Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    14-01-2022 09:58

General

  • Target

    b8ebc110722767b7cc98b1e38cf328ef6ae98e049684e93d26096dd7d415f1d1.exe

  • Size

    545KB

  • MD5

    2a42a987e97903fe0e6e35202e43535e

  • SHA1

    40842fc303fbabfb1d0f04fa2373304b0720baae

  • SHA256

    b8ebc110722767b7cc98b1e38cf328ef6ae98e049684e93d26096dd7d415f1d1

  • SHA512

    a56d576dc196be457911aa03aed963578293221be573a60e219bfc70d2a0c0ae2ac571061d4d442b26dac6e525547bbf272acd27b4b2e12c66af46f7f3e4ea1f

Score
10/10

Malware Config

Signatures

  • PhoenixStealer

    PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b8ebc110722767b7cc98b1e38cf328ef6ae98e049684e93d26096dd7d415f1d1.exe
    "C:\Users\Admin\AppData\Local\Temp\b8ebc110722767b7cc98b1e38cf328ef6ae98e049684e93d26096dd7d415f1d1.exe"
    1⤵
      PID:748

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/748-54-0x0000000074F01000-0x0000000074F03000-memory.dmp

      Filesize

      8KB