Overview

overview

3

Static

static

mdapi/PHPM...DME.js

windows7-x64

1

mdapi/PHPM...DME.js

windows10-2004-x64

1

mdapi/PHPM...ler.js

windows7-x64

1

mdapi/PHPM...ler.js

windows10-2004-x64

1

mdapi/PHPM...OP3.js

windows7-x64

1

mdapi/PHPM...OP3.js

windows10-2004-x64

1

mdapi/PHPM...MTP.js

windows7-x64

1

mdapi/PHPM...MTP.js

windows10-2004-x64

1

mdapi/admi...ig.ps1

windows7-x64

1

mdapi/admi...ig.ps1

windows10-2004-x64

1

mdapi/asse...7ol.js

windows7-x64

1

mdapi/asse...7ol.js

windows10-2004-x64

1

mdapi/asse...dex.js

windows7-x64

1

mdapi/asse...dex.js

windows10-2004-x64

1

mdapi/asse...ut.ps1

windows7-x64

1

mdapi/asse...ut.ps1

windows10-2004-x64

1

mdapi/asse...ple.js

windows7-x64

1

mdapi/asse...ple.js

windows10-2004-x64

1

mdapi/asse...elp.js

windows7-x64

1

mdapi/asse...elp.js

windows10-2004-x64

1

mdapi/asse...ace.js

windows7-x64

1

mdapi/asse...ace.js

windows10-2004-x64

1

mdapi/asse...ing.js

windows7-x64

1

mdapi/asse...ing.js

windows10-2004-x64

1

mdapi/asse...rt.ps1

windows7-x64

1

mdapi/asse...rt.ps1

windows10-2004-x64

1

mdapi/favicon.png

windows7-x64

3

mdapi/favicon.png

windows10-2004-x64

3

mdapi/index.js

windows7-x64

1

mdapi/index.js

windows10-2004-x64

1

Analysis

  • max time kernel
    111s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/11/2022, 18:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    mdapi/PHPMailer/src/PHPMailer.js

  • Size

    163KB

  • MD5

    82b366a4b99f5f4eeb4bab0549d1ee61

  • SHA1

    d4db5117fc9b8306e1e75208b8f8c87b275e68b4

  • SHA256

    476f32ee5a1ca5442741daedbd6c5ec15664aac05b51d659f96ce5fb04eaea30

  • SHA512

    2168e33ed83a7c0b29adb7d9023e18a774f2e8096f2e588c6f12cfdfc13bfd03c4e6f8cb1b3baed8fc754b1f907861459a21e2a7febcc4be8e6aca21bf963fdb

  • SSDEEP

    3072:WhrI02Y0h9DQ0R5w7Kg16b1RKbsf2WmfPpUfgP+mlLqX6dgOQbzcDkcDIIS:sI02Y0Tw/16bb2rlLo6dYzcDkOIIS

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\mdapi\PHPMailer\src\PHPMailer.js
    1⤵
      PID:4808

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads