Overview
overview
8Static
static
3BulkMailer...e.xlsx
windows10-2004-x64
1BulkMailer...e.xlsx
windows11-ltsc_2024-x64
8BulkMailer...dex.js
windows10-2004-x64
3BulkMailer...dex.js
windows11-ltsc_2024-x64
3BulkMailer...e.xlsx
windows10-2004-x64
1BulkMailer...e.xlsx
windows11-ltsc_2024-x64
1BulkMailer...dex.js
windows10-2004-x64
3BulkMailer...dex.js
windows11-ltsc_2024-x64
8emailcampa...26.pdf
windows10-2004-x64
3emailcampa...26.pdf
windows11-ltsc_2024-x64
emailcampa...gns.js
windows10-2004-x64
3emailcampa...gns.js
windows11-ltsc_2024-x64
3emailcampa...e.xlsx
windows10-2004-x64
1emailcampa...e.xlsx
windows11-ltsc_2024-x64
1emailcampa...dex.js
windows10-2004-x64
3emailcampa...dex.js
windows11-ltsc_2024-x64
3emailcampa...s.xlsx
windows10-2004-x64
1emailcampa...s.xlsx
windows11-ltsc_2024-x64
8emailcampa...er.ps1
windows10-2004-x64
3emailcampa...er.ps1
windows11-ltsc_2024-x64
3emailcampa...le.ps1
windows10-2004-x64
3emailcampa...le.ps1
windows11-ltsc_2024-x64
3emailcampa...on.ps1
windows10-2004-x64
3emailcampa...on.ps1
windows11-ltsc_2024-x64
8emailcampa...eg.ps1
windows10-2004-x64
3emailcampa...eg.ps1
windows11-ltsc_2024-x64
emailcampa...gth.js
windows10-2004-x64
3emailcampa...gth.js
windows11-ltsc_2024-x64
3emailcampa...ny.ps1
windows10-2004-x64
3emailcampa...ny.ps1
windows11-ltsc_2024-x64
3emailcampa...am.ps1
windows10-2004-x64
3emailcampa...am.ps1
windows11-ltsc_2024-x64
3General
- Target emailcampaign2.zip
- Size 2.6MB
- Sample260708-pedktsft2t
- SHA256 9e40cc06082372cb237ad3cfea73ffbcd6dfa41f9624d7be1d641c3b373b05e8
- MD5 12cd4815e7c2a0ed6e8ff9c0bb0ae6be
- SHA1 c840e0d78ede1608df6ca8f0a2cc40c9f8110145
- SHA512 68115dc6aabd637672da2714740a2fe662ae5ad62ba7241793701d275217b5141bb76fb8bec6c2ad4a37de0d4ccbae620686838937262d1b11362411e8511df1
- SSDEEP 49152:uSVpeBig9oqyteVepn1RO9/aumEE1EYXokcVBsA+kVssco:3V4gztg2EE6ZEbkVBr
- TLSH T102C5E139541968D4DF8A5C30AB0EF52730E4BB2759C1F4661B504B0ACB29CA87FFEE19
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
BulkMailer_App/email_recipients_sample.xlsx
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
BulkMailer_App/email_recipients_sample.xlsx
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
BulkMailer_App/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
BulkMailer_App/index.js
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral5
Sample
BulkMailer_v2/email_recipients_sample.xlsx
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
BulkMailer_v2/email_recipients_sample.xlsx
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral7
Sample
BulkMailer_v2/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
BulkMailer_v2/index.js
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral9
Sample
emailcampaign2/attachments/23rd_Edition_Learning_and_Development_Summit_and_Awards_-2026.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
emailcampaign2/attachments/23rd_Edition_Learning_and_Development_Summit_and_Awards_-2026.pdf
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral11
Sample
emailcampaign2/campaigns.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
emailcampaign2/campaigns.js
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral13
Sample
emailcampaign2/email_recipients_sample.xlsx
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
emailcampaign2/email_recipients_sample.xlsx
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral15
Sample
emailcampaign2/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
emailcampaign2/index.js
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral17
Sample
emailcampaign2/uploads/recipients.xlsx
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
emailcampaign2/uploads/recipients.xlsx
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral19
Sample
emailcampaign2/vendor/composer/ClassLoader.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
emailcampaign2/vendor/composer/ClassLoader.ps1
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral21
Sample
emailcampaign2/vendor/composer/pcre/src/PHPStan/InvalidRegexPatternRule.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
emailcampaign2/vendor/composer/pcre/src/PHPStan/InvalidRegexPatternRule.ps1
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral23
Sample
emailcampaign2/vendor/composer/pcre/src/PcreException.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
emailcampaign2/vendor/composer/pcre/src/PcreException.ps1
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral25
Sample
emailcampaign2/vendor/composer/pcre/src/Preg.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
emailcampaign2/vendor/composer/pcre/src/Preg.ps1
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral27
Sample
emailcampaign2/vendor/maennchen/zipstream-php/guides/ContentLength.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
emailcampaign2/vendor/maennchen/zipstream-php/guides/ContentLength.js
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral29
Sample
emailcampaign2/vendor/maennchen/zipstream-php/guides/Symfony.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
emailcampaign2/vendor/maennchen/zipstream-php/guides/Symfony.ps1
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral31
Sample
emailcampaign2/vendor/maennchen/zipstream-php/src/ZipStream.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
emailcampaign2/vendor/maennchen/zipstream-php/src/ZipStream.ps1
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target BulkMailer_App/email_recipients_sample.xlsx
- Size 5KB
- SHA256 88c0ab7c4ce0c85a842f570b442735f53140f012e3732b965a3c1499efe08be7
- MD5 25a74d68502d8752b5705c9a1438e68f
- SHA1 383f078250dbe5a637a9e62c77a792bff2ec287b
- SHA512 2e995df921d6b1264192101b44b09cbadab53302b7fa6215c3d1cb66dd548cabc9e533356bf1e1812cb7e5c5adbdb54f90354bb4bc7754d95c7a2a9e379bd919
- SSDEEP 96:6sv3Ei6wAleemuGp7GAuj3O/ahYwekTfG5pdkF0ZMy/88bvVn:6svUH3lquGZGjO/ahY3Qf8H88n
