdaffd1e60eb4c3f
- SHA1 5db0cfa40d6b107ca1799f085610c2d71e4d97cc
- SHA512 17abd136b4a05ece6c3c563e9d4658234f751fa293272ed93d15a3bb0d1894d56622a3f35ea080e3019f74ee734f44fee8ab056f240dc3f95afb6939d18d502b
- SSDEEP 192:qGWUJUHUdhUvtUMXOjEIZUPSTPjALmKJJYl9emPrshCI+mGlvB3EXfZRik:qG7y04vOF4y7Isl9emPrsIIFGnob
- TLSH T17422439053DF4DBE12B262D94747C49EE2EEFC7340445A0AFD9D82A0719032F85EEE69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/includes/class-wp-filesystem-ftpsockets.php
- Size 7KB
- SHA256 40e6b27ee3c0e2dcef0e96765c39a4fed3b25a2510bf97c3f30da57e3720e74c
- MD5 0c67e40a3a542dd5bbacf6edce9533d3
- SHA1 a1621238545cec5b8b808785209e798913d57bc8
- SHA512 b7f6077a9ca75adac3dbefebd280ae1f20986ac40865cacea30cdfd0f62420b5ff562051576d76c99a1861670f9f02575df5f74593f74fdba6caa300c8cd03e2
- SSDEEP 96:vdcKUBAuUrYJcpUYIhUrTVZhsNhsBZCdpBxw+FxzhMfi895xa3PFqim0dzp8E8uh:vNUJUjUDhUAfGosEMfDk
- TLSH T197F1F181A7DD4DBA237132EC1F47942AA2FDED31844A894AFDD5819070E031D8AEED75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/includes/class-wp-filesystem-ssh2.php
- Size 11KB
- SHA256 2059e6f35d68d55c539a28458cc57aaa38408f3a9aa2fca2766175e3db514360
- MD5 f73cc902e8d703563c404db7d19da56e
- SHA1 7d0a22143b908812c7835e539b40a4ede0a5be19
- SHA512 a4b42218b906fcf77ef1320efd73b9a2e7802e51f646ea4c53cf0e4baab69556a2763d95ff3306cc2108bb7d95bf113bbd672d0bb9036d476a96571adfdd19b8
- SSDEEP 192:AjSvHqvcRoZUrUCoEx39cSZ2qIpyt+VkWXPMtP/rnZLQAfJl7:NvLRoCQCfl9JGkSWJ3
- TLSH T183324691A3ED5EBA13A212F40B67481EE1BDF9B1C09A5907FCE9C25034A031E45FDD65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10