Overview
overview
10Static
static
10wordpress/readme.html
windows10-2004-x64
3wordpress/readme.html
windows11-ltsc_2024-x64
3wordpress/...der.js
windows10-2004-x64
3wordpress/...der.js
windows11-ltsc_2024-x64
3wordpress/...oad.js
windows10-2004-x64
3wordpress/...oad.js
windows11-ltsc_2024-x64
3wordpress/...ced.js
windows10-2004-x64
3wordpress/...ced.js
windows11-ltsc_2024-x64
3wordpress/...cks.js
windows10-2004-x64
3wordpress/...cks.js
windows11-ltsc_2024-x64
3wordpress/...ent.js
windows10-2004-x64
3wordpress/...ent.js
windows11-ltsc_2024-x64
3wordpress/...orm.js
windows10-2004-x64
3wordpress/...orm.js
windows11-ltsc_2024-x64
3wordpress/...ags.js
windows10-2004-x64
3wordpress/...ags.js
windows11-ltsc_2024-x64
3wordpress/...ort.js
windows10-2004-x64
3wordpress/...ort.js
windows11-ltsc_2024-x64
3wordpress/...ut.svg
windows10-2004-x64
3wordpress/...ut.svg
windows11-ltsc_2024-x64
4wordpress/...nd.svg
windows10-2004-x64
3wordpress/...nd.svg
windows11-ltsc_2024-x64
4wordpress/...te.svg
windows10-2004-x64
3wordpress/...te.svg
windows11-ltsc_2024-x64
4wordpress/...ts.svg
windows10-2004-x64
3wordpress/...ts.svg
windows11-ltsc_2024-x64
4wordpress/...ms.svg
windows10-2004-x64
3wordpress/...ms.svg
windows11-ltsc_2024-x64
4wordpress/...cy.svg
windows10-2004-x64
3wordpress/...cy.svg
windows11-ltsc_2024-x64
4wordpress/...ge.svg
windows10-2004-x64
3wordpress/...ge.svg
windows11-ltsc_2024-x64
4General
- Target wordpress-6.4.2.zip
- Size 24.8MB
- Sample260823-gyw8aatcmd
- SHA256 24dac66b4aab05521e0a0eb536ff23fcfdb82f940fc6c380735c2d54fa01f311
- MD5 52ca3209e299e3ace56b4fa5f8f85104
- SHA1 b80308591542a829384fdb6d0e3fbfc7170085eb
- SHA512 4354176b3ef65fdb06f31b3844a5e8e28e6e42bf5a874bbec487c388a8f4af465ca6d836acd041934659b15be97d49d4036e46aa4832236549c0abcb284f92c8
- SSDEEP 786432:YcgBVanER6S9i6MCvc0JRttiUjGMQ3xiI3Z:YRRu6MAtcMUQqZ
- TLSH T1B4472235F63E4A42C68D4E34DBDD5204E0AE4127E20E164A9B395BC79BFC59E3E32346
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
wordpress/readme.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
wordpress/readme.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
wordpress/wp-admin/admin-header.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
wordpress/wp-admin/admin-header.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
wordpress/wp-admin/async-upload.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
wordpress/wp-admin/async-upload.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
wordpress/wp-admin/edit-form-advanced.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
wordpress/wp-admin/edit-form-advanced.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
wordpress/wp-admin/edit-form-blocks.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
wordpress/wp-admin/edit-form-blocks.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
wordpress/wp-admin/edit-form-comment.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
wordpress/wp-admin/edit-form-comment.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
wordpress/wp-admin/edit-tag-form.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
wordpress/wp-admin/edit-tag-form.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
wordpress/wp-admin/edit-tags.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
wordpress/wp-admin/edit-tags.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
