Analysis
-
max time kernel
154s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20220310-en -
submitted
21-03-2022 15:24
General
-
Target
ee2a409ae326aff4f83f4511830db7dfaef380cedbe7ac1f50bbabbfb3332c75.exe
-
Size
545KB
-
MD5
41a5480dd4a52a4881c31f9d79d89945
-
SHA1
31c212484b4fbd210b9525df676ad816802b554e
-
SHA256
ee2a409ae326aff4f83f4511830db7dfaef380cedbe7ac1f50bbabbfb3332c75
-
SHA512
0b5a09bdc6483c58fab46726f4fe09ae87a3c6b5d14df40f20fe9aaf1addc5f178002cea103fec02a91a6dea96aaa4f89abbf413fb8e68b0aa26fc60263c0e18
Score
10/10
Malware Config
Signatures
-
PhoenixStealer
PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.
-
Drops file in Windows directory 16 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ee2a409ae326aff4f83f4511830db7dfaef380cedbe7ac1f50bbabbfb3332c75.exe"C:\Users\Admin\AppData\Local\Temp\ee2a409ae326aff4f83f4511830db7dfaef380cedbe7ac1f50bbabbfb3332c75.exe"1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k netsvcs -p -s BITS1⤵
- Drops file in Windows directory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB