Overview

overview

10

Static

static

10

processwir...dex.js

windows10-2004-x64

3

processwir...dex.js

windows11-ltsc_2024-x64

3

processwir...all.js

windows10-2004-x64

3

processwir...all.js

windows11-ltsc_2024-x64

3

processwir...0.html

windows10-2004-x64

3

processwir...0.html

windows11-ltsc_2024-x64

3

processwir...ain.js

windows10-2004-x64

3

processwir...ain.js

windows11-ltsc_2024-x64

3

processwir...fig.js

windows10-2004-x64

3

processwir...fig.js

windows11-ltsc_2024-x64

3

processwir...eme.js

windows10-2004-x64

3

processwir...eme.js

windows11-ltsc_2024-x64

3

processwir...rk.ps1

windows10-2004-x64

6

processwir...rk.ps1

windows11-ltsc_2024-x64

6

processwir...fig.js

windows10-2004-x64

3

processwir...fig.js

windows11-ltsc_2024-x64

3

processwir...ery.js

windows10-2004-x64

3

processwir...ery.js

windows11-ltsc_2024-x64

3

processwir...xt.ps1

windows10-2004-x64

6

processwir...xt.ps1

windows11-ltsc_2024-x64

6

processwir...ug.ps1

windows10-2004-x64

6

processwir...ug.ps1

windows11-ltsc_2024-x64

6

processwir...ld.ps1

windows10-2004-x64

6

processwir...ld.ps1

windows11-ltsc_2024-x64

6

processwir...fo.ps1

windows10-2004-x64

6

processwir...fo.ps1

windows11-ltsc_2024-x64

6

processwir...up.ps1

windows10-2004-x64

6

processwir...up.ps1

windows11-ltsc_2024-x64

6

processwir...ps.ps1

windows10-2004-x64

6

processwir...ps.ps1

windows11-ltsc_2024-x64

6

processwir...lds.js

windows10-2004-x64

3

processwir...lds.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    734c238f05ddf16d0c3825b855890d92e59b7b10fc2d5e44cd20c89ab29f117c
  • Size 8.5MB
  • Sample260928-e679eawvcz
  • SHA256 734c238f05ddf16d0c3825b855890d92e59b7b10fc2d5e44cd20c89ab29f117c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
discoveryexecution

Malware Config

Extracted

Language

  • ps1

Source
URLs
  • exe.dropper

    https://processwire.com/modules/category/file-validator/

Targets

    • Target
      processwire-master/index.php
    • Size 2KB
    • SHA256 6083e643a0ca63b4512de9462aa17ab61b975abd052409d6267fe30740dd6b51
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral1behavioral2
    • Target
      processwire-master/install.php
    • Size 62KB
    • SHA256 141185cd4065b59d727cedd2de0755a5b55f1ddb28d2088a4c509a32e8a50f3c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      processwire-master/site-blank/templates/errors/500.html
    • Size 298B
    • SHA256 cadbc65f11f9219344d672c992b13f0950089e13e04967e3b5839ccfa4e1e61c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      processwire-master/site-blank/templates/scripts/main.js
    • Size 19B
    • SHA256 4b390cf5b46148ff475f6aa1519fdae72ee055a17e087056597d56a1490771ad
    • MD5 SHA1 SHA512
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      processwire-master/wire/config.php
    • Size 68KB
    • SHA256 a6401c5ac42d7d948947392f228d2b18edd0c79b1065083d81879fb4c2e4491d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      processwire-master/wire/core/AdminTheme.php
    • Size 14KB
    • SHA256 0e8746c0d2eaff2f915e1859f91e6476073bfad7874a9072ea34396ca09db294
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral11behavioral12
    • Target
      processwire-master/wire/core/AdminThemeFramework.php
    • Size 26KB
    • SHA256 14aa0cef27a67a49588bfb375a2d3eb3ab54a60eae46849d23b4f974ae9cad6f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    execution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral13behavioral14
    • Target
      processwire-master/wire/core/Config.php
    • Size 50KB
    • SHA256 856f078c3235dc39b5a3e3bb85817c8af666d5bb1fa7b5128ae41151a1963ecd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral15behavioral16
    • Target
      processwire-master/wire/core/DatabaseQuery.php
    • Size 20KB
    • SHA256 d764a852a5c1af693cff4887e8731ab639579cfa6b7c378d3528cceb1cc6a2fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral17behavioral18
    • Target
      processwire-master/wire/core/DatabaseQuerySelectFulltext.php
    • Size 41KB
    • SHA256 49d571e7406ce34a2ba75c0b6ebb3295492f40dc049a3b748b572fb2bd7c7aa0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    execution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral19behavioral20
    • Target
      processwire-master/wire/core/Debug.php
    • Size 17KB
    • SHA256 ca1a544911ff5d678c3712fb85ecac48e4a70d33d60c6ab1deac3354b01e51ec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    execution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral21behavioral22
    • Target
      processwire-master/wire/core/Field.php
    • Size 48KB
    • SHA256 9690eecc397c3ced8c64dbdf196fdb8b0e65219747236aa8f7b08317ec9564fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    execution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral23behavioral24
    • Target
      processwire-master/wire/core/FieldSelectorInfo.php
    • Size 6KB
    • SHA256 dd9d9bab1d899cec3da2bae411fd1b06d4f99d3a6cc1bd7895b65080781c8928
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    execution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral25behavioral26
    • Target
      processwire-master/wire/core/Fieldgroup.php
    • Size 22KB
    • SHA256 475e6de586c84659d03ffcf6f499ced4204c49df2e1570f7fd506172e6b360af
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    execution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral27behavioral28
    • Target
      processwire-master/wire/core/Fieldgroups.php
    • Size 18KB
    • SHA256 f4ee53817e5a5dc543a06938d6ddcc011ea3cc260a00ac597520022d062c0b7b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    execution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral29behavioral30
    • Target
      processwire-master/wire/core/Fields.php
    • Size 44KB
    • SHA256 e4b66405cde10f6bf85438462ee442451c3130a8fb919c07c38267779c600c13
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
10/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
6/10

behavioral14

execution
Score
6/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
6/10

behavioral20

execution
Score
6/10

behavioral21

execution
Score
6/10

behavioral22

execution
Score
6/10

behavioral23

execution
Score
6/10

behavioral24

execution
Score
6/10

behavioral25

execution
Score
6/10

behavioral26

execution
Score
6/10

behavioral27

execution
Score
6/10

behavioral28

execution
Score
6/10

behavioral29

execution
Score
6/10

behavioral30

execution
Score
6/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10