Overview
overview
3Static
static
1check.html
windows10-2004-x64
3check.html
windows11-ltsc_2024-x64
3mail.html
windows10-2004-x64
3mail.html
windows11-ltsc_2024-x64
3phpmailer/...ler.js
windows10-2004-x64
3phpmailer/...ler.js
windows11-ltsc_2024-x64
3phpmailer/SMTP.js
windows10-2004-x64
3phpmailer/SMTP.js
windows11-ltsc_2024-x64
3secured.js
windows10-2004-x64
3secured.js
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/08/2026, 18:18
Static task
static1
Behavioral task
behavioral1
Sample
check.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
check.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
mail.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
mail.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
phpmailer/PHPMailer.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
phpmailer/PHPMailer.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
phpmailer/SMTP.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
phpmailer/SMTP.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
secured.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
secured.js
Resource
win11ltsc2024-20260710-en
General
- Target phpmailer/PHPMailer.js
- Size 189KB
- Sample260816-wxmpsagk21
- SHA256 01038c4104554fe7fdb958eb4653883c5cf93af76a3c8797794001c35c1bf553
- MD5 663025b83470cd6f5ea53164499c8390
- SHA1 8e08851092169c62ae11d794cf8cccf239477f22
- SHA512 88190897cf940623500346acb72be42f3da804e6a23cd64113fd6559c26a3fa2523e3baf120c47ece6f99ceae7aba902d39bd3623b0eca9b4893b29d72ae0c18
- SSDEEP 3072:VhgJj2Y1HwR9DQ01OgiDd14/RmRp3S5nbmsjhlIKlK/g6+o+iQvE6d35lUGcDkdx:QJj2Yxw0g41YwwIY6t+iQM6dEGcDkbMG
- TLSH T1AB14C71878E75CA1165360B9ABCFA040D13AA13F1578A852BCDD43B85FC4B3CDEB5AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs