General

  • Target
    purolator.zip
  • Size 708KB
  • Sample260621-pd1c7sds2m
  • SHA256 e2805a635bf75f1c906947ad8044d65d372c8bbd1dc1d041eb29e317f0bf7317
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      purolator/app/boxid.php
    • Size 37KB
    • SHA256 5d0bc02b13923046e117ea7913231711aec80352248a0d7586379fff2c84a581
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      purolator/app/donee.php
    • Size 9KB
    • SHA256 99586a5fd0abcb62cc34f5255ecac6b721cc9afe9ec0b17c5a690060702f0f6c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      purolator/app/index.php
    • Size 7KB
    • SHA256 b8f723bfacc0cfb01a89d8f8c19f5b8879446e6b70e56e7c1775435272cb8e8c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      purolator/app/info.php
    • Size 31KB
    • SHA256 488fb07d1ec647366376bc803683973e727c27896c12d28a4a787afcdd1c9682
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      purolator/app/loading.php
    • Size 49KB
    • SHA256 82c9c5456624fdda0154ab425322e8cc3c4571f8a427e224c26a83018786ceeb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks