General
- Target PesaFlow-main.zip
- Size 11.6MB
- Sample260707-pg3yhaey4l
- SHA256 30414e13a6fec1f5101b044de9416acb921de3c81ec0b1c2bf179b95157c6203
Malware Config
Targets
-
- Target PesaFlow-main/backend/public/uploads/1766096530802-716236266.pdf
- Size 1.2MB
- SHA256 05f78b6ea0eb1d2c83be185f46a4ed518db7225c4cfebfbe09d3d7ec2e73e548
Score3/10 -
- Target PesaFlow-main/backend/public/uploads/1766096530837-224579944.pdf
- Size 184KB
- SHA256 c6de0ed9082e4fbf2fab88757b779c134fcc9802122d233d4a98adcf68e00053
Score3/10 -
- Target PesaFlow-main/backend/public/uploads/1766097419269-489621297.pdf
- Size 1.2MB
- SHA256 05f78b6ea0eb1d2c83be185f46a4ed518db7225c4cfebfbe09d3d7ec2e73e548
Score3/10 -
- Target PesaFlow-main/backend/public/uploads/1766097419279-52565711.pdf
- Size 1.2MB
- SHA256 05f78b6ea0eb1d2c83be185f46a4ed518db7225c4cfebfbe09d3d7ec2e73e548
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PesaFlow-main/backend/public/uploads/1766097433448-808129880.pdf
- Size 1.2MB
- SHA256 05f78b6ea0eb1d2c83be185f46a4ed518db7225c4cfebfbe09d3d7ec2e73e548
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PesaFlow-main/backend/public/uploads/1766097433469-729709082.pdf
- Size 1.2MB
- SHA256 05f78b6ea0eb1d2c83be185f46a4ed518db7225c4cfebfbe09d3d7ec2e73e548
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PesaFlow-main/backend/seed-users.ts
- Size 4KB
- SHA256 f19e8625789339ad732e08cc70fbe0486df43d11ef0cde7584adfef6a1126ec9
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PesaFlow-main/backend/show-users.ts
- Size 1KB
- SHA256 3e5b9565d5a4f64f8f7aa3451e2e3125cb5bef15cf949fccaa0f360cd76d7867
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PesaFlow-main/backend/src/controllers/admin.controller.ts
- Size 4KB
- SHA256 0395d3cedcf3e69d82a14c63e387d43c29856c5190f1365b1b232bef5baff636
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PesaFlow-main/backend/src/controllers/auth.controller.ts
- Size 7KB
- SHA256 70820e59b4ee0c7429723bac655016559b9de575f29be6783d5ff6a7c1e3c431
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PesaFlow-main/backend/src/controllers/category.controller.ts
- Size 2KB
- SHA256 25aa60e284fd6e8e71d793e058853e72a717c97c44cd8a23c5a015acb559f6d7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PesaFlow-main/backend/src/controllers/dashboard.controller.ts
- Size 5KB
- SHA256 346174b65535ad08914fb14b0534493dc578bad4ca7b4f7e7ad05f3b7cfea22d
Score3/10 -
- Target PesaFlow-main/backend/src/controllers/invoice.controller.ts
- Size 4KB
- SHA256 ffd5f7efc1adde5272f74f9032b4b5977af2c936c9ec9a0a7341ef56d4f2e599
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PesaFlow-main/backend/src/controllers/mpesa.controller.ts
- Size 5KB
- SHA256 2d36174c569f593b786f4c00fa2e0505b5b29ae17ab6b37d2d89c1b863546085
Score3/10 -
- Target PesaFlow-main/backend/src/controllers/notification.controller.ts
- Size 985B
- SHA256 afaed938680bd5a393b9040e9bfe5adeaf0f6f2460eae9bde82713246db50043
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PesaFlow-main/backend/src/controllers/product.controller.ts
- Size 12KB
- SHA256 37a95c1b9b5fcf355aa98b52a7fa26d216b0cbd74e04bea9024eddfda42390f8
Score3/10