Analysis
-
max time kernel
140s -
max time network
111s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
13-05-2024 20:45
General
-
Target
PhishMailer-master/Core/Mailer/MailHelp.py
-
Size
1KB
-
MD5
271f7d27ecea1d02809d7a735e92a058
-
SHA1
5fba38993212f775df7c981edbd2874ed6ec4f91
-
SHA256
e9ac1fe39e7606e69e4564e00af9595b4eb320473cf710afbb38eaf4c99639cc
-
SHA512
538931a95854009048cce5783567f54f5b178afe71398cb030c7ad25bdb37c99148be38d6175465d0489de0492da9de678566a91cddcc9b23626389b2020e9e2
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\PhishMailer-master\Core\Mailer\MailHelp.py1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx