General

  • Target
    emailcampaign2.zip
  • Size 2.6MB
  • Sample260708-pedktsft2t
  • SHA256 9e40cc06082372cb237ad3cfea73ffbcd6dfa41f9624d7be1d641c3b373b05e8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      BulkMailer_App/email_recipients_sample.xlsx
    • Size 5KB
    • SHA256 88c0ab7c4ce0c85a842f570b442735f53140f012e3732b965a3c1499efe08be7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      BulkMailer_App/index.php
    • Size 41KB
    • SHA256 f74919640410976e96f41bba83ecc45ba46b174b6f93866735ab404866e33826
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      BulkMailer_v2/email_recipients_sample.xlsx
    • Size 5KB
    • SHA256 88c0ab7c4ce0c85a842f570b442735f53140f012e3732b965a3c1499efe08be7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      BulkMailer_v2/index.php
    • Size 47KB
    • SHA256 572102c30553da0f93b8adf8926f7ee60de22a930534f850986ff5b35ced020e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      emailcampaign2/attachments/23rd_Edition_Learning_and_Development_Summit_and_Awards_-2026.pdf
    • Size 426KB
    • SHA256 7cab1b9f92168573a3e611aef61410fc36239f0bdaf41cbd1929a564c19eb829
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      emailcampaign2/campaigns.php
    • Size 3KB
    • SHA256 bc43f254a04b1e91dcfb75acbf0ab36e46d5c558dc2e86ea1dad728e31291381
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      emailcampaign2/email_recipients_sample.xlsx
    • Size 5KB
    • SHA256 88c0ab7c4ce0c85a842f570b442735f53140f012e3732b965a3c1499efe08be7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      emailcampaign2/index.php
    • Size 59KB
    • SHA256 d3881758e04f69b8b71d405e90e9939298bcaf0f0b6a4dafce2ccbe56efa5e57
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      emailcampaign2/uploads/recipients.xlsx
    • Size 336KB
    • SHA256 33ec4eb5165e103e7edff93aa3fc452019a12b28383e6a2875a56efbca29b644
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      emailcampaign2/vendor/composer/ClassLoader.php
    • Size 15KB
    • SHA256 d4b2313e562edf942838ec316d983c1a3459ca67da3e5658e861200b0b3693c2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      emailcampaign2/vendor/composer/pcre/src/PHPStan/InvalidRegexPatternRule.php
    • Size 4KB
    • SHA256 c29ca457386311f9e33c33158fa8e4a8aaffe281009c79810a621cbead0cb342
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      emailcampaign2/vendor/composer/pcre/src/PcreException.php
    • Size 1KB
    • SHA256 4bc7e85c1bf83faca234aa72b1208c5665a2328c105969de55318d1ba1b73393
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      emailcampaign2/vendor/composer/pcre/src/Preg.php
    • Size 17KB
    • SHA256 35b07c877c0f237d2e8ef291e96f99aad1839dd95bbf169066a0c90d4bce4f81
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      emailcampaign2/vendor/maennchen/zipstream-php/guides/ContentLength.rst
    • Size 1KB
    • SHA256 36b1be459dc62ae749d341fc63d9aeb9b36fe77e6e25247004df8c31aeffb1da
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      emailcampaign2/vendor/maennchen/zipstream-php/guides/Symfony.rst
    • Size 4KB
    • SHA256 0853104b313773ed25976d0cb6c4200c7cf365df184eccab18e0fa320ca119b5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      emailcampaign2/vendor/maennchen/zipstream-php/src/ZipStream.php
    • Size 27KB
    • SHA256 95bf3d43e409437c20e4956a38c3ebba830e4cb40ae36b664b4edf29718e4a9e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

pdflink
Score
3/10

behavioral1

Score
1/10

behavioral2

adwarepersistenceransomwarespyware
Score
8/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

execution
Score
3/10

behavioral8

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral9

adwarediscoveryspyware
Score
3/10

behavioral10

adwarediscoverypersistencespyware
Score
8/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

Score
1/10

behavioral18

adwarepersistenceransomwarespyware
Score
8/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10