wordpress/wp-admin/export.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
wordpress/wp-admin/export.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
wordpress/wp-admin/images/about-header-about.svg
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
wordpress/wp-admin/images/about-header-about.svg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
wordpress/wp-admin/images/about-header-background.svg
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
wordpress/wp-admin/images/about-header-background.svg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
wordpress/wp-admin/images/about-header-contribute.svg
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
wordpress/wp-admin/images/about-header-contribute.svg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
wordpress/wp-admin/images/about-header-credits.svg
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
wordpress/wp-admin/images/about-header-credits.svg
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
wordpress/wp-admin/images/about-header-freedoms.svg
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
wordpress/wp-admin/images/about-header-freedoms.svg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
wordpress/wp-admin/images/about-header-privacy.svg
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
wordpress/wp-admin/images/about-header-privacy.svg
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
wordpress/wp-admin/images/about-release-badge.svg
Resource
win10v2004-20260513-en
Malware Config
Extracted
-
ps1
-
exe.dropper
http://api.wordpress.org/plugins/info/1.2/
Targets
-
- Target wordpress/readme.html
- Size 7KB
- SHA256 9cfb57e8855c2c72998c724d512914dcabd04aa7e7b38a23bd70a2e657bfaae8
- MD5 bb5d8bd5e5cbf6e788df2b613656e61c
- SHA1 3d0694d6cccd12395ddf567009ec3dd762759b1c
- SHA512 a149cb7f7dae4d7e410e7d2f0435fdd6f4cb7ea953bb619347bfd8e51e6c4f7168adff09eb3de9a7f2fd0ee432095d35218b83b40780ff9183887379cc97d5c0
- SSDEEP 96:4UK8pz1E/4kF5kyJ0ifN8uueKQetcU4wtcwTKuID9kKCZxjD+9+25tdLwGg1IZzj:68/SVPmuF3C/Da7d0euCidI
- TLSH T131E1856BB540537A135143B1600621BEB33300BEB79D4646549BE62EBBA23B4AF7F0DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/admin-header.php
- Size 8KB
- SHA256 e0328ca96981b646f8616b7571fea5997070e66948855abf88c751b6cc83e19b
- MD5 0a5784e5a6ecc175fddef9594b96c7f9
- SHA1 ffe30cf6ba19729c853dda8a0807efdc81538b0b
- SHA512 5afac0987a2be56aab255bc4f413530d34784243248c5384a723ccb945c0b3e36079cdb92830200e32808a0d8e812ee4821dbfe69547bda7c2c8f51f06b321b6
- SSDEEP 192:h/H43xQB/m4TxU4ddqqQsY65ifPyWoAXZPXtSoVC46q:943xQB/mKyYd5iDSoVCXq
- TLSH T1EA1255452DF2672388A22DD166D1D278762B420BB3D52855BCF941F89B4136C8EFAFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/async-upload.php
- Size 4KB
- SHA256 94218d2d3befdb7094e4162a0b0c5fcd71fd18838fb9fb9f11339684d8f5c8fc
- MD5 608db0e1b04d6cd25b8671d6960f63a5
- SHA1 1b4c8b00350df98507d5a27ab42786f6b761d56d
- SHA512 94f5adb735032f9bd5e70fff957955beaf47523a5a2c2d7bf90bb1ffb8dd99113a8c05938c05129a17894a074a07257b550ec7e1f45ef840019bf0f7f24ae91b
- SSDEEP 96:tKikv2f2NpGSrpPaxACeP8M4RoOqg754Vo6vngDnVovMmDhscCkRejE0ZDGVli9C:t7Vf2gx4P8HCil+fXmE0ZDGF
- TLSH T1B9A175F1A2AC6766513370C45649842C649DCC37B480AC99BC2EE4E0D684D2EF4FAEA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/edit-form-advanced.php
- Size 28KB
- SHA256 a5ba353c83c88094e0c22704c109e5a626f3a48877b45e17818a52e88574e7a4
- MD5 b521342267e17c847353ebd1761d8fa0
- SHA1 682824dd1c3f0d1de1505b11c4f7821cf67a2bc4
- SHA512 11d71d91d472e97644285083725a18df97af7a7fed149df5f3607a5f5d0e20d28c4d061c5588391900ce1e84c37c63debe59ff50010a521de3d8f48e6c68420b
- SSDEEP 768:D9VrD7o895VXfsX3EeqKb1ScAoC0Dm8gIL+t2Oa6QEmbWZnSjmB:xVrD7195Zf83Eeq61Sc7C0Dm8gIL+t2A
- TLSH T149D2F856F1F4127159131682F8C8927CEEBD8055738168EAFCBE54ECB783272453AFA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/edit-form-blocks.php
- Size 11KB
- SHA256 351168b7db34bf78cc51e68935d804510366afcf40438b3aef908fa63f4e30be
- MD5 e0f3608f8bd654e24b041946a1b1746f
- SHA1 237da941c94df5425d45ab858bc6c4198b055f81
- SHA512 39df62cf77b9fdf6d54ea66cd8662b9620fae74e9427fe9b62fc0ad93241c107503ad2f108b5aec223d8e78f89cacd61de1d26d5569c027f79a9e0f59952a730
- SSDEEP 192:C0DKaZp9AVx+2BjZH3f3DOBaGbJF+0x23MN259UDqTk:NKaZp9AVxPDOFrKMeoqTk
- TLSH T18E421817A4BCA37900332695DC1C89F9AC7508867341A4E1F9FE9E886B0B1A58731FF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/edit-form-comment.php
- Size 8KB
- SHA256 b994079a3e1cbdb637866dc7f22f9c1c645f4186633ea91822bde117e9b78e3a
- MD5 05a28a3e49baaa396a40730b08e76ff9
- SHA1 f30c37b3481833953d5ed7647930bb879fcfde8a
- SHA512 625402537ace95e3d1fe167009e47d3b60ee0c8db8eb16e06ab9e7c49f625678f879a66e898b1759a811167a0e0441929313a6ad680e50e3ed4d8031e1b6bfaa
- SSDEEP 192:TosxqDLyvTQ/fuBU/albNBNRj8yV9p/4iCtoW0MLexXLtkYyPyVKL:TosxqDLsTQ/fIUilHjBCSW08rPyc
- TLSH T17D02769390E44721C0A33CD12D9867B939C88709E2491C8CAABCC5D86F50FA66D36B9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/edit-tag-form.php
- Size 10KB
- SHA256 27a335e58616ff80d1dfe528f4cea75885936ab9f7d65996d89d9b8fac9f3ca4
- MD5 e0d8a083d7ea497c37e7eaf782c74dbc
- SHA1 dc90d3f3025a6781def61e346b75ef514122bd3e
- SHA512 cda6c41568279ce1f9e844e8f62dc7f540c41e2aaa5c2b3016a337f658d2aeaef8b0f461e9cff5bb496b76b967e3196529e561ce2e50fe4c31b0674ae14a63b1
- SSDEEP 96:T4qPBwi8wvR7+VVbmaE2azn47Nve21Jiysa/xdT+g7KA5HK3EIx7a558ZF8C9q+3:sqZKF4zn47kyBzJqVRaw91YI
- TLSH T14B2273B769ACA63055530EC03CD2B7453FBDDE2976010CA9FA4FD8989725AE2493BF40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/edit-tags.php
- Size 21KB
- SHA256 7d2fcf89ebb54a9851833c6c04fc4be83e0dcb54cb49887ff41b135ea99ecdb2
- MD5 98be5e12cc0a3f908e9880e84ca002d8
- SHA1 7d5b248b27e9c09b2456267fc5c72501c325900f
- SHA512 2dd12a93488ef300fb04a722f102a7223f1f5aa64ee04b21f2f174011e9bd56d8cd2368b8ebee6649098c3c7611571f10ba4f7ad83a52c769ca3e74876fb0917
- SSDEEP 384:KQifr45FN3CfXgsqljfMrxgrZU46rPhkaLrANi8:KQ7bU1qlLMrxgr2VLrAQ8
- TLSH T1BEA2F7EAAA9C527013131E80BDD8F35A7E7CC92432411CFA799CC458FB506A64B3AF84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/export.php
- Size 11KB
- SHA256 715fe5cc85b8b66cd9206e81b1001e43046370c13249836612e1f7ee0bcac42c
- MD5 9faa17bfa6277da29e2916b28408915d
- SHA1 4330fef643c12a9da1de239732994d0b4f7d6597
- SHA512 2ebfae639128201f809b052374b224c6152f20aeaaa7eda1b7cc7db9880bec8f169b4b5091fe83f59684d30e4c496d59d55ffd9fa1307cd8c154499aea8af847
- SSDEEP 192:f2I9QVgBMvCqjyjNgBtshhIzkeBs3QB8ToFriOG1XspIEm/P0R:eqQVgCv4jXhhxM3BZg4m30R
- TLSH T1773275A3F5EC4B31849B28D416A497F13BEC890591016CC6F41D46ECA7D1D6D8C3EEEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target wordpress/wp-admin/images/about-header-about.svg
- Size 1KB
- SHA256 9ef97ae66cd7713fe9056e146448dafaf4ba3779e3bc24a5611697d6e31cacb5
- MD5 6408cd8ec00b2e79c6d046af86e91075
- SHA1 461db081dbb7c8c72816579b839e969b7603d74d
- SHA512 65dea34edb90de0c034e3f0940abe3a18ead301eb98f92b4c0b18dfc3d33a3616309d24909ea50ef732af2f63b83ec155f379b38719752a336fc0c8999d7a735
- TLSH T17321ABEC91AC899CEC02CF988A3CB4C5237DE5FF71C410E03A096AED610A8A5CE43A44
- MD5 SHA1 SHA512 TLSH
-
- Target wordpress/wp-admin/images/about-header-background.svg
- Size 662B
- SHA256 c3a50833c8837e378d6d4346f90c09d2368d88bda9cfe5ef19fdcea815354cb2
- MD5 18199bba09c7b71706960c17a5785f52
- SHA1 801ed44e88cd71812e095868ed41025daa2cdf2f
- SHA512 a337eaf2981508026829c9d949edf4cddd572bdc9864c8dc64e7c06de46f4f42a765afbafa168a25b4f4fe97c310dd9aac84c0a0e00b09ea1770af25e29329c8
- TLSH T1550199D4A5E8887CCD44021DD308E14B1B2BF0EB8700422070452B9D6A489B63E9363D
- MD5 SHA1 SHA512 TLSH
-
- Target wordpress/wp-admin/images/about-header-contribute.svg
- Size 1KB
- SHA256 c39d39e999a122af1f2d358f4387e89b7eeb22f5dc55a8a6353c49a99bb35d5b
- MD5 f0f7301a85000a7924d0350c12072392
- SHA1 5cd0a2c710e6013fb99fb2aa969fb48acedfaef4
- SHA512 5373ae97b405baad85b9404a298bbc71e1f050bb78a7b58f98c1d41ef407feea09233f357adcb00dbe7ba6456e5f90b54e5dbcdd7136e53ad2e59457d39c0a99
- TLSH T12B2188EC91AC899CEC02CF988B3CB4C5237DE5FF71C410E03A096AED610A4A5CE43A44
- MD5 SHA1 SHA512 TLSH
-
- Target wordpress/wp-admin/images/about-header-credits.svg
- Size 1KB
- SHA256 3a2a12e9f9604737e6712816b47441208a1f9495888f083f0d993f553dc4bd45
- MD5 9df35232ff4906473c02da18772739bd
- SHA1 d126c9899e9af9972281bac321185f3d00bb6e21
- SHA512 f1be241aa8ebe3d0d9475a3aaf3afb3095d19901faf6a1694af7da2a525c89cb50c674c3755eb3d62ea8d8f5e5afbd3bd796092f1e828e48f1bb20dcf357c82f
- TLSH T125217BEC91AC899CEC02CF989B3C74C5237DE5FBB1D410E03A5D5AFD610A4A5DE43A44
- MD5 SHA1 SHA512 TLSH
-
- Target wordpress/wp-admin/images/about-header-freedoms.svg
- Size 1KB
- SHA256 7178b98be15f12e6abc8d47b4f6137f1a7bbb06e0db61d701f8c1231c9ed164f
- MD5 be6d9e75e824a86de9f1db3b59edd278
- SHA1 89bf6b89315af57657978fddbad8a10f76882176
- SHA512 28fee814ddbc769ca8d1433f32de5a90307838ebca095b1103c3ce0e4a200e3ab061caac0a0491ec0ecfaf84349bee2a1101ce3af9de285a96c61ed73c5cb006
- TLSH T1F12168E891AC899CEC12CF988E3C74C5237DE5FF71D410E03A496AAD610A4A5DE43A44
- MD5 SHA1 SHA512 TLSH
-
- Target wordpress/wp-admin/images/about-header-privacy.svg
- Size 1KB
- SHA256 cbfad40435769efaf6a297c60b9f37619e7b35f0b540d57b7df9f6cb713d3fed
- MD5 370ec3c5eb969aaff43cffe432312f40
- SHA1 32f5638585b2a8342a1a7624ff90c0bfcb7591af
- SHA512 0ae68f92d1bf05c522783c3c7117716982eb277bf5523901b9307bc4cd7d15bfcc80bb332193a07dfb11b9c7cddbb3e1073952c4b5153a7661024b6e1a7f5997
- TLSH T1662168EC919C899CEC02CF9C8A3CB4C5237DE5FB71D410E03A195AED610A4A5CE43A44
- MD5 SHA1 SHA512 TLSH
-
- Target wordpress/wp-admin/images/about-release-badge.svg
- Size 2KB
- SHA256 9edf4b6f77af1fbdc23e4f295e10236525da915d9bd83da6cbdb48a04767e2b7
- MD5 ba936ee3db219dc17b7fc749fe3fd88c
- SHA1 3796a21b67b7eeac7fbf1e0989a5d4554f869921
- SHA512 33d794f5a4e8dc3a9da8975bd27aa8724c17fa9280da751a688a9a62e0dd7c9f78d804f5ec1dc0e5374a929e3cdef1dbabf5a9a9d18fa7ccbae9592664d05a52
- TLSH T15B5120FC6AD464D4DA44C7D3EF1A10E9710E51BD7A820340C614BB293E83886DCA9EAB
- MD5 SHA1 SHA512 TLSH