Overview
overview
10Static
static
10omnibuzzard1/400.html
windows10-2004-x64
3omnibuzzard1/400.html
windows11-ltsc_2024-x64
3omnibuzzard1/401.html
windows10-2004-x64
3omnibuzzard1/401.html
windows11-ltsc_2024-x64
3omnibuzzard1/403.html
windows10-2004-x64
3omnibuzzard1/403.html
windows11-ltsc_2024-x64
3omnibuzzar...met.js
windows10-2004-x64
3omnibuzzar...met.js
windows11-ltsc_2024-x64
3omnibuzzar...orm.js
windows10-2004-x64
3omnibuzzar...orm.js
windows11-ltsc_2024-x64
3omnibuzzar...et.ps1
windows10-2004-x64
3omnibuzzar...et.ps1
windows11-ltsc_2024-x64
3omnibuzzar...API.js
windows10-2004-x64
3omnibuzzar...API.js
windows11-ltsc_2024-x64
3omnibuzzar...eb2.js
windows10-2004-x64
3omnibuzzar...eb2.js
windows11-ltsc_2024-x64
3omnibuzzar...App.js
windows10-2004-x64
3omnibuzzar...App.js
windows11-ltsc_2024-x64
3omnibuzzar...se.ps1
windows10-2004-x64
3omnibuzzar...se.ps1
windows11-ltsc_2024-x64
3omnibuzzar...try.js
windows10-2004-x64
3omnibuzzar...try.js
windows11-ltsc_2024-x64
3omnibuzzar...nt.ps1
windows10-2004-x64
3omnibuzzar...nt.ps1
windows11-ltsc_2024-x64
3omnibuzzar...Sub.js
windows10-2004-x64
3omnibuzzar...Sub.js
windows11-ltsc_2024-x64
3omnibuzzar...gin.js
windows10-2004-x64
3omnibuzzar...gin.js
windows11-ltsc_2024-x64
3omnibuzzar...pps.js
windows10-2004-x64
3omnibuzzar...pps.js
windows11-ltsc_2024-x64
3omnibuzzar...ry.ps1
windows10-2004-x64
3omnibuzzar...ry.ps1
windows11-ltsc_2024-x64
3General
- Target omnibuzzard1.zip
- Size 8.6MB
- Sample260817-wxaefsch88
- SHA256 76e4126891af3b4293a5cb7798e6226a15c1a2c0f45074a2e5b947ec124072c1
- MD5 8656df53b079802e9fcc1efde9eb8e64
- SHA1 91f74f18462f80e8bf074b1c472a19662d197954
- SHA512 e83b34aa080162e328edc020146a8cbfedd66a016484c8709c4fa9e61a09c0a952a3949bbb65038b6b305f02fb9a3d00daa76459c78fa63ee6973500ee101c50
- SSDEEP 196608:heTnmKvocQgf6v18qHyNFsvty9vkqJmUjAoOYssjrrbPpC:hEnwg618zblmkOYswrHpC
- TLSH T1749602B1225D0881E76DD235D8EFB2D6C4E8F742A84E768DBD1803AC579A39D3E72701
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
omnibuzzard1/400.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
omnibuzzard1/400.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
omnibuzzard1/401.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
omnibuzzard1/401.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
omnibuzzard1/403.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
omnibuzzard1/403.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
omnibuzzard1/wp-content/plugins/akismet/_inc/akismet.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
omnibuzzard1/wp-content/plugins/akismet/_inc/akismet.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
omnibuzzard1/wp-content/plugins/akismet/_inc/form.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
omnibuzzard1/wp-content/plugins/akismet/_inc/form.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
omnibuzzard1/wp-content/plugins/akismet/class.akismet.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
omnibuzzard1/wp-content/plugins/akismet/class.akismet.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
omnibuzzard1/wp-content/plugins/energizer/MetaWebLogAPI.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
omnibuzzard1/wp-content/plugins/energizer/MetaWebLogAPI.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
omnibuzzard1/wp-content/plugins/energizer/Web2.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
omnibuzzard1/wp-content/plugins/energizer/Web2.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/App.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/App.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/App/Base.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/App/Base.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/App/Entry.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/App/Entry.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/App/FeedEntryParent.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/App/FeedEntryParent.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/AuthSub.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/AuthSub.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/ClientLogin.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/ClientLogin.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/Gapps.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/Gapps.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/Gapps/EmailListEntry.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/Gapps/EmailListEntry.ps1
Resource
win11ltsc2024-20260709-en
Malware Config
Extracted
-
ps1
-
exe.dropper
https://api.wordpress.org/themes/info/1.0/
Extracted
-
ps1
-
exe.dropper
https://public-api.wordpress.com/rest/v1.1/
Targets
-
- Target omnibuzzard1/400.shtml
- Size 130B
- SHA256 913ab55c78156e9b4006ed1902c07cce83b69c10bee5dc59696fd73125c47d84
- MD5 67e180fd9e4a51ff64769439626e165a
- SHA1 f1d1e63ffbd7e163808cb6e983254cba4b74cce7
- SHA512 e413082e474ff14f138c301d618e205b9152132139169296435294d101ccd03e3a84ef049c124560e2fa3ec38539bed22e369631facfd87ad22fb633adedf568
- TLSH T1B1C09BF75090311DCE0291D44FC1F74575F4A145F5C58DB955D504EE100441AC4055DD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target omnibuzzard1/401.shtml
- Size 162B
- SHA256 960e116d7610326140516a0f53ea12227513b1df2af66be16fb4399681dedb52
- MD5 44560a083fefbe256344baf162cf468b
- SHA1 772a0aae8b6ced394cc48d0a3d5cbb6f51665f71
- SHA512 4119d9546bacdbce999b3afdffd6cb4c4e46c7b035396fa18f3fc314d0c40215c3630028eb89f6dad981f5d32558ebbb7a828572dc7301f091a30423c2448b77
- TLSH T18AC08CAB91CC380DBE03A3EDCFC2B142E4F8920889CD4DB8A2E580B32192860D7015A8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target omnibuzzard1/403.shtml
- Size 201B
- SHA256 9caf5cf0c743763989b929298b1c69f3f486086f73633bfedb3b4c307f7ba33c
- MD5 632d05c9c9a8b6bf3bc808e8d9f8885e
- SHA1 fac210d27c7e49c19db63cec1d469e529f45d967
- SHA512 56f2eb2ac8290f183e5a5929fa1db5a96ac56dbc8cbc2e95da6d9c7c6314014813f7d3e6f12c35978dc946bc0ad4893ae3177c49a0d987199b207c75b50c9635
- TLSH T177D0224FF18E303ECE0091802FBD3A9178B8AE1971DA07BCA886D0371081445C608659
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/akismet/_inc/akismet.js
- Size 6KB
- SHA256 aaddbe1d2bfd38166b592fa52156b2653f5ae44a2a30b200882b34e06d2b5017
- MD5 e4860e892829c49a92375371a95165fb
- SHA1 ddeea962d69661d8cc6a277f72f87b50aabb012f
- SHA512 ab0ae1d7f853dfcbbaaaaced576f740079fc378ccfac77de084297f005980543a38b967351be729998103d5314b6aeff4986b5d408ef6ccf0c706411e3dd5d16
- SSDEEP 96:FfpfXZQJrZNN2mJWlwtdst/ufxbad4HWBP+P7t3wZV8cK0nv/bWGbQ1i/CQ4mVuq:vXZ6Zj3olwtdVAQ7EVl7jEXsl
- TLSH T1F6D1A5C5E7EE142B99B3309CAD1F049AB53C4A718401885C7CBE49742DDAB393632E6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/akismet/_inc/form.js
- Size 700B
- SHA256 0515cbd1f8aee97e1c8e0d1d015ca96c86def13e90d2e73bf813072ccc23d531
- MD5 270f0cd7341bce6c2afacf2682e7690e
- SHA1 e9f1f100bb9e59ed8b060040c1695cb635e7a156
- SHA512 711a9142d102f16d5b2013a10c4756067d3265635650f7c92fb3a62378b7a4384761ce2b059a05a1c21638e55282ba09100d82dd0415279022d6f6f87920393d
- TLSH T154012B5B63FA3A319CF535A96A38A7BCB8E481741C093462580DCA32D168E91557BB8C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/akismet/class.akismet.php
- Size 46KB
- SHA256 d150db75783ef25df5b500b2d5e0c42d22562a9ec447a372223f7f9e78ce9b85
- MD5 31b3220d2a82a40171849dc6dd289e39
- SHA1 c34ab8c5396ead816d4e1a8cc40ade857f748e69
- SHA512 aaa3940a9156a41fb89fea7a7db5699e89a3300c91fb6bb7fd94c07c0561da47b96015bb96338513b539e806e9a4b7912a26052792ba42ee5fd92dc65515fc23
- SSDEEP 768:JT2JCrbLR9TvlLDLG4VT25KjRP6ceCHUZxEFOu9Q:JT2gbLR9TvBrPPPeC0j
- TLSH T19423A581F7EE976A11B33068AD09567AB62D47716208495CAE790C2C3D00F3AD73AF9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/energizer/MetaWebLogAPI.php
- Size 2KB
- SHA256 7d62155ade370dad9d4939d4642444eeb656be7bb4e8a71a0c5acfcd2ae4b343
- MD5 53bf57bc10e9385cc52e42099497c0a4
- SHA1 2637e3820f11cc0a450e430a703fe4d83906e493
- SHA512 517fa24615394bc8884aaeba62a71f5b868fc715b70c4281603381ac13f3847591aacf1736d62caa31f690d497520a2319d6ea677f177ade07e86d8ed7e8667d
- TLSH T1324157A93C4A6CE8B24321D0A67F5A22CC7CE836611641F2F2D9117EB5B5F0C43F426D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/energizer/Web2.php
- Size 9KB
- SHA256 b99923c81c7ee97af58bd69983e387d6c8c6cd6787248c274fdd66668caf33e3
- MD5 d389d8e1df856f5233e29a39a17c30ac
- SHA1 f1f15e3cc47583260219f1a3288aab63a09de06f
- SHA512 ec75671edd5251a797fc0a0ad7db91308ce77554f10381e2216f9276a1f45d265b9dad4013191797ee128baddf64317847ba1277fa4a7c49a1bfd6b79ec33c4b
- SSDEEP 96:GiOCldvKmiqJG3PmAtTFcPd84NWZD+Lfz2YP61zE6i6Ppx7hRCjENOvQJ6U7FUyC:GiOCKr/nTM5NWQfz2nWwxNxAp2OWTa
- TLSH T17212312539549952634AE0E0AA3ECD19BEFCD02312A950D1FCFC935DBB7390AD5F421E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/App.php
- Size 42KB
- SHA256 8c8f35726bd6f4bdd3cfe7e34ca28fb3a128e9d65498b67a3d02f77026fee391
- MD5 cb07a6b89f78978b5ee12b462ab4cebb
- SHA1 f045d8681a50d1cc697aa81320d6921724244597
- SHA512 4f4db98208708f9a4803d661d148ac39953504ea369cf6e2c1450f7a7d3ef1fcf999e5cc862bde2c681c61841a61c23f85b9b82ad7d52bfe473b4f74e563a4ff
- SSDEEP 384:bPQ580sTLvSq8InDu6DpD4l2a9ZrZ4Nkof7MbCBESKEaHPaWQP:zQtsTltrBNkwAbCKJ2P
- TLSH T14313924538D76272020370BCD34ED4C1F27AE52B736A501DBCAD4AF81FD1729DA61BA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/App/Base.php
- Size 18KB
- SHA256 e7353f5c302425d66a1e0830905c6e7e94ece7fc92bc41689e202f370fa66943
- MD5 6fe02333446f5cb2b5bf1caaf9ec74ba
- SHA1 0ab44b0e83111e1555ce7bb64a7e460ebf693350
- SHA512 63bb3fab1b9bccd472f1f81162b72b7f3c19c023ea101c0dd5f3c705fea192cf723fd680ed1edec57af7d038ce48720bcca967946ab195d75eb5e88fce9d0810
- SSDEEP 384:bP/kdN4S5sXZ0vMfTB+Mt5JyUYCwqib9ZgRCODaaaGwECSGwOevSTh:b/k4qsqsTB+EJbYvxZ7a5y
- TLSH T1C292861939D752B70627A47C578FB094E36AD20F21361986BCCD81B81F14F2891B3F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/App/Entry.php
- Size 11KB
- SHA256 ecefa55db2a8676796cfb004bbe45f9d95955bc735b900102f53f8c754e08174
- MD5 7dc84170cfd152c7f518ee87ff2dd511
- SHA1 d9470261cd03dba4b6a4a9291e94a1c6f5c5a1f7
- SHA512 9283fcc4d55a7d93588c5a35152dc49e11ee3f0b1a1e0510785823c8cef14c32a89621b1067d987a756ba2234fe28b3a4c773a75405dab8d5f06687243f8f558
- SSDEEP 192:bU6o2JkoIOnoJzJ69QjcQkOwpMVjEj8/o9YR7XqC1zt1MA1+J6f/1wo15:bufgO
- TLSH T1D632539139EA02B1110B74B8934FD4D5B196E917531A414E7CDE8BF89FB0F18B282DB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/App/FeedEntryParent.php
- Size 20KB
- SHA256 27171e6885e6e11061e7aaf38b18e32c876bb8de9a6d67abf358763144dc84ae
- MD5 4c162f0266e6c3ad923f919edbd712fb
- SHA1 9138ef39073d77065723ae5f6b3f4a0fdf8438df
- SHA512 e15eb60fc9521fa2e98261acb5f3f02317a4c8fd439b4cd0cb94c622c2f03857de9315d0463932f0df55c8a99c3beb28ecd16c45a33d7aaec3c5506e693cedc2
- SSDEEP 192:bU6onFoxTlx/nK3c6EqN1X/nwpYnD4tyRY64Ui0jJPt1E6YO13CXw1jZ1zDWDVHW:bDAyQolUGODWDpy++t6RBVwB
- TLSH T1F3A2A49839DF02F251173478874FD082F3E9EA1B621A154DB8DD8AB44F71F5CA261ABC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/AuthSub.php
- Size 9KB
- SHA256 1942dc26b55a17a88994d760c9c7ebe91645c972f009a4a27023478086e89874
- MD5 a69a35154c5f2824566eda20b01fd43c
- SHA1 6d7fc170ffcb909ec62ab9578b7a2bfa9c6d7695
- SHA512 11d1384631869760a4b2bd98d35c8a24880b8f74bc6c481c696b24a2a1d7c20187006c8edd582e4218b5493fc4fd5cc6ff64c8bbf34421e6a7dc0247b9332a67
- SSDEEP 96:bUGquoFoO2WCM86cCessXvodtTMoCL6SWPJCv51E5+ih/kee+y6yXowJVFkx:bUQoFo3N0agdtWzwCvHm+ih8D+hYoSYx
- TLSH T17F12465339D16033431365A4FA4ED9A4E576E90F728AB05CBC8D4AEC0F90A39DB9ED81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/ClientLogin.php
- Size 6KB
- SHA256 dd1dda41788bdd82935ae6e4665400e86ef7ece902246b245fe1accbef3f6071
- MD5 a3b677ae7e74c45523844ceefb301b38
- SHA1 50739d643e076584d129521f1bb8e103c3b7bf87
- SHA512 c38f9886084ecb5e88530ec5384605eb82252e16d3516b94aa4c64a2cba072f2d96c9a2b69969e9f2530d0cbe91ac58415e60a788ef411f35363cd0f109be9da
- SSDEEP 192:bUQo+SoSrWil6LjitYZOHoiHdTAi42ls6+qsMyqy5:b2xKjizPH1Szt
- TLSH T1C9D1B79176D91033020766F5B288E4E1E06BE80F735EF19DF45E1AE85FF0928D6B8E91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/Gapps.php
- Size 41KB
- SHA256 c80dc7a7d22fc5d933d7b05ba47155d26dde084f925f71eb84471256c929da47
- MD5 fa2c2b454197840efa7ea86b1d0b8207
- SHA1 451a96b93f594c8a04aaf3d05b60b397cf6d1393
- SHA512 27298d3a92c9951b8dcd268e23fc1d0f344625d3646e3777a50185e7852bc8ba8895ef8d236256c6630a97723979b22ab08633705eeb0c45b5da37792d8eee2f
- SSDEEP 384:briI5THdOH1JCbqbAva7gVujJJHkQLhpfCp3FC81Ly:SInOH1JCbqbAva7gVuj/RLhlCh08k
- TLSH T18E13435465CB1062428339FC93065492F0EBF91F7356514C789E0BB8EFF1F2BA9A289D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target omnibuzzard1/wp-content/plugins/energizer/Zend/Gdata/Gapps/EmailListEntry.php
- Size 6KB
- SHA256 4f4f128379a15ce040d054883a82adbd7cf56a3b87664da46a3908f1fabc4510
- MD5 9e767b716f9f2e08d1d59c08f4bb801e
- SHA1 e8bcb3e6b78e82590c8bc1150601af63b7272385
- SHA512 32bc5e2b5a4b864d19c415dc05777b9fbaf8980444b4fcc429a596f765e44de5021cde573350b7b4315328ac313512be18887ed80d0adb0758f35c32e16586e6
- SSDEEP 192:bUsolEmgDoRbzZ+V3Pun4BiKpOU1PTJ8OkDr11o3iCqOPr11D:bQK24BiKTwr6Pr/
- TLSH T1EBE184C8BEEA02A301932A7CB74A51D4D24AF41F2663145C359C8EFC6F30F5A76B1E91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10