a90e7ec76844f4ff1f699c9a7f97901bacb3cd65d381b41bcbb82a40661adfa4 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

xamax-for-...ode.js

windows10-2004-x64

3

xamax-for-...ode.js

windows11-ltsc_2024-x64

3

xamax-for-...ode.js

windows10-2004-x64

3

xamax-for-...ode.js

windows11-ltsc_2024-x64

3

xamax-for-...put.js

windows10-2004-x64

3

xamax-for-...put.js

windows11-ltsc_2024-x64

3

xamax-for-...ex.ps1

windows10-2004-x64

3

xamax-for-...ex.ps1

windows11-ltsc_2024-x64

3

xamax-for-...in.ps1

windows10-2004-x64

3

xamax-for-...in.ps1

windows11-ltsc_2024-x64

3

xamax-for-...er.ps1

windows10-2004-x64

3

xamax-for-...er.ps1

windows11-ltsc_2024-x64

3

xamax-for-...or.ps1

windows10-2004-x64

3

xamax-for-...or.ps1

windows11-ltsc_2024-x64

3

xamax-for-...ler.js

windows10-2004-x64

3

xamax-for-...ler.js

windows11-ltsc_2024-x64

3

xamax-for-...er.ps1

windows10-2004-x64

3

xamax-for-...er.ps1

windows11-ltsc_2024-x64

3

xamax-for-...-rules

ubuntu-18.04-amd64

1

xamax-for-...-rules

debian-9-armhf

1

xamax-for-...-rules

debian-9-mips

xamax-for-...-rules

debian-9-mipsel

xamax-for-...mozart

ubuntu-18.04-amd64

1

xamax-for-...mozart

debian-9-armhf

1

xamax-for-...mozart

debian-9-mips

xamax-for-...mozart

debian-9-mipsel

xamax-for-...ations

ubuntu-18.04-amd64

1

xamax-for-...ations

debian-9-armhf

1

xamax-for-...ations

debian-9-mips

xamax-for-...ations

debian-9-mipsel

xamax-for-...ns.bat

windows10-2004-x64

3

xamax-for-...ns.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
xamax-for-woocommerce-v3-7cdd08bdac85010c6246cec80dadb7af.zip
Size 5.4MB
Sample260804-ajrwpaaa47
SHA256 a90e7ec76844f4ff1f699c9a7f97901bacb3cd65d381b41bcbb82a40661adfa4
MD5 218f7e1536111a39eaaba7cb9f26012e
SHA1 006db337a3f0ef789225d895176df65cee8b9b98
SHA512 4f588421d69a60ef81c8c99c5898db42da435d69d43bca26f0e7aed84d10ddfe809f6729203d780706dac732678d8342a5c72b567a71c137fd7fbed126b432b9
SSDEEP 49152:o5NP3uOWhhEuYonE8xkUvSeeHn8er94wBkIkNOp52sfu8NicyrGnH4nGSYYIZVtw:sNlFofxk2S58QCwiaQZtvqRQR+dGzyC
TLSH
T14A46F82B90ED4CC1FF13A6F0C785ABDA5984510461A720D62E185A6DDFFE4C92B13BCB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

xamax-for-woocommerce 2/includes/qr_code/phpqrcode.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

xamax-for-woocommerce 2/includes/qr_code/phpqrcode.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

xamax-for-woocommerce 2/includes/qr_code/qrencode.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

xamax-for-woocommerce 2/includes/qr_code/qrencode.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

xamax-for-woocommerce 2/includes/qr_code/qrinput.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

xamax-for-woocommerce 2/includes/qr_code/qrinput.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

xamax-for-woocommerce 2/index.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

xamax-for-woocommerce 2/index.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/CustomAutoloaderPlugin.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/CustomAutoloaderPlugin.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-manifest-reader.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-manifest-reader.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-path-processor.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-path-processor.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-shutdown-handler.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-shutdown-handler.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-version-loader.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-version-loader.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

xamax-for-woocommerce 2/vendor/bin/export-plural-rules

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

xamax-for-woocommerce 2/vendor/bin/export-plural-rules

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

xamax-for-woocommerce 2/vendor/bin/export-plural-rules

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

xamax-for-woocommerce 2/vendor/bin/export-plural-rules

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

xamax-for-woocommerce 2/vendor/bin/mozart

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

xamax-for-woocommerce 2/vendor/bin/mozart

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

xamax-for-woocommerce 2/vendor/bin/mozart

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

xamax-for-woocommerce 2/vendor/bin/mozart

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

xamax-for-woocommerce 2/vendor/bin/patch-type-declarations

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

xamax-for-woocommerce 2/vendor/bin/patch-type-declarations

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

xamax-for-woocommerce 2/vendor/bin/patch-type-declarations

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

xamax-for-woocommerce 2/vendor/bin/patch-type-declarations

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

xamax-for-woocommerce 2/vendor/bin/patch-type-declarations.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

xamax-for-woocommerce 2/vendor/bin/patch-type-declarations.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  xamax-for-woocommerce 2/includes/qr_code/phpqrcode.php
- Size 115KB
- SHA256 20e7231b044ac44a504316500193c9ca4a53bb12500f54c675f008e433c3270f
- MD5 a49b3989932467c8c6dd499d04be2a30
- SHA1 4fd41135e0822b8557943547148da923c4f5f17f
- SHA512 1ee159de1ce00f72a5cd1b178fa5d335dbc62c5203ed8504d8b508fbadcc3377215240aafb40da76e6c0fd06318fca7c342b95c5dce4c51ecfd467926a37bf8b
- SSDEEP 1536:ExI1Ojly0S0S0Slc/4RdvT2Sv2u0VZtX1HlD0bKgTevLXEOu5wma:t1+XDDBgTevLzB
- TLSH
  T1BFC36F482D936DB823A3E078178F8045E37A546B694F8D817C8E5BC44F1462CDAECBBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  xamax-for-woocommerce 2/includes/qr_code/qrencode.php
- Size 16KB
- SHA256 ea8918b9b5f03a86afa1d2611a025174f27d106976447186a7c285491cd4100a
- MD5 b614c44f4e00cb5c1188c7e6209225f8
- SHA1 75255205ba3dafc967cb2e50c56a897112b3c85b
- SHA512 ec7769a722748645812b8b3ff6d8be0d550828ba67d51cecf6a7f68301aeaefdd44bc261b976a6c67db28ac57f68f0bdeb89ab5f4e3887cb723066e70cc6d4de
- SSDEEP 192:D2z7yGMWtCRFRdkevPVzmoluJCtStO0f0/OinPtQiTqTcGNm0tiiMiSjvn+kgyQG:D2fnMe4b7zS6mSB2Qmri
- TLSH
  T19D72DF542D9B2CE46763D1B45B8FC001E62A742B6D8BCD867C9D53C09F0521CEAACBBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  xamax-for-woocommerce 2/includes/qr_code/qrinput.php
- Size 23KB
