General
- Target cludepharma.zip
- Size 2.0MB
- Sample260705-gx2flsav4s
- SHA256 bc34d1f1984b5623e33276269268c658d426bcd7429941539fa1c17f713d4646
Malware Config
Targets
-
- Target Admin/Addcountry.php
- Size 27KB
- SHA256 9d483251f72739b525e4c81bde291bbe43879d880ea15540683765b7e9ac9266
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Admin/add_product.php
- Size 20KB
- SHA256 b3a7693f00e9fbe94b3366ddf1cff14f8d9db6fe3c701265829b562d74ace6e3
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Admin/admin_due_alert.php
- Size 14KB
- SHA256 f937aabd03b62c5e494fe8066d351c9906ba7141ca0750716925a1dcdc1d0e29
Score3/10 -
- Target Admin/admin_product_approval.php
- Size 19KB
- SHA256 69a48edbda093b5693f58ecc21a2434d162dbe320564ecf29d2b7d4f614fde5d
Score3/10 -
- Target Admin/adminsidebar.php
- Size 16KB
- SHA256 14865cc50206e8cf368a089bd0ef7ecd9419c921bfa023b81656a5e516092d63
Score3/10 -
- Target Admin/custom_reports.php
- Size 24KB
- SHA256 9a64ebb7a22c5bbb7cfc7dffcca070bd80cc1475c088437a2f70a21b19710ab3
Score3/10 -
- Target Admin/manage-sample-product.php
- Size 19KB
- SHA256 5c3e2def7be1b207fa9f9cd98d70891745652607ad1925f8709348f2c6f46e4d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Admin/new_orders.php
- Size 17KB
- SHA256 62096ab2016bb691ab0d5f0985328c256272c89fb1cc4b3ae3d461bf5a16a247
Score3/10 -
- Target Admin/order_history.php
- Size 10KB
- SHA256 4760da051a42b9d6d02da6b99343994f6c176f80bcce18e00aeb46941c5413ab
Score3/10 -
- Target Admin/products.php
- Size 27KB
- SHA256 d2626023fd1b1a498ab8ca8d8cf1001b02f899f3a49d6b6994e531fd25546f6a
Score3/10 -
- Target Admin/sales_executive.php
- Size 4KB
- SHA256 af669435985deab558e342a6a252cb67636f57c9189660e8e9c88c5629c465b9
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Admin/sales_manager.php
- Size 3KB
- SHA256 e923171f04be52add15ec2b3d6312f6da127f8300abdf5f47f9309f63fdb3c7b
Score3/10 -
- Target Admin/sales_reports.php
- Size 31KB
- SHA256 bc4daa90bab726d4e73829342765f0c44fe43b6ee64dc5ca4b5e77a1694480ad
Score3/10 -
- Target Admin/sample-product.php
- Size 11KB
- SHA256 c00640c0c04b541e122c4b6cd6b16b421c9b6d5a9f28bcc952f512b43883a04e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Admin/view_bill.php
- Size 27KB
- SHA256 bae60db0f0dd828ec9f472aaeb28af57e222ca27dfc1bbc71059d9651883dda0
Score3/10 -
- Target PHPMailer-master/README.md
- Size 16KB
- SHA256 55789c10b9bacdbc0e3f0ba81d02486b55268dc32df1cba25f974e6a56fa75c1
Score3/10