0797ade38ac682982ed6ee9af0fe3bdc3c66fb1826431ce5df4ab5b1817ab11b

Sharing

Copy URL Twitter E-mail

General

Target
themes.zip
Size 8.4MB
Sample260905-ply54svanc
SHA256 0797ade38ac682982ed6ee9af0fe3bdc3c66fb1826431ce5df4ab5b1817ab11b
MD5 d929fb1fd2390b42c6c292dbdc087e58
SHA1 39604bb1ae522a4ec0ae32a4c4f6f6fc3f2398a2
SHA512 0c0d6b6bc42a2d2cac89a2235300058387d3e9b2dd693fb2b244120f916d8e3b3a59c7b64af71a506b1c0f5f8a0368a8e651ac8f57303af783cc155de9c484ad
SSDEEP 196608:YawetuCPt16KFWBXFrhFuCHzb0++E/pQLJyvJPnHXTuhA:YdzCPtYKcBXFrhFbzb0+lMJyvdCe
TLSH
T15096333B513EB5D2D22F7574A5EB824B238CA321F3579C4BE7E00A6938A544713B139B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  themes/agrios/assets/admin/js/widget_areas.js
- Size 3KB
- SHA256 53bb1aacc45b32bc314f6d58cb5966298e848c06f7c7925b9c1e43ddd5d666ef
- MD5 95840049f79740a4850568df598d9f1c
- SHA1 189627794fdafb2c3adf46cacb604809ecc83dbf
- SHA512 05204cb3ed3443410d9795cda61ca7855c4adc86c9aaed21e26e5d402e8b6f46c09107a621234ecf948932a1f74f06ea2423d211bf9275b5fe0dd034b5b6ce95
- TLSH
  T11561EF86F76C6A52016B32AE4CDD3AC5202C46FDE5014D96FCB8F5B00DC58CB5E32AB6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  themes/agrios/assets/fonts/core-icons/core-icons.svg
- Size 104KB
- SHA256 3d673a0470568a2b213ad0ceb8859ca53f1b4f77313d3aeee6d5635a18b3a3f8
- MD5 d8bd9687d8c8e89a7901b23fc12a024c
- SHA1 bfee8f5038b3b30ad48a46520ff4ef897d6e904d
- SHA512 f7bc4861ba47d6ddb879b517ee1b3d8727e2823720be292d17b7c8fdf237204a6e4624b26595426c557955db8ab07d1928f7ac0ba4d4692db4b1ed6a0eefb77b
- SSDEEP 1536:CyED9Fr/79U/IL2TF2Mx6vcB3eC/NOLwjeOe9bsUqZ4bI+OTfDuY4hD:Sv+xicPwsUUuZ
- TLSH
  T19AA3D7C8E73592F8ADC997DEDB241968341FE0FFB8761534C779CA681983E144A888D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  themes/agrios/assets/js/animsition.js
- Size 5KB
- SHA256 d92b201122631ff416856d478eb4e6b278f0a2c94e7ff6ee51e1f08eb80e6984
- MD5 17135e282a42a9e6ffb7623d02ab2b74
- SHA1 e6f9e92113d86726c612d3c4576bdb56ea9cc4b4
- SHA512 59beaf78b1614e59fc612b1de13f18a82a0b13a4d9e941200bd05ad7fb5640495e618fee0e787cfc6aa3530c1ab8267b8b8b7ea2b07f3dae7689c38da295d2f0
- SSDEEP 96:xQ57KPLAiE83Xz34YSA3YqhfHb1rnXXxfdyPDq8lMbVFTo1:x2WPLAiE23v33h5dScvu
- TLSH
  T170B175CC3141B559EBB7A6B1921F1307A13BA9D0C90094B8F47E9A8D9F21F446137BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  themes/agrios/assets/js/easing.js
- Size 3KB
- SHA256 79319233a754664981d13517f8354c819bb6fda693b4474656e7576afbb31333
- MD5 db534f441758f22861d93cc66e827ccd
- SHA1 9a198a453e8fea16e41ba28dc7b0238370cd130b
- SHA512 fa01119dc770b736fd70bb1fd5e7eacb01e78daf604586224f3516dde14cb6f66e4e9a582aa6d04aeba9fe4cfa0bc295bb64907797dfe1054761b9567616e197
- TLSH
  T1ED6169ACBAD3B106435437D2056731A7725E5AA8D4CD6A40E8F0588E6C3F23E41BFB9D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  themes/agrios/assets/js/fitvids.js
- Size 2KB
- SHA256 c3b008fbb60055f7c12c4cd6be10b208326b55ec7d14bfa45c15bcf3b23bcf8a
- MD5 88f13d849f4c31040b2dce38c9271292
- SHA1 1c9ca548f785f206a1a47b990ee2c28ff443b2a6
- SHA512 5f3d8ea163e6ac699d328e9e68b73974f9f006d2fac9166506638c3d906e7f69546fded375afd3262725ab29494d929b705e22012e2076f77adca2ed84fb9c41
- TLSH
  T1DB41838A3211783C16C115AE9978105CF29588D857DFC81CB0EFC8492B9DE042832FFF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  themes/agrios/assets/js/html5shiv.js
- Size 2KB
- SHA256 51a0082ec8d259a4e9aaccd40a0fb123a50a94076c3a7f096fffdbb96eae636f
- MD5 0fe3b1501d6822c469e5ead10fd292e1
- SHA1 f614e12a1c5d5b958970c65f1f56c01849fbab2a
- SHA512 be27c9b0b06f772a199ab29dc6b3bbdcbfbe8fb9e1cc3fd013794b531e5f6124bba79e8aa2832e9a1f915967a6608819626e9d9df9c6f0b3a5c411c647b43f1e
- TLSH
  T10451A5C57062604E875B00AB517E731FF9F41325596E5050D4A9DC7DF8B0CA482BFF55
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  themes/agrios/assets/js/main.js
- Size 14KB
- SHA256 f7048c03310986da12afdf6e67b3ad95369976a1ac98d19224b7ae9eef10d09b
- MD5 18155124cc3a7ec22e132f0ca9791811
- SHA1 388cc6f60b23b6b366dbc49904ee3054c497d15b
- SHA512 e953beb28499e056b00676a770e6afd0f4a0a00971441696acb0d64e9cef4a45e101bc98402877c8214b66c7b0be83ae6b45503710ed38c2ac30ccb91f036203
- SSDEEP 192:RtQJK6WEJK6rcfGxDqai9mZWCodFXaXETQzXDICCLLR93Ul59kk5kCwHwWRu0fV6:XQJ2EJYfuMrf8UdYkkSQ9
- TLSH
  T1B752711974F2207455BB74368BBF650036364097A809EF14BD1E1BA42F8937D62B2FED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  themes/agrios/assets/js/matchmedia.js
- Size 768B
- SHA256 6faeccdf28bd74d74fe8cb789a2049796c9856ce30263847a3f627ea5e291957
- MD5 b8ca4eebb57738cb9e341ac736ba4001
- SHA1 bc1daf742c77c59ec9e1fac493fc71cf17402af0
- SHA512 669214f56dcaedb76298ac62beb33e3f74f279b9ba7d9b4b6f711619cadac5c7857e7f497f26c95061ae474cee8087b92916f0f37eb487221216fe9717583dce
- TLSH
  T10001D039112B78693A515AE5732BE21EF8574C23A3146485CCCE897071A2D43D120DE6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  themes/agrios/assets/js/respond.js
- Size 3KB
- SHA256 7499ff0746c04b7c0d1055581a9b147c4a4948ff883ffedec1b84826ef8c284e
- MD5 d2f1622a5f25fe8abdfc572f8308cffc
- SHA1 9f9742cca997d1ffe294b02b91909559107d8ec4
- SHA512 0ef5f7824a60b6008bd7dd0dd9122ae33aacef58152543ae347c509ce3f689301d2d51aec30bd736fe72d86d7947f39dfecd8642489fd1204254777fa49ef5cc
- TLSH
  T12661C8957710351DA3EA3068987E8229E4B7ACA2642C5890D511C8E43C6CEDD14BFEFB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  themes/agrios/assets/js/slick.js
- Size 38KB
- SHA256 ed0f0ceb2b9449ffe9389d8c484bbd149709fb3e38d0cad564849a8e31a0991b
- MD5 c5134340dd87ee8dd11d2023cde1a7ce
- SHA1 82a4103d1c606bd9619d857e073e7769daf149b1
- SHA512 62b47dce22fe7e0f0462e5f59a10ed615dbc9c0f9d12d7aee75861b2676ebc9ab46f2fdd9b68791b0546594ffdffda01b5512d8bd892dfd41d8a2fdab9c86be6
- SSDEEP 768:mtkkAVro3v8wi9aNJNKYDvkW42dgYCQCWwQUMACcWWRf:WuaLNhNdPz3WRf
- TLSH
  T173039549D301276284EB21E62105C40EB3F7FB3CBA22C0E475C9D7DA646D94896D7BFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  themes/agrios/assets/js/slide.js
- Size 2KB
- SHA256 db9001ae8c210a93de8295777d0ae0d45a39b153f4f81e09cde13101d543b163
- MD5 3dbca03e09f18ea6dd533119efb95e35
- SHA1 64c97af8185a8a9a8c2fc2815e952d5bc38247e5
- SHA512 b80ad6e56961f9140585e1856a1f888808edd6091382fc0e369e3a4f74e64bbce83e6428bdd9b6cef673073bb607f34095fbea080bb5bb6b5be5bdfe5561cfdf
- TLSH
  T14151AE1E8811446F95BB637EDE279749EBA3232302654163BEFC69081F7042A26C5FFC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  themes/agrios/framework/class-tgm-plugin-activation.php
- Size 123KB
- SHA256 144357ab299fb920ca67c1eab3d8a4e4f4838c254ae8ed8aec7652195ce634d0
- MD5 b35ed21b39027ea08629532ebea1f1b6
- SHA1 045c4ad5b9cc74c6f9eaca1978bdf1068ddec709
- SHA512 d246eb7e9c5027c8fabcff936408807f35e87127bee7df77c0b902e6b9a3041387ec9e813b6f98aae404c83a84d0ab5c4c0cad85a99130d8a6d4e17ccd8511c9
- SSDEEP 1536:B4ngcNR/wWHejcUIZv+uG/W1ov5aUfZoZ3JBuax:q8cUI5U/2BUfZ4Jwax
- TLSH
  T11CC370C1E3CD767B243321857A4A42D565FC93B282208C95FCBEE9143F611BD437BAA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  themes/agrios/framework/customizer/customize.js
- Size 21KB
- SHA256 b648048314aa7b0519e74acbfad570fc9853d504b29eff28ba56424546ea23a1
- MD5 6acba11f65051bdef66a5d83d388badf
- SHA1 19bcbc719bea990ac2090f088038bf7af0feb686
- SHA512 9e2263109be948b68bc09b8de3b7b7ab6a228ecc47436a905632d645e781a2a79f1229ae5919fb60f460eaeaa379ed4562fbf59ab1bf0dbdf1045837d2f17d93
- SSDEEP 192:ut6Xh9V3NohOSeSvv5GyUFPsGLRGyLErKsFAvFaK5vkt0woJL/HpxwW4IRBJNp2f:0khiPv5LUFPsG9PLEr5cAKVa2JrjTpO
- TLSH
  T16FA2430CA3943DB172233A2D84DF7668169146EFD94E8E907D3CB5B69FC2AD90271DC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  themes/agrios/framework/customizer/customizer-controls.php
- Size 8KB
- SHA256 519829e3d16376352a16100f641e2a2a13371dc992370f4285ce208ca58c2f25
- MD5 49381a2a02b873e5383eb1d82395be02
- SHA1 93ba7a7177451196cec8a69dc130082bb2a8f925
- SHA512 5d8f8aa426c71518a9f5482d65ca463cf93451c063709a0dba7182b48eab35d2b045add78795e89641125c77a7be65557d65bc7a6de37d983935ffe389d41a1e
- SSDEEP 192:CmDtzpFHJYDOZ6aGtgl0qomy9bUfYnmHWfdDp2u/EzHVkYnYz:C8VpFpCOQaGil0qomyxUfYnm2fdVn/Ei
- TLSH
  T1C3021511FB6C7EB4805B38C55E9EC8CC749E623581021C5ABEDF4AB408D4D7C691BEBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  themes/agrios/framework/customizer/customizer.php
- Size 20KB
- SHA256 2f5765e551fdc2c540894c09c5edc771fcac1472994512123a50fe42b3ad20e7
- MD5 7d891b7af9ebf9d53e522fb79bf730ab
- SHA1 2971cc5cbc480cc7dec2bbf7734e716377d8d5e8
- SHA512 a5ca930d91ef904619bda91d8fef034315ae6e48d065ac866970fed44ae7f5e03dbfbbc46a36c5f3a7928160c55bc010a69a4e02662acae3c3111f96723d8a52
- SSDEEP 384:bf2db4b2BRStR01oUgG7Gdbmi/MmfP644zMyMYUwNsasrsJsUslsXsrfzcsfdsf/:bfC42uAgyMmNsasrsJsUslsXsr7cs1s3
- TLSH
  T15292A410ABADB1FE401770716E59864C523CD572A12168BEFEB92ABC5BE00BC41737F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  themes/agrios/framework/customizer/typography-customize.js
- Size 5KB
- SHA256 3f4c8dcac90ae0b627877f0d7d91c12146b7ada73be535aa1a39ba682b03fbe7
- MD5 c8ab681a79b7bd875b68c3da6961f602
- SHA1 a87fc19b006a10295416d4c08e04af741d1fb793
- SHA512 c45693262c6166efd3d2d62a9c7f2a292eff31df8464acbdab55c15ffc9a41c0becc3889d36a03e98cf3d40700a0122cab6c5af75d285522c82020612de62a92
- SSDEEP 96:sCwXhceSe5e56hpW+9IlJ76Ckj3wXOm09j+UhR:sCanS96nW+e776zj3wXOm09yAR
- TLSH
  T1FFB1224C23E05D70F163792A9C4F226C0931C1AB6D518C94B82C9A713FD48FF47B6AB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32