General
- Target main_site.zip
- Size 5.5MB
- Sample260702-phjw1sgv3m
- SHA256 bb3667636c9dc05091b6e4793fe09c8ffdad6f6a0c87589ad56e01a04b173816
Malware Config
Targets
-
- Target Site/AdminAuth.php
- Size 7KB
- SHA256 452ce5da2e3e272b83c646a2dcfdd5019168a8ada79ffb290689c4a0e868a31b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Site/Database.php
- Size 7KB
- SHA256 e29c41ec56507f11d854af63fd4a314c4000fc88361b51398f8397d8717b2d02
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Site/EmailService.php
- Size 3KB
- SHA256 5d7ac0883e568000cbaab60c5e508d7a137b5ff0b32aa03f479cc8c4c969b422
Score3/10 -
- Target Site/Logger.php
- Size 1KB
- SHA256 1b3f1004f649919c43cd953e81a8c0a611cf09f275dd26bdd21433a8f61e0edd
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Site/RecaptchaService.php
- Size 4KB
- SHA256 c0a0ad9e05638bdc3d33651d761706ca2480421d0bc7e4144a27c2d449de46bf
Score3/10 -
- Target Site/SubmissionTracker.php
- Size 12KB
- SHA256 c48f17a014a561263fd954f527f15edd352c286338b97761e90bd0dfe7a1fbbc
Score3/10 -
- Target Site/admin_consent.php
- Size 6KB
- SHA256 d54f100a2dcbf725a313606c867b2e82db1c4b7275c134ff216a3af46d01d551
Score3/10 -
- Target Site/admin_dashboard.php
- Size 16KB
- SHA256 e90622290481a56eda6c7c54a5b785c52f897e189a8e0f58b8b4f6a220e25e6e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Site/auto_consent.php
- Size 8KB
- SHA256 ad3c06c51a6664311da45e15e4eb68c866027bf411b53829adfed955136aa27a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Site/components/header.php
- Size 7KB
- SHA256 3f2ac24ab765e4158c55a4a0999ad35bb067f148c87e27be01415a80f626d5a2
Score3/10 -
- Target Site/composer.phar
- Size 3.4MB
- SHA256 345b9c6a98da5c30dcbd4b0d99fc8710bf0ae98a3898eea18f7b2ad9dec93f06
Score1/10 -
- Target Site/config.php
- Size 2KB
- SHA256 11e45473104d01640b49401495fcf3d2e702d52a629080943f6da50ee2055915
Score3/10 -
- Target Site/consent_simple.php
- Size 4KB
- SHA256 8fc5c62a38007a61928d9478ab5a0cbfd5183f5faa07f58c81ae1e75eee16284
Score3/10 -
- Target Site/contact.php
- Size 18KB
- SHA256 7b5b3e5fe93c09d801393c528124b9ac5b68f790d6442782ea75ae91d4e2c375
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Site/create_consent.php
- Size 2KB
- SHA256 22a29f4907b9cc9fcc78705a0c42fda8045cc218a0048a71d7184ad314b5b04f
Score3/10