622deedcbb722866e5fb04bae573b1777ef62c1a87b65e6fc2995664f565e182

Sharing

Copy URL Twitter E-mail

General

Target
lingvico-language-center-training-courses-wordpress-theme.zip
Size 1.9MB
Sample260903-w4nwesba97
SHA256 622deedcbb722866e5fb04bae573b1777ef62c1a87b65e6fc2995664f565e182
MD5 4d82f8bc247fb6fa4c9d34e7eda99b1d
SHA1 9161835d98f8bab0d447e50aa00bb265a342c411
SHA512 39120b884c675461e62c889bc5bcb36d039a4f4123e1d893d0808a0ae471fadffcf7381d517b7cea63e594e1737bcd2276fec0a77c76e2e63d29e6c17eab9d23
SSDEEP 49152:URlRVLhFZJ6ECBk1vrzoWRihwmoy1h67qG8AMV:URlRVzZI9ezo6iqmt1071W
TLSH
T1569533B1C5585AF0CC1F397187D62E58B7E834B2E769808A85BED3C0B44F6D637683A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  theme/js/customizer.js
- Size 1010B
- SHA256 8dcf18a79305a9f435a234489665efecfda708136368129d7087ef27b34817b3
- MD5 ed1d032eb17653b74df209db5d18b10a
- SHA1 2d51b16a46374fb49ba54ed7d118cc63d3a0dd79
- SHA512 cca03a5cd3ca8cc8b01df6b9fd4cc3c16c9c252fc8bbbaf67ac19257180bc372dd0197ce3adf9ba9302eb0f1392eb7b72153b2058e13f860fb8aae970331e4a7
- TLSH
  T12411CEE9EF2C3272002F31449EAF84CD207E031EFC66461A6C83427C49659F98D06F58
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  theme/js/navigation.js
- Size 2KB
- SHA256 62e43e72fe01698a0bd6dca388f3fb3eabeb02f6ae8106f568ba43c707b87439
- MD5 b788376139fd03117cff611a4d363bf2
- SHA1 de60b2d1fc43876eba51868fed548f4d936bfabf
- SHA512 7756e07f1c0d91c11e5211f6a7e4bf82dd58ca0ce4c8ec67c49224ce7d3eb08aac565e5bfc06612fefc1a00755eae08f6bc2b8b28916bd934d05ba099e6fca7d
- TLSH
  T1A85123E7ABCD333706F930E3A79961EA33384076A94465766C5AC919240086413FFFDD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  theme/more-functions.php
- Size 19KB
- SHA256 e493e00585895a85ce2b9fead543ed1430c4625a33a1974aa0301ec1fa463fbb
- MD5 27ab4c0958df2e36473e6da17a58da34
- SHA1 4a27e576a8a2fe1fa4135f95113f22e978a71b80
- SHA512 841c6de532a2815c53a43f4ae27e88357ac6387bbce022339c61b4fd44a90daa1b7fb6ea54de458ce421e3cb161d3d9ee572caec76567533b1fa476614a9d951
- SSDEEP 192:8t9CdvDuTqXhIy7RLKQyEyxfjQyIZ3ytwCUYSCTTC1OtZY6vpxvpuozS/Ut+e/Cg:8tMJaZDO1mYEpxDFFlrq56
- TLSH
  T10792557438AF652201B3E57EA79F944D61A8C9534688CD107E7C12C86FD033CEAF6B69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  theme/revolution/assets/js/custom.js
- Size 3KB
- SHA256 d66784ec9f0dcf14a1bf1efba284cc508eb52ed8a737f9b9d27770dcb2c93e99
- MD5 d7598283e9e7f1b953349f53935e2804
- SHA1 7a16a3d72f48fcfa6783f7d100a7fec64e8849ba
- SHA512 d8c3305c8689369ace6a7787a0170b3df10afd5846960ea4f2296bcc52b31504ca0242ef83bbd22c41e4005238f446be55c2e86637bddaa8a8d8a2b7a0da86d4
- TLSH
