Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    11-02-2022 19:03

General

  • Target

    AtOiOhxAuIniwN61EnfAxWW8OpB436HL.exe

  • Size

    545KB

  • MD5

    16a0972ff1304cfa0d2c4f365a8966fa

  • SHA1

    6146d2c88336a12e6f7f3f73f545e890b229c168

  • SHA256

    8f152ac7cdfa456c5ab5e0adcd10ba22d35bab2431fa6d22750610fe3e9f8028

  • SHA512

    e26aba3f8aebe032f0c3d49de45d6bf89d6c5c0be18b7bda6248d8e1887c9b6b77eea6a8db5a6baa80731a7dbf5f80091be7bc75518f403aa1a92776858ef58d

Score
10/10

Malware Config

Signatures

  • PhoenixStealer

    PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

Processes

  • C:\Users\Admin\AppData\Local\Temp\AtOiOhxAuIniwN61EnfAxWW8OpB436HL.exe
    "C:\Users\Admin\AppData\Local\Temp\AtOiOhxAuIniwN61EnfAxWW8OpB436HL.exe"
    1⤵
      PID:1628

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1628-54-0x00000000751B1000-0x00000000751B3000-memory.dmp

      Filesize

      8KB