Overview

overview

10

Static

static

10

fcf1be0d1f...e9.exe

windows7_x64

10

fcf1be0d1f...e9.exe

windows10-2004_x64

10

Resubmissions

31-01-2022 11:26

220131-nkb4hshaer 10

01-11-2021 13:17

211101-qjdbashhf8 1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcf1be0d1f98d4f177950cb5a4613b75e63298f8f12bede1dfe2ed799b0fcde9.bin

  • Size

    546KB

  • Sample

    220131-nkb4hshaer

  • MD5

    1cf0ca01936eb19885c8975a285ace9e

  • SHA1

    d20434da5c0673cdc38094b5d840d4e4b7e9da67

  • SHA256

    fcf1be0d1f98d4f177950cb5a4613b75e63298f8f12bede1dfe2ed799b0fcde9

  • SHA512

    d00a81587d2bccafc9d5e929595d4c5832129e5d7838f5bce7f00f809f39cbc81618cabd360e2d0f1fae4d8bdc20dca59b64d6af1d99c32a1113ee5a0ac7e014

Score
10/10
phoenixstealerpersistencestealer

Malware Config

Targets

    • Target

      fcf1be0d1f98d4f177950cb5a4613b75e63298f8f12bede1dfe2ed799b0fcde9.bin

    • Size

      546KB

    • MD5

      1cf0ca01936eb19885c8975a285ace9e

    • SHA1

      d20434da5c0673cdc38094b5d840d4e4b7e9da67

    • SHA256

      fcf1be0d1f98d4f177950cb5a4613b75e63298f8f12bede1dfe2ed799b0fcde9

    • SHA512

      d00a81587d2bccafc9d5e929595d4c5832129e5d7838f5bce7f00f809f39cbc81618cabd360e2d0f1fae4d8bdc20dca59b64d6af1d99c32a1113ee5a0ac7e014

    Score
    10/10
    phoenixstealerstealerpersistence

    • PhoenixStealer

      PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

      stealerphoenixstealer

    • Sets service image path in registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks