General
- Target contact_api_1.zip
- Size 594KB
- Sample260705-aks55sft3y
- SHA256 0f6239e28c2232b9c64dd3affd9ded11a485d0360b8b0510456093016e28baba
Malware Config
Targets
-
- Target PHPMailer-master/README.md
- Size 16KB
- SHA256 931b572c8e9eed769388f627874690b8ac1a95983749ca8c760c96244b75ce6b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PHPMailer-master/src/PHPMailer.php
- Size 183KB
- SHA256 835a15b6067083d7c92ea245c9ffab3ef23a8ac16bfe14a61e953741a661b9e2
Score3/10 -
- Target PHPMailer-master/src/POP3.php
- Size 12KB
- SHA256 42baf6cd05e05c8dba369cf7da411955b5e0b1c791828d538ca99b17335d7df9
Score3/10 -
- Target PHPMailer-master/src/SMTP.php
- Size 48KB
- SHA256 9bc105018f6ef2576c2c4a246a46fc41ada546111fc8fb1ffce86421af35e78c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target contact_api/PHPMailer-master/README.md
- Size 16KB
- SHA256 931b572c8e9eed769388f627874690b8ac1a95983749ca8c760c96244b75ce6b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target contact_api/PHPMailer-master/src/PHPMailer.php
- Size 183KB
- SHA256 835a15b6067083d7c92ea245c9ffab3ef23a8ac16bfe14a61e953741a661b9e2
Score3/10 -
- Target contact_api/PHPMailer-master/src/POP3.php
- Size 12KB
- SHA256 42baf6cd05e05c8dba369cf7da411955b5e0b1c791828d538ca99b17335d7df9
Score3/10 -
- Target contact_api/PHPMailer-master/src/SMTP.php
- Size 48KB
- SHA256 9bc105018f6ef2576c2c4a246a46fc41ada546111fc8fb1ffce86421af35e78c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target contact_api/PHPMailer/README.md
- Size 16KB
- SHA256 7989607991659b7ab284fad49c9808a7363765858bcc791a2a043d80f25bb196
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target contact_api/PHPMailer/src/PHPMailer.php
- Size 178KB
- SHA256 cbdd444f5514cfd0636fce6df9b69630076a0ace4667ccd4da8dfd665634d9d8
Score3/10 -
- Target contact_api/PHPMailer/src/POP3.php
- Size 12KB
- SHA256 2d8939d75466195548cef648b5dd15a81a5fd5d38f0678d0e7a6a695078f7d41
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target contact_api/PHPMailer/src/SMTP.php
- Size 47KB
- SHA256 0c55c416e779bcfced26893ede9a391f527eacef5b61d0cf751d19713d171eb7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target contact_api/contact.php
- Size 2KB
- SHA256 b3645fa85bfd89cfb05ab3df518655404af0d4eb7257c309eba5ff3c2e37f901
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target contact_api/mail.php
- Size 1KB
- SHA256 f0c793a5c5b00680e3dc4acad04a330b2eae68b0a2e120330e042ddb35fe8910
Score3/10 -
- Target contact_api/smtpmail/class.phpmailer.php
- Size 91KB
- SHA256 1b55d2b179e59d336cd8a2d500bdd2e568527e2d6f3393db0cfb322f4b9a6174
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target contact_api/smtpmail/phpmailer/aboutus.html
- Size 12KB
- SHA256 9690deb29bdf55be66a79b7187b1c8b74f09ba3cae7cf0f101a2b77f1d93b922
Score4/10