General
- Target K.zip
- Size 158KB
- Sample260623-pevt4scx8s
- SHA256 6872ccb3a4044dcff1df530f2ecad7e761125b3a2f145fb65d2edb2ce08d63f5
Score
8/10
Malware Config
Targets
-
- Target K/PHPMailer/PHPMailer/README.md
- Size 16KB
- SHA256 931b572c8e9eed769388f627874690b8ac1a95983749ca8c760c96244b75ce6b
Score3/10 -
- Target K/PHPMailer/PHPMailer/src/PHPMailer.php
- Size 188KB
- SHA256 4b50796a3f20d4a52b716f75036b6f90f23400da85a255e74e46f3adf0e28657
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target K/PHPMailer/PHPMailer/src/POP3.php
- Size 12KB
- SHA256 c79c473d3c500f11ce9fb490d6c0e68bb4cb6e71ea1d775c18330dd7cb7c06cf
Score3/10 -
- Target K/PHPMailer/PHPMailer/src/SMTP.php
- Size 50KB
- SHA256 887961c29722612283c63ed1a05f2c54df4defdef690e99a4bb1a90404241300
Score3/10 -
- Target K/comps.php
- Size 22KB
- SHA256 30bc5b5c683ac48443a6743add1c73d147cd84a6b5f88743fffd2cc45340e93f
Score3/10 -
- Target K/mf.php
- Size 14KB
- SHA256 b010d52732ad37f45d7841aa30dbea2f0ef65a15aa3a6d0368d74bbc5bffa756
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.