Analysis

  • max time kernel
    4294182s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20220310-en
  • submitted
    22-03-2022 05:16

General

  • Target

    47575567.exe

  • Size

    545KB

  • MD5

    8643ad0c1db07b7bf569e8bd2c125f83

  • SHA1

    9f20fe8e89eeb59c28ebbf03e426c7e18dc67b7c

  • SHA256

    bbacec1344afa67e7e3aef7ac9f286d46d73ae5af3c45763f2536c7eb143b9e4

  • SHA512

    695718b41d4e9b6eaa9be20d7acb1619218b9cb15685b7f12eb6cc34f218a83d76bd373e1c3c2935c7622fd0db059f2be361425a3fdde0f89bd5cf936605f9ed

Score
10/10

Malware Config

Signatures

  • PhoenixStealer

    PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

Processes

  • C:\Users\Admin\AppData\Local\Temp\47575567.exe
    "C:\Users\Admin\AppData\Local\Temp\47575567.exe"
    1⤵
      PID:964

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/964-54-0x00000000758A1000-0x00000000758A3000-memory.dmp

      Filesize

      8KB