Overview
overview
3Static
static
3xamax-for-...ode.js
windows10-2004-x64
3xamax-for-...ode.js
windows11-ltsc_2024-x64
3xamax-for-...ode.js
windows10-2004-x64
3xamax-for-...ode.js
windows11-ltsc_2024-x64
3xamax-for-...put.js
windows10-2004-x64
3xamax-for-...put.js
windows11-ltsc_2024-x64
3xamax-for-...ex.ps1
windows10-2004-x64
3xamax-for-...ex.ps1
windows11-ltsc_2024-x64
3xamax-for-...in.ps1
windows10-2004-x64
3xamax-for-...in.ps1
windows11-ltsc_2024-x64
3xamax-for-...er.ps1
windows10-2004-x64
3xamax-for-...er.ps1
windows11-ltsc_2024-x64
3xamax-for-...or.ps1
windows10-2004-x64
3xamax-for-...or.ps1
windows11-ltsc_2024-x64
3xamax-for-...ler.js
windows10-2004-x64
3xamax-for-...ler.js
windows11-ltsc_2024-x64
3xamax-for-...er.ps1
windows10-2004-x64
3xamax-for-...er.ps1
windows11-ltsc_2024-x64
3xamax-for-...-rules
ubuntu-18.04-amd64
1xamax-for-...-rules
debian-9-armhf
1xamax-for-...-rules
debian-9-mips
xamax-for-...-rules
debian-9-mipsel
xamax-for-...mozart
ubuntu-18.04-amd64
1xamax-for-...mozart
debian-9-armhf
1xamax-for-...mozart
debian-9-mips
xamax-for-...mozart
debian-9-mipsel
xamax-for-...ations
ubuntu-18.04-amd64
1xamax-for-...ations
debian-9-armhf
1xamax-for-...ations
debian-9-mips
xamax-for-...ations
debian-9-mipsel
xamax-for-...ns.bat
windows10-2004-x64
3xamax-for-...ns.bat
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 00:14
Static task
static1
Behavioral task
behavioral1
Sample
xamax-for-woocommerce 2/includes/qr_code/phpqrcode.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
xamax-for-woocommerce 2/includes/qr_code/phpqrcode.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
xamax-for-woocommerce 2/includes/qr_code/qrencode.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
xamax-for-woocommerce 2/includes/qr_code/qrencode.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
xamax-for-woocommerce 2/includes/qr_code/qrinput.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
xamax-for-woocommerce 2/includes/qr_code/qrinput.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
xamax-for-woocommerce 2/index.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
xamax-for-woocommerce 2/index.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/CustomAutoloaderPlugin.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/CustomAutoloaderPlugin.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-manifest-reader.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-manifest-reader.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-path-processor.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-path-processor.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-shutdown-handler.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-shutdown-handler.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-version-loader.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
xamax-for-woocommerce 2/vendor/automattic/jetpack-autoloader/src/class-version-loader.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
xamax-for-woocommerce 2/vendor/bin/export-plural-rules
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral20
Sample
xamax-for-woocommerce 2/vendor/bin/export-plural-rules
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral21
Sample
xamax-for-woocommerce 2/vendor/bin/export-plural-rules
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral22
Sample
xamax-for-woocommerce 2/vendor/bin/export-plural-rules
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral23
Sample
xamax-for-woocommerce 2/vendor/bin/mozart
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral24
Sample
xamax-for-woocommerce 2/vendor/bin/mozart
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral25
Sample
xamax-for-woocommerce 2/vendor/bin/mozart
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral26
Sample
xamax-for-woocommerce 2/vendor/bin/mozart
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral27
Sample
xamax-for-woocommerce 2/vendor/bin/patch-type-declarations
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral28
Sample
xamax-for-woocommerce 2/vendor/bin/patch-type-declarations
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral29
Sample
xamax-for-woocommerce 2/vendor/bin/patch-type-declarations
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral30
Sample
xamax-for-woocommerce 2/vendor/bin/patch-type-declarations
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral31
Sample
xamax-for-woocommerce 2/vendor/bin/patch-type-declarations.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
xamax-for-woocommerce 2/vendor/bin/patch-type-declarations.bat
Resource
win11ltsc2024-20260709-en
General
- Target xamax-for-woocommerce 2/vendor/bin/patch-type-declarations.bat
- Size 150B
- Sample260804-ajrwpaaa47
- SHA256 65bebe04937f7249f074652f9098157e6cff1ba5a8b37418b1a29dac42cb0d9a
- MD5 0499f98aac1bae3826f3d46978e4a3bd
- SHA1 95acef87b815b4b0b5edbda23da1b3ba708d03aa
- SHA512 f1c06b6d0a0cd623bd1c13d914f39a7d4cb02bf20b5d4f184c4257d0e1635e6ee7340c65837870ccbe7c12823c60e67b09663eed821d45bc35e849ee68653380
- TLSH T113C08CE879D77250B925042AE84B854AB2A2E9B91E5A81476022C1282A0D9EE6B4F85C
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 3804 cmd.exe