- SHA256 1ba352f5608b98a1aecbf18b192a83a0811b493aa74de268c6fb37f421ad0293
- MD5 52db60b2134954b3c60ab080bbfe3883
- SHA1 02d39209825632fe278a539c7c82dc76ea5bc9c9
- SHA512 e67a700c2de972c0329758c5b9d31f95769a888db01054bacb2ad2a3ea6879f9f7f00c4b39ab6957035bce4bbf81385487464d2f0773cae3c105e268b6be460d
- SSDEEP 384:03dITi/tXN54laGfakf5vT2SvcDlQX9xZQH:03P4lawakf5vT2Sv2lgTQH
- TLSH
  T187B2EFD47CE36C907263F07A079FD485E366542F514E8D01798DA3849F1826CEAFCAB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  xamax-for-woocommerce 2/index.php
- Size 35KB
- SHA256 aaaddbd9549721e1ebc505a9868bd76d7f904eab216ae51ab9279361a2c715fd
- MD5 8371993d7e3cd62bec351215ce6a9d0b
- SHA1 ebc08226ece32ffd5e8ed365e90048ca0858f273
- SHA512 50432b086639cc40617451cc1f9d7a4fb6a12ee0a4ccd0e7b62c2bbdaeaf711d53a6770291d409f31f450f6c75219aebf47b20e71fd25f72816d6cdc70ef3f25
- SSDEEP 768:s8TXB+eMQpC2MO/WA1IPqz/Dryj0CBH3oIm:pRU2be0i6/Dryj0ClHm
- TLSH
  T162F29546388B95735072F2A89F12AA1AFF6D932721410292FEFD21F41FB1738CA94D5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/CustomAutoloaderPlugin.php
- Size 6KB
- SHA256 5a2d9d19104d7ac8a9cc3eeb8b6fef2f8f448c979e3f869fd38aed0bb456e301
- MD5 9b284dc4203caceac6a302cdba902045
- SHA1 1788b5e3f70e0586bc3ec1d4590099c7d9f57bb0
- SHA512 3c99539cee10bbeab5b7d0fefbab0836c9c2dc0f514d0a4df7093ee0f7116cf3c526043ad665fe24d5eb3b7e040353b763afbe260db91123b582c4c86b2c72b4
- SSDEEP 96:ilYGJaKJxxDXhN9FFjFuQCjb3W1LnpoeMhB6NJ0wZ0Joi+Z0q6+o+xK+ZQC:ilYGwKLxXhN9FFjF5kbGNpJywzP9QC
- TLSH
  T12ED1A7E192CC61254167E79C1B4AB6812DECE22B510314EEB99C4E7DA3C497C0EB8FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-manifest-reader.php
- Size 2KB
- SHA256 a0289c0e9a0074a74444d49520e3982efe3b7a28162cb0c898131a6bdb432c60
- MD5 4303729849a697761d9377baa36ab1d5
- SHA1 d4664201c53702bf52c9d51c00a52ad2d5922e0b
- SHA512 25b8d916f4a812f9ab90d01ee97cf0addd360949b340e746a14415a6cd859b02a5474dd90e93de0d8b905f5c1133a6576e98f1dac70f44caa8ce9438acb066a9
- TLSH
  T1EF51AB84BDCCD2BB408733940F6F35CB567D54E87363895AA9B67A8478E117C8270AB8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-path-processor.php
- Size 5KB
- SHA256 506107a8422cfd3d6b263db4355cb16ca6164d435ed5a33c6da03d8a55a14a2a
- MD5 157a4f0a4a59b9859767550815baf67b
- SHA1 fe76cc8c864ffe46723378bc3be1c36328237495
- SHA512 470a63f50cfe6f619d1f58d386f84da8d8bfc69bd9483feb2b233bf75d6616fabaedb6410c2ea6a92aedc6cb57c3e368960e650c2000b30858ee04ee9ad31572
- SSDEEP 96:7ewQcPiEUf9TFTiEUMBEawqrrBq+ZF+sr3HlUnX5lrE0noGRK0zY8Evuq55EqTlQ:adlEC9TQEPBBwq3Bq+FUEYRK0E81q55q
- TLSH
  T1C9B111C0D6CC6216818533D15F9E76DEA0DDA9F723AA989DFD4CC854380007A47EAF9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-shutdown-handler.php
- Size 2KB
- SHA256 6f8f2a0dc96997d8e8e2d0625c45ea5ced17fe4e4d7e580a3792b32b738a4ece
- MD5 4b77fa393b0d522b2285fb4ea7ebf385