- TLSH T165B17E45C6CE1D38D506DA71D1096BA69F4C3C86C2285F0773B16A7D18B77E88B8B49C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target BulkMailer_App/index.php
- Size 41KB
- SHA256 f74919640410976e96f41bba83ecc45ba46b174b6f93866735ab404866e33826
- MD5 b6fb03fd6d73144277b3a2239d6b7cb7
- SHA1 8bf4db8ab7037de41eb4da38c5e89801961e4009
- SHA512 01a5783642549baa4f524c7ec45c93663086d206cc8ba6f7bc4240029943f0aa438bfbd5bf84e04d50c15d825c33dfd99279af77a19a7d92a9ad034f14b71433
- SSDEEP 384:+08B26UVA3+jK0rGXXY9dKNQ5bL1AgS/4Gw24fHIJRy/W3QjczgBqVpRV2PHX3kb:+0yjlJHY9dKNeB2w20yAQBXVqy
- TLSH T1E813A77121B650357863C0AD779A475B3A54B403BD07C650B9EC71A84FCFFE1A863AB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target BulkMailer_v2/email_recipients_sample.xlsx
- Size 5KB
- SHA256 88c0ab7c4ce0c85a842f570b442735f53140f012e3732b965a3c1499efe08be7
- MD5 25a74d68502d8752b5705c9a1438e68f
- SHA1 383f078250dbe5a637a9e62c77a792bff2ec287b
- SHA512 2e995df921d6b1264192101b44b09cbadab53302b7fa6215c3d1cb66dd548cabc9e533356bf1e1812cb7e5c5adbdb54f90354bb4bc7754d95c7a2a9e379bd919
- SSDEEP 96:6sv3Ei6wAleemuGp7GAuj3O/ahYwekTfG5pdkF0ZMy/88bvVn:6svUH3lquGZGjO/ahY3Qf8H88n
- TLSH T165B17E45C6CE1D38D506DA71D1096BA69F4C3C86C2285F0773B16A7D18B77E88B8B49C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BulkMailer_v2/index.php
- Size 47KB
- SHA256 572102c30553da0f93b8adf8926f7ee60de22a930534f850986ff5b35ced020e
- MD5 14d6945944fc5e50d0bb74557fc816e7
- SHA1 0f802c6b7e90cba3013a369cf8dc21ee07b32dec
- SHA512 a5e91fd52c6c88a1438ecdb2f3aabcf0bc55926ddb9258618c8978ebddbbec8076be78d16ce8c4ad34126a11c68f4d7c351f42f8d7b8412d4dbca9948ea77a26
- SSDEEP 768:vb/7gf7T0tWmzgusq+GvKgi/CKX62sDEshc5cHs2eXE:vb/7gktZRgTKRhc5weU
- TLSH T14A23E77171AA60353857D09D7399475F3A50B403BC078560B9EC72988FCFFE2A872AB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target emailcampaign2/attachments/23rd_Edition_Learning_and_Development_Summit_and_Awards_-2026.pdf
- Size 426KB
- SHA256 7cab1b9f92168573a3e611aef61410fc36239f0bdaf41cbd1929a564c19eb829
- MD5 b88316c0bc0ea6bfcaed8f25aa5e4ecf
- SHA1 8971fa4c6f66420942d09e73fbd740945e87c62d
- SHA512 e23632b4d9842660973245bfad2406ed258dcc3de29bea75b6c888eaebe7ec38e19dd21ded28364bea150a2358a1ea8d7b7dca4ac70c6142ec4edc3cc30db546
- SSDEEP 6144:aCDb57a8EsRSkvDJPBxS8NI/XGB5FvlOAy6SwNWsGqdC0N:Zb57sEDJPBxSoCXGBnPy+dC0N
- TLSH T14894E1AD61BE2C9CC4C2C7F6F41C14C2415E80F66D253467B838939B78C589BB466BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target emailcampaign2/campaigns.php
- Size 3KB
- SHA256 bc43f254a04b1e91dcfb75acbf0ab36e46d5c558dc2e86ea1dad728e31291381
- MD5 16bed33dd24a131b90150b9556c17d63
- SHA1 76a052dd0459230ce998e8ee47a95db721ca36b7
- SHA512 8faefc2887a8f70d2370492a98301020f278ab766afc5717395c5d9aeae7eb09131ff084692df456c1ad9e29fdc6342fa7fdabe8a46d6ba318b93a1ef570971a
- TLSH T1F1615F3AB9C6B4072032E9B992228BD4EFD390133A0249743EAF23571F749309557D8C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target emailcampaign2/email_recipients_sample.xlsx
- Size 5KB
- SHA256 88c0ab7c4ce0c85a842f570b442735f53140f012e3732b965a3c1499efe08be7
- MD5 25a74d68502d8752b5705c9a1438e68f
- SHA1 383f078250dbe5a637a9e62c77a792bff2ec287b
- SHA512 2e995df921d6b1264192101b44b09cbadab53302b7fa6215c3d1cb66dd548cabc9e533356bf1e1812cb7e5c5adbdb54f90354bb4bc7754d95c7a2a9e379bd919
- SSDEEP 96:6sv3Ei6wAleemuGp7GAuj3O/ahYwekTfG5pdkF0ZMy/88bvVn:6svUH3lquGZGjO/ahY3Qf8H88n
- TLSH T165B17E45C6CE1D38D506DA71D1096BA69F4C3C86C2285F0773B16A7D18B77E88B8B49C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target emailcampaign2/index.php
- Size 59KB
- SHA256 d3881758e04f69b8b71d405e90e9939298bcaf0f0b6a4dafce2ccbe56efa5e57
- MD5 74e0fa259b746cc3717a7b0df11af969
- SHA1 4b6a882e6abb2eddfad152d77357b625c99ab5c7
- SHA512 78f9bc57e60513debf90d4df57dfba7257428c0b2b26c3aab4d02092c47c37c2a0947b636f514199445f584153efc4b425b9573f3adbbd08943cee55795e8719
- SSDEEP 768:FirwbEcNKOiNTJ9YawrlAe7t6CtsPOGYK0AUBgZt5uUMjs5t+FzIT2dsJkXqh3sH:orwb0pNTJ927OGS7uhjs5t+F8L3O
- TLSH T1AF53FB7132A620343897D09D3799935B3960F803AD03C550B9EC61D88FDFFB5A972AB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target emailcampaign2/uploads/recipients.xlsx
- Size 336KB
- SHA256 33ec4eb5165e103e7edff93aa3fc452019a12b28383e6a2875a56efbca29b644
- MD5 aa74eebc0797c4949f0831697e336baf
- SHA1 540f56ce46b7ee428b9b87896f19b3a00fa0734d
- SHA512 ce18f46b10b1e9d5e4bdddd6fdf1f9ef5ae74ffca30de2e34b73591a27d194a8ba4a1f625b0999ea9342b9af0444750c1c901161f0f3d2f2d1d9f4e38486802f
- SSDEEP 6144:boAKGQ8DIs9cDCAfPPPf6wWcEqZuNQW40L35vyN4S5mRVopJx3N8XLiRJ:5tus94CKZuNT48S+61N87iRJ
- TLSH T18274236712C4F767C144803DD6D755E273F223BB3E75D16A94ECA212C21432279AB87B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target emailcampaign2/vendor/composer/ClassLoader.php
- Size 15KB
- SHA256 d4b2313e562edf942838ec316d983c1a3459ca67da3e5658e861200b0b3693c2
- MD5 c02be6d96671f88d28aad3ffa134c8ae
- SHA1 7f146de662b0599355b3b049a161e23cbdbbdaeb
- SHA512 f73af132ef1159370f4da75d1477541c8fd55e82d64e1a29b199e8963597b3558853edd48f703118bb139680e80bbae5cd601580c9f62355f3e749214b40e162
- SSDEEP 384:bRMAJd+yMxhA6b9JmKj7YyiznGgewQbuUNN7dJUu8:bjxMHAS91Ex
- TLSH T18D721F6929EB042A085361BD978F9051E05FF13B622D4D65FDEE06F06F0072CC5B6BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target emailcampaign2/vendor/composer/pcre/src/PHPStan/InvalidRegexPatternRule.php
- Size 4KB
- SHA256 c29ca457386311f9e33c33158fa8e4a8aaffe281009c79810a621cbead0cb342
- MD5 5469da7aa4af8cab8b4371ded6cdf96c
- SHA1 5cd7c2020bdec378e8328834f875c711eda2697e
- SHA512 68cbfe9272871f66be78c9013d8c35ef541739b3f97deed12ba4e511de0b3c6225f5112c33cb8ad86309a27f904175038e66f3493a21f6e00b9ac5769d344b81
- SSDEEP 48:gwy9YUvJV6Dij4G+/qsGblxTFElCeGba7/PpQbtSZPrtCrnqhC0WEOU69ot:gnYUxqijS4z+CeW5SZBCrnP6Omt
- TLSH T1EB81216EBCE71D23450760BC6ACF9028F539A41324B89F92FDAC0B95AF41469CDE470E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target emailcampaign2/vendor/composer/pcre/src/PcreException.php
- Size 1KB
- SHA256 4bc7e85c1bf83faca234aa72b1208c5665a2328c105969de55318d1ba1b73393
- MD5 46fe5ffb722d40c309e4623e3b0757c7
- SHA1 cb3d167a3ce11fe321d1503cfd7839269de8de52
- SHA512 814cbe3ced96e10e6d0fbf40bb5560839c11a57a6529a6f4e643d0037357ce51cc5aa699c99d7b4903cd903df461322bd625789778052d00934e2a509b0c9367
- TLSH T1AF21D2245CDA9432054710F9238F605CF5BE761B605DD9D2FE9E5B74AF00629CE31E8D
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target emailcampaign2/vendor/composer/pcre/src/Preg.php
- Size 17KB
- SHA256 35b07c877c0f237d2e8ef291e96f99aad1839dd95bbf169066a0c90d4bce4f81
- MD5 cedbc5f3511e3d3d843b301497554e45
- SHA1 de7a6e0f99b9737cbf0e1a7a33dc32b96ffe9b2e
- SHA512 77e82851236223452c0079c09bc7103d731618f381ebc6e7fc6ee7123b3784dc1d05cc8fe8b5db0befc469f816f8058b8327b249524d9263e8fc90f2a475917c
- SSDEEP 384:cFiQFPD0bvFH6F/00LdkO4ovBCBkF4XvQgOOeOvnCF2j8jj7U32j8jnX9fO/zFfC:gDdLpKY9gp7L3gkj
- TLSH T14C8220766CDF7871080361BD069A9418EDE6803B27B8BAF6FD4D0EB50F58B78463190B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target emailcampaign2/vendor/maennchen/zipstream-php/guides/ContentLength.rst
- Size 1KB
- SHA256 36b1be459dc62ae749d341fc63d9aeb9b36fe77e6e25247004df8c31aeffb1da
- MD5 9ff45e1d92002128989a26a85f0444b1
- SHA1 7f050dea3831c1ccb757899b771a65d876040654
- SHA512 85f2a2c6e693ffffa57c2e267df8039e92fc3e09d1169e8e5069bb7c528af1c94862c3504b1f25acd9aeaa6a49addc6b9578136b38b0607bccd39030604934f3
- TLSH T1EC21E1F8326133A54532C7E69F4B13D59322C00B48099688B89ED3C97F9EB7892777C6
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target emailcampaign2/vendor/maennchen/zipstream-php/guides/Symfony.rst
- Size 4KB
- SHA256 0853104b313773ed25976d0cb6c4200c7cf365df184eccab18e0fa320ca119b5
- MD5 5283ca2725ab66c236869cc0d7b9e100
- SHA1 5015e34ff467107144066335015bd6b9474433b0
- SHA512 b267d82c23a946b421151b45270896c939dcd5b5f114ccc5a75f28a4e362294e17ee701cf7e79c4e5fde607291b139ecc43bec8c5dc73649706d023c35c2cbaa
- SSDEEP 96:5aAdwy6G1Gd11DfgPQGFYnxaxXr2TUQZgrE:kAdH1Gdb6QGFxCxGE
- TLSH T10BA1942E786112A28A1399FA9F5F7780A755901F2641D4F2388EC38C6FC852C94FFAD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target emailcampaign2/vendor/maennchen/zipstream-php/src/ZipStream.php
- Size 27KB
- SHA256 95bf3d43e409437c20e4956a38c3ebba830e4cb40ae36b664b4edf29718e4a9e
- MD5 49fb0a222d320df766bde55ca5020beb
- SHA1 5aabeb8305875d61d3f474902a86e4458691e643
- SHA512 3de14407e542d209b3da87185636702f6e282f1ad4b11f6f296f2d987ef6bbdc9343dd4c1218ab26755d7c98d618ebbba1ec310bfc6073332df1969e4fee2277
- SSDEEP 384:UId/lybIMRKyl6xiNR0gkdYP7xdYyoTsfEQ3BtIVB:UId9y8M8yl8iNR0dYldYHTsfEQ3Buj
- TLSH T1E5C2632428EB1A62941761B54B0F06C4C572E10F6D1ABD6D39CF87782F48B6C96F7B81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10