  T1AD711058B47410516CF7B73DBB7A9200FB79212B84028251BCAE47952F7137A236AFCD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  theme/revolution/assets/js/customize-controls.js
- Size 321B
- SHA256 910c220bb16b14d91b1df0cf16c7bea7832847203af1cf7fb21c8fa47f13fd39
- MD5 83844f820b1ba6794de9273800d50aa5
- SHA1 5ab8b6c697ad2e5d3b93af3f45f9f5f5f6a3e15a
- SHA512 6575dfc475587721c3bd1915149a27a6b6629ab3e4966b2f7eefa597688055436577dcf1345ae2878d6079abef75c5cc85360f3739b7fccafba90ea612d7a9f4
- TLSH
  T1C5E02614B2AAB13982073533AA0F01CA813084032829649A607A04680FF883E012398F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  theme/revolution/assets/js/owl.carousel.js
- Size 87KB
- SHA256 db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466
- MD5 ccdf893e7d8b26933af0c336bcc3943e
- SHA1 ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0
- SHA512 818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510
- SSDEEP 1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv
- TLSH
  T1BF9393C5F36C261B422631785EAE23CE723D402AD911186F7CA8E9DC29D546C436EFF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  theme/revolution/assets/vendors/font-awesome-5/webfonts/fa-brands-400.svg
- Size 734KB
- SHA256 9b3a8965284abe4e3b7089ee9d525fa3b03b9daf6cce4020ecae377a2b0baf6c
- MD5 0c12ff655da379ab518f8afe0b3ffe15
- SHA1 b7fd3035e83c23c720c9f5957af31d7e288fb4eb
- SHA512 48f8f13f7743c2947464fcbdfe79b997f88965e19c565f71ebfc7ab13a74bee8ab4fe7557fc99ab6bbbcb8775b3dd56ea36f5f1d757f763bf285dba97e3c9cbd
- SSDEEP 3072:y3S5sUQ1ZmSqx7Ob4E0aj5vduucqmzKvPNK74HiI1qJsGMAC8VxOw2f3G+Isk7mP:L4GuufMf3z9
- TLSH
  T11CF4105CD3A0C2B8FBDA4EE9893A7ED6366B31FF39103254C278A56028727784C4D59D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  theme/revolution/assets/vendors/font-awesome-5/webfonts/fa-regular-400.svg
- Size 142KB
- SHA256 62f1f2b91663c306c7fbd35c720341eb713db51d2341d96d94824dc044b197de
- MD5 7b18e1bf54898a45b78a1a36806a4bc8
- SHA1 229deca2465fa9efc8c03d0ebeb9a01c1559822e
- SHA512 1b1a2a29dc2ac6957200f4da82d80f5cf24ca4a3526bdc2ca5af2f34ef76972306738950cd1b1e480b5637541257db2bec549145ecfd68bb54e0f78b187efa81
- SSDEEP 1536:Wskr+byNTRbWAn96fA0qBaQlwZPyVvD6UvDnP7qAkymy+fY+fYuqiwsJVPpn4v9R:wSmtOqe1U+bpJZqe/C
- TLSH
  T13FE32059E750D6BCFBDB4BD5863A7E94226A72FF35113260C778A1A0283273C8C9F548
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  theme/revolution/assets/vendors/font-awesome-5/webfonts/fa-solid-900.svg
- Size 902KB
- SHA256 25630646b1fbe9832bd3ef2b215fce2d553315f59f1c7b56f0196b0584d52c5e
- MD5 b45a634efe8a9e0a3938a86c5e216417
- SHA1 023bb481b65dd8cdeb8c424ca900f3866292bfb0
- SHA512 a081da14e4030594f6edf46a269e8bae8c576ff208a4c73e9f5068a88d7d84231c4922b6ef2144560ff023eae951527bd58b9788695b9cb63b964efffabdfdc8
- SSDEEP 3072:43fnf9sEdRqL8a13PlrYCuyikZ0dlQX5C+2hoF2rgDuP2wcYFg3/cPDyY1UURfbE:MhmCZrz0oS/
- TLSH
  T1AA15646CE36095F8EBC64BD58A367E5026AB65FF36213524C378B5A01C327BC4C8F598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  theme/revolution/inc/wptt-webfont-loader.php
- Size 17KB
- SHA256 715e66a4219d91f70540447863d970cdcacf0446465f86fde1295b77a5284926
- MD5 1a62bf2a724310d5bcfe29efdec77f71
- SHA1 2daab8ff816275f6d04557407a29fcdedd20f6d8
- SHA512 1242a256781e78ef54e1f89c4f98344dd7cf4bf2b77a9f23751a7af989da3f08e3bcc2e80ff08d00dcc70a2cac3cef6410d55582c1fb0e1869a107048fac93e7
- SSDEEP 384:rxfls3U/ipsGav+A1TDHylUamBVcpBjZkfpCZdUjjFXbW6mQCcAun:1fls3U/ipsLGA1HHDB2p4/lW6mQ5nn
- TLSH
  T1CF8265C5B38F755B3AD123D0BB39A649D0ADD23482292894BCE6D848376426C42FDF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  theme/revolution/template-parts/content-video.php
- Size 6KB
- SHA256 b49d48818ef7d8bea345d41c70c5e8fa64b43d65b1c9986311628b5b86c476f4
- MD5 12f133e3d4caa030f19a3c59dd54971f
- SHA1 d61404af67c2140b61a6defbc63293b48a9e191f
- SHA512 523bf8864b840a6f3f4b59ca2efedd4225fae27c215a0d83dd645ee4d733b4ae1059df2d21eb6624f10da02af9f2f4e50f71c9d5a7e989ca8263f4c05d113989
- SSDEEP 96:Ozgtb5uT5toAo7gPQiI2ZJ27JG20oA2ro9bYuX7D9r2R/opL9r2R/oa8Y2A25QbT:eeultU7g4KwEoPol6W66lG
- TLSH
  T155D140A1D79C0E768080F88E6410510E6E5E9DB661895CD9FCBF4ADCA383B183DE3E75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  theme/revolution/theme-template-functions.php
- Size 25KB
- SHA256 34ebabab5cbaf714c8d8a32626bb6ed9a54de4b5cdada6db9b61a89bd11d6c79
- MD5 01146dc8f1cac6bb7c3269358c164b2b
- SHA1 35e8381122d77b80cc5f20726185c4d99279b9c2
- SHA512 9fb1042834ed57336e8dca8a68d532597fb87ed1055003bcdbb95a8c2f5ba37234b7f6c69c6ad936cea05fa987f2c71ec2ebd0705937836ff21b111f7991e6f6
- SSDEEP 192:OAUpkvpMQNyzyafjQy7Z3yYHVTCUEaSCsaGB7lCb8olGOKZY2zpxvpuozS/UtAst:OAUPZDoHfnwiPYApxIYFaltHwh3D
- TLSH
  T1B6C25155289B602641639D7A57BB6C492268C653D648C8007D7D03C86FF133CEFF6BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  theme/wp-theme-deployer.php
- Size 14KB
- SHA256 0b8199ae9789fd441fe619d0db2549fe42c8848cc6676c7271425eb68db8b38c
- MD5 f18bf2b1a7683d9d5225e48bf6f70bcc
- SHA1 fb32a68e10e2258abc07744545ee6a5ed95d715f
- SHA512 f9d4cdc3b0f1978b277e30052ada3bec6bf9e6d8408fc06ded42c28297d79104ccf8fd8e27e158d3d6053fbf88e946179cfd124ddd02386bcf7a60fcc3938b45
- SSDEEP 192:eH1gM6njp3nl2W9SCyOhynDrnBnJjPlzoHLwVKEXGLby4i2on1V96JigQfmCpICg:CnWwjaVi2s1VkR
- TLSH
  T137622F7934EBA42531A3F4BC578F6824A569B02371089914BD9C73C85FDC22C86F6FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26