General

  • Target
    wordpress-6.4.2.zip
  • Size 24.8MB
  • Sample260823-gyw8aatcmd
  • SHA256 24dac66b4aab05521e0a0eb536ff23fcfdb82f940fc6c380735c2d54fa01f311
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    http://api.wordpress.org/plugins/info/1.2/

Targets

    • Target
      wordpress/readme.html
    • Size 7KB
    • SHA256 9cfb57e8855c2c72998c724d512914dcabd04aa7e7b38a23bd70a2e657bfaae8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      wordpress/wp-admin/admin-header.php
    • Size 8KB
    • SHA256 e0328ca96981b646f8616b7571fea5997070e66948855abf88c751b6cc83e19b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      wordpress/wp-admin/async-upload.php
    • Size 4KB
    • SHA256 94218d2d3befdb7094e4162a0b0c5fcd71fd18838fb9fb9f11339684d8f5c8fc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      wordpress/wp-admin/edit-form-advanced.php
    • Size 28KB
    • SHA256 a5ba353c83c88094e0c22704c109e5a626f3a48877b45e17818a52e88574e7a4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      wordpress/wp-admin/edit-form-blocks.php
    • Size 11KB
    • SHA256 351168b7db34bf78cc51e68935d804510366afcf40438b3aef908fa63f4e30be
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      wordpress/wp-admin/edit-form-comment.php
    • Size 8KB
    • SHA256 b994079a3e1cbdb637866dc7f22f9c1c645f4186633ea91822bde117e9b78e3a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      wordpress/wp-admin/edit-tag-form.php
    • Size 10KB
    • SHA256 27a335e58616ff80d1dfe528f4cea75885936ab9f7d65996d89d9b8fac9f3ca4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      wordpress/wp-admin/edit-tags.php
    • Size 21KB
    • SHA256 7d2fcf89ebb54a9851833c6c04fc4be83e0dcb54cb49887ff41b135ea99ecdb2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      wordpress/wp-admin/export.php
    • Size 11KB
    • SHA256 715fe5cc85b8b66cd9206e81b1001e43046370c13249836612e1f7ee0bcac42c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      wordpress/wp-admin/images/about-header-about.svg
    • Size 1KB
    • SHA256 9ef97ae66cd7713fe9056e146448dafaf4ba3779e3bc24a5611697d6e31cacb5
    • MD5 SHA1 SHA512 TLSH
    • Target
      wordpress/wp-admin/images/about-header-background.svg
    • Size 662B
    • SHA256 c3a50833c8837e378d6d4346f90c09d2368d88bda9cfe5ef19fdcea815354cb2
    • MD5 SHA1 SHA512 TLSH
    • Target
      wordpress/wp-admin/images/about-header-contribute.svg
    • Size 1KB
    • SHA256 c39d39e999a122af1f2d358f4387e89b7eeb22f5dc55a8a6353c49a99bb35d5b
    • MD5 SHA1 SHA512 TLSH
    • Target
      wordpress/wp-admin/images/about-header-credits.svg
    • Size 1KB
    • SHA256 3a2a12e9f9604737e6712816b47441208a1f9495888f083f0d993f553dc4bd45
    • MD5 SHA1 SHA512 TLSH
    • Target
      wordpress/wp-admin/images/about-header-freedoms.svg
    • Size 1KB
    • SHA256 7178b98be15f12e6abc8d47b4f6137f1a7bbb06e0db61d701f8c1231c9ed164f
    • MD5 SHA1 SHA512 TLSH
    • Target
      wordpress/wp-admin/images/about-header-privacy.svg
    • Size 1KB
    • SHA256 cbfad40435769efaf6a297c60b9f37619e7b35f0b540d57b7df9f6cb713d3fed
    • MD5 SHA1 SHA512 TLSH
    • Target
      wordpress/wp-admin/images/about-release-badge.svg
    • Size 2KB
    • SHA256 9edf4b6f77af1fbdc23e4f295e10236525da915d9bd83da6cbdb48a04767e2b7
    • MD5 SHA1 SHA512 TLSH

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
10/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

adwarediscoveryspyware
Score
3/10

behavioral20

adwarediscoveryspyware
Score
4/10

behavioral21

adwarediscoveryspyware
Score
3/10

behavioral22

adwarediscoveryspyware
Score
4/10

behavioral23

adwarediscoveryspyware
Score
3/10

behavioral24

adwarediscoveryspyware
Score
4/10

behavioral25

adwarediscoveryspyware
Score
3/10

behavioral26

adwarediscoveryspyware
Score
4/10

behavioral27

adwarediscoveryspyware
Score
3/10

behavioral28

adwarediscoveryspyware
Score
4/10

behavioral29

adwarediscoveryspyware
Score
3/10

behavioral30

adwarediscoveryspyware
Score
4/10

behavioral31

adwarediscoveryspyware
Score
3/10

behavioral32

adwarediscoveryspyware
Score
4/10