- SHA1 8936bdca07dd4e78f43a1aab67b26517ae29d46c
- SHA512 07d7250b7bd7f3b893d6b913c0c3b0eb1dc274aad707ca98b4c664eb522ecaa07c83f69c4d6a576586fd0f05078182da4fa97dcad7f1c8a142b989127e7a1917
- TLSH
  T142511057D3AE82624762419C060C36D436DDBAF65710C5C9BA7CA43CBB403B982F7AE3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-version-loader.php
- Size 3KB
- SHA256 a7febea513fd365aad354b8d3a3c8a09c7e4de5f12c8b496ab6303b6862294df
- MD5 2019c06781cf63432cd786bf3fafd0f9
- SHA1 39cef48d2473648ad1cc8e708d5c1393f76f4a19
- SHA512 977dc7adfa12f38d55804bced8a34f6581f8f4f6b23bd8761d8f84879267c11eeafd61a6834eff9d2d99154dda9f1882bd2a3641a4ff180f3f68b2a58b49100b
- TLSH
  T14781ACC5AACD897F901771A50F9C338CB2B8247BD2549D867EFDAC18732022D52E4A66
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  xamax-for-woocommerce 2/vendor/bin/export-plural-rules
- Size 3KB
- SHA256 7658a0869c738f66c5344eb05436ed67a8efb248386993fe7922e3627893cf93
- MD5 2d5c7023465942f4ed4f90c73eee3d0c
- SHA1 ad3916482547943d5bc25a59fdf33fc47b837480
- SHA512 db5efd3fc3c588bca763cde61cad61ee24a3a5065e86131fb561f879e6bdca741cdfa2fc2307257ca4f1d3c42346921e16994318cb8dca5f7599297659c34bff
- TLSH
  T10D71CC58A8AA3CA0512363B9979FD50520761463210E8C41FE9D43F0AFA233CEA35FAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  xamax-for-woocommerce 2/vendor/bin/mozart
- Size 3KB
- SHA256 1696c2a8278473dd8ae9eae98421e278aa0e05d537e32c6e531d8645a23e6714
- MD5 ed2d792a85ad1648dad1523cea9f723a
- SHA1 bed4fe6607a381f0b93222890ba7b14435851337
- SHA512 31f7bf63c283ab63b074ac6557fb87e11b8eb61f9ba8d82616c5e9d7a81ac55987d02397d1f14b847e703481318277f47ae64665b05c7b6a1bd3192b92c6aed6
- TLSH
  T12961D058A8B63CA0522363FA575FD90521766423210E8841FEDD42B0AF9233DFE75FAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  xamax-for-woocommerce 2/vendor/bin/patch-type-declarations
- Size 3KB
- SHA256 9b946fc8b8c22ecb0698f5920a9e88dfd4af9525e58b2b0b0253db290eb9d4f6
- MD5 6c9c8c44629a169f356df43dfd30967d
- SHA1 34c7466b862e95a6a66998f1fa2d9018007fdeaf
- SHA512 15a86d3d9c18ad8ace47755b54396b7de4a50ca0ca4507266ca9e39e7df8ec05e1de985d011ba06bfbfea4849a959bea9564b660c7e54616068742fae5dda5de
- TLSH
  T10261D058A4EA2CA15123A3B6974FD54610775123210D8841FE9D43B0AF9232DEE76FED
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28 behavioral29 behavioral30
- Target
  xamax-for-woocommerce 2/vendor/bin/patch-type-declarations.bat
- Size 150B
- SHA256 65bebe04937f7249f074652f9098157e6cff1ba5a8b37418b1a29dac42cb0d9a
- MD5 0499f98aac1bae3826f3d46978e4a3bd
- SHA1 95acef87b815b4b0b5edbda23da1b3ba708d03aa
- SHA512 f1c06b6d0a0cd623bd1c13d914f39a7d4cb02bf20b5d4f184c4257d0e1635e6ee7340c65837870ccbe7c12823c60e67b09663eed821d45bc35e849ee68653380
- TLSH
  T113C08CE879D77250B925042AE84B854AB2A2E9B91E5A81476022C1282A0D9EE6B4F85C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy