General
- Target emailcampaign1.zip
- Size 2.5MB
- Sample260708-peh6baft31
- SHA256 aac00e041a173a4ed213d20005d43460c6147967f1338d355bc0102d7b4aba5f
Malware Config
Targets
-
- Target BulkMailer_App/email_recipients_sample.xlsx
- Size 5KB
- SHA256 88c0ab7c4ce0c85a842f570b442735f53140f012e3732b965a3c1499efe08be7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target BulkMailer_App/index.php
- Size 41KB
- SHA256 f74919640410976e96f41bba83ecc45ba46b174b6f93866735ab404866e33826
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target BulkMailer_v2/email_recipients_sample.xlsx
- Size 5KB
- SHA256 88c0ab7c4ce0c85a842f570b442735f53140f012e3732b965a3c1499efe08be7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target BulkMailer_v2/index.php
- Size 47KB
- SHA256 572102c30553da0f93b8adf8926f7ee60de22a930534f850986ff5b35ced020e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target emailcampaign1/attachments/15th_-Edition_Tax_Strategy___Planning_Summit___Awards_2026.pdf
- Size 968KB
- SHA256 f0f66ad323cd8f9ad1518ba3e355043cf36d9b6572e5fb867889d1d2a4139117
Score3/10 -
- Target emailcampaign1/attachments/CSR_Pune_HR_Data.xlsx
- Size 30KB
- SHA256 95761461b3f3553f8ec4e3a7b4d62236f7333dcfca535ef78f3c0faef30798ee
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target emailcampaign1/campaigns.php
- Size 3KB
- SHA256 bc43f254a04b1e91dcfb75acbf0ab36e46d5c558dc2e86ea1dad728e31291381
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target emailcampaign1/email_recipients_sample.xlsx
- Size 5KB
- SHA256 88c0ab7c4ce0c85a842f570b442735f53140f012e3732b965a3c1499efe08be7
Score1/10 -
- Target emailcampaign1/index.php
- Size 59KB
- SHA256 33cc0dfe2a3f2da351d4003aeba9fa0f29f6bf71754d5d50664be634d305a0cf
Score3/10 -
- Target emailcampaign1/uploads/recipients.xlsx
- Size 10KB
- SHA256 f890059506d5791a86fce36d26a3b9ea4eb5c9d1e4276ec8d3b17aa5fd9ff4b5
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target emailcampaign1/vendor/composer/ClassLoader.php
- Size 15KB
- SHA256 d4b2313e562edf942838ec316d983c1a3459ca67da3e5658e861200b0b3693c2
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target emailcampaign1/vendor/composer/pcre/src/PHPStan/InvalidRegexPatternRule.php
- Size 4KB
- SHA256 c29ca457386311f9e33c33158fa8e4a8aaffe281009c79810a621cbead0cb342
Score3/10 -
- Target emailcampaign1/vendor/composer/pcre/src/PcreException.php
- Size 1KB
- SHA256 4bc7e85c1bf83faca234aa72b1208c5665a2328c105969de55318d1ba1b73393
Score3/10 -
- Target emailcampaign1/vendor/composer/pcre/src/Preg.php
- Size 17KB
- SHA256 35b07c877c0f237d2e8ef291e96f99aad1839dd95bbf169066a0c90d4bce4f81
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target emailcampaign1/vendor/maennchen/zipstream-php/guides/ContentLength.rst
- Size 1KB
- SHA256 36b1be459dc62ae749d341fc63d9aeb9b36fe77e6e25247004df8c31aeffb1da
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target emailcampaign1/vendor/maennchen/zipstream-php/guides/Symfony.rst
- Size 4KB
- SHA256 0853104b313773ed25976d0cb6c4200c7cf365df184eccab18e0fa320ca119b5
Score3/10