Overview

overview

10

Static

static

10

fcf1be0d1f...e9.exe

windows7_x64

10

fcf1be0d1f...e9.exe

windows10-2004_x64

10

Resubmissions

31-01-2022 11:26

220131-nkb4hshaer 10

01-11-2021 13:17

211101-qjdbashhf8 1

Analysis

  • max time kernel
    15s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    31-01-2022 11:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fcf1be0d1f98d4f177950cb5a4613b75e63298f8f12bede1dfe2ed799b0fcde9.exe

  • Size

    546KB

  • MD5

    1cf0ca01936eb19885c8975a285ace9e

  • SHA1

    d20434da5c0673cdc38094b5d840d4e4b7e9da67

  • SHA256

    fcf1be0d1f98d4f177950cb5a4613b75e63298f8f12bede1dfe2ed799b0fcde9

  • SHA512

    d00a81587d2bccafc9d5e929595d4c5832129e5d7838f5bce7f00f809f39cbc81618cabd360e2d0f1fae4d8bdc20dca59b64d6af1d99c32a1113ee5a0ac7e014

Score
10/10
phoenixstealerstealer

Malware Config

Signatures

  • PhoenixStealer

    PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

    stealerphoenixstealer

Processes

  • C:\Users\Admin\AppData\Local\Temp\fcf1be0d1f98d4f177950cb5a4613b75e63298f8f12bede1dfe2ed799b0fcde9.exe
    "C:\Users\Admin\AppData\Local\Temp\fcf1be0d1f98d4f177950cb5a4613b75e63298f8f12bede1dfe2ed799b0fcde9.exe"
    1⤵
      PID:868

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/868-54-0x0000000075761000-0x0000000075763000-memory.dmp

      Filesize

      8KB